Warning: Permanently added '[localhost]:43842' (ECDSA) to the list of known hosts. 2024/11/19 22:01:39 fuzzer started 2024/11/19 22:01:40 dialing manager at localhost:43245 syzkaller login: [ 107.614018] cgroup: Unknown subsys name 'net' [ 107.697657] cgroup: Unknown subsys name 'cpuset' [ 107.734169] cgroup: Unknown subsys name 'rlimit' 2024/11/19 22:01:57 syscalls: 2217 2024/11/19 22:01:57 code coverage: enabled 2024/11/19 22:01:57 comparison tracing: enabled 2024/11/19 22:01:57 extra coverage: enabled 2024/11/19 22:01:57 setuid sandbox: enabled 2024/11/19 22:01:57 namespace sandbox: enabled 2024/11/19 22:01:57 Android sandbox: enabled 2024/11/19 22:01:57 fault injection: enabled 2024/11/19 22:01:57 leak checking: enabled 2024/11/19 22:01:57 net packet injection: enabled 2024/11/19 22:01:57 net device setup: enabled 2024/11/19 22:01:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/19 22:01:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/19 22:01:57 USB emulation: enabled 2024/11/19 22:01:57 hci packet injection: enabled 2024/11/19 22:01:57 wifi device emulation: enabled 2024/11/19 22:01:57 802.15.4 emulation: enabled 2024/11/19 22:01:57 fetching corpus: 50, signal 20553/22338 (executing program) 2024/11/19 22:01:57 fetching corpus: 100, signal 28406/31790 (executing program) 2024/11/19 22:01:57 fetching corpus: 150, signal 33988/38921 (executing program) 2024/11/19 22:01:57 fetching corpus: 200, signal 41377/47666 (executing program) 2024/11/19 22:01:57 fetching corpus: 250, signal 47344/54917 (executing program) 2024/11/19 22:01:57 fetching corpus: 300, signal 53600/62291 (executing program) 2024/11/19 22:01:57 fetching corpus: 350, signal 56641/66596 (executing program) 2024/11/19 22:01:58 fetching corpus: 400, signal 62567/73483 (executing program) 2024/11/19 22:01:58 fetching corpus: 450, signal 64384/76491 (executing program) 2024/11/19 22:01:58 fetching corpus: 500, signal 68053/81160 (executing program) 2024/11/19 22:01:58 fetching corpus: 550, signal 70965/85074 (executing program) 2024/11/19 22:01:58 fetching corpus: 600, signal 72292/87565 (executing program) 2024/11/19 22:01:58 fetching corpus: 650, signal 74915/91077 (executing program) 2024/11/19 22:01:58 fetching corpus: 700, signal 79356/96125 (executing program) 2024/11/19 22:01:58 fetching corpus: 750, signal 80963/98677 (executing program) 2024/11/19 22:01:58 fetching corpus: 800, signal 82901/101539 (executing program) 2024/11/19 22:01:58 fetching corpus: 850, signal 84728/104191 (executing program) 2024/11/19 22:01:59 fetching corpus: 900, signal 88285/108229 (executing program) 2024/11/19 22:01:59 fetching corpus: 950, signal 90066/110776 (executing program) 2024/11/19 22:01:59 fetching corpus: 1000, signal 92371/113726 (executing program) 2024/11/19 22:01:59 fetching corpus: 1050, signal 93414/115629 (executing program) 2024/11/19 22:01:59 fetching corpus: 1100, signal 95705/118462 (executing program) 2024/11/19 22:01:59 fetching corpus: 1150, signal 97126/120572 (executing program) 2024/11/19 22:01:59 fetching corpus: 1200, signal 98629/122771 (executing program) 2024/11/19 22:01:59 fetching corpus: 1250, signal 99664/124565 (executing program) 2024/11/19 22:01:59 fetching corpus: 1300, signal 100773/126390 (executing program) 2024/11/19 22:01:59 fetching corpus: 1350, signal 101806/128142 (executing program) 2024/11/19 22:02:00 fetching corpus: 1400, signal 102766/129822 (executing program) 2024/11/19 22:02:00 fetching corpus: 1450, signal 104155/131758 (executing program) 2024/11/19 22:02:00 fetching corpus: 1500, signal 105351/133555 (executing program) 2024/11/19 22:02:00 fetching corpus: 1550, signal 106819/135464 (executing program) 2024/11/19 22:02:00 fetching corpus: 1600, signal 107568/136867 (executing program) 2024/11/19 22:02:00 fetching corpus: 1650, signal 109297/138873 (executing program) 2024/11/19 22:02:00 fetching corpus: 1700, signal 110814/140762 (executing program) 2024/11/19 22:02:00 fetching corpus: 1750, signal 112733/142841 (executing program) 2024/11/19 22:02:01 fetching corpus: 1800, signal 113854/144374 (executing program) 2024/11/19 22:02:01 fetching corpus: 1850, signal 114873/145882 (executing program) 2024/11/19 22:02:01 fetching corpus: 1900, signal 115901/147344 (executing program) 2024/11/19 22:02:01 fetching corpus: 1950, signal 117390/149104 (executing program) 2024/11/19 22:02:01 fetching corpus: 2000, signal 118133/150335 (executing program) 2024/11/19 22:02:01 fetching corpus: 2050, signal 118821/151549 (executing program) 2024/11/19 22:02:01 fetching corpus: 2100, signal 119944/153035 (executing program) 2024/11/19 22:02:01 fetching corpus: 2150, signal 120734/154249 (executing program) 2024/11/19 22:02:02 fetching corpus: 2200, signal 121804/155630 (executing program) 2024/11/19 22:02:02 fetching corpus: 2250, signal 122525/156839 (executing program) 2024/11/19 22:02:02 fetching corpus: 2300, signal 123060/157868 (executing program) 2024/11/19 22:02:02 fetching corpus: 2350, signal 123864/159041 (executing program) 2024/11/19 22:02:02 fetching corpus: 2400, signal 124539/160133 (executing program) 2024/11/19 22:02:02 fetching corpus: 2450, signal 125184/161202 (executing program) 2024/11/19 22:02:02 fetching corpus: 2500, signal 125862/162263 (executing program) 2024/11/19 22:02:02 fetching corpus: 2550, signal 126405/163292 (executing program) 2024/11/19 22:02:02 fetching corpus: 2600, signal 127112/164354 (executing program) 2024/11/19 22:02:02 fetching corpus: 2650, signal 127822/165402 (executing program) 2024/11/19 22:02:03 fetching corpus: 2700, signal 128776/166584 (executing program) 2024/11/19 22:02:03 fetching corpus: 2750, signal 129284/167519 (executing program) 2024/11/19 22:02:03 fetching corpus: 2800, signal 129836/168499 (executing program) 2024/11/19 22:02:03 fetching corpus: 2850, signal 130275/169367 (executing program) 2024/11/19 22:02:03 fetching corpus: 2900, signal 130898/170295 (executing program) 2024/11/19 22:02:03 fetching corpus: 2950, signal 131835/171344 (executing program) 2024/11/19 22:02:03 fetching corpus: 3000, signal 132713/172362 (executing program) 2024/11/19 22:02:03 fetching corpus: 3050, signal 133262/173200 (executing program) 2024/11/19 22:02:03 fetching corpus: 3100, signal 134065/174087 (executing program) 2024/11/19 22:02:03 fetching corpus: 3150, signal 135406/175231 (executing program) 2024/11/19 22:02:03 fetching corpus: 3200, signal 135916/176035 (executing program) 2024/11/19 22:02:03 fetching corpus: 3250, signal 136290/176758 (executing program) 2024/11/19 22:02:04 fetching corpus: 3300, signal 137028/177628 (executing program) 2024/11/19 22:02:04 fetching corpus: 3350, signal 137534/178419 (executing program) 2024/11/19 22:02:04 fetching corpus: 3400, signal 137909/179131 (executing program) 2024/11/19 22:02:04 fetching corpus: 3450, signal 140041/180408 (executing program) 2024/11/19 22:02:04 fetching corpus: 3500, signal 140619/181149 (executing program) 2024/11/19 22:02:04 fetching corpus: 3550, signal 141437/181927 (executing program) 2024/11/19 22:02:04 fetching corpus: 3600, signal 142040/182660 (executing program) 2024/11/19 22:02:04 fetching corpus: 3650, signal 142548/183330 (executing program) 2024/11/19 22:02:04 fetching corpus: 3700, signal 143068/184008 (executing program) 2024/11/19 22:02:04 fetching corpus: 3750, signal 143594/184707 (executing program) 2024/11/19 22:02:05 fetching corpus: 3800, signal 144213/185394 (executing program) 2024/11/19 22:02:05 fetching corpus: 3850, signal 144672/186030 (executing program) 2024/11/19 22:02:05 fetching corpus: 3900, signal 145272/186693 (executing program) 2024/11/19 22:02:05 fetching corpus: 3950, signal 145920/187365 (executing program) 2024/11/19 22:02:05 fetching corpus: 4000, signal 146349/187955 (executing program) 2024/11/19 22:02:05 fetching corpus: 4050, signal 146781/188538 (executing program) 2024/11/19 22:02:05 fetching corpus: 4100, signal 147251/189119 (executing program) 2024/11/19 22:02:05 fetching corpus: 4150, signal 148017/189732 (executing program) 2024/11/19 22:02:05 fetching corpus: 4200, signal 148587/190327 (executing program) 2024/11/19 22:02:05 fetching corpus: 4250, signal 149227/190895 (executing program) 2024/11/19 22:02:05 fetching corpus: 4300, signal 149708/191503 (executing program) 2024/11/19 22:02:06 fetching corpus: 4350, signal 150157/192017 (executing program) 2024/11/19 22:02:06 fetching corpus: 4400, signal 150656/192558 (executing program) 2024/11/19 22:02:06 fetching corpus: 4450, signal 150872/193029 (executing program) 2024/11/19 22:02:06 fetching corpus: 4500, signal 151204/193554 (executing program) 2024/11/19 22:02:06 fetching corpus: 4550, signal 151848/194060 (executing program) 2024/11/19 22:02:06 fetching corpus: 4600, signal 152270/194533 (executing program) 2024/11/19 22:02:06 fetching corpus: 4650, signal 152615/195039 (executing program) 2024/11/19 22:02:06 fetching corpus: 4700, signal 153172/195522 (executing program) 2024/11/19 22:02:06 fetching corpus: 4750, signal 153489/195969 (executing program) 2024/11/19 22:02:07 fetching corpus: 4800, signal 154031/196446 (executing program) 2024/11/19 22:02:07 fetching corpus: 4850, signal 154374/196896 (executing program) 2024/11/19 22:02:07 fetching corpus: 4900, signal 154761/197325 (executing program) 2024/11/19 22:02:07 fetching corpus: 4950, signal 155110/197684 (executing program) 2024/11/19 22:02:07 fetching corpus: 5000, signal 155853/197684 (executing program) 2024/11/19 22:02:07 fetching corpus: 5050, signal 156270/197684 (executing program) 2024/11/19 22:02:07 fetching corpus: 5100, signal 156634/197684 (executing program) 2024/11/19 22:02:07 fetching corpus: 5150, signal 157000/197684 (executing program) 2024/11/19 22:02:07 fetching corpus: 5200, signal 157884/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5250, signal 158370/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5300, signal 158926/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5350, signal 159276/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5400, signal 159824/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5450, signal 160508/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5500, signal 160806/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5550, signal 161087/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5600, signal 161389/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5650, signal 161734/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5700, signal 162016/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5750, signal 163927/197684 (executing program) 2024/11/19 22:02:08 fetching corpus: 5800, signal 164207/197684 (executing program) 2024/11/19 22:02:09 fetching corpus: 5850, signal 164555/197684 (executing program) 2024/11/19 22:02:09 fetching corpus: 5900, signal 164956/197684 (executing program) 2024/11/19 22:02:09 fetching corpus: 5950, signal 165301/197684 (executing program) 2024/11/19 22:02:09 fetching corpus: 6000, signal 165638/197685 (executing program) 2024/11/19 22:02:09 fetching corpus: 6050, signal 166181/197685 (executing program) 2024/11/19 22:02:09 fetching corpus: 6100, signal 166583/197685 (executing program) 2024/11/19 22:02:09 fetching corpus: 6150, signal 167012/197685 (executing program) 2024/11/19 22:02:09 fetching corpus: 6200, signal 167337/197685 (executing program) 2024/11/19 22:02:09 fetching corpus: 6250, signal 167674/197685 (executing program) 2024/11/19 22:02:09 fetching corpus: 6300, signal 167957/197685 (executing program) 2024/11/19 22:02:09 fetching corpus: 6350, signal 168383/197685 (executing program) 2024/11/19 22:02:10 fetching corpus: 6400, signal 168749/197685 (executing program) 2024/11/19 22:02:10 fetching corpus: 6450, signal 169046/197685 (executing program) 2024/11/19 22:02:10 fetching corpus: 6500, signal 169332/197685 (executing program) 2024/11/19 22:02:10 fetching corpus: 6550, signal 169565/197685 (executing program) 2024/11/19 22:02:10 fetching corpus: 6600, signal 169915/197685 (executing program) 2024/11/19 22:02:10 fetching corpus: 6650, signal 170210/197685 (executing program) 2024/11/19 22:02:10 fetching corpus: 6700, signal 170511/197685 (executing program) 2024/11/19 22:02:10 fetching corpus: 6750, signal 170935/197685 (executing program) 2024/11/19 22:02:10 fetching corpus: 6800, signal 171145/197685 (executing program) 2024/11/19 22:02:10 fetching corpus: 6850, signal 171467/197685 (executing program) 2024/11/19 22:02:10 fetching corpus: 6900, signal 171726/197685 (executing program) 2024/11/19 22:02:11 fetching corpus: 6950, signal 171921/197685 (executing program) 2024/11/19 22:02:11 fetching corpus: 7000, signal 172199/197686 (executing program) 2024/11/19 22:02:11 fetching corpus: 7050, signal 172461/197686 (executing program) 2024/11/19 22:02:11 fetching corpus: 7100, signal 172658/197686 (executing program) 2024/11/19 22:02:11 fetching corpus: 7150, signal 172835/197686 (executing program) 2024/11/19 22:02:11 fetching corpus: 7200, signal 173138/197686 (executing program) 2024/11/19 22:02:11 fetching corpus: 7250, signal 173527/197686 (executing program) 2024/11/19 22:02:11 fetching corpus: 7300, signal 173748/197686 (executing program) 2024/11/19 22:02:11 fetching corpus: 7350, signal 174019/197686 (executing program) 2024/11/19 22:02:11 fetching corpus: 7400, signal 174292/197686 (executing program) 2024/11/19 22:02:11 fetching corpus: 7450, signal 174527/197686 (executing program) 2024/11/19 22:02:11 fetching corpus: 7500, signal 174824/197686 (executing program) 2024/11/19 22:02:11 fetching corpus: 7550, signal 175175/197686 (executing program) 2024/11/19 22:02:12 fetching corpus: 7600, signal 175375/197686 (executing program) 2024/11/19 22:02:12 fetching corpus: 7650, signal 175632/197686 (executing program) 2024/11/19 22:02:12 fetching corpus: 7700, signal 175907/197686 (executing program) 2024/11/19 22:02:12 fetching corpus: 7750, signal 176208/197686 (executing program) 2024/11/19 22:02:12 fetching corpus: 7800, signal 176501/197686 (executing program) 2024/11/19 22:02:12 fetching corpus: 7850, signal 176810/197686 (executing program) 2024/11/19 22:02:12 fetching corpus: 7900, signal 177120/197686 (executing program) 2024/11/19 22:02:12 fetching corpus: 7950, signal 177328/197686 (executing program) 2024/11/19 22:02:12 fetching corpus: 8000, signal 177712/197686 (executing program) 2024/11/19 22:02:12 fetching corpus: 8050, signal 177967/197686 (executing program) 2024/11/19 22:02:13 fetching corpus: 8100, signal 178223/197686 (executing program) 2024/11/19 22:02:13 fetching corpus: 8150, signal 178483/197686 (executing program) 2024/11/19 22:02:13 fetching corpus: 8200, signal 178663/197686 (executing program) 2024/11/19 22:02:13 fetching corpus: 8250, signal 179231/197686 (executing program) 2024/11/19 22:02:13 fetching corpus: 8300, signal 179446/197686 (executing program) 2024/11/19 22:02:13 fetching corpus: 8350, signal 179713/197686 (executing program) 2024/11/19 22:02:13 fetching corpus: 8400, signal 180044/197686 (executing program) 2024/11/19 22:02:13 fetching corpus: 8450, signal 180272/197686 (executing program) 2024/11/19 22:02:13 fetching corpus: 8500, signal 180513/197686 (executing program) 2024/11/19 22:02:13 fetching corpus: 8550, signal 180800/197686 (executing program) 2024/11/19 22:02:14 fetching corpus: 8600, signal 181088/197686 (executing program) 2024/11/19 22:02:14 fetching corpus: 8650, signal 181321/197686 (executing program) 2024/11/19 22:02:14 fetching corpus: 8700, signal 181519/197686 (executing program) 2024/11/19 22:02:14 fetching corpus: 8750, signal 181661/197686 (executing program) 2024/11/19 22:02:14 fetching corpus: 8800, signal 181970/197686 (executing program) 2024/11/19 22:02:14 fetching corpus: 8850, signal 182188/197686 (executing program) 2024/11/19 22:02:14 fetching corpus: 8900, signal 182394/197686 (executing program) 2024/11/19 22:02:14 fetching corpus: 8950, signal 182694/197686 (executing program) 2024/11/19 22:02:14 fetching corpus: 9000, signal 182973/197686 (executing program) 2024/11/19 22:02:14 fetching corpus: 9050, signal 183267/197686 (executing program) 2024/11/19 22:02:14 fetching corpus: 9100, signal 183852/197686 (executing program) 2024/11/19 22:02:15 fetching corpus: 9150, signal 184130/197686 (executing program) 2024/11/19 22:02:15 fetching corpus: 9200, signal 184278/197686 (executing program) 2024/11/19 22:02:15 fetching corpus: 9250, signal 184488/197686 (executing program) 2024/11/19 22:02:15 fetching corpus: 9300, signal 184678/197686 (executing program) 2024/11/19 22:02:15 fetching corpus: 9350, signal 184886/197686 (executing program) 2024/11/19 22:02:15 fetching corpus: 9400, signal 185107/197686 (executing program) 2024/11/19 22:02:15 fetching corpus: 9450, signal 185416/197686 (executing program) 2024/11/19 22:02:15 fetching corpus: 9500, signal 185596/197686 (executing program) 2024/11/19 22:02:15 fetching corpus: 9550, signal 185913/197686 (executing program) 2024/11/19 22:02:15 fetching corpus: 9600, signal 186087/197686 (executing program) 2024/11/19 22:02:16 fetching corpus: 9650, signal 186360/197686 (executing program) 2024/11/19 22:02:16 fetching corpus: 9700, signal 186567/197686 (executing program) 2024/11/19 22:02:16 fetching corpus: 9750, signal 186751/197686 (executing program) 2024/11/19 22:02:16 fetching corpus: 9800, signal 186927/197686 (executing program) 2024/11/19 22:02:16 fetching corpus: 9850, signal 187105/197686 (executing program) 2024/11/19 22:02:16 fetching corpus: 9900, signal 187349/197686 (executing program) 2024/11/19 22:02:16 fetching corpus: 9950, signal 187508/197686 (executing program) 2024/11/19 22:02:16 fetching corpus: 10000, signal 187702/197686 (executing program) 2024/11/19 22:02:16 fetching corpus: 10050, signal 187895/197686 (executing program) 2024/11/19 22:02:16 fetching corpus: 10100, signal 188155/197686 (executing program) 2024/11/19 22:02:17 fetching corpus: 10150, signal 188372/197686 (executing program) 2024/11/19 22:02:17 fetching corpus: 10200, signal 188586/197686 (executing program) 2024/11/19 22:02:17 fetching corpus: 10250, signal 188759/197686 (executing program) 2024/11/19 22:02:17 fetching corpus: 10300, signal 189236/197686 (executing program) 2024/11/19 22:02:17 fetching corpus: 10350, signal 189463/197686 (executing program) 2024/11/19 22:02:17 fetching corpus: 10400, signal 189629/197686 (executing program) 2024/11/19 22:02:17 fetching corpus: 10450, signal 189831/197686 (executing program) 2024/11/19 22:02:17 fetching corpus: 10500, signal 190007/197686 (executing program) 2024/11/19 22:02:17 fetching corpus: 10550, signal 190183/197686 (executing program) 2024/11/19 22:02:17 fetching corpus: 10600, signal 190547/197686 (executing program) 2024/11/19 22:02:18 fetching corpus: 10650, signal 190769/197686 (executing program) 2024/11/19 22:02:18 fetching corpus: 10700, signal 191041/197686 (executing program) 2024/11/19 22:02:18 fetching corpus: 10750, signal 191145/197686 (executing program) 2024/11/19 22:02:18 fetching corpus: 10800, signal 191327/197686 (executing program) 2024/11/19 22:02:18 fetching corpus: 10850, signal 191596/197686 (executing program) 2024/11/19 22:02:18 fetching corpus: 10900, signal 191887/197686 (executing program) 2024/11/19 22:02:18 fetching corpus: 10950, signal 192056/197686 (executing program) 2024/11/19 22:02:18 fetching corpus: 11000, signal 192209/197686 (executing program) 2024/11/19 22:02:18 fetching corpus: 11050, signal 192447/197686 (executing program) 2024/11/19 22:02:18 fetching corpus: 11100, signal 192593/197686 (executing program) 2024/11/19 22:02:19 fetching corpus: 11150, signal 193113/197686 (executing program) 2024/11/19 22:02:19 fetching corpus: 11152, signal 193123/197686 (executing program) 2024/11/19 22:02:19 fetching corpus: 11152, signal 193123/197686 (executing program) 2024/11/19 22:02:22 starting 8 fuzzer processes 22:02:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x20, 0x8, 0x3, 0x1a8da8b9, 0x9, [{0x200, 0x100000000, 0x2, '\x00', 0x800}, {0x3, 0xffffffff7fffffff, 0x0, '\x00', 0x401}, {0x80e, 0x3, 0x92e, '\x00', 0x1204}, {0x6, 0x6, 0x80000000, '\x00', 0x200}, {0x3, 0x1, 0x7, '\x00', 0x1}, {0x1, 0x8, 0x81, '\x00', 0x802}, {0x1, 0x3, 0x7, '\x00', 0x881}, {0x7, 0x4219308, 0x82d, '\x00', 0x2404}, {0x7ff, 0x6, 0x0, '\x00', 0x2080}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x200200, 0x0) pwritev2(r1, &(0x7f0000001400)=[{&(0x7f00000002c0)="5db2ab85aa28f81ae21c73c46042c2d622e136111c589b8a0c9dcc9c8736e0bd2b69608c75f04b06a795a2eac0a6e43eef1bac5304d4da88928c6e92bb70d8d0d66a935d197f8825dbee6bf866115153c7b2e7ea69dbcbc0e57cafd93b64e9370153c40f5207c4ebf81087eb25978ad7844781adad55aedd5d", 0x79}, {&(0x7f0000000340)="a105e00809caaa497dab34df2cedcec86bae1fcf7cd06a61e2f1df2b1ca7c566715bccd342d4f42141b80244d742c4da99dc31ff116bfe2a180f65066b662cd49a39b7b3e58b19977a25fd93c07b7aa73d9e423d40365b5c96b268e60cffc4465f84d0dd6dc04ef784f8ffe882e15e113ed265e93beef9c3d174fa8d93248577ed8e4e58ef3ff31a117c2917dc6e29642cb77a066cc178ff60511c5aed6b823d7f3d55d265f61f5209ded4feeecb2d3cb3fbe03c2c3d16f610", 0xb9}, {&(0x7f0000000400)="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", 0x1000}], 0x3, 0x5, 0x100, 0x12) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001440), 0x2a2800, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000001480), 0x1f, 0x50241) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000014c0)=0x101) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001500)={0x0, @vsock={0x28, 0x0, 0x2710, @local}, @l2tp={0x2, 0x0, @local, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1}}, 0x3b5, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x7, 0xb300000, 0x1f}) r4 = openat2(r2, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x111000, 0x120, 0x10}, 0x18) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000001600)) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000001640)={0x6, 0x4c3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001680)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0/file0\x00'}) signalfd(r5, &(0x7f00000016c0)={[0x9]}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@empty, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000001800)=0xe8) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f00000018c0)={{r3}, 0x0, 0x4, @inherit={0x68, &(0x7f0000001840)={0x1, 0x4, 0xfffffffffffffff9, 0xffffffffffffffe0, {0xd, 0x17826c5a, 0x80, 0x95a, 0x3800000000000}, [0x7ff, 0x1f, 0x1000, 0x3581]}}, @devid}) close_range(r1, r1, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000028c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000002cc0)={r6, 0xfff, 0x0, [0x6, 0x7fff, 0xeb05, 0xa8cd, 0x1], [0x64a6, 0x1, 0x2, 0x101, 0x971, 0x5, 0x94, 0x1, 0x3, 0x9, 0x1f, 0xffff, 0xfffffffffffffc79, 0x0, 0x101, 0x0, 0x4, 0x4, 0xefe, 0x80000000, 0x5, 0x37, 0x200, 0x5, 0x80000001, 0x6, 0x0, 0x7fff, 0x4, 0x0, 0xb2, 0xbbd9, 0x98d6, 0xed, 0x6, 0x8, 0xffff, 0x8, 0x81, 0x7ff, 0x5, 0x5, 0x20, 0xd78, 0x3f, 0xffffffffffff87dc, 0x9, 0x9, 0x3, 0x10001, 0x0, 0x7f, 0x5f50, 0x1, 0x8001, 0xe76, 0x9fb, 0xffffffffffffffe0, 0x2, 0x3, 0x8000, 0xffffffff80000000, 0x8, 0x5, 0x3, 0x4, 0x80, 0xb65, 0x99a1, 0x5, 0xff, 0x4, 0x6, 0x8, 0x8001, 0x6, 0x1, 0xd8, 0x659, 0xda12, 0x8, 0xffffffff80000000, 0xff, 0x1, 0xff, 0x7, 0x100000000, 0x5, 0x7, 0x9, 0x8, 0x8, 0x5, 0x100, 0x1f, 0x8, 0x7fffffff, 0x100000000, 0x8, 0x8, 0x7, 0x5, 0x10000, 0x0, 0x3, 0x6f7, 0x4c6, 0x81, 0xffffffffffffffff, 0x0, 0x7fff, 0x25, 0xfff, 0x4, 0x1ff, 0x6, 0x90, 0x6, 0x2, 0x7, 0x8001]}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000003100)) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x2) 22:02:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x40}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x800) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, r0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x2, 0x4, 0x0, {0x5, 0x7f, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x81, 0x9}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SSID={0x24, 0x34, @random="23356ddad9b5c2d0df13652a08ffcb4d4e2629a985a2069bf2cf7a62e5d5087f"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x34, 0x115, "43f50f9ab6e2655720d808eac1ca159cbf0670f245966f94d472983e4bd264c7a53446bb21d16deaa960de7c36b3bbe2"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_USE_RRM={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffeffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x719}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffeb80}], @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x10000}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x48850}, 0x34000180) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x6a}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x1, 0x1, 0x0, {0xfffffffffffff72c, 0x2, 0x0, 0x9, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x10001, 0x2}}, @NL80211_ATTR_CONTROL_PORT={0x4}, @chandef_params, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x0, 0x4, 0x0, {0x80000001, 0xea0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x39d}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4d83, 0x12}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x4008010) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c81) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000680), 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='smaps\x00') sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xac, r0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "637ac13fc1407f66c7ce5ed75858"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "26fb927138"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}]}]}, 0xac}}, 0x4040000) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000880), &(0x7f00000008c0)=0x10) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000900), &(0x7f0000000940), 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x108, r0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x17}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a74adcae3e35a6c7524dabaa4e8dbda991d4287c11268306"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ede03350533268a5fe5655dc56467a169d04f6767d42d953"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5040c7727f5467db80a42e3c14c56b6946af78871f592b77"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x108}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r3 = dup2(r1, r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, r0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x666a, 0x3b}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac=@broadcast, {0xb, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x64, 0x1}, @void}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x52}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket(0x29, 0x1, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000001580)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={&(0x7f0000000e80)={0x6c0, 0x7, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0x24, 0x7, 0x1, 0x0, "f0991e382bca4abc8b36c4fb9e76a3d9da64e06e5c43278166421b4d6f01f2fc"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x664, 0x4, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@lookup={{0xb}, @void}, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TUNNEL_KEY={0x8}]}}, @match={{0xa}, @void}, @byteorder={{0xe}, @void}, @queue={{0xa}, @void}, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}]}, {0x4}, {0x74, 0x1, 0x0, 0x1, [@cmp={{0x8}, @void}, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}]}, {0x98, 0x1, 0x0, 0x1, [@nat={{0x8}, @void}, @redir={{0xa}, @void}, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7f}]}}, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}]}}, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}}, @dup={{0x8}, @void}, @counter={{0xc}, @void}]}, {0x44, 0x1, 0x0, 0x1, [@masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf03cec997830df70}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xccca31d12c14e7e5}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}]}}]}, {0x11c, 0x1, 0x0, 0x1, [@hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x3107}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x10001}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xad}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x75}]}}, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}]}}, @immediate={{0xe}, @void}, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x26}]}}, @connlimit={{0xe}, @void}, @notrack={{0xc}, @void}, @ct={{0x7}, @void}, @dup_ipv4={{0x8}, @void}, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x55}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}, @xfrm={{0x9}, @void}]}, {0xe0, 0x1, 0x0, 0x1, [@meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}, @dynset={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}]}}, @socket={{0xb}, @void}, @synproxy={{0xd}, @void}, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3b}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x14}]}}, @exthdr={{0xb}, @void}]}, {0x288, 0x1, 0x0, 0x1, [@masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}]}}, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @target={{0xb}, @val={0x20c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'wlan1\x00'}, @NFTA_TARGET_INFO={0x2a, 0x3, "e26cc1d717670898aa73fd2b0b4cd67db212eb9dc919b7c45bf7f9482ba95eaf23792ef2f86e"}, @NFTA_TARGET_INFO={0xe2, 0x3, "e65c37285864ed46988e85cf3d6fa8bb1d782f2b5bc70d6d1aabd7e242097bcf49c75c5b14e6d074e09a496b51e0cf1d98dd8d81045c137edc3e6eac1d2b1d6e4cd3cec2205d776dddf94e60a0ec14ca498f2bd4d2543926322574ff9beb8ae7880436afe0e91b2a93ba951a4ad7fe739b015f9260fcff8f77f5d3776dd4b368da3756282ecf7ea87d92ebdf2376be9c64ed1c808513669d38f96bd854b477711b0e927c1e8d2766f6993514b0ae72070eedb3330cf3422816e7ac44f67c824faf51eae9393d2ea75716fbd27590431bb8d9357a6f758188f7cb93c18533"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TARGET_INFO={0xc6, 0x3, "42a1b7b08f0e3a186c048aa2ea7e36013a4c262d61e89d6b1a60f502fb5df6d6353d0a100f8ca272d51c6abf3b5c3679940b3df564bb2991b831b0d6ccbf3ec3722786c55821f0011126da7cae0dfe4ca741dbbc9c0f8e5200684980c796bdf4a673ecc1917b180552ebfa5891502f69b2307c297fc2229e98115cef7e08073c147db22b033112e6064fadb704885a4bc1adc63d8f6e63fb3aa6008ed21e156582b26b495e52b9a1caa5cac7148a7eab9c47d8bb16cec3d65d4db2a86a90d5ea5eb8"}, @NFTA_TARGET_INFO={0x6, 0x3, "67e5"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x7a}, @NFTA_TARGET_NAME={0xa, 0x1, 'wlan1\x00'}]}}, @hash={{0x9}, @void}, @numgen={{0xb}, @void}]}]}]}, 0x6c0}, 0x1, 0x0, 0x0, 0x2001c840}, 0x0) 22:02:22 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r1 = signalfd(r0, &(0x7f0000000040)={[0x10000]}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sync_file_range(0xffffffffffffffff, 0x1, 0x3ff, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0/../file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x1ffc00}}, './file0/../file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff801}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048040}, 0x80c1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40040) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0/../file0\x00'}) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000500)={'filter\x00', 0xb9, "f999107848ef184a3e9f7e997e47a3d564d3f782c60e0e27aa4d818986333d49c82feba140b2e3091bc79727e77ca012518ac6cd1f2ae4fdc760af4400e93df192a12780b2fad4c819e464f81c692375d9c4b616039d23d68beb9a1fe07916a5e45ab10ebc3b59bb25936e46e16935437eda4dedba3233b39b9475900153022e930b5d56de037a1719f7e07b67b90fa2cb5afa1a5fbadfee5f6b2797d43b14af24d4452c07fed9a2e8691e0ce9b2426ee4f390634d2a0c6660"}, &(0x7f0000000600)=0xdd) r7 = creat(&(0x7f0000000640)='./file0/../file0\x00', 0x120) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000680)=0x7, &(0x7f00000006c0)=0x2) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000700)=0x4, 0x4) lchown(&(0x7f0000000740)='./file0\x00', r3, r4) r8 = creat(&(0x7f0000000780)='./file0/../file0\x00', 0x144) r9 = openat$cgroup_subtree(r2, &(0x7f0000003040), 0x2, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r9) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000003080)={0x27f, 0x6, 0x7, 0x2, 0xac40}) 22:02:22 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x0, &(0x7f0000000080), 0x80, &(0x7f00000000c0)={[{@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_winnt}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@euid_gt={'euid>', 0xee01}}, {@obj_user}, {@fsname={'fsname', 0x3d, '#\xf6'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, '\x93@@)'}}, {@context={'context', 0x3d, 'root'}}]}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r0, &(0x7f0000000240)=""/148, 0x94) statx(r0, &(0x7f0000000300)='./file0\x00', 0x100, 0x1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_nlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)={'L-', 0x8}, 0x16, 0x0) getdents64(r0, &(0x7f0000000500)=""/245, 0xf5) setxattr$trusted_overlay_nlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)={'L+'}, 0x16, 0x1) fchown(r0, r2, r1) socket$packet(0x11, 0x0, 0x300) setxattr$trusted_overlay_nlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000740)={'L+', 0x82}, 0x16, 0x3) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x18, 0x6, 0x9, 0x8, 0x0, 0x4, 0x2004, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000780), 0x1}, 0x2, 0x7, 0x8, 0x0, 0x0, 0x6443, 0x3, 0x0, 0x8, 0x0, 0x7ff}, 0xffffffffffffffff, 0xe25, 0xffffffffffffffff, 0x8) execve(&(0x7f0000000840)='./file0\x00', &(0x7f0000000940)=[&(0x7f0000000880)='fowner', &(0x7f00000008c0)=',-]\xd5,$-:@(#\x12$@\x00', &(0x7f0000000900)='/\xe9\x00'], &(0x7f0000000a00)=[&(0x7f0000000980)='L+', &(0x7f00000009c0)='uni_xlate=0']) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000a40)={@dev={0xfe, 0x80, '\x00', 0x37}, 0xd}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000a80)={'NETMAP\x00'}, &(0x7f0000000ac0)=0x1e) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x0) r4 = fsmount(r3, 0x1, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000b40)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000b80)={0x2, 0x1}, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/bus/clocksource', 0x420480, 0x101) mount$9p_fd(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x10, &(0x7f0000000ec0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@access_any}, {@privport}], [{@obj_role={'obj_role', 0x3d, '#\xf6'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '#!'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'L+'}}, {@uid_eq}, {@fsname={'fsname', 0x3d, '/\xe9\x00'}}, {@seclabel}]}}) 22:02:22 executing program 4: lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "f42126202c2e2d29a8d9ee7004e5cde0d1bab3de"}, 0x15, 0x2) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v1={0x2, "c69c1766d0af21c84d7398e9d90727415dd103"}, 0x14, 0x3) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "d64dcfaa864726e910c4d20e89166c233769baf3"}, 0x15, 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x13b7d55d2bdb73c1, 0x150) r2 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xc801) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x10) inotify_rm_watch(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0xff, 0x1, 0x9d, 0xd9, 0x0, 0x1, 0x10111, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x0, 0x7}, 0x0, 0x2, 0x2, 0x1, 0x9, 0x9, 0x4, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r6 = inotify_init() r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x4602, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) io_submit(0x0, 0x8, &(0x7f0000000d40)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x6, r2, &(0x7f0000000380)="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", 0xfc, 0x5, 0x0, 0x2, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000004c0)="1e784374b8bd01092efaca050cbbfc6d4ea8fc89f987d7a739dc0700ff4c9478e72529099c6b7e360d1a238879590fcb3faab9292cb531473f885ec4b97dd28205db896e18d809a05b44295cfa112bb1dc1f171ee5663323611fae2f17f6c704971ecb43b19d979a55ce3e688c84f155c1e564d6d0f61164d7fe9ec25b0cd127bfe98583b045397cd39c20920162fcce4922bf64df805cf8c1f48d97cb2b310f321a946c0af2f9c47979e5df88133419e185d6071b71de99c487e3edef32bb0f0c1e1895a8f79430edb50c95ca39bf3de83d13743160186383ab279d8e4188140d13d1c5", 0xe4, 0x3, 0x0, 0x1, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x80, r1, &(0x7f0000000640)="b2c0ea04729c5a56293a9dd0ca4ca54b536443ae73e8607f8bcd0c527422fadcf7e17b7a9727b64b707f30cc50661a9e11bfb4e7e6ab1c9586f33e8a4ae895558da94641185f166e", 0x48, 0x5, 0x0, 0x2, r3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x68, r5, &(0x7f0000000780)="35122bb4ed4412202e70272c13dd763c034bc543645d83a74562f1fa2a4a12d277aa2a1d2564c20726c7cba5f23b8431bec74bb0e9efaf9b4f1fb5be65f3623864dae9d708d27c600e187d63c6c309dbeaa9ff16e0f1ad2bcb998db8b0922b61711c815ff73b82337e946997e4b42ce1fe543be7a0bd6bb4a43736a87310", 0x7e, 0xffff, 0x0, 0x2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x4, r6, &(0x7f0000000840)="06740bf413dcf21128f2734082b9b6837dba3019ad69aad3c7889138fd8069f34db515063019c1cc36f17523053bc2b9a173dd3892e5c0196da31d9a0afcc8d57276ba882b9607f0e04349ffc045484ceb4734201b9ea1c4fadc8e622437f2c4fb8f0fed8a94c35bd011a212451620a0215de6219ff1c4c65b9d22d0060f54fd7918851b056fdc64cd02c4336deaaea0150683b144a181a7a09c476ac21458bc672a2bce8698a933be6e809b06b5ff3947d1f1670c5ff06eff28c9d1abbf34231a62d60ebd2a3d3db1a2b1a084fe8372d007873adb65103454e80d0853db97064796664e577ed3986369cec2", 0xec, 0xfffffffffffffffd, 0x0, 0x3, r3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x3f, r7, &(0x7f00000009c0)="607634be170521bd2cfd12349d7bebb799070338fc2745ffeb0ffe53867389e3f0f9b24f2924f1be500db720d2d1a462f44fc4e3812f1a2fbb7e0f4f3f5b2b7ea8ac10fff4b4e0f097c13db7198099763edb1e254e75b1a9440362297b9a790fbc04e4fc7626619a76f44e14241fbe82863d10a23428036c4d432285b8a2491ac02310193bc82bed351503873acf189a1306400dae0af9677ebf5ab5038c2f37dcecc372fca9ad8ff66b4942022cdbda4623923a11a2e3b7308615e9a79e8956c95c30fa9b72048b3062a54b6f9b8449e2388c0688d6c2f53bd9dbf9c6a2f3ae03f0971a33e0b683a2f41ddfca3acd", 0xef, 0x2000000000, 0x0, 0x2, r0}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x5, 0x2400, r8, &(0x7f0000000b40)="9c7c57307c6c05aca2acee6abb21cba5992df42c4c444c757cd045c1ae28110c911cf4ccb14cc1ae5553cdcf54227733ed3d93d8e51bed23e72863cc2ef8306b7abd59bcc52a45c211a8cf9710edb5e9199b11e9624894f824937b3acdb64914725abcd368273adce988d457b4f54c002ab6bde40c4f62ac8412ed9ac4ca91685a31fc0f5aad219dbeb413a7b0ebc3a9cd7721b1e6a692ce", 0x98, 0x530, 0x0, 0x3}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x3, 0xff, r3, &(0x7f0000000c40)="60a474969ea5b1bd0adcd082efff8eb5c67a7117faebfd7259ada7220e235f958d763b422a57a773fe3bbd5bf7741dad3878c5fa82832a0202f4f63f210e5dee0edc9381921e93e754b72bc93e6725058bd817de0b106b35e475517f15e1e68c065ec14d5211b6dc150f3d1a2537fbf193288ac951e36c8251df03f29d63ea87449711e2423322d3386220b56bb94f6bb70c0bee4e37", 0x96, 0x363f, 0x0, 0x0, r0}]) inotify_add_watch(r3, &(0x7f0000000d80)='./file0\x00', 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e40)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000f40)=0xe8) r10 = getuid() mount$cgroup2(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x4420, &(0x7f0000000f80)={[{@memory_recursiveprot}, {}, {}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_recursiveprot}, {}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, r9}}, {@smackfshat}, {@uid_eq={'uid', 0x3d, r10}}]}) sendfile(r7, r1, &(0x7f00000010c0)=0x1ff, 0x3f) 22:02:22 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="95722d7d10ba4b1bcd40b0a0e6117c93b20b9f62253300184cc5720fb08f6c8c9d0adcae7d45a7ef651bedc533a7d9bf82694f173001cfc36b9d85c589dfd3982272d0c1b75ddf85dbe0ffcec133e711c5b758eaf78836efc0c50485a3ebc05f858ef288742099d19228c5c3caec0f43983db91348ecb4ddd20750f413ab31a11f64fad0e022635794b7cfdd5a95c2df394fc9f823551cfd13cf", 0x9a, r1) keyctl$instantiate(0xc, r2, 0x0, 0x0, 0xfffffffffffffff9) r3 = add_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r4, 0x1) r5 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="60cc0acab5232b4cf05363d40020bb8e7835708d21d8ba0706da5f7381b7e938232b35d7659672ff6a2da0ad981d281a86c17e4430426f841a4d58079d9fa7241a8bbdab53c4e4623866f2e567e047f775ea0cee24e9ec3b44040e1d20", 0x5d, 0xfffffffffffffffc) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r5, r3, r6, 0x1) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$link(0x8, r6, r0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$KEYCTL_MOVE(0x1e, r6, r7, r7, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000005c0)='id_resolver\x00', &(0x7f0000000600)=@chain={'key_or_keyring:', r2}) r8 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "6318580720ac41ed126bc78ca96e2f2f3e3d75a87149b4347862291e5ef7752dfefea40fa3d0a8353fd5332f28e9c460c9b933d775b5731d6ae681dd94f5d144", 0x16}, 0x48, r4) r9 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r6, r8, r9, 0x1) r10 = add_key$user(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x2}, &(0x7f0000000840)="a2af2c47652acd0f11879aa2c9af182704baed23e66d", 0x16, 0xfffffffffffffffc) keyctl$search(0xa, r10, &(0x7f0000000880)='trusted\x00', &(0x7f00000008c0)={'syz', 0x0}, 0x0) [ 149.112040] audit: type=1400 audit(1732053742.194:7): avc: denied { execmem } for pid=270 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:02:22 executing program 6: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x8cea, 0x7ff, 0x80000001}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x8081) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x448800, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000200)={0x2, 0xf6, &(0x7f0000000100)="eee0f015f6462c352d74ef1e5c4862fe0f619d225db9f8bbab866921d5f5c9fcd325cd3656faaeb7c87668508bdce69caed4421c6f88ceff0deba1d646b338e21cecd862a0cc9552bae62700bd4ce4830afc316f9f592f77a9dabb815e24a0c3ebaae71d0b5a33acc2be967ea24d2611cd618b08c6f6dddf822594a09d39928a8ac10e826f4559c20a3af00d331aac96d1f4228a58ad19ae780c1bacc2c3cb07d6d124220f488ee0f01bc9585a2c56d55172eddf3301f38300a8e5ded03fdde85cf1f430e4180ae75bed41c0a9095203168bedbfb489106d170337f3a6781f1f946ae74941cf5c0c172ae28b6466e6a70d5fbdd7d6b8"}) close(r1) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/186) ioctl$VT_DISALLOCATE(r2, 0x5608) close_range(r1, r0, 0x0) r3 = syz_open_pts(r1, 0x241800) write(r3, &(0x7f0000000300)="75b5d7ac144d3aff4ee87133ea4565", 0xf) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/7) r4 = syz_mount_image$msdos(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x800, 0x1, &(0x7f0000000480)=[{&(0x7f0000000400)="d8ce62d22c4532ff46031195eeb18edfc7d1ae199666d8939e1e17819df8d075cbba5676c636ce11a5b8313d2c751d0ba5448cf220cbcd391a6119c67f74ed70bdcae1eb3259b765543144e91baaa3e710c642a6ef2019da61de31a5b965d34452", 0x61, 0x267bc4ca}], 0x86898, &(0x7f00000004c0)={[{@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}, {@dots}, {@dots}, {@fat=@nfs_nostale_ro}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/input/event#\x00'}}, {@smackfsdef}, {@pcr={'pcr', 0x3d, 0x2d}}, {@uid_lt={'uid<', 0xee01}}, {@subj_role={'subj_role', 0x3d, '^$}[$['}}, {@obj_user={'obj_user', 0x3d, '/)'}}]}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) fstat(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000000680)='./file0\x00', 0x800, 0x7ff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0), 0x1002, &(0x7f00000007c0)={[{@noprefix}, {}, {@xattr}, {@cpuset_v2_mode}, {}], [{@fsname}, {@dont_appraise}, {@subj_user}, {@euid_eq={'euid', 0x3d, r5}}, {@pcr={'pcr', 0x3d, 0x3}}, {@euid_lt={'euid<', 0xee01}}, {@uid_gt={'uid>', r6}}, {@euid_gt={'euid>', 0xee00}}]}) sendfile(r0, r3, &(0x7f00000008c0)=0x6, 0x5) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000900)) 22:02:22 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9b5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/114, 0x72}, {&(0x7f0000000100)=""/158, 0x9e}, {&(0x7f00000001c0)=""/71, 0x47}], 0x3) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x13) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = openat$incfs(r1, &(0x7f00000002c0)='.pending_reads\x00', 0x2, 0x113) openat(r4, &(0x7f0000000300)='./file0\x00', 0x2401, 0x144) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000340)) pwrite64(r0, &(0x7f0000000380)="15fa5ab0537bbf03d0f2f85be9a77dcb0480f9434b4ac2feb4e6a02fd2ff32e9e7d00bb0ed26f1e5fab7d08598fa66dca4c7c2ff2efc55c816f4557832ad3f5a1ac43da4d30230e1344ec493bcab2d8a16d927517c24d0ab59442742a90ccbbfd691d53a68b7c3514fc83078ec9fe707", 0x70, 0x4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000400)) sendfile(0xffffffffffffffff, r0, &(0x7f0000000440)=0x3062, 0x6a3) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000480)={0x3f, 0x3, 0x100, 0x0, 0x39}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000004c0)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000500)={0x0, 0x1, r1, 0x6e}) openat(r4, &(0x7f0000000540)='./file0\x00', 0x82, 0x106) statx(r1, &(0x7f0000000580)='./file0\x00', 0x1000, 0x200, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, r6) openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x84200, 0x1b) [ 150.491812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.493976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.495428] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.499651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.501933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.503339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.562713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.566563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.568417] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.573168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.578732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.580647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.584952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.587590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.591318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.594102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.599189] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.600670] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.629733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.634525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.640090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.641804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.650274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.660224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.660244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.670269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.672143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.672252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.673312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.675257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.720687] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.727213] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.729262] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.731309] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.734706] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.743085] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.744453] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.748093] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.749698] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.756233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.758673] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.761083] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.764164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.766069] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.780179] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.781745] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.786334] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.789244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.588398] Bluetooth: hci0: command tx timeout [ 152.652145] Bluetooth: hci2: command tx timeout [ 152.653282] Bluetooth: hci1: command tx timeout [ 152.715033] Bluetooth: hci4: command tx timeout [ 152.779147] Bluetooth: hci3: command tx timeout [ 152.843143] Bluetooth: hci6: command tx timeout [ 152.844394] Bluetooth: hci7: command tx timeout [ 152.845494] Bluetooth: hci5: command tx timeout [ 154.635130] Bluetooth: hci0: command tx timeout [ 154.699003] Bluetooth: hci1: command tx timeout [ 154.699617] Bluetooth: hci2: command tx timeout [ 154.764024] Bluetooth: hci4: command tx timeout [ 154.828911] Bluetooth: hci3: command tx timeout [ 154.891060] Bluetooth: hci6: command tx timeout [ 154.891577] Bluetooth: hci7: command tx timeout [ 154.892085] Bluetooth: hci5: command tx timeout [ 156.684921] Bluetooth: hci0: command tx timeout [ 156.746979] Bluetooth: hci2: command tx timeout [ 156.747509] Bluetooth: hci1: command tx timeout [ 156.810930] Bluetooth: hci4: command tx timeout [ 156.876136] Bluetooth: hci3: command tx timeout [ 156.939980] Bluetooth: hci5: command tx timeout [ 156.940495] Bluetooth: hci7: command tx timeout [ 156.940532] Bluetooth: hci6: command tx timeout [ 158.732035] Bluetooth: hci0: command tx timeout [ 158.796944] Bluetooth: hci1: command tx timeout [ 158.797449] Bluetooth: hci2: command tx timeout [ 158.858935] Bluetooth: hci4: command tx timeout [ 158.924960] Bluetooth: hci3: command tx timeout [ 158.986992] Bluetooth: hci6: command tx timeout [ 158.989905] Bluetooth: hci5: command tx timeout [ 158.990076] Bluetooth: hci7: command tx timeout [ 209.980651] syz-executor.0 (282) used greatest stack depth: 23728 bytes left [ 212.379498] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.382244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.389757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.397778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.402136] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.405332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.694613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.701268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.705588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.711681] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.716165] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.718337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.767373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.784164] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.788236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.833799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.837589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.845262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.847606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.850606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.871212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.877919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.881268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.898437] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.920285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.923029] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.924742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.929103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.931759] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.933619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.975194] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.044317] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.074282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.106179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.107489] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.109707] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.119879] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.121379] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.133450] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.134773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.143027] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.145082] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.152549] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.303702] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.308059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.311600] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.318956] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.394265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.474958] Bluetooth: hci0: command tx timeout [ 214.796049] Bluetooth: hci1: command tx timeout [ 214.924180] Bluetooth: hci2: command tx timeout [ 214.987917] Bluetooth: hci4: command tx timeout [ 215.051159] Bluetooth: hci3: command tx timeout [ 215.371930] Bluetooth: hci6: command tx timeout [ 215.435077] Bluetooth: hci5: command tx timeout [ 215.498931] Bluetooth: hci7: command tx timeout [ 216.522947] Bluetooth: hci0: command tx timeout [ 216.843096] Bluetooth: hci1: command tx timeout [ 216.970959] Bluetooth: hci2: command tx timeout [ 217.035074] Bluetooth: hci4: command tx timeout [ 217.099146] Bluetooth: hci3: command tx timeout [ 217.418960] Bluetooth: hci6: command tx timeout [ 217.482993] Bluetooth: hci5: command tx timeout [ 217.547405] Bluetooth: hci7: command tx timeout [ 218.570947] Bluetooth: hci0: command tx timeout [ 218.891098] Bluetooth: hci1: command tx timeout [ 219.018905] Bluetooth: hci2: command tx timeout [ 219.084877] Bluetooth: hci4: command tx timeout [ 219.147072] Bluetooth: hci3: command tx timeout [ 219.466927] Bluetooth: hci6: command tx timeout [ 219.531580] Bluetooth: hci5: command tx timeout [ 219.594914] Bluetooth: hci7: command tx timeout [ 220.620897] Bluetooth: hci0: command tx timeout [ 220.938919] Bluetooth: hci1: command tx timeout [ 221.066928] Bluetooth: hci2: command tx timeout [ 221.131038] Bluetooth: hci4: command tx timeout [ 221.195903] Bluetooth: hci3: command tx timeout [ 221.515051] Bluetooth: hci6: command tx timeout [ 221.578903] Bluetooth: hci5: command tx timeout [ 221.642901] Bluetooth: hci7: command tx timeout [ 274.585629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.593065] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.596179] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.604426] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.609372] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.613291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.906202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.911260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.913588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.919550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.925456] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.927562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.971474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.974366] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.976475] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.998756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.005215] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.007703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.108131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.111230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.116574] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.121297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.124430] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.127304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.189571] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.195790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.201466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.206579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.237763] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.239418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.250310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.269137] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.272357] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.274642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.280248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.284041] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.286449] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.288680] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.329229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.330619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.336170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.339139] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.366306] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.383665] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.383766] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.389207] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.391677] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.414453] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.682924] Bluetooth: hci0: command tx timeout [ 277.004113] Bluetooth: hci1: command tx timeout [ 277.066916] Bluetooth: hci2: command tx timeout [ 277.197866] Bluetooth: hci4: command tx timeout [ 277.323030] Bluetooth: hci7: command tx timeout [ 277.451008] Bluetooth: hci3: command tx timeout [ 277.514899] Bluetooth: hci5: command tx timeout [ 277.578917] Bluetooth: hci6: command tx timeout [ 278.730928] Bluetooth: hci0: command tx timeout [ 279.051022] Bluetooth: hci1: command tx timeout [ 279.116858] Bluetooth: hci2: command tx timeout [ 279.243114] Bluetooth: hci4: command tx timeout [ 279.372052] Bluetooth: hci7: command tx timeout [ 279.500434] Bluetooth: hci3: command tx timeout [ 279.563939] Bluetooth: hci5: command tx timeout [ 279.626994] Bluetooth: hci6: command tx timeout [ 280.780056] Bluetooth: hci0: command tx timeout [ 281.099921] Bluetooth: hci1: command tx timeout [ 281.164951] Bluetooth: hci2: command tx timeout [ 281.291979] Bluetooth: hci4: command tx timeout [ 281.420909] Bluetooth: hci7: command tx timeout [ 281.547903] Bluetooth: hci3: command tx timeout [ 281.611979] Bluetooth: hci5: command tx timeout [ 281.674933] Bluetooth: hci6: command tx timeout [ 282.827996] Bluetooth: hci0: command tx timeout [ 283.147985] Bluetooth: hci1: command tx timeout [ 283.211919] Bluetooth: hci2: command tx timeout [ 283.340237] Bluetooth: hci4: command tx timeout [ 283.467978] Bluetooth: hci7: command tx timeout [ 283.595895] Bluetooth: hci3: command tx timeout [ 283.661852] Bluetooth: hci5: command tx timeout [ 283.723981] Bluetooth: hci6: command tx timeout [ 336.861714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.867531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.875342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.881048] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.887524] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.890093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.325949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.329176] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.337610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.346206] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.349638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.352228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.357274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.360162] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.362335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.374213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.378034] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.380175] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.431013] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.464051] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.474349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.506747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.509007] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.518311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.525189] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.531435] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.534140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.594409] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.636035] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.641090] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.649289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.669715] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.676183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.679132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.689599] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.708255] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.716437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.720393] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.730174] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.743156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.782621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.788187] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.790501] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.815483] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.818189] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.850497] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.864174] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.871125] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.955053] Bluetooth: hci0: command tx timeout [ 339.403013] Bluetooth: hci1: command tx timeout [ 339.466922] Bluetooth: hci2: command tx timeout [ 339.659164] Bluetooth: hci3: command tx timeout [ 339.722910] Bluetooth: hci4: command tx timeout [ 339.851298] Bluetooth: hci6: command tx timeout [ 339.852883] Bluetooth: hci5: command tx timeout [ 339.979170] Bluetooth: hci7: command tx timeout [ 341.003039] Bluetooth: hci0: command tx timeout [ 341.451930] Bluetooth: hci1: command tx timeout [ 341.515910] Bluetooth: hci2: command tx timeout [ 341.708078] Bluetooth: hci3: command tx timeout [ 341.773025] Bluetooth: hci4: command tx timeout [ 341.901050] Bluetooth: hci5: command tx timeout [ 341.901171] Bluetooth: hci6: command tx timeout [ 342.027954] Bluetooth: hci7: command tx timeout [ 343.052955] Bluetooth: hci0: command tx timeout [ 343.499111] Bluetooth: hci1: command tx timeout [ 343.563088] Bluetooth: hci2: command tx timeout [ 343.757036] Bluetooth: hci3: command tx timeout [ 343.818946] Bluetooth: hci4: command tx timeout [ 343.947151] Bluetooth: hci6: command tx timeout [ 343.948051] Bluetooth: hci5: command tx timeout [ 344.074927] Bluetooth: hci7: command tx timeout [ 345.098911] Bluetooth: hci0: command tx timeout [ 345.546906] Bluetooth: hci1: command tx timeout [ 345.610911] Bluetooth: hci2: command tx timeout [ 345.802953] Bluetooth: hci3: command tx timeout [ 345.866928] Bluetooth: hci4: command tx timeout [ 345.994891] Bluetooth: hci5: command tx timeout [ 345.996094] Bluetooth: hci6: command tx timeout [ 346.123906] Bluetooth: hci7: command tx timeout [ 400.030277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 400.033396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 400.036604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 400.044617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 400.048068] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 400.050762] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 400.280232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 400.286898] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 400.300145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 400.305732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 400.310416] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 400.321178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.325224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.327720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.330592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.337955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.346292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.355180] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 400.359251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.365194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.369748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.374376] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.378259] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 400.380603] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 400.382618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.384642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.395436] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.409625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.414009] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.416321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.418769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 400.422171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 400.424044] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.426262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.430302] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 400.432674] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 400.434132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.442387] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 400.444317] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.446882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 400.447451] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 400.449436] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 400.451747] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.458507] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 400.461097] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 400.514498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 400.523552] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 400.535412] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 402.124859] Bluetooth: hci0: command tx timeout [ 402.442999] Bluetooth: hci1: command tx timeout [ 402.507871] Bluetooth: hci4: command tx timeout [ 402.508438] Bluetooth: hci3: command tx timeout [ 402.570918] Bluetooth: hci2: command tx timeout [ 402.571883] Bluetooth: hci6: command tx timeout [ 402.572416] Bluetooth: hci5: command tx timeout [ 402.635860] Bluetooth: hci7: command tx timeout [ 404.170901] Bluetooth: hci0: command tx timeout [ 404.491925] Bluetooth: hci1: command tx timeout [ 404.554953] Bluetooth: hci3: command tx timeout [ 404.555406] Bluetooth: hci4: command tx timeout [ 404.619147] Bluetooth: hci5: command tx timeout [ 404.620231] Bluetooth: hci6: command tx timeout [ 404.621897] Bluetooth: hci2: command tx timeout [ 404.684699] Bluetooth: hci7: command tx timeout [ 406.220876] Bluetooth: hci0: command tx timeout [ 406.540027] Bluetooth: hci1: command tx timeout [ 406.603923] Bluetooth: hci3: command tx timeout [ 406.604492] Bluetooth: hci4: command tx timeout [ 406.668126] Bluetooth: hci5: command tx timeout [ 406.668667] Bluetooth: hci6: command tx timeout [ 406.669902] Bluetooth: hci2: command tx timeout [ 406.732817] Bluetooth: hci7: command tx timeout [ 408.268022] Bluetooth: hci0: command tx timeout [ 408.586890] Bluetooth: hci1: command tx timeout [ 408.651088] Bluetooth: hci4: command tx timeout [ 408.651923] Bluetooth: hci3: command tx timeout [ 408.714950] Bluetooth: hci6: command tx timeout [ 408.715599] Bluetooth: hci5: command tx timeout [ 408.716328] Bluetooth: hci2: command tx timeout [ 408.779511] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:07:29 Registers: info registers vcpu 0 RAX=ffff88806ce43430 RBX=ffff88800c56fa00 RCX=ffffea0000315bc0 RDX=000000000027d400 RSI=ffff88800c56fa00 RDI=ffff8880096a1280 RBP=ffff88803189f580 RSP=ffff88803189f578 R8 =ffff88802d703c00 R9 =ffffffff818c036b R10=ffffea0000315bc0 R11=0000000000000000 R12=0000000000000000 R13=ffff88803189f5c8 R14=ffff88800c56fa00 R15=ffff88800c56fa00 RIP=ffffffff8184f65c RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a40add5040 CR3=000000003185c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff8682fbe1 RBX=0000000000000001 RCX=ffffffff8682fbde RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8682fbe0 RBP=ffff88802d71efe8 RSP=ffff88802d71ef20 R8 =0000000000000001 R9 =ffff88802d71efd0 R10=000000000003c001 R11=0000000000021ab5 R12=ffff88802d71eff0 R13=ffff88802d71efd8 R14=ffff88802d71f958 R15=ffff88802d71ef90 RIP=ffffffff8114acb1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdd284b08e0 CR3=000000002b118000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000