syzkaller login: [ 62.333448] scp (237) used greatest stack depth: 23472 bytes left Warning: Permanently added '[localhost]:37789' (ECDSA) to the list of known hosts. 2024/11/13 17:45:15 fuzzer started 2024/11/13 17:45:15 dialing manager at localhost:46317 [ 66.730640] cgroup: Unknown subsys name 'net' [ 66.834410] cgroup: Unknown subsys name 'cpuset' [ 66.858640] cgroup: Unknown subsys name 'rlimit' 2024/11/13 17:45:32 syscalls: 208 2024/11/13 17:45:32 code coverage: enabled 2024/11/13 17:45:32 comparison tracing: enabled 2024/11/13 17:45:32 extra coverage: enabled 2024/11/13 17:45:32 setuid sandbox: enabled 2024/11/13 17:45:32 namespace sandbox: enabled 2024/11/13 17:45:32 Android sandbox: enabled 2024/11/13 17:45:32 fault injection: enabled 2024/11/13 17:45:32 leak checking: enabled 2024/11/13 17:45:32 net packet injection: enabled 2024/11/13 17:45:32 net device setup: enabled 2024/11/13 17:45:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/13 17:45:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/13 17:45:32 USB emulation: enabled 2024/11/13 17:45:32 hci packet injection: enabled 2024/11/13 17:45:32 wifi device emulation: enabled 2024/11/13 17:45:32 802.15.4 emulation: enabled 2024/11/13 17:45:32 fetching corpus: 0, signal 0/0 (executing program) 2024/11/13 17:45:34 starting 8 fuzzer processes 17:45:34 executing program 0: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40885) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8845}, 0x40000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x70000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x1f, 0x28, 0xd079, 0x6, @mcast2, @private1, 0x7800, 0x8000, 0x6, 0xfffffffd}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', r0, 0x4, 0x0, 0x9, 0x2, 0x63, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x20, 0xc3f8, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', r1, 0x4, 0x9, 0x9, 0x4, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7800, 0x2, 0x7}}) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200088c4}, 0x40000c2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x3c}}, 0x24040840) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x220, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'ip6gre0\x00', r2, 0x2f, 0x7, 0x1, 0x1ff, 0x8, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x80, 0x0, 0x5}}) r5 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x18, 0x0, 0x306, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000850}, 0x800) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000b40)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x44}, @mcast2, 0x100, 0x4, 0x4d06, 0x100, 0x9, 0x200000}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xb4, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcb}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x800) bind$inet6(r5, &(0x7f0000000d80)={0xa, 0x4e21, 0x2, @remote, 0x9}, 0x1c) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x78ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x40800) 17:45:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r1, 0x108, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:hald_log_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:dlm_control_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008154) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, 0x0, 0x812, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:utempter_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa4, r1, 0x305, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4048004) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000840}, 0x48801) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x23}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040054}, 0x2400c880) syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r8, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}}, 0x80) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x20}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 17:45:35 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x8, 0x0, 0x9}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = timerfd_create(0x7, 0x80000) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000000c0)={0x4, {{0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x1, 0x1, [{{0xa, 0x4e23, 0xb62, @loopback, 0x7ff}}]}, 0x110) openat$cgroup_procs(r1, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000280)) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000300)) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000380)=0x8) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x24000801) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000500)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000580)={{0x0, 0x3, 0x7, 0x1, 0xcb3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', r6, 0x2f, 0x1f, 0x0, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x10, 0x1, 0xcb}}) 17:45:35 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @private=0xa010102}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x3}}, @phonet={0x23, 0x3, 0x8, 0x6}, 0x8, 0x0, 0x0, 0x0, 0xf1b8, &(0x7f0000000000)='vxcan1\x00', 0x7, 0x8, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x2000001, 0x13, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r2, 0x228, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x60, 0x8, 0x9, 0xc0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8000, 0x3, 0xb6}}) pipe2(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002b40)={0x10c, 0x0, &(0x7f0000002980)=[@acquire_done={0x40106309, 0x2}, @acquire, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001740)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/4096, 0x1000, 0x0, 0x17}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, &(0x7f00000017c0)={0x0, 0x28, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001800)={@fda={0x66646185, 0x6, 0x1, 0x2a}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}}, &(0x7f0000001880)={0x0, 0x20, 0x38}}, 0x400}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000028c0)={@flat=@weak_handle={0x77682a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000018c0)=""/4096, 0x1000, 0x0, 0x2a}}, &(0x7f0000002940)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x2}, @exit_looper], 0x80, 0x0, &(0x7f0000002ac0)="221418747f056a9a0c4f3491bfa880d6cb071f40b0b15653d251fd88500d72ddafbcc41cbd6bccbba784d479c436e05433e06d52722a02cf31f07009ec7b8472280a4d6f1df01ad645449a989a1c8acc440a642756ed66bac2a922ad74abba8745a0d96f4ed7e5a9f0e20be9d8b6d21275615fcf0776fea381bddb365bd1aff5"}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x74, r6, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x800) socketpair(0x1a, 0x3, 0x5, &(0x7f0000002dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002e40), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x2c, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002f40), 0xffffffffffffffff) [ 85.176931] audit: type=1400 audit(1731519935.025:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:45:34 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/210, 0xd2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x910}, 0x40000) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={0x0, 0x27, 0xa5}, &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'tgr128-generic\x00'}}, &(0x7f00000002c0)="042892011e35455847cb223fde17282d186f97d4714be41dcb97a6780434dcca1f02faf8fd8db0", &(0x7f0000000300)=""/165) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = add_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="a4c9d6268af94db6fcdcc8edcc34a54e606e87ec4b257f68c638f75442ee56269dbd24c405c690840d8dbc2a321cfd2e0ac9591462b5e5bbd7ec0d2062510bc081158415e09c473bd1321827d7ddb32931d7ffb0acb08e9d1218874be3e7e3d2c299fce8ad9dcb734645ec379e836862d15d43d285036cf739a4f0ce83bf76150b59fd9100a598b79549f9bd4d2584867cc016cab760bd24a00565f12b653502ddaf0cd6fd45be239f39f9cdee4d3ffd23e614f9b2082399ca75f4af2226cf4297dc296a428c9fdd56fa34793ae2261670521e7d921fdfc45175d6bb2d029032c03873ed007c91f6a9bad259fb7469bd74f083ae1be8d1ce", 0xf8, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r0, 0x56, 0x1000}, &(0x7f0000000580)={'enc=', 'pkcs1', ' hash=', {'sha256-generic\x00'}}, &(0x7f0000000600)="c5cd5c5ffd376162c1c6416d6c907fe0aa3d5bea4e65a50b51d010e0f93d99abd2ac4f26c3bcbc0ff5b17f526b5a547d6c263bbfa086550e78a5a241b735f6ba8d7409fa91021ba1c80566cb66951c87da11c80cdef8", &(0x7f0000000680)=""/4096) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}}, 0x20008080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40400c4) r2 = add_key$keyring(&(0x7f0000001a40), &(0x7f0000001a80)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000019c0), &(0x7f0000001a00)={'syz', 0x0}, 0x0, 0x0, r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000001b40)={'syztnl0\x00', &(0x7f0000001ac0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0xd3, 0x1, 0x2a, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, 0x40, 0x20, 0xd72, 0x9fa8}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001bc0), r1) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x30, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x40010) r6 = add_key(&(0x7f0000001cc0)='id_legacy\x00', &(0x7f0000001d00)={'syz', 0x1}, &(0x7f0000001d40)="6fb9b051825fd0dbda3bce71d138a799c13cf69fb57fff39d3e51d2f6d3c92e265f24f", 0x23, r2) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000001d80)={r6, 0x70, 0xcf}, &(0x7f0000001dc0)={'enc=', 'pkcs1', ' hash=', {'rmd256\x00'}}, &(0x7f0000001e40)="a30568ffda6c08cad8f7906eff24aeec2e83243984b29d0cf85e48e8947a4342749c3bb20a99695a1cc15122722b5939cf11b0f22d915885ceeb6d1c609c6241b30e1509dfddbef49391b95957275e6dc5aba6cae69efe11bb8372bab995e86cb931c7423da4c590887c0198d54bbb01", &(0x7f0000001ec0)=""/207) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, r2, 0x0) 17:45:35 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r0, 0x29, 0x0, 0x81, 0x9, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x7800, 0x8, 0x5, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', r1, 0x2f, 0xf3, 0x6, 0x9b84, 0x5, @local, @rand_addr=' \x01\x00', 0x20, 0x7800, 0x101, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r1, 0x2f, 0xfb, 0x81, 0xffffffff, 0x40, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x20, 0x3, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', r0, 0x4, 0xff, 0x5, 0xffffffff, 0x60, @dev={0xfe, 0x80, '\x00', 0x32}, @local, 0x1, 0x700, 0x7, 0x1ff}}) r3 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', r0, 0x4, 0x2d, 0x8, 0x8, 0x70, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x1, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'sit0\x00', r4, 0x4, 0x91, 0x3, 0x1, 0x5, @mcast2, @mcast1, 0x1, 0x20, 0x0, 0x9}}) socketpair(0x2b, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', r0, 0x4, 0xfc, 0x60, 0x5, 0x0, @private0, @mcast2, 0x10, 0x7, 0x5, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6gre0\x00', r2, 0x2f, 0xe9, 0xb8, 0x2, 0x46, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x8, 0x700, 0xfffffff7, 0xb0}}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) r8 = add_key(&(0x7f0000000800)='id_resolver\x00', &(0x7f0000000840)={'syz', 0x1}, &(0x7f0000000880)="273259a569f41d11e87dfcdb135d192b6998a99ca394d3b532d47be850057b2a4e1468d4794c6ac0b01bb754e096789b2cbf936b80e6eced4e3b85df3ef96c89ed7b72d2be7869a83d00e5588b2e86b9867777f90d487b2d3c532a2d7a029cc8b4db948bac87b1e1a9b69d805272a6a012bc3840b206ffe9c0c740604216b65af800de5060e45958f8ee15c23fc0e00fb80f7c4da02a407471a5a108b840b97ec2b1b020475508fb37f5a6db75af42fba0d72b579f2ce365abe4b822fca84357abc1c3de62096d311d1e5b5f8d6847b4faad86", 0xd3, 0xfffffffffffffffa) keyctl$setperm(0x5, r8, 0x2004) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x8c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r6}, {0x8, 0x1, r5}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000000000}]}, 0x8c}, 0x1, 0x0, 0x0, 0x14}, 0x8840) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) 17:45:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040005}, 0x10) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40) socketpair(0x27, 0x2, 0xffff, &(0x7f00000002c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x10400, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x54, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0xb}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}, 0x1400}, @release={0x40046306, 0x3}], 0x38, 0x0, &(0x7f00000004c0)="f263b356b496f2d87543264ba785e6f76c2c3d7c947ebf7f727fabe88d2235944fd882fa6ee970caa1a6510b4b10df154c68763b75190256"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c050}, 0x4001000) timerfd_create(0x0, 0x80000) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0x1, 0x1, 0xfffffc01, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x7808, 0x8, 0xfffffff9}}) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x42}}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000900), 0x4) 17:45:35 executing program 7: socketpair(0x2, 0x8000a, 0x9d1, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x1d, 0x2, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}}, 0x4000010) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000280)={r4, 0x1000, 0x88}, &(0x7f00000002c0)={'enc=', 'pkcs1', ' hash=', {'michael_mic-generic\x00'}}, &(0x7f0000000340)="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", &(0x7f0000001340)="cb08c0543d9370e022ebf70659da4c21ae14eeee2c1d2783bbee90d157b4427a3a5fbb070468e7873de35973eb642cfc901a220382984606e2949fa2df0f87274408746ecd260812f7c9e4f2ea638336986a0a34de0559df0a48a8c6ab6fd4de86fab2436fbfc040415c4f3a4498a3d1b4e32e9fa07f38122944e4711d0370f6bd9d712bb11df8a9") sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:syslogd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x6000000}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x68, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x11) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x68, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000001840), r8) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000018c0), r5) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x20, r9, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80c4) r10 = request_key(&(0x7f00000019c0)='syzkaller\x00', &(0x7f0000001a00)={'syz', 0x1}, &(0x7f0000001a40)='ipvlan0\x00', r4) r11 = request_key(&(0x7f0000001ac0)='keyring\x00', &(0x7f0000001b00)={'syz', 0x2}, &(0x7f0000001b40)=' hash=', r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000001a80)='cifs.spnego\x00', &(0x7f0000001b80)=@keyring={'key_or_keyring:', r11}) [ 86.700354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.703136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.704475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.710847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.712650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.713958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.740406] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.744497] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.748909] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.759790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.762569] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.764803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.800401] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.805099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.810970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.816443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.818125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.819679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.903904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.913989] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.916192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.919912] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.922079] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.924081] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.926559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.928369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.929514] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.932694] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.934103] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.935895] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.937121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.938719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.940376] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.941396] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.943875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.944050] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.946913] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.948049] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.953094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.956873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.959904] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.961085] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.967361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.975497] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.976993] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.977835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.995719] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.006284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.773634] Bluetooth: hci0: command tx timeout [ 88.837371] Bluetooth: hci2: command tx timeout [ 88.837419] Bluetooth: hci1: command tx timeout [ 88.965594] Bluetooth: hci6: command tx timeout [ 89.029554] Bluetooth: hci4: command tx timeout [ 89.093395] Bluetooth: hci5: command tx timeout [ 89.094358] Bluetooth: hci3: command tx timeout [ 89.095457] Bluetooth: hci7: command tx timeout [ 90.822364] Bluetooth: hci0: command tx timeout [ 90.885339] Bluetooth: hci1: command tx timeout [ 90.888336] Bluetooth: hci2: command tx timeout [ 91.013527] Bluetooth: hci6: command tx timeout [ 91.078305] Bluetooth: hci4: command tx timeout [ 91.141479] Bluetooth: hci3: command tx timeout [ 91.141519] Bluetooth: hci7: command tx timeout [ 91.142847] Bluetooth: hci5: command tx timeout [ 92.870391] Bluetooth: hci0: command tx timeout [ 92.933527] Bluetooth: hci2: command tx timeout [ 92.935376] Bluetooth: hci1: command tx timeout [ 93.061528] Bluetooth: hci6: command tx timeout [ 93.125471] Bluetooth: hci4: command tx timeout [ 93.189793] Bluetooth: hci5: command tx timeout [ 93.190535] Bluetooth: hci7: command tx timeout [ 93.191677] Bluetooth: hci3: command tx timeout [ 94.918085] Bluetooth: hci0: command tx timeout [ 94.981577] Bluetooth: hci1: command tx timeout [ 94.983589] Bluetooth: hci2: command tx timeout [ 95.109827] Bluetooth: hci6: command tx timeout [ 95.173412] Bluetooth: hci4: command tx timeout [ 95.237341] Bluetooth: hci3: command tx timeout [ 95.237391] Bluetooth: hci7: command tx timeout [ 95.238750] Bluetooth: hci5: command tx timeout [ 149.077775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.079390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.080584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.083943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.086380] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.087547] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.262911] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.275091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.276591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.277730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.279602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.285886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.288160] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.290622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.299872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.301433] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.302964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.307262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.311542] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.313825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.316098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.325900] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.330973] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.332993] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.335671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.340126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.342067] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.345762] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.355504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.363322] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.365648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.374282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.375862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.379674] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.390261] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.390311] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.394642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.410107] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.436446] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.442743] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.450548] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.450654] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.459468] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.466117] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.487572] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.489793] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.492140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.494109] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.110443] Bluetooth: hci0: command tx timeout [ 151.365451] Bluetooth: hci3: command tx timeout [ 151.366990] Bluetooth: hci2: command tx timeout [ 151.429885] Bluetooth: hci1: command tx timeout [ 151.494307] Bluetooth: hci4: command tx timeout [ 151.557348] Bluetooth: hci5: command tx timeout [ 151.557399] Bluetooth: hci7: command tx timeout [ 151.621366] Bluetooth: hci6: command tx timeout [ 153.158315] Bluetooth: hci0: command tx timeout [ 153.413458] Bluetooth: hci2: command tx timeout [ 153.414481] Bluetooth: hci3: command tx timeout [ 153.478464] Bluetooth: hci1: command tx timeout [ 153.542587] Bluetooth: hci4: command tx timeout [ 153.605341] Bluetooth: hci5: command tx timeout [ 153.605815] Bluetooth: hci7: command tx timeout [ 153.670358] Bluetooth: hci6: command tx timeout [ 155.205333] Bluetooth: hci0: command tx timeout [ 155.461365] Bluetooth: hci3: command tx timeout [ 155.461391] Bluetooth: hci2: command tx timeout [ 155.525763] Bluetooth: hci1: command tx timeout [ 155.589450] Bluetooth: hci4: command tx timeout [ 155.653545] Bluetooth: hci7: command tx timeout [ 155.654419] Bluetooth: hci5: command tx timeout [ 155.717444] Bluetooth: hci6: command tx timeout [ 157.253380] Bluetooth: hci0: command tx timeout [ 157.509322] Bluetooth: hci3: command tx timeout [ 157.511269] Bluetooth: hci2: command tx timeout [ 157.574095] Bluetooth: hci1: command tx timeout [ 157.638442] Bluetooth: hci4: command tx timeout [ 157.701344] Bluetooth: hci5: command tx timeout [ 157.701375] Bluetooth: hci7: command tx timeout [ 157.766534] Bluetooth: hci6: command tx timeout [ 211.480520] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.482529] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.484459] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.495928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.497778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.500078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.543759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.545470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.546815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.549717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.552468] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.553560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.612889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.620467] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.631435] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.637854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.642597] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.646444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.673464] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.674635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.677469] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.678201] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.682256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.682976] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.687318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.692450] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.696200] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.697057] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.699848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.701423] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.761140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.768473] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.772886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.775025] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.785354] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.796628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.802443] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.813489] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.820720] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.825449] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.826859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.829082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.833696] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 211.837153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.838760] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 211.840608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.850198] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 211.852452] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.573344] Bluetooth: hci0: command tx timeout [ 213.574368] Bluetooth: hci1: command tx timeout [ 213.701354] Bluetooth: hci2: command tx timeout [ 213.765359] Bluetooth: hci3: command tx timeout [ 213.765399] Bluetooth: hci4: command tx timeout [ 213.893463] Bluetooth: hci5: command tx timeout [ 213.959284] Bluetooth: hci7: command tx timeout [ 213.959326] Bluetooth: hci6: command tx timeout [ 215.621416] Bluetooth: hci1: command tx timeout [ 215.621495] Bluetooth: hci0: command tx timeout [ 215.749309] Bluetooth: hci2: command tx timeout [ 215.813298] Bluetooth: hci3: command tx timeout [ 215.814934] Bluetooth: hci4: command tx timeout [ 215.941495] Bluetooth: hci5: command tx timeout [ 216.005429] Bluetooth: hci7: command tx timeout [ 216.005914] Bluetooth: hci6: command tx timeout [ 217.669571] Bluetooth: hci1: command tx timeout [ 217.670741] Bluetooth: hci0: command tx timeout [ 217.798329] Bluetooth: hci2: command tx timeout [ 217.862651] Bluetooth: hci4: command tx timeout [ 217.863037] Bluetooth: hci3: command tx timeout [ 217.989316] Bluetooth: hci5: command tx timeout [ 218.054481] Bluetooth: hci6: command tx timeout [ 218.054827] Bluetooth: hci7: command tx timeout [ 219.717351] Bluetooth: hci0: command tx timeout [ 219.717874] Bluetooth: hci1: command tx timeout [ 219.845354] Bluetooth: hci2: command tx timeout [ 219.909304] Bluetooth: hci3: command tx timeout [ 219.909336] Bluetooth: hci4: command tx timeout [ 220.040261] Bluetooth: hci5: command tx timeout [ 220.101322] Bluetooth: hci6: command tx timeout [ 220.101808] Bluetooth: hci7: command tx timeout [ 273.690145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.692630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.697646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.707259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.714607] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 273.716351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.747762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.752490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.755927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.761502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.763173] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.764577] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.872132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.874777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.878445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.887010] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.893016] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.899495] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.941849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.946398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.950498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.981678] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.985680] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.987567] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.004585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.010478] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.012991] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.019442] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.026093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.027707] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.028852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.029800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.038475] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.054851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.071528] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.073093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.074004] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.078059] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.079674] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.100320] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.103945] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.107757] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.134446] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.140134] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.143535] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.146460] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.151011] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.152154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.781457] Bluetooth: hci0: command tx timeout [ 275.845358] Bluetooth: hci1: command tx timeout [ 275.974269] Bluetooth: hci2: command tx timeout [ 276.101366] Bluetooth: hci5: command tx timeout [ 276.102445] Bluetooth: hci3: command tx timeout [ 276.165891] Bluetooth: hci6: command tx timeout [ 276.230379] Bluetooth: hci7: command tx timeout [ 276.231372] Bluetooth: hci4: command tx timeout [ 277.829285] Bluetooth: hci0: command tx timeout [ 277.894309] Bluetooth: hci1: command tx timeout [ 278.021509] Bluetooth: hci2: command tx timeout [ 278.149702] Bluetooth: hci5: command tx timeout [ 278.150257] Bluetooth: hci3: command tx timeout [ 278.213358] Bluetooth: hci6: command tx timeout [ 278.277560] Bluetooth: hci7: command tx timeout [ 278.278089] Bluetooth: hci4: command tx timeout [ 279.877321] Bluetooth: hci0: command tx timeout [ 279.942526] Bluetooth: hci1: command tx timeout [ 280.069280] Bluetooth: hci2: command tx timeout [ 280.198446] Bluetooth: hci3: command tx timeout [ 280.198936] Bluetooth: hci5: command tx timeout [ 280.261309] Bluetooth: hci6: command tx timeout [ 280.325346] Bluetooth: hci7: command tx timeout [ 280.325822] Bluetooth: hci4: command tx timeout [ 281.926289] Bluetooth: hci0: command tx timeout [ 281.990440] Bluetooth: hci1: command tx timeout [ 282.118352] Bluetooth: hci2: command tx timeout [ 282.246307] Bluetooth: hci5: command tx timeout [ 282.246800] Bluetooth: hci3: command tx timeout [ 282.310296] Bluetooth: hci6: command tx timeout [ 282.374348] Bluetooth: hci4: command tx timeout [ 282.374828] Bluetooth: hci7: command tx timeout [ 335.999586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.076678] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.080146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.081473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.082676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.089529] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.108092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.110023] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.111054] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.215434] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.216531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.219387] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.225877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.227038] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.231043] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.233839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.237473] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.239486] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.241624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.257917] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.260341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.280485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.283350] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.287421] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.370879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.372076] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.379034] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.390724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.391845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.392770] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.400905] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.423964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.427423] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.428516] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.430563] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.431056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.442516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.449737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.463568] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.470091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.475525] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 336.484661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.484845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.502673] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 336.503808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.505983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.510381] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 336.527582] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.117298] Bluetooth: hci1: command tx timeout [ 338.309453] Bluetooth: hci0: command tx timeout [ 338.310411] Bluetooth: hci3: command tx timeout [ 338.374238] Bluetooth: hci2: command tx timeout [ 338.503446] Bluetooth: hci4: command tx timeout [ 338.565341] Bluetooth: hci5: command tx timeout [ 338.629412] Bluetooth: hci7: command tx timeout [ 338.630295] Bluetooth: hci6: command tx timeout [ 340.165299] Bluetooth: hci1: command tx timeout [ 340.358370] Bluetooth: hci3: command tx timeout [ 340.358393] Bluetooth: hci0: command tx timeout [ 340.421256] Bluetooth: hci2: command tx timeout [ 340.549481] Bluetooth: hci4: command tx timeout [ 340.613327] Bluetooth: hci5: command tx timeout [ 340.677307] Bluetooth: hci7: command tx timeout [ 340.677796] Bluetooth: hci6: command tx timeout [ 342.213267] Bluetooth: hci1: command tx timeout [ 342.405292] Bluetooth: hci3: command tx timeout [ 342.406359] Bluetooth: hci0: command tx timeout [ 342.472259] Bluetooth: hci2: command tx timeout [ 342.598263] Bluetooth: hci4: command tx timeout [ 342.662285] Bluetooth: hci5: command tx timeout [ 342.725330] Bluetooth: hci6: command tx timeout [ 342.725480] Bluetooth: hci7: command tx timeout [ 344.263272] Bluetooth: hci1: command tx timeout [ 344.453346] Bluetooth: hci0: command tx timeout [ 344.453370] Bluetooth: hci3: command tx timeout [ 344.517243] Bluetooth: hci2: command tx timeout [ 344.645355] Bluetooth: hci4: command tx timeout [ 344.709514] Bluetooth: hci5: command tx timeout [ 344.775256] Bluetooth: hci7: command tx timeout [ 344.775314] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 17:50:45 Registers: info registers vcpu 0 RAX=ffffffff817cab53 RBX=ffffffff813ef450 RCX=0000000000000001 RDX=1ffff1100d9c135a RSI=ffffffff817cab53 RDI=ffffffff817cab53 RBP=ffff88806ce09b10 RSP=ffff88806ce09a78 R8 =0000000000000001 R9 =ffff88806ce09ab8 R10=000000000003c001 R11=0000000000021bcd R12=ffff88806ce09b40 R13=0000000000000000 R14=ffff888025123700 R15=ffff88800d3954a0 RIP=ffffffff810d10b3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbc77a5d8e0 CR3=0000000034b1c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff8786f800 RCX=ffffffff812f079e RDX=ffffffff863f8534 RSI=0000000000000008 RDI=ffffffff8786f818 RBP=ffff888015421b80 RSP=ffff88806cf09b78 R8 =0000000000000000 R9 =fffffbfff0fdc5e5 R10=ffffffff87ee2f2f R11=ffff88806cf09ff8 R12=00000000000008bb R13=091e9cbf4f92c628 R14=0000000000000001 R15=ffff8880154225e8 RIP=ffffffff812fc815 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005608c6c4a080 CR3=0000000026c62000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000