Warning: Permanently added '[localhost]:64893' (ECDSA) to the list of known hosts. 2025/01/30 02:27:39 fuzzer started 2025/01/30 02:27:39 dialing manager at localhost:36977 syzkaller login: [ 70.582549] cgroup: Unknown subsys name 'net' [ 70.704807] cgroup: Unknown subsys name 'cpuset' [ 70.743343] cgroup: Unknown subsys name 'rlimit' 2025/01/30 02:27:57 syscalls: 211 2025/01/30 02:27:57 code coverage: enabled 2025/01/30 02:27:57 comparison tracing: enabled 2025/01/30 02:27:57 extra coverage: enabled 2025/01/30 02:27:57 setuid sandbox: enabled 2025/01/30 02:27:57 namespace sandbox: enabled 2025/01/30 02:27:57 Android sandbox: enabled 2025/01/30 02:27:57 fault injection: enabled 2025/01/30 02:27:57 leak checking: enabled 2025/01/30 02:27:57 net packet injection: enabled 2025/01/30 02:27:57 net device setup: enabled 2025/01/30 02:27:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/30 02:27:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/30 02:27:57 USB emulation: enabled 2025/01/30 02:27:57 hci packet injection: enabled 2025/01/30 02:27:57 wifi device emulation: enabled 2025/01/30 02:27:57 802.15.4 emulation: enabled 2025/01/30 02:27:57 fetching corpus: 0, signal 0/0 (executing program) 2025/01/30 02:28:00 starting 8 fuzzer processes 02:28:00 executing program 0: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x24004014) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000814) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d1}, 0x20000051) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000580)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000600)={{0x2, 0x1, 0x7f, 0x3, 0xffffffff}, 0x800, 0xa5, 0x4}) r5 = accept(0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000700)=0x80) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x1000, 0x12b, 0x1ff, 0xff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000001}, 0x40090) r6 = socket(0x27, 0x80000, 0x7) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r5) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r8 = socket(0x1, 0x3, 0x8) recvmmsg(r8, &(0x7f0000007e00)=[{{&(0x7f0000000b00)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b80)=""/93, 0x5d}, {&(0x7f0000000c00)=""/196, 0xc4}], 0x2, &(0x7f0000000d40)=""/2, 0x2}, 0x11}, {{&(0x7f0000000d80)=@hci, 0x80, &(0x7f0000003280)=[{&(0x7f0000000e00)=""/153, 0x99}, {&(0x7f0000000ec0)=""/28, 0x1c}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/7, 0x7}, {&(0x7f0000001f40)=""/229, 0xe5}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/170, 0xaa}, {&(0x7f0000003100)=""/130, 0x82}, {&(0x7f00000031c0)=""/54, 0x36}, {&(0x7f0000003200)=""/70, 0x46}], 0xa, &(0x7f0000003340)=""/16, 0x10}, 0x79}, {{&(0x7f0000003380)=@phonet, 0x80, &(0x7f0000003700)=[{&(0x7f0000003400)=""/67, 0x43}, {&(0x7f0000003480)=""/165, 0xa5}, {&(0x7f0000003540)=""/175, 0xaf}, {&(0x7f0000003600)=""/9, 0x9}, {&(0x7f0000003640)=""/185, 0xb9}], 0x5, &(0x7f0000003780)=""/248, 0xf8}, 0x6}, {{&(0x7f0000003880)=@alg, 0x80, &(0x7f0000003940)=[{&(0x7f0000003900)=""/45, 0x2d}], 0x1}, 0x7}, {{&(0x7f0000003980)=@hci, 0x80, &(0x7f0000005c00)=[{&(0x7f0000003a00)=""/141, 0x8d}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/115, 0x73}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/154, 0x9a}], 0x5, &(0x7f0000005c80)=""/54, 0x36}, 0x98c0}, {{&(0x7f0000005cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000005d40)}, {&(0x7f0000005d80)=""/90, 0x5a}, {&(0x7f0000005e00)=""/197, 0xc5}, {&(0x7f0000005f00)=""/109, 0x6d}, {&(0x7f0000005f80)=""/67, 0x43}, {&(0x7f0000006000)=""/117, 0x75}], 0x6, &(0x7f0000006100)}, 0x7}, {{&(0x7f0000006140)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000064c0)=[{&(0x7f00000061c0)=""/42, 0x2a}, {&(0x7f0000006200)=""/29, 0x1d}, {&(0x7f0000006240)=""/214, 0xd6}, {&(0x7f0000006340)=""/106, 0x6a}, {&(0x7f00000063c0)=""/232, 0xe8}], 0x5, &(0x7f0000006540)=""/113, 0x71}, 0x8}, {{&(0x7f00000065c0)=@nfc_llcp, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000006640)=""/63, 0x3f}, {&(0x7f0000006680)=""/184, 0xb8}, {&(0x7f0000006740)=""/200, 0xc8}, {&(0x7f0000006840)=""/221, 0xdd}, {&(0x7f0000006940)=""/28, 0x1c}, {&(0x7f0000006980)=""/2, 0x2}, {&(0x7f00000069c0)=""/224, 0xe0}], 0x7, &(0x7f0000006b40)=""/149, 0x95}, 0x5}, {{&(0x7f0000006c00)=@qipcrtr, 0x80, &(0x7f0000007d40)=[{&(0x7f0000006c80)=""/103, 0x67}, {&(0x7f0000006d00)=""/4096, 0x1000}, {&(0x7f0000007d00)=""/24, 0x18}], 0x3, &(0x7f0000007d80)=""/127, 0x7f}, 0xff}], 0x9, 0x10100, &(0x7f0000008040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000080c0)={{0xfffffffffffffffd, 0x2, 0x6, 0x0, 0x8bf}, 0x2eb, 0x7, 0xfcda}) 02:28:00 executing program 1: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/37) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="41699908964cf2adc844151bbb61367e98e622372dd1e9381140f2aa") recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/222, 0xde}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)=""/146, 0x92}], 0x5, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x40) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20008004) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs2/binder-control\x00', 0x1802, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000780)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x8001) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x4, 0x2b, 0x80, 0x0, 0x79, @mcast1, @mcast1, 0x80, 0x8, 0x7, 0xeb}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000980)={0x1, 0x2, 0x6, 0x0, 0x5}) ioctl$KIOCSOUND(r3, 0x4b2f, 0x1000) recvmsg$unix(r1, &(0x7f00000012c0)={&(0x7f00000009c0), 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/41, 0x29}, {&(0x7f0000000b80)=""/22, 0x16}, {&(0x7f0000000bc0)=""/110, 0x6e}, {&(0x7f0000000c40)=""/134, 0x86}, {&(0x7f0000000d00)=""/237, 0xed}, {&(0x7f0000000e00)=""/239, 0xef}, {&(0x7f0000000f00)=""/221, 0xdd}, {&(0x7f0000001000)=""/132, 0x84}], 0xa, &(0x7f0000001180)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x2000) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000001300)) ioctl$KDENABIO(r6, 0x4b36) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001340), 0x80, 0x0) ioctl$TIOCGPTPEER(r8, 0x5441, 0x1) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f0000001380)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000013c0), 0x111c41, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001400)=@x25, &(0x7f0000001480)=0x80, 0x80000) [ 91.019059] audit: type=1400 audit(1738204080.170:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:28:00 executing program 2: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40041) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x323, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20000044) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000001) r3 = accept(r2, 0x0, &(0x7f0000000380)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x320, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7, 0xbb71, 0x9, 0x3}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x881) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000500)) recvmsg$unix(r3, &(0x7f00000008c0)={&(0x7f0000000540), 0x6e, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/190, 0xbe}], 0x2, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x12020) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}}, 0x0, 0x0, 0x31, 0x0, "06d33c3fd389c28454224d1e075743a12bda279abea7a1e05d1d22d78597decbe71ff02a584e6faccb3586ac72b2c5b61e242bd9c648530586b5f7955092fb09da714a74304cf407af41be23a10ee95e"}, 0xd8) syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r7) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x20000001) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x3, 0xffff, 0x5, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x24048001) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r8, 0x89f4, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x2f, 0x56, 0x80, 0xd28d, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x40, 0x10, 0x9, 0x800}}) r9 = accept4(r6, &(0x7f0000000d00)=@nfc_llcp, &(0x7f0000000d80)=0x80, 0x800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r9, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r1, 0x8, 0x70bd2d, 0xfffffffc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000ec0)=""/4096, &(0x7f0000001ec0)=0x1000) 02:28:00 executing program 3: sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe0, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cc6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36c4cf5a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7040b576}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e1e06e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dc8a3cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79b0ab19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43506c25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc9bf617}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x549c905c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4696}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73e3da81}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ec8d671}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdeb3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x401}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x709228ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd456}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc4}, 0x4001) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x1f, 0x1, 0x43, @local, @dev={0xfe, 0x80, '\x00', 0x16}, 0x80, 0x20, 0x5, 0x685c}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x80, 0x7, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}, @private0, 0x8000, 0x1, 0x9, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0xc6, 0x7f, 0x200, 0x5, @local, @mcast1, 0x700, 0x40, 0x2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x6, 0x5, 0x6b, @mcast1, @private2, 0x8, 0x40, 0xb5, 0x9}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x1d4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r4 = msgget(0x3, 0xc) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000980)=""/38) getitimer(0x1, &(0x7f00000009c0)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000a00)={'syztnl2\x00', r0, 0x29, 0x9, 0xec, 0x4c90, 0x8, @remote, @initdev={0xfe, 0x88, '\x00', 0x16, 0x0}, 0x7, 0x80, 0x15f, 0x9bcd}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl2\x00', r5, 0x2f, 0x3e, 0xff, 0x401, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x8, 0x3, 0x7}}) getitimer(0x0, &(0x7f0000000b80)) r7 = socket(0x9, 0x2, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'syztnl0\x00', r3, 0x29, 0x1, 0x0, 0x7, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x7800, 0x7800, 0x6, 0x6}}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000012c0)={0x0, 0x1, 0x7, 0x17, 0x12d, &(0x7f0000000ec0)="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"}) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000001300)=@isdn, 0x80, &(0x7f0000001580)=[{&(0x7f0000001380)=""/31, 0x1f}, {&(0x7f00000013c0)=""/142, 0x8e}, {&(0x7f0000001480)=""/171, 0xab}, {&(0x7f0000001540)=""/1, 0x1}], 0x4, &(0x7f00000015c0)=""/65, 0x41}, 0x200}], 0x1, 0x0, &(0x7f0000001680)={0x77359400}) getitimer(0x3, &(0x7f00000016c0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000017c0)={'syztnl1\x00', &(0x7f0000001740)={'ip6gre0\x00', r3, 0x4, 0xa, 0x5, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x8, 0x1, 0x9, 0xfffff9cf}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001880)={'syztnl1\x00', &(0x7f0000001800)={'ip6tnl0\x00', r1, 0x4, 0x7, 0x2, 0x9, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8000, 0x10, 0x0, 0xfffffffc}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r7, &(0x7f0000001a00)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f00000018c0)={0xf0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x485570c833a7fb9a}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000854}, 0x24004800) 02:28:00 executing program 4: getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000580)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept(r2, &(0x7f00000005c0)=@un=@abs, &(0x7f0000000640)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003040)={'gre0\x00', &(0x7f0000003000)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x1f, 0xfffffff7, {{0x7, 0x4, 0x3, 0x2a, 0x1c, 0x66, 0x0, 0xcc, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x9e, [@multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000003100)={'ip6gre0\x00', &(0x7f0000003080)={'ip6gre0\x00', r3, 0x29, 0x8, 0x6, 0xfffff73a, 0x30, @rand_addr=' \x01\x00', @local, 0x80, 0x8, 0x6, 0x9}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000003140), r4) recvmsg$unix(r0, &(0x7f0000005580)={0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003180)=""/195, 0xc3}, {&(0x7f0000003280)=""/225, 0xe1}, {&(0x7f0000003380)=""/94, 0x5e}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/4096, 0x1000}], 0x5, &(0x7f0000005480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x2001) getsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f00000055c0), &(0x7f0000005600)=0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000005680), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f00000057c0)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005780)={&(0x7f00000056c0)={0x9c, r8, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42ceacaf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca6b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe86f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x355695d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d36}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee2f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21cb1491}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a35}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x81) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000058c0)=@buf={0xaf, &(0x7f0000005800)="ccae9c2a4016e78291d8d5eddcf21f58ad8cc2e3dbce3b9c7459e4462b7c8edf30d9d0e675bece20dd3f0473a3b38f402d5f8da4755c8dc8101aba2ac8c6682f1f9d6e68c5bf7b24ab1772e6f076ee654700b92c43ed65957e49860e925db299de7cebbb914f6c586c1d64aba63b5b14c3071a3191b04b6173db37d8cf4eb90a2394b386b83af1f2ee58c0e85d7b8781bedb070597608a6f89f85df2e89e5f58a5696a14e123865d9cfd29f73bead4"}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r9, 0x0, &(0x7f0000005900), 0x80800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000005bc0)={'syztnl2\x00', &(0x7f0000005b40)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x1f, 0x10000, 0x8, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8000, 0x0, 0x8001}}) 02:28:00 executing program 5: semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)=[0x5, 0x81, 0x2, 0xa8]) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x1, 0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x10, 0x4d2}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000180)=""/4096) r1 = semget(0x3, 0x4, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000001180)=""/82) semctl$SEM_STAT(r1, 0x4, 0x12, &(0x7f0000001200)=""/4096) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000002200)) clock_gettime(0x0, &(0x7f0000002280)={0x0, 0x0}) semtimedop(r1, &(0x7f0000002240)=[{0x1, 0x3}, {0x3, 0x1f, 0x1000}, {0x3, 0xff7f, 0x800}, {0x2, 0x6, 0x1800}, {0x3, 0xace, 0x2c00}, {0x3, 0x8000, 0x1000}, {0x1, 0x6, 0x800}, {0x1, 0x9, 0x1800}, {0x1, 0x800, 0x800}, {0x3, 0x9}], 0xa, &(0x7f00000022c0)={r2, r3+10000000}) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000002300)=""/4096) semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000003300)=""/181) stat(&(0x7f00000033c0)='./file0\x00', &(0x7f0000003400)) semop(r1, &(0x7f0000003480)=[{0x2, 0x200, 0x800}, {0x0, 0x0, 0x800}, {0x3, 0x8, 0x1800}, {0x4, 0x9bc1, 0x1800}, {0x0, 0x9, 0x1400}, {0x0, 0x7, 0x1800}], 0x6) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(r1, &(0x7f00000034c0)=[{0x1, 0x4}, {0x2, 0x5, 0x800}], 0x2, &(0x7f0000003500)={0x77359400}) r4 = semget(0x2, 0x1, 0x186) semctl$SEM_STAT(r4, 0x4, 0x12, &(0x7f0000003540)=""/38) semctl$IPC_RMID(r1, 0x0, 0x0) 02:28:00 executing program 6: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffff7}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20c01) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)={{0x1, 0x2, 0xa4, 0x2, 0x40}, 0x10001, 0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x402000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0x6e, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x2002) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff, 0x80000000, 0x80000}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000004c0)={r8, 0x8, 0x53d5}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x20, 0x80, 0x4, 0x6}, {0x1, 0x3, 0x5d, 0x79}, {0xafc9, 0x9, 0x6, 0x8}, {0x7ff, 0x2, 0x4, 0x6}, {0x200, 0x1, 0x81}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r9, 0x40082102, &(0x7f0000000600)=r10) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x7, &(0x7f0000000640)=[{0x8, 0x80, 0x1, 0x3}, {0x5, 0xff, 0xbf, 0x9}, {0x101, 0x1f, 0x6, 0x4}, {0x4, 0x4, 0xff}, {0xfff, 0x80, 0x0, 0x9}, {0x4, 0x9, 0xc1, 0x3ff}, {0x1000, 0x1f, 0x0, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f0000000740)={r12, 0x0, r2, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000780)=r10) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ipvlan0\x00'}}}, ["", "", "", "", ""]}, 0x2c}}, 0x801) 02:28:00 executing program 7: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/acpi_cpufreq', 0x11400, 0x28) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x7a, 0x2, 0x4, @loopback, @dev={0xfe, 0x80, '\x00', 0xb}, 0x40, 0x7800, 0x0, 0x3f}}) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x881) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0xc041) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x8c0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1d, 0x9, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = accept(r1, &(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000880)=0x80) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r1) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2008880}, 0x40) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000a00)=[@timestamp], 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000a40)) recvmsg$unix(r4, &(0x7f0000000d00)={&(0x7f0000000a80), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/40, 0x28}, {&(0x7f0000000b40)=""/191, 0xbf}], 0x2, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, r3, 0xe00, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000010) [ 92.288019] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.290909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.293185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.299842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.304151] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.306718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.470077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.472497] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.475637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.485755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.491620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.493847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.549528] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.558088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.564919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.569151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.575666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.577184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.597421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.597565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.607396] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.616643] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.619025] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.626832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.632611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.644811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.679330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.684945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.701128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.704994] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.717541] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.717628] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.720859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.739738] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.747479] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.749461] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.755018] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.756855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.779887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.781780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.805080] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.813671] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.822738] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.830806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.832163] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.853747] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.866017] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.875618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.374104] Bluetooth: hci0: command tx timeout [ 94.564967] Bluetooth: hci1: command tx timeout [ 94.692852] Bluetooth: hci2: command tx timeout [ 94.694028] Bluetooth: hci3: command tx timeout [ 94.821472] Bluetooth: hci4: command tx timeout [ 94.884461] Bluetooth: hci5: command tx timeout [ 94.948570] Bluetooth: hci6: command tx timeout [ 94.950571] Bluetooth: hci7: command tx timeout [ 96.420438] Bluetooth: hci0: command tx timeout [ 96.613938] Bluetooth: hci1: command tx timeout [ 96.740480] Bluetooth: hci2: command tx timeout [ 96.740960] Bluetooth: hci3: command tx timeout [ 96.869362] Bluetooth: hci4: command tx timeout [ 96.933444] Bluetooth: hci5: command tx timeout [ 96.996497] Bluetooth: hci6: command tx timeout [ 96.997096] Bluetooth: hci7: command tx timeout [ 98.468315] Bluetooth: hci0: command tx timeout [ 98.661961] Bluetooth: hci1: command tx timeout [ 98.788631] Bluetooth: hci2: command tx timeout [ 98.789121] Bluetooth: hci3: command tx timeout [ 98.916472] Bluetooth: hci4: command tx timeout [ 98.980426] Bluetooth: hci5: command tx timeout [ 99.045308] Bluetooth: hci7: command tx timeout [ 99.045787] Bluetooth: hci6: command tx timeout [ 100.518299] Bluetooth: hci0: command tx timeout [ 100.708292] Bluetooth: hci1: command tx timeout [ 100.836351] Bluetooth: hci2: command tx timeout [ 100.837154] Bluetooth: hci3: command tx timeout [ 100.964389] Bluetooth: hci4: command tx timeout [ 101.028707] Bluetooth: hci5: command tx timeout [ 101.093468] Bluetooth: hci7: command tx timeout [ 101.094346] Bluetooth: hci6: command tx timeout [ 154.798543] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.803821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.813433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.820880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.825936] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.828743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.932596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.938380] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.944115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.945308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.954554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.954655] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.955288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.962335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.962995] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.966555] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.967884] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.969331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.971602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.979631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.984466] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.991323] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.001293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.001956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.032458] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.038307] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.044336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.055691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.070374] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.081374] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.411709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.435997] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.466548] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.473513] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.476014] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.481993] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.504141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.525510] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.528521] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.538531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.539824] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.550476] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.551918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.566532] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.568486] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.588739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.713751] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.715146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.900356] Bluetooth: hci0: command tx timeout [ 157.028657] Bluetooth: hci2: command tx timeout [ 157.028685] Bluetooth: hci3: command tx timeout [ 157.094280] Bluetooth: hci1: command tx timeout [ 157.350237] Bluetooth: hci4: command tx timeout [ 157.604327] Bluetooth: hci6: command tx timeout [ 157.732530] Bluetooth: hci7: command tx timeout [ 157.861556] Bluetooth: hci5: command tx timeout [ 158.948319] Bluetooth: hci0: command tx timeout [ 159.076500] Bluetooth: hci3: command tx timeout [ 159.076517] Bluetooth: hci2: command tx timeout [ 159.141157] Bluetooth: hci1: command tx timeout [ 159.398275] Bluetooth: hci4: command tx timeout [ 159.653280] Bluetooth: hci6: command tx timeout [ 159.780435] Bluetooth: hci7: command tx timeout [ 159.908345] Bluetooth: hci5: command tx timeout [ 160.996279] Bluetooth: hci0: command tx timeout [ 161.125262] Bluetooth: hci3: command tx timeout [ 161.125325] Bluetooth: hci2: command tx timeout [ 161.188250] Bluetooth: hci1: command tx timeout [ 161.445982] Bluetooth: hci4: command tx timeout [ 161.700320] Bluetooth: hci6: command tx timeout [ 161.828401] Bluetooth: hci7: command tx timeout [ 161.956309] Bluetooth: hci5: command tx timeout [ 163.045289] Bluetooth: hci0: command tx timeout [ 163.173267] Bluetooth: hci3: command tx timeout [ 163.174281] Bluetooth: hci2: command tx timeout [ 163.236406] Bluetooth: hci1: command tx timeout [ 163.492397] Bluetooth: hci4: command tx timeout [ 163.748263] Bluetooth: hci6: command tx timeout [ 163.877240] Bluetooth: hci7: command tx timeout [ 164.004754] Bluetooth: hci5: command tx timeout [ 216.759437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.764063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.766913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.773699] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.777125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.779786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.942412] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.945980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.947261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.951776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.954792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.955809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.010719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.013534] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.015440] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.021738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.023145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.025971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.068296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.081478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.083124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.097355] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.099132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.106450] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.110468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.114723] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.116559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.124447] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.134493] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.147383] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.247460] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.271941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.289890] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.302510] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.313773] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.325745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.334907] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.347653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.349932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.358261] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.371960] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.373951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.377998] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.380808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.383647] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.399386] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.401895] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.405884] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.852413] Bluetooth: hci0: command tx timeout [ 218.980509] Bluetooth: hci1: command tx timeout [ 219.111278] Bluetooth: hci2: command tx timeout [ 219.173269] Bluetooth: hci4: command tx timeout [ 219.173314] Bluetooth: hci3: command tx timeout [ 219.429414] Bluetooth: hci5: command tx timeout [ 219.429479] Bluetooth: hci6: command tx timeout [ 219.493419] Bluetooth: hci7: command tx timeout [ 220.901256] Bluetooth: hci0: command tx timeout [ 221.028237] Bluetooth: hci1: command tx timeout [ 221.156223] Bluetooth: hci2: command tx timeout [ 221.220347] Bluetooth: hci3: command tx timeout [ 221.221310] Bluetooth: hci4: command tx timeout [ 221.476328] Bluetooth: hci5: command tx timeout [ 221.477881] Bluetooth: hci6: command tx timeout [ 221.541228] Bluetooth: hci7: command tx timeout [ 222.949326] Bluetooth: hci0: command tx timeout [ 223.076239] Bluetooth: hci1: command tx timeout [ 223.204238] Bluetooth: hci2: command tx timeout [ 223.269262] Bluetooth: hci4: command tx timeout [ 223.269767] Bluetooth: hci3: command tx timeout [ 223.524306] Bluetooth: hci6: command tx timeout [ 223.524355] Bluetooth: hci5: command tx timeout [ 223.590256] Bluetooth: hci7: command tx timeout [ 224.998249] Bluetooth: hci0: command tx timeout [ 225.126251] Bluetooth: hci1: command tx timeout [ 225.252244] Bluetooth: hci2: command tx timeout [ 225.316403] Bluetooth: hci4: command tx timeout [ 225.317423] Bluetooth: hci3: command tx timeout [ 225.572524] Bluetooth: hci6: command tx timeout [ 225.572695] Bluetooth: hci5: command tx timeout [ 225.636436] Bluetooth: hci7: command tx timeout [ 275.261723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.262565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.691878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.693039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.486198] [ 277.486430] ====================================================== [ 277.486948] WARNING: possible circular locking dependency detected [ 277.487436] 6.13.0-next-20250129 #1 Not tainted [ 277.487826] ------------------------------------------------------ [ 277.488696] kworker/u8:2/9997 is trying to acquire lock: [ 277.489774] ffffffff8621d8a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 277.491338] [ 277.491338] but task is already holding lock: [ 277.492307] ffff8880344e8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 277.493824] [ 277.493824] which lock already depends on the new lock. [ 277.493824] [ 277.495030] [ 277.495030] the existing dependency chain (in reverse order) is: [ 277.496240] [ 277.496240] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 277.497471] __mutex_lock+0x13d/0xb50 [ 277.498235] wiphy_register+0x1b2e/0x25d0 [ 277.499038] ieee80211_register_hw+0x23a4/0x3d60 [ 277.500165] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 277.501372] init_mac80211_hwsim+0x389/0x870 [ 277.502474] do_one_initcall+0xf9/0x640 [ 277.503029] kernel_init_freeable+0x53d/0x7a0 [ 277.503645] kernel_init+0x1e/0x2d0 [ 277.504128] ret_from_fork+0x48/0x80 [ 277.504624] ret_from_fork_asm+0x1a/0x30 [ 277.505187] [ 277.505187] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 277.505897] __lock_acquire+0x29fd/0x4580 [ 277.506451] lock_acquire+0x19b/0x520 [ 277.506975] __mutex_lock+0x13d/0xb50 [ 277.507535] unregister_netdevice_many_notify+0x1612/0x1c80 [ 277.508299] unregister_netdevice_queue+0x224/0x2e0 [ 277.508981] _cfg80211_unregister_wdev+0x57b/0x700 [ 277.509671] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 277.510359] ieee80211_unregister_hw+0x55/0x3a0 [ 277.510957] hwsim_exit_net+0x3a0/0x730 [ 277.511489] ops_exit_list+0xb3/0x180 [ 277.511999] cleanup_net+0x546/0xad0 [ 277.512527] process_one_work+0x8ee/0x1a10 [ 277.513148] worker_thread+0x674/0xe70 [ 277.513737] kthread+0x3ab/0x720 [ 277.514275] ret_from_fork+0x48/0x80 [ 277.514810] ret_from_fork_asm+0x1a/0x30 [ 277.515386] [ 277.515386] other info that might help us debug this: [ 277.515386] [ 277.516238] Possible unsafe locking scenario: [ 277.516238] [ 277.516917] CPU0 CPU1 [ 277.517444] ---- ---- [ 277.517964] lock(&rdev->wiphy.mtx); [ 277.518418] lock(rtnl_mutex); [ 277.519073] lock(&rdev->wiphy.mtx); [ 277.519851] lock(rtnl_mutex); [ 277.520284] [ 277.520284] *** DEADLOCK *** [ 277.520284] [ 277.520954] 4 locks held by kworker/u8:2/9997: [ 277.521516] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 277.522707] #1: ffff888027befd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 277.523819] #2: ffffffff862118d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 277.524855] #3: ffff8880344e8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 277.526031] [ 277.526031] stack backtrace: [ 277.526525] CPU: 1 UID: 0 PID: 9997 Comm: kworker/u8:2 Not tainted 6.13.0-next-20250129 #1 [ 277.526577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 277.526607] Workqueue: netns cleanup_net [ 277.526663] Call Trace: [ 277.526676] [ 277.526692] dump_stack_lvl+0xca/0x120 [ 277.526775] print_circular_bug+0x47b/0x750 [ 277.526840] check_noncircular+0x2e9/0x3c0 [ 277.526899] ? __pfx_check_noncircular+0x10/0x10 [ 277.526957] ? hlock_class+0x4e/0x130 [ 277.527000] ? mark_lock+0xac/0xed0 [ 277.527057] ? srso_return_thunk+0x5/0x5f [ 277.527134] ? __dequeue_entity+0x9b1/0x1900 [ 277.527207] ? lockdep_lock+0xba/0x1b0 [ 277.527287] ? __pfx_lockdep_lock+0x10/0x10 [ 277.527375] __lock_acquire+0x29fd/0x4580 [ 277.527450] ? __pfx___lock_acquire+0x10/0x10 [ 277.527511] ? lock_release+0x20f/0x6f0 [ 277.527573] ? __pfx_lock_release+0x10/0x10 [ 277.527641] lock_acquire+0x19b/0x520 [ 277.527701] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 277.527769] ? __pfx_lock_acquire+0x10/0x10 [ 277.527832] ? srso_return_thunk+0x5/0x5f [ 277.527908] ? lock_release+0x20f/0x6f0 [ 277.527970] ? srso_return_thunk+0x5/0x5f [ 277.528046] ? lock_is_held_type+0x9e/0x120 [ 277.528122] ? srso_return_thunk+0x5/0x5f [ 277.528203] __mutex_lock+0x13d/0xb50 [ 277.528275] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 277.528337] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 277.528401] ? srso_return_thunk+0x5/0x5f [ 277.528478] ? synchronize_rcu_expedited+0x38a/0x420 [ 277.528539] ? __pfx___mutex_lock+0x10/0x10 [ 277.528613] ? __pfx_autoremove_wake_function+0x10/0x10 [ 277.528689] ? srso_return_thunk+0x5/0x5f [ 277.528765] ? kasan_quarantine_put+0x84/0x1e0 [ 277.528850] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 277.528900] ? srso_return_thunk+0x5/0x5f [ 277.528982] unregister_netdevice_many_notify+0x1612/0x1c80 [ 277.529045] ? __virt_addr_valid+0x2e8/0x5d0 [ 277.529118] ? __pfx_lock_release+0x10/0x10 [ 277.529181] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 277.529245] ? find_held_lock+0x2c/0x110 [ 277.529327] ? srso_return_thunk+0x5/0x5f [ 277.529406] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 277.529489] ? srso_return_thunk+0x5/0x5f [ 277.529576] ? lock_release+0x20f/0x6f0 [ 277.529638] ? __pfx_lock_release+0x10/0x10 [ 277.529698] ? srso_return_thunk+0x5/0x5f [ 277.529779] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 277.529846] ? srso_return_thunk+0x5/0x5f [ 277.529930] unregister_netdevice_queue+0x224/0x2e0 [ 277.529990] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 277.530050] ? up_write+0x195/0x520 [ 277.530127] _cfg80211_unregister_wdev+0x57b/0x700 [ 277.530199] ? srso_return_thunk+0x5/0x5f [ 277.530280] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 277.530333] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 277.530425] ? srso_return_thunk+0x5/0x5f [ 277.530501] ? srso_return_thunk+0x5/0x5f [ 277.530577] ? synchronize_rcu+0x1ff/0x260 [ 277.530637] ieee80211_unregister_hw+0x55/0x3a0 [ 277.530698] hwsim_exit_net+0x3a0/0x730 [ 277.530756] ? __pfx_hwsim_exit_net+0x10/0x10 [ 277.530812] ? srso_return_thunk+0x5/0x5f [ 277.530888] ? netdev_run_todo+0x788/0x1040 [ 277.530953] ? srso_return_thunk+0x5/0x5f [ 277.531032] ? __pfx_hwsim_exit_net+0x10/0x10 [ 277.531091] ops_exit_list+0xb3/0x180 [ 277.531149] cleanup_net+0x546/0xad0 [ 277.531211] ? __pfx_cleanup_net+0x10/0x10 [ 277.531285] process_one_work+0x8ee/0x1a10 [ 277.531377] ? __pfx_lock_acquire+0x10/0x10 [ 277.531440] ? __pfx_process_one_work+0x10/0x10 [ 277.531522] ? srso_return_thunk+0x5/0x5f [ 277.531599] ? move_linked_works+0x172/0x270 [ 277.531661] ? srso_return_thunk+0x5/0x5f [ 277.531737] ? assign_work+0x196/0x240 [ 277.531818] worker_thread+0x674/0xe70 [ 277.531899] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 277.531972] ? srso_return_thunk+0x5/0x5f [ 277.532048] ? __pfx_worker_thread+0x10/0x10 [ 277.532133] kthread+0x3ab/0x720 [ 277.532206] ? __pfx_kthread+0x10/0x10 [ 277.532278] ? srso_return_thunk+0x5/0x5f [ 277.532354] ? finish_task_switch.isra.0+0x206/0x840 [ 277.532425] ? __pfx_kthread+0x10/0x10 [ 277.532501] ret_from_fork+0x48/0x80 [ 277.532545] ? __pfx_kthread+0x10/0x10 [ 277.532619] ret_from_fork_asm+0x1a/0x30 [ 277.532712] [ 279.409040] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.410997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.415692] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.431283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.435045] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.437767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.472729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.475583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.477592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.479634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.483197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.483971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.486062] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.488834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.493862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.495671] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.501560] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.503233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.539835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.546507] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.553514] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.603649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.605047] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.606977] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.608491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.609795] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.610308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.613529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.624893] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.630664] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.633787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.636210] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.638957] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.640851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.643260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.645873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.648120] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.649901] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.698613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.728018] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.746880] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.748640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.755506] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.761660] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.770042] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.816325] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.914428] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.921448] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.508451] Bluetooth: hci1: command tx timeout [ 281.509433] Bluetooth: hci0: command tx timeout [ 281.573208] Bluetooth: hci2: command tx timeout [ 281.700313] Bluetooth: hci6: command tx timeout [ 281.700339] Bluetooth: hci3: command tx timeout [ 281.764278] Bluetooth: hci5: command tx timeout [ 281.892217] Bluetooth: hci4: command tx timeout [ 282.020380] Bluetooth: hci7: command tx timeout [ 283.557203] Bluetooth: hci0: command tx timeout [ 283.557222] Bluetooth: hci1: command tx timeout [ 283.620337] Bluetooth: hci2: command tx timeout [ 283.748305] Bluetooth: hci3: command tx timeout [ 283.749274] Bluetooth: hci6: command tx timeout [ 283.812333] Bluetooth: hci5: command tx timeout [ 283.940216] Bluetooth: hci4: command tx timeout [ 284.070250] Bluetooth: hci7: command tx timeout [ 285.604297] Bluetooth: hci0: command tx timeout [ 285.607170] Bluetooth: hci1: command tx timeout [ 285.669186] Bluetooth: hci2: command tx timeout [ 285.797296] Bluetooth: hci6: command tx timeout [ 285.797390] Bluetooth: hci3: command tx timeout [ 285.862183] Bluetooth: hci5: command tx timeout [ 285.990416] Bluetooth: hci4: command tx timeout [ 286.117205] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 02:31:06 Registers: info registers vcpu 0 RAX=ffffed1001e34481 RBX=ffff88800f1a2400 RCX=ffffffff81429b7a RDX=ffffed1001e34481 RSI=0000000000000008 RDI=ffff88800f1a2400 RBP=ffffed1001e34480 RSP=ffff88800f51fdd8 R8 =0000000000000000 R9 =ffffed1001e34480 R10=ffff88800f1a2407 R11=ffff88800f01bc38 R12=ffff88800f01b780 R13=ffff888011ed8900 R14=ffff88801001fd10 R15=ffff88801001fcb8 RIP=ffffffff81abbe17 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055aeb843a160 CR3=000000000ae16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c0002a8c30000000c0002a8570 XMM02=000000c000056280000000c000056230 XMM03=000000c000056320000000c0000562d0 XMM04=000000c0000f1e90000000c0000f1e60 XMM05=000000c0000f1ef0000000c0000f1ec0 XMM06=000000c0000f1f50000000c0000f1f20 XMM07=000000c0000849a0000000c00005b4a0 XMM08=000000c0000a6930000000c00005a5a0 XMM09=000000c0000a6990000000c0000a6960 XMM10=000000c0000a69f0000000c0000a69c0 XMM11=000000c0000a6a50000000c0000a6a20 XMM12=000000c0000a6ab0000000c0000a6a80 XMM13=000000c00005a5d0000000c0000a6ae0 XMM14=000000c0000a6b40000000c0000a6b10 XMM15=000000c0000af4a0000000c0000a6b70 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283c595 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff888027beeca0 R8 =0000000000000000 R9 =ffffed1001d44046 R10=000000000000005b R11=0000000020202020 R12=000000000000005b R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283c580 RIP=ffffffff8283c5ed RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4019f71af8 CR3=000000000ae16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003f27db006c10b7ac XMM02=0000000000000000408f400000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000