Warning: Permanently added '[localhost]:48191' (ECDSA) to the list of known hosts. 2025/01/30 03:50:32 fuzzer started 2025/01/30 03:50:33 dialing manager at localhost:36977 syzkaller login: [ 69.126731] cgroup: Unknown subsys name 'net' [ 69.234144] cgroup: Unknown subsys name 'cpuset' [ 69.263748] cgroup: Unknown subsys name 'rlimit' 2025/01/30 03:50:50 syscalls: 2217 2025/01/30 03:50:50 code coverage: enabled 2025/01/30 03:50:50 comparison tracing: enabled 2025/01/30 03:50:50 extra coverage: enabled 2025/01/30 03:50:50 setuid sandbox: enabled 2025/01/30 03:50:50 namespace sandbox: enabled 2025/01/30 03:50:50 Android sandbox: enabled 2025/01/30 03:50:50 fault injection: enabled 2025/01/30 03:50:50 leak checking: enabled 2025/01/30 03:50:50 net packet injection: enabled 2025/01/30 03:50:50 net device setup: enabled 2025/01/30 03:50:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/30 03:50:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/30 03:50:50 USB emulation: enabled 2025/01/30 03:50:50 hci packet injection: enabled 2025/01/30 03:50:50 wifi device emulation: enabled 2025/01/30 03:50:50 802.15.4 emulation: enabled 2025/01/30 03:50:50 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/30 03:50:50 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/30 03:50:50 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/30 03:50:50 fetching corpus: 0, signal 0/7371 (executing program) 2025/01/30 03:50:50 fetching corpus: 0, signal 0/7371 (executing program) 2025/01/30 03:50:53 starting 8 fuzzer processes 03:50:53 executing program 0: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x208, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3cc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x722}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffeffff}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9d, 0x3, "0435a1229e9902a5b60f3b3464b7cc5114064f16cfb4252292d36fab0648d11baa5924a54151831976f48dea9789095810a4d3cd70e524cda30b9f53aa9032b77b93d33b52cc31b32603353c110e46932e7d30a837010626d646ff126a254743335e31e1a42a1f25a8cecc3e3f87038ff14022c7d2c3cb8149e0d4460e9fa4263faed7b3860a2ff66f86a1bd41cbb3169e403292ba14c77231"}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x90}, 0x40) r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0x5418c0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0xc000, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000480)) r2 = socket(0x2, 0x2, 0x5) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000540)={0x6, 0x48, '\x00', 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000005c0)) fcntl$notify(r0, 0x402, 0x1) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xffffff8e}, @ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x40}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0xd4}, 0x4811) r3 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000740)={0x1, 0x7, 0x9}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x101200, 0x0) pidfd_getfd(r0, r4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x88, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9cd}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6e82}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0xc800) 03:50:53 executing program 1: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x3, 0x100, 0x4, 0x29, 0x1, 0xfff}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000040)={0x0, 0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) kcmp(0xffffffffffffffff, r1, 0x1, r0, r2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='cdg\x00', 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) connect$bt_l2cap(r3, &(0x7f0000000500)={0x1f, 0x0, @any, 0x800, 0x2}, 0xe) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4001}, 0x8001) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x2c}}}}, [@NL80211_PMSR_ATTR_PEERS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4) r4 = syz_mount_image$ext4(&(0x7f00000007c0)='ext2\x00', &(0x7f0000000800)='./file1\x00', 0x101, 0x0, &(0x7f0000000840), 0x10020, &(0x7f0000000880)={[{@barrier_val={'barrier', 0x3d, 0x40}}, {@acl}, {@stripe={'stripe', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x7}}, {@data_ordered}, {@bsdgroups}, {@orlov}, {@nouser_xattr}], [{@hash}, {@seclabel}, {@uid_eq}, {@smackfsroot={'smackfsroot', 0x3d, '0000:00:10.0\x00'}}]}) poll(&(0x7f0000000940)=[{r3, 0x8343}, {r4, 0x1000}, {r3, 0x10180}, {r0, 0x4344}, {r0, 0x8000}], 0x5, 0x125f) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xc8, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x19}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x92}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44004}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r3, {0x80000000}}, './file0\x00'}) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) fspick(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x0) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0xc0882080}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x48, 0x5, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040010) 03:50:53 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/169, 0xa9}], 0x1, 0x2, 0x9) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x6, 0x5, 0x2, 0x6, 0x1, [0x7fffffff, 0xe89, 0x3, 0x8000]}) fstat(r0, &(0x7f0000000140)) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000001c0)) r1 = dup(r0) ioctl$CDROM_DISC_STATUS(r1, 0x5327) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000200)=0x3) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000240)=@manufact={0x4, 0x1, 0x800, "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"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x80, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000ac0)) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000b00)) r3 = syz_open_dev$mouse(&(0x7f0000000c00), 0x9, 0x2000) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000c40)=0x2, &(0x7f0000000c80)=0x2) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000cc0)) ioctl$KDDISABIO(r0, 0x4b37) r4 = fsmount(r3, 0x1, 0x1) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000000d40)={0x2, 0x8, [0x4, 0x3, 0x10000, 0xfffffffffffffffd], &(0x7f0000000d00)=[0x0]}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 03:50:53 executing program 3: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/111) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff, 0x8}}, '.\x00'}) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f00000000c0)) r1 = fsmount(r0, 0x1, 0x2) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) fremovexattr(r1, &(0x7f0000000100)=@known='user.incfs.size\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x4000) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) write$binfmt_aout(r3, &(0x7f0000000280)={{0x10b, 0x8, 0x2, 0x32e, 0x338, 0x4, 0x3ca, 0x7fffffff}, "bd4aca195f12c8a5a8a77bc9dd1ff8b9def348c5a7be177bd754d59da2c83fe43a0d545f601442231b8551b65bfc421376ac09c386fd0d0345d32ca36848ec569d0c00bf555c0436f88a6e922b55d62e45a40a68b343b03f66dfc2d3b706bf90803ab8bce83efa4df9afc9003e786803386f3909f1b4444ba15934ffa9105bffcf4da1b6f923436f47d0b5150fc8e16785a751fe783f16106d81bd06fc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8bd) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000b40)) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000b80)) r4 = accept4(r1, 0x0, &(0x7f0000000bc0), 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r5, 0x10, 0x70bd2a, 0x331d, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x47}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3a}]}, 0x34}}, 0x4040) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000d40)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000d80), 0x2040, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000dc0)={0x8, 0x7, 0x40, 0x5, 0x1}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x48, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x88c1}, 0x20008000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000f40)=""/67) [ 89.387596] audit: type=1400 audit(1738209053.488:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:50:53 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x1a) copy_file_range(r0, &(0x7f0000000080)=0x4, r1, &(0x7f0000000100)=0x90000000000, 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x3c1182, 0x0) utimensat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)) futimesat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x77359400}}) getsockname$packet(r2, &(0x7f00000002c0), &(0x7f0000000300)=0x14) r3 = signalfd(r0, &(0x7f0000000340)={[0x4]}, 0x8) move_mount(r3, &(0x7f0000000380)='./file0\x00', r2, &(0x7f00000003c0)='./file0\x00', 0x20) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000400)=""/212) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x1c7082, 0x0) close(r0) quotactl(0x10001, &(0x7f0000000540)='./file0\x00', 0xee00, &(0x7f0000000580)="8cf9a90c81c5304a1db972776228f1e28ae5b8622a46161650e871e08ea54ae6190be2d3c7d9129c8da0d629ab4f57716d52c95aace37b81947e983658c1778cbcae0d4ee567d494d8450289965978181b6972d36377e9a82f9624429df4e69cb5dc37706e07413d2dc8") r5 = openat$cgroup_ro(r4, &(0x7f0000000680)='blkio.bfq.io_queued\x00', 0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg$unix(r3, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x60}}], 0x1, 0x40000020, &(0x7f00000017c0)={0x0, 0x989680}) fstat(r4, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000640), 0x30040, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@debug={'debug', 0x3d, 0x4}}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@cachetag={'cachetag', 0x3d, '$*+#(+^]%!.,}'}}, {@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@access_uid}, {@access_user}, {@uname={'uname', 0x3d, '.:-.]!\xea'}}], [{@dont_measure}, {@euid_eq={'euid', 0x3d, r8}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}) 03:50:53 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x92f5}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x41f7eaf9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000300)=0xe8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000340)={r3, 0x1, 0x6, @random="642bfbbadcad"}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'erspan0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000440)) lsetxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)='system_u:object_r:syslogd_exec_t:s0\x00', 0x24, 0x2) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r4, 0x724, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48013}, 0x4000) r5 = accept(r0, &(0x7f0000000680), &(0x7f0000000700)=0x80) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000740)) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000780)) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000b80)=0xffffffffffffffff, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r2) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r6, 0x2, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x24000814) getpeername(r5, &(0x7f0000000d40)=@phonet, &(0x7f0000000dc0)=0x80) 03:50:53 executing program 6: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e22, 0x6, @private1, 0xffffffff}, {0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}, 0x8000, [0x8, 0x9, 0x9, 0xaf85, 0x8, 0xa363, 0xe4, 0xe9d]}, 0x5c) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x810) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8051}, 0x44004044) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x0, 'veth0_to_bridge\x00', {0x4}, 0x2}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}]}, @CTA_STATUS={0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40100, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000480)={{0x0, 0xc6ab, 0x7, 0x28, 0xd8d, 0x7, 0x5, 0x4, 0x401, 0xfffffe00, 0x798b, 0x5, 0x20, 0xffffffff, 0x5}}) fsetxattr$security_selinux(r0, &(0x7f0000001480), &(0x7f00000014c0)='system_u:object_r:syslog_conf_t:s0\x00', 0x23, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x34, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000001a00)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001700)={0x2b0, r4, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x15}}}}, [@NL80211_ATTR_TESTDATA={0xc3, 0x45, "b734c973f17dd68add2dd84b7f42e636c0e21d6f6fef3e9fe47ff358e67131d23a701ba4f0065a1ac6800e0b11359314bfe7f668838ba4d250a6288b342343f4d5c2c93ca8198d25ee2b7b5883f316af534c3bb61ce3de2fda456f6fb3526cb7803e742b05d4d401f1a39f1fa6448d0c2b576a8c6ecc9ceb451b283b0a676485f183f09850d91c92b298bab2099f8d734da1eb486f935882bb8a5f0389e3b42ecca0b30412468492141004032859ed8031dc86313333d03fcdaf7981f6fbbb"}, @NL80211_ATTR_TESTDATA={0xe4, 0x45, "b9a08bfab02d354f204658beb918636ff34a9d0dc0f06be00bb03d6f1c594c7c8960d3ea0097a984936edd64cf401b367177c4e22ec688012ae76bfc7ab5cc1f5fac6dd9d30b371a6e2bcbee0ec0abd850f68b59ba88b3e11a02491e734fd36df00a68d2346fcdb224ffd2731f8d9e2316481fa7e2039c27bea8a47564441ddb1d463350ca581c5ed8eb96e84e1224b5f8f19838b68159200b7b525d875cf2b21bb289ed1a6749ca9367b16b0c9e7edf9e30fd7f8cb7ef93628e7f99106ff3e2332f87f50bed14d1897ea562129e181cb43eb884c5136d6118a97f92872c0da0"}, @NL80211_ATTR_TESTDATA={0xa, 0x45, "388dfd020409"}, @NL80211_ATTR_TESTDATA={0xdb, 0x45, "346f97a4973680821247fa571ea7fc60437a925c12eaabb765c81f9681acceee66e71ebe059b658e40743e3e7516abf857f9a768603941c90986b5488c9483e1a4254188952b4e892963917df340cb1d4029d2e4b69e4932dbd1e1b6ec5e41a8d70962a5b963aeebb23df2de6570434efc6b205fb40655453192b6902eef0dbd1a26df1e717ecdd7254c2026079ff9b819a04192f3ac3b0a423cdd90f07548ac4bc32f769f8c9898a3cab1c103a28b83cfc51102019b07413b357af6cce1f1ba9609e1734ebafb66a22286b18e8439b9f67d8e98c92527"}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040801) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001a40)={{r1, 0x1, 0x5, 0x1, 0x3, 0x1, 0xffffffff, 0x2, 0x101, 0x2a2, 0x6, 0x25f5, 0x8, 0xa3, 0xfffffffffffffff9}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000002a40)={{r5, 0x80000001, 0x3ff, 0x3ff, 0x4, 0x7, 0x4, 0x2, 0x4, 0x401, 0x1000, 0x4, 0x7, 0x0, 0x401}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002b00)={'wpan0\x00'}) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f0000002b40)=0x1, 0x4) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000002b80)={'geneve0\x00', {0x2, 0x0, @local}}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x40, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10) 03:50:53 executing program 7: fadvise64(0xffffffffffffffff, 0x4, 0x7f, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x2, 0x8, 0x1, 0x4, 0x10, "0e3d795a6cbcfd60"}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x0, 0x1, 0x400}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000000c0)={0x2, 0x8, [0x8, 0x7, 0xffffffffffffffff, 0x1], &(0x7f0000000080)=[0x0]}) write(0xffffffffffffffff, &(0x7f0000000100)="3a588df5f6", 0x5) splice(0xffffffffffffffff, &(0x7f0000000140)=0x1, 0xffffffffffffffff, &(0x7f0000000180)=0x7, 0x9, 0x2) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x100, 0x1, 0x2, 0x0, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1000}, @CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffffff}]}, 0x100}, 0x1, 0x0, 0x0, 0x8005}, 0x10) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0xb72334d367d28ed0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x1, 0x2, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000600)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000640)) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000006c0)={0x0, @aes128}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000700)={0x0, 0x1, 0x1, [0x9, 0x7, 0x1, 0x10000], [0xfff, 0x0, 0x9, 0x81, 0xfffffffffffffffe, 0x9, 0x6, 0x1ff, 0x5, 0x579d, 0x3, 0x2, 0x273, 0x5, 0x8001, 0x378b0a88, 0x7f, 0x7, 0x80000001, 0x8, 0x4, 0x2, 0x1f, 0x1, 0x8, 0x9d4, 0x79, 0x2, 0x3, 0x40, 0x1ff, 0x200, 0x800, 0x1000, 0x1, 0x3, 0x6052, 0x80000000, 0x400, 0x9, 0x0, 0x5, 0x100000000, 0x9, 0x4, 0x3f, 0x0, 0x6, 0x4, 0xb63, 0x2, 0x1, 0x4, 0xffffffffffff2e5e, 0xffffffff00000001, 0xf53a, 0x8, 0x7, 0x5, 0x200, 0x80000000, 0x200000000000, 0x7f, 0x100, 0x8, 0x7, 0x3, 0x4c, 0x4f7, 0x4, 0x101, 0x2, 0x4, 0x80000001, 0x7fffffff, 0x81, 0x6, 0x1000, 0x4, 0x8, 0xa, 0x9, 0x2, 0x7, 0x100000000, 0x2b, 0xff, 0x8000, 0x2, 0x6, 0x531d, 0x8, 0x4, 0xfffffffffffffffa, 0x6, 0x1, 0x1, 0xe9, 0x8, 0x65756546, 0x95, 0x10000, 0x2, 0x4, 0x3, 0x7, 0x1, 0x401, 0x1, 0x1ff, 0x4, 0x7fff, 0x4, 0xffffffff00000000, 0x8, 0x400, 0x6, 0x100000001, 0x3ff, 0x5]}) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000b40)={0x4, 0x0, 0x6, 0x7, 0x7}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000b80)={0x3, 0x1, 0x80000000}) [ 90.842741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.849624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.852914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.862536] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.866833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.870020] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.911672] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.916565] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.917820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.923953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.925746] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.926961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.987846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.991846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.993840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.014249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.023017] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.029570] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.047198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.053931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.057140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.057368] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.065241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.072633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.075504] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.077389] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.092522] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.130983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.135568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.136991] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.139015] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.140869] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.143522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.162615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.172400] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.178596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.184232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.185267] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.189649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.192057] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.218571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.240913] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.242452] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.245030] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.246572] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.259776] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.280005] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.281083] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.923916] Bluetooth: hci0: command tx timeout [ 92.989044] Bluetooth: hci1: command tx timeout [ 93.116668] Bluetooth: hci2: command tx timeout [ 93.179509] Bluetooth: hci4: command tx timeout [ 93.243740] Bluetooth: hci5: command tx timeout [ 93.244834] Bluetooth: hci3: command tx timeout [ 93.307952] Bluetooth: hci6: command tx timeout [ 93.372571] Bluetooth: hci7: command tx timeout [ 94.971410] Bluetooth: hci0: command tx timeout [ 95.037311] Bluetooth: hci1: command tx timeout [ 95.164362] Bluetooth: hci2: command tx timeout [ 95.228489] Bluetooth: hci4: command tx timeout [ 95.293322] Bluetooth: hci5: command tx timeout [ 95.293761] Bluetooth: hci3: command tx timeout [ 95.355373] Bluetooth: hci6: command tx timeout [ 95.419393] Bluetooth: hci7: command tx timeout [ 97.020489] Bluetooth: hci0: command tx timeout [ 97.084424] Bluetooth: hci1: command tx timeout [ 97.211362] Bluetooth: hci2: command tx timeout [ 97.276427] Bluetooth: hci4: command tx timeout [ 97.341419] Bluetooth: hci3: command tx timeout [ 97.341891] Bluetooth: hci5: command tx timeout [ 97.404410] Bluetooth: hci6: command tx timeout [ 97.469328] Bluetooth: hci7: command tx timeout [ 99.067480] Bluetooth: hci0: command tx timeout [ 99.131893] Bluetooth: hci1: command tx timeout [ 99.259423] Bluetooth: hci2: command tx timeout [ 99.324412] Bluetooth: hci4: command tx timeout [ 99.389971] Bluetooth: hci5: command tx timeout [ 99.390973] Bluetooth: hci3: command tx timeout [ 99.451868] Bluetooth: hci6: command tx timeout [ 99.516423] Bluetooth: hci7: command tx timeout [ 153.125245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.130895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.132097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.136721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.138624] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.142527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.293455] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.299745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.301649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.302879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.306761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.313014] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.321374] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.325515] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.330782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.334394] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.353673] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.355544] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.358020] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.360483] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.362619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.370334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.373164] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.375945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.423651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.447025] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.453648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.463702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.476531] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.479894] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.561773] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.567021] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.573658] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.577659] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.579120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.588623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.589787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.591610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.599528] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.601472] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.603682] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.607557] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.611090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.634398] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.635088] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.641030] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.649625] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.668704] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.197338] Bluetooth: hci0: command tx timeout [ 155.453401] Bluetooth: hci2: command tx timeout [ 155.454419] Bluetooth: hci1: command tx timeout [ 155.455058] Bluetooth: hci3: command tx timeout [ 155.515400] Bluetooth: hci4: command tx timeout [ 155.707498] Bluetooth: hci5: command tx timeout [ 155.708655] Bluetooth: hci7: command tx timeout [ 155.771896] Bluetooth: hci6: command tx timeout [ 157.244380] Bluetooth: hci0: command tx timeout [ 157.499712] Bluetooth: hci2: command tx timeout [ 157.500833] Bluetooth: hci3: command tx timeout [ 157.502019] Bluetooth: hci1: command tx timeout [ 157.563492] Bluetooth: hci4: command tx timeout [ 157.755464] Bluetooth: hci5: command tx timeout [ 157.756556] Bluetooth: hci7: command tx timeout [ 157.819401] Bluetooth: hci6: command tx timeout [ 159.291363] Bluetooth: hci0: command tx timeout [ 159.549376] Bluetooth: hci2: command tx timeout [ 159.549879] Bluetooth: hci1: command tx timeout [ 159.550335] Bluetooth: hci3: command tx timeout [ 159.611516] Bluetooth: hci4: command tx timeout [ 159.804358] Bluetooth: hci5: command tx timeout [ 159.805246] Bluetooth: hci7: command tx timeout [ 159.867548] Bluetooth: hci6: command tx timeout [ 161.339539] Bluetooth: hci0: command tx timeout [ 161.595457] Bluetooth: hci3: command tx timeout [ 161.596165] Bluetooth: hci1: command tx timeout [ 161.596946] Bluetooth: hci2: command tx timeout [ 161.659644] Bluetooth: hci4: command tx timeout [ 161.852478] Bluetooth: hci7: command tx timeout [ 161.853105] Bluetooth: hci5: command tx timeout [ 161.915466] Bluetooth: hci6: command tx timeout [ 215.264939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.267316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.269665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.274657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.276985] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.279060] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.495141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.503532] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.505234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.510550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.516567] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.519726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.571386] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.583101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.590748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.594786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.597123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.605512] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.611508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.612660] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.630396] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.633084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.634400] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.637955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.652704] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.666609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.674506] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.674877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.697376] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.697470] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.706480] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.712034] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.712618] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.716531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.716746] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.724547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.762512] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.810229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.852003] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.921084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.935397] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.936600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.957031] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.961681] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.989662] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.000530] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.003568] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.007587] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.341316] Bluetooth: hci0: command tx timeout [ 217.597364] Bluetooth: hci1: command tx timeout [ 217.659544] Bluetooth: hci2: command tx timeout [ 217.723422] Bluetooth: hci3: command tx timeout [ 217.787403] Bluetooth: hci4: command tx timeout [ 217.787569] Bluetooth: hci5: command tx timeout [ 218.043363] Bluetooth: hci7: command tx timeout [ 218.044330] Bluetooth: hci6: command tx timeout [ 219.388817] Bluetooth: hci0: command tx timeout [ 219.646393] Bluetooth: hci1: command tx timeout [ 219.707333] Bluetooth: hci2: command tx timeout [ 219.771363] Bluetooth: hci3: command tx timeout [ 219.835351] Bluetooth: hci5: command tx timeout [ 219.836575] Bluetooth: hci4: command tx timeout [ 220.092330] Bluetooth: hci7: command tx timeout [ 220.092847] Bluetooth: hci6: command tx timeout [ 221.435363] Bluetooth: hci0: command tx timeout [ 221.691366] Bluetooth: hci1: command tx timeout [ 221.755406] Bluetooth: hci2: command tx timeout [ 221.819425] Bluetooth: hci3: command tx timeout [ 221.883737] Bluetooth: hci4: command tx timeout [ 221.884203] Bluetooth: hci5: command tx timeout [ 222.140469] Bluetooth: hci6: command tx timeout [ 222.141014] Bluetooth: hci7: command tx timeout [ 223.483424] Bluetooth: hci0: command tx timeout [ 223.739368] Bluetooth: hci1: command tx timeout [ 223.803405] Bluetooth: hci2: command tx timeout [ 223.869296] Bluetooth: hci3: command tx timeout [ 223.931357] Bluetooth: hci5: command tx timeout [ 223.932346] Bluetooth: hci4: command tx timeout [ 224.187390] Bluetooth: hci7: command tx timeout [ 224.187840] Bluetooth: hci6: command tx timeout [ 277.641547] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.645830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.648756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.656035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.661167] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.663557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.835116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.839473] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.841364] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.859750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.867465] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.869644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.870959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.873529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.879430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.907872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.915837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.921984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.983436] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.986809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.988814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.993091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.996484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.998413] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.128024] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.153980] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.177623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.182459] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.192631] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.194822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.360170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.408496] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.418538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.476120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.514759] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.520700] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.603406] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.613407] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.616559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.619588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.625214] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.630641] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.632864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.637825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.710809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.737696] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.777099] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.787519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.739778] Bluetooth: hci0: command tx timeout [ 279.933298] Bluetooth: hci1: command tx timeout [ 279.995600] Bluetooth: hci2: command tx timeout [ 280.059784] Bluetooth: hci3: command tx timeout [ 280.507414] Bluetooth: hci5: command tx timeout [ 280.635340] Bluetooth: hci4: command tx timeout [ 280.763554] Bluetooth: hci6: command tx timeout [ 280.891347] Bluetooth: hci7: command tx timeout [ 281.787404] Bluetooth: hci0: command tx timeout [ 281.980310] Bluetooth: hci1: command tx timeout [ 282.043347] Bluetooth: hci2: command tx timeout [ 282.107655] Bluetooth: hci3: command tx timeout [ 282.555707] Bluetooth: hci5: command tx timeout [ 282.684345] Bluetooth: hci4: command tx timeout [ 282.812309] Bluetooth: hci6: command tx timeout [ 282.939412] Bluetooth: hci7: command tx timeout [ 283.835333] Bluetooth: hci0: command tx timeout [ 284.029270] Bluetooth: hci1: command tx timeout [ 284.091497] Bluetooth: hci2: command tx timeout [ 284.155314] Bluetooth: hci3: command tx timeout [ 284.603477] Bluetooth: hci5: command tx timeout [ 284.731348] Bluetooth: hci4: command tx timeout [ 284.859311] Bluetooth: hci6: command tx timeout [ 284.987315] Bluetooth: hci7: command tx timeout [ 285.883421] Bluetooth: hci0: command tx timeout [ 286.076438] Bluetooth: hci1: command tx timeout [ 286.139316] Bluetooth: hci2: command tx timeout [ 286.203325] Bluetooth: hci3: command tx timeout [ 286.651349] Bluetooth: hci5: command tx timeout [ 286.779449] Bluetooth: hci4: command tx timeout [ 286.908276] Bluetooth: hci6: command tx timeout [ 287.035333] Bluetooth: hci7: command tx timeout [ 336.070419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.071146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.358593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.359347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.566760] [ 337.567225] ====================================================== [ 337.568344] WARNING: possible circular locking dependency detected [ 337.569462] 6.13.0-next-20250129 #1 Not tainted [ 337.570338] ------------------------------------------------------ [ 337.571426] kworker/u8:1/66 is trying to acquire lock: [ 337.572373] ffffffff8621d8a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.576788] [ 337.576788] but task is already holding lock: [ 337.580289] ffff88800c740768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.582222] [ 337.582222] which lock already depends on the new lock. [ 337.582222] [ 337.583748] [ 337.583748] the existing dependency chain (in reverse order) is: [ 337.585154] [ 337.585154] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 337.586452] __mutex_lock+0x13d/0xb50 [ 337.587401] wiphy_register+0x1b2e/0x25d0 [ 337.588411] ieee80211_register_hw+0x23a4/0x3d60 [ 337.589505] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 337.590647] init_mac80211_hwsim+0x389/0x870 [ 337.591718] do_one_initcall+0xf9/0x640 [ 337.592716] kernel_init_freeable+0x53d/0x7a0 [ 337.593780] kernel_init+0x1e/0x2d0 [ 337.594646] ret_from_fork+0x48/0x80 [ 337.595525] ret_from_fork_asm+0x1a/0x30 [ 337.596526] [ 337.596526] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.597755] __lock_acquire+0x29fd/0x4580 [ 337.598734] lock_acquire+0x19b/0x520 [ 337.599661] __mutex_lock+0x13d/0xb50 [ 337.600592] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.601878] unregister_netdevice_queue+0x224/0x2e0 [ 337.603012] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.604204] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.605316] ieee80211_unregister_hw+0x55/0x3a0 [ 337.606367] hwsim_exit_net+0x3a0/0x730 [ 337.607353] ops_exit_list+0xb3/0x180 [ 337.608291] cleanup_net+0x546/0xad0 [ 337.609235] process_one_work+0x8ee/0x1a10 [ 337.610321] worker_thread+0x674/0xe70 [ 337.611360] kthread+0x3ab/0x720 [ 337.612261] ret_from_fork+0x48/0x80 [ 337.613178] ret_from_fork_asm+0x1a/0x30 [ 337.614230] [ 337.614230] other info that might help us debug this: [ 337.614230] [ 337.615770] Possible unsafe locking scenario: [ 337.615770] [ 337.616980] CPU0 CPU1 [ 337.617937] ---- ---- [ 337.618888] lock(&rdev->wiphy.mtx); [ 337.619718] lock(rtnl_mutex); [ 337.620887] lock(&rdev->wiphy.mtx); [ 337.622058] lock(rtnl_mutex); [ 337.622724] [ 337.622724] *** DEADLOCK *** [ 337.622724] [ 337.635548] 4 locks held by kworker/u8:1/66: [ 337.636344] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 337.638212] #1: ffff88800bc87d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 337.640053] #2: ffffffff862118d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 337.641806] #3: ffff88800c740768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.643769] [ 337.643769] stack backtrace: [ 337.644602] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250129 #1 [ 337.644693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 337.644746] Workqueue: netns cleanup_net [ 337.644842] Call Trace: [ 337.644867] [ 337.644896] dump_stack_lvl+0xca/0x120 [ 337.645032] print_circular_bug+0x47b/0x750 [ 337.645144] check_noncircular+0x2e9/0x3c0 [ 337.645241] ? srso_return_thunk+0x5/0x5f [ 337.645375] ? __pfx_check_noncircular+0x10/0x10 [ 337.645474] ? hlock_class+0x4e/0x130 [ 337.645547] ? mark_lock+0xac/0xed0 [ 337.645641] ? srso_return_thunk+0x5/0x5f [ 337.645774] ? sched_clock+0x37/0x60 [ 337.645917] ? lockdep_lock+0xba/0x1b0 [ 337.646060] ? __pfx_lockdep_lock+0x10/0x10 [ 337.646213] __lock_acquire+0x29fd/0x4580 [ 337.646340] ? __pfx___lock_acquire+0x10/0x10 [ 337.646440] ? lock_release+0x20f/0x6f0 [ 337.646544] ? __pfx_lock_release+0x10/0x10 [ 337.646656] lock_acquire+0x19b/0x520 [ 337.646758] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.646872] ? __pfx_lock_acquire+0x10/0x10 [ 337.646978] ? srso_return_thunk+0x5/0x5f [ 337.647125] ? lock_release+0x20f/0x6f0 [ 337.647228] ? srso_return_thunk+0x5/0x5f [ 337.647355] ? lock_is_held_type+0x9e/0x120 [ 337.647481] ? srso_return_thunk+0x5/0x5f [ 337.647617] __mutex_lock+0x13d/0xb50 [ 337.647739] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.647843] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.647957] ? srso_return_thunk+0x5/0x5f [ 337.648089] ? synchronize_rcu_expedited+0x38a/0x420 [ 337.648198] ? __pfx___mutex_lock+0x10/0x10 [ 337.648329] ? __pfx_autoremove_wake_function+0x10/0x10 [ 337.648465] ? srso_return_thunk+0x5/0x5f [ 337.648597] ? kasan_quarantine_put+0x84/0x1e0 [ 337.648746] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 337.648833] ? srso_return_thunk+0x5/0x5f [ 337.648976] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.649081] ? __virt_addr_valid+0x2e8/0x5d0 [ 337.649195] ? __pfx_lock_release+0x10/0x10 [ 337.649286] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.649385] ? find_held_lock+0x2c/0x110 [ 337.649517] ? srso_return_thunk+0x5/0x5f [ 337.649643] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 337.649762] ? srso_return_thunk+0x5/0x5f [ 337.649872] ? lock_release+0x20f/0x6f0 [ 337.649963] ? __pfx_lock_release+0x10/0x10 [ 337.650051] ? srso_return_thunk+0x5/0x5f [ 337.650161] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.650258] ? srso_return_thunk+0x5/0x5f [ 337.650394] unregister_netdevice_queue+0x224/0x2e0 [ 337.650494] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.650594] ? up_write+0x195/0x520 [ 337.650723] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.650841] ? srso_return_thunk+0x5/0x5f [ 337.650972] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.651081] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 337.651231] ? srso_return_thunk+0x5/0x5f [ 337.651354] ? srso_return_thunk+0x5/0x5f [ 337.651477] ? synchronize_rcu+0x1ff/0x260 [ 337.651574] ieee80211_unregister_hw+0x55/0x3a0 [ 337.651665] hwsim_exit_net+0x3a0/0x730 [ 337.651751] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.651832] ? srso_return_thunk+0x5/0x5f [ 337.651943] ? netdev_run_todo+0x788/0x1040 [ 337.652042] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.652127] ops_exit_list+0xb3/0x180 [ 337.652213] cleanup_net+0x546/0xad0 [ 337.652304] ? __pfx_cleanup_net+0x10/0x10 [ 337.652411] process_one_work+0x8ee/0x1a10 [ 337.652545] ? __pfx_lock_acquire+0x10/0x10 [ 337.652641] ? __pfx_process_one_work+0x10/0x10 [ 337.652761] ? srso_return_thunk+0x5/0x5f [ 337.652872] ? move_linked_works+0x172/0x270 [ 337.652962] ? srso_return_thunk+0x5/0x5f [ 337.653072] ? assign_work+0x196/0x240 [ 337.653189] worker_thread+0x674/0xe70 [ 337.653308] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.653414] ? srso_return_thunk+0x5/0x5f [ 337.653524] ? __pfx_worker_thread+0x10/0x10 [ 337.653646] kthread+0x3ab/0x720 [ 337.653762] ? __pfx_kthread+0x10/0x10 [ 337.653881] ? srso_return_thunk+0x5/0x5f [ 337.654004] ? finish_task_switch.isra.0+0x206/0x840 [ 337.654121] ? __pfx_kthread+0x10/0x10 [ 337.654244] ret_from_fork+0x48/0x80 [ 337.654317] ? __pfx_kthread+0x10/0x10 [ 337.654438] ret_from_fork_asm+0x1a/0x30 [ 337.654591] [ 339.910795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.914840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.919049] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.922920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.930154] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.934959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.228200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.231565] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.233619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.238146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.241357] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.243171] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.295360] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.305009] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.310195] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.323616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.336747] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.345567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.379748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.384923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.386768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.397012] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.402100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.403823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.449835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.458830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.482586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.508368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.513702] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.516134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.517632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.529677] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.530166] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.532850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.536184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.552733] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.583606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.585962] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.602888] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.621529] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.630001] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.631785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.637604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.643875] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.661461] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.669623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.683069] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.687972] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.012359] Bluetooth: hci0: command tx timeout [ 342.267383] Bluetooth: hci1: command tx timeout [ 342.395499] Bluetooth: hci2: command tx timeout [ 342.459379] Bluetooth: hci3: command tx timeout [ 342.588338] Bluetooth: hci4: command tx timeout [ 342.717297] Bluetooth: hci7: command tx timeout [ 342.718026] Bluetooth: hci5: command tx timeout [ 342.718753] Bluetooth: hci6: command tx timeout [ 344.059431] Bluetooth: hci0: command tx timeout [ 344.315288] Bluetooth: hci1: command tx timeout [ 344.443266] Bluetooth: hci2: command tx timeout [ 344.507323] Bluetooth: hci3: command tx timeout [ 344.635271] Bluetooth: hci4: command tx timeout [ 344.763373] Bluetooth: hci6: command tx timeout [ 344.763437] Bluetooth: hci5: command tx timeout [ 344.763846] Bluetooth: hci7: command tx timeout [ 346.107277] Bluetooth: hci0: command tx timeout [ 346.365303] Bluetooth: hci1: command tx timeout [ 346.491360] Bluetooth: hci2: command tx timeout [ 346.555318] Bluetooth: hci3: command tx timeout [ 346.683345] Bluetooth: hci4: command tx timeout [ 346.811355] Bluetooth: hci7: command tx timeout [ 346.812625] Bluetooth: hci5: command tx timeout [ 346.813328] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:55:02 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000047c5 RCX=ffffffff83dc5a1f RDX=ffff8880164b5340 RSI=ffffffff83dc50a1 RDI=0000000000000004 RBP=0000000000010000 RSP=ffff8880154bfb68 R8 =0000000000000000 R9 =fffffbfff0c8087a R10=0000000000010000 R11=ffff888026a4bc38 R12=0000000000000000 R13=00000000000047c4 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8171a51b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fed7771d000 CR3=000000002814e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69 XMM04=68637300666e6f6373797300657a696c XMM05=00007fed7776d00000007fed7776e8c0 XMM06=00007fed7776e2f000007fed778d3950 XMM07=00007fed7776dcf000007fed7776d760 XMM08=00007fed7776d00000007fed778d3950 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283c595 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800bc86d20 R8 =0000000000000000 R9 =ffffed1001dac046 R10=0000000000000035 R11=3a6b636f6c206762 R12=0000000000000035 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283c580 RIP=ffffffff8283c5ed RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fed77943260 CR3=00000000157e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000415a7e1400000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000