syzkaller login: [   66.213870] sshd (231) used greatest stack depth: 24216 bytes left
Warning: Permanently added '[localhost]:29479' (ECDSA) to the list of known hosts.
2025/01/17 05:54:04 fuzzer started
2025/01/17 05:54:05 dialing manager at localhost:45115
[   69.136873] cgroup: Unknown subsys name 'net'
[   69.221505] cgroup: Unknown subsys name 'cpuset'
[   69.247131] cgroup: Unknown subsys name 'rlimit'
[   74.465239] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/17 05:54:21 syscalls: 2217
2025/01/17 05:54:21 code coverage: enabled
2025/01/17 05:54:21 comparison tracing: enabled
2025/01/17 05:54:21 extra coverage: enabled
2025/01/17 05:54:21 setuid sandbox: enabled
2025/01/17 05:54:21 namespace sandbox: enabled
2025/01/17 05:54:21 Android sandbox: enabled
2025/01/17 05:54:21 fault injection: enabled
2025/01/17 05:54:21 leak checking: enabled
2025/01/17 05:54:21 net packet injection: enabled
2025/01/17 05:54:21 net device setup: enabled
2025/01/17 05:54:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/17 05:54:21 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/17 05:54:21 USB emulation: enabled
2025/01/17 05:54:21 hci packet injection: enabled
2025/01/17 05:54:21 wifi device emulation: enabled
2025/01/17 05:54:21 802.15.4 emulation: enabled
2025/01/17 05:54:21 fetching corpus: 50, signal 19477/21298 (executing program)
2025/01/17 05:54:21 fetching corpus: 100, signal 28784/32220 (executing program)
2025/01/17 05:54:21 fetching corpus: 150, signal 39441/44329 (executing program)
2025/01/17 05:54:21 fetching corpus: 200, signal 45375/51677 (executing program)
2025/01/17 05:54:22 fetching corpus: 250, signal 51446/59057 (executing program)
2025/01/17 05:54:22 fetching corpus: 300, signal 54710/63644 (executing program)
2025/01/17 05:54:22 fetching corpus: 350, signal 58562/68754 (executing program)
2025/01/17 05:54:22 fetching corpus: 400, signal 62321/73642 (executing program)
2025/01/17 05:54:22 fetching corpus: 450, signal 65119/77627 (executing program)
2025/01/17 05:54:22 fetching corpus: 500, signal 69629/83084 (executing program)
2025/01/17 05:54:22 fetching corpus: 550, signal 73802/88185 (executing program)
2025/01/17 05:54:22 fetching corpus: 600, signal 75532/91060 (executing program)
2025/01/17 05:54:22 fetching corpus: 650, signal 77201/93805 (executing program)
2025/01/17 05:54:22 fetching corpus: 700, signal 79309/96879 (executing program)
2025/01/17 05:54:22 fetching corpus: 750, signal 81529/100044 (executing program)
2025/01/17 05:54:22 fetching corpus: 800, signal 83447/102906 (executing program)
2025/01/17 05:54:22 fetching corpus: 850, signal 84981/105438 (executing program)
2025/01/17 05:54:23 fetching corpus: 900, signal 87834/109006 (executing program)
2025/01/17 05:54:23 fetching corpus: 950, signal 89432/111486 (executing program)
2025/01/17 05:54:23 fetching corpus: 1000, signal 90617/113636 (executing program)
2025/01/17 05:54:23 fetching corpus: 1050, signal 93915/117508 (executing program)
2025/01/17 05:54:23 fetching corpus: 1100, signal 95405/119773 (executing program)
2025/01/17 05:54:23 fetching corpus: 1150, signal 97502/122501 (executing program)
2025/01/17 05:54:23 fetching corpus: 1200, signal 100729/126044 (executing program)
2025/01/17 05:54:23 fetching corpus: 1250, signal 102619/128552 (executing program)
2025/01/17 05:54:23 fetching corpus: 1300, signal 104090/130693 (executing program)
2025/01/17 05:54:23 fetching corpus: 1350, signal 105335/132693 (executing program)
2025/01/17 05:54:24 fetching corpus: 1400, signal 106690/134709 (executing program)
2025/01/17 05:54:24 fetching corpus: 1450, signal 108496/137038 (executing program)
2025/01/17 05:54:24 fetching corpus: 1500, signal 109373/138659 (executing program)
2025/01/17 05:54:24 fetching corpus: 1550, signal 110354/140377 (executing program)
2025/01/17 05:54:24 fetching corpus: 1600, signal 112382/142750 (executing program)
2025/01/17 05:54:24 fetching corpus: 1650, signal 113603/144515 (executing program)
2025/01/17 05:54:24 fetching corpus: 1700, signal 114700/146178 (executing program)
2025/01/17 05:54:24 fetching corpus: 1750, signal 117711/149205 (executing program)
2025/01/17 05:54:24 fetching corpus: 1800, signal 118976/150932 (executing program)
2025/01/17 05:54:25 fetching corpus: 1850, signal 120532/152777 (executing program)
2025/01/17 05:54:25 fetching corpus: 1900, signal 121669/154377 (executing program)
2025/01/17 05:54:25 fetching corpus: 1950, signal 122409/155711 (executing program)
2025/01/17 05:54:25 fetching corpus: 2000, signal 123096/157018 (executing program)
2025/01/17 05:54:25 fetching corpus: 2050, signal 123623/158164 (executing program)
2025/01/17 05:54:25 fetching corpus: 2100, signal 124799/159737 (executing program)
2025/01/17 05:54:25 fetching corpus: 2150, signal 125857/161190 (executing program)
2025/01/17 05:54:25 fetching corpus: 2200, signal 126424/162334 (executing program)
2025/01/17 05:54:25 fetching corpus: 2250, signal 127148/163521 (executing program)
2025/01/17 05:54:25 fetching corpus: 2300, signal 127962/164784 (executing program)
2025/01/17 05:54:25 fetching corpus: 2350, signal 128979/166172 (executing program)
2025/01/17 05:54:25 fetching corpus: 2400, signal 129581/167250 (executing program)
2025/01/17 05:54:25 fetching corpus: 2450, signal 130231/168359 (executing program)
2025/01/17 05:54:26 fetching corpus: 2500, signal 131031/169598 (executing program)
2025/01/17 05:54:26 fetching corpus: 2550, signal 132266/170975 (executing program)
2025/01/17 05:54:26 fetching corpus: 2600, signal 133761/172478 (executing program)
2025/01/17 05:54:26 fetching corpus: 2650, signal 135055/173870 (executing program)
2025/01/17 05:54:26 fetching corpus: 2700, signal 136264/175202 (executing program)
2025/01/17 05:54:26 fetching corpus: 2750, signal 136962/176304 (executing program)
2025/01/17 05:54:26 fetching corpus: 2800, signal 137617/177315 (executing program)
2025/01/17 05:54:26 fetching corpus: 2850, signal 138383/178368 (executing program)
2025/01/17 05:54:26 fetching corpus: 2900, signal 138904/179291 (executing program)
2025/01/17 05:54:26 fetching corpus: 2950, signal 139741/180380 (executing program)
2025/01/17 05:54:27 fetching corpus: 3000, signal 140591/181429 (executing program)
2025/01/17 05:54:27 fetching corpus: 3050, signal 141235/182382 (executing program)
2025/01/17 05:54:27 fetching corpus: 3100, signal 141962/183377 (executing program)
2025/01/17 05:54:27 fetching corpus: 3150, signal 143188/184558 (executing program)
2025/01/17 05:54:27 fetching corpus: 3200, signal 144047/185568 (executing program)
2025/01/17 05:54:27 fetching corpus: 3250, signal 144801/186483 (executing program)
2025/01/17 05:54:27 fetching corpus: 3300, signal 145518/187383 (executing program)
2025/01/17 05:54:27 fetching corpus: 3350, signal 145968/188192 (executing program)
2025/01/17 05:54:27 fetching corpus: 3400, signal 146422/188953 (executing program)
2025/01/17 05:54:28 fetching corpus: 3450, signal 147245/189884 (executing program)
2025/01/17 05:54:28 fetching corpus: 3500, signal 147723/190630 (executing program)
2025/01/17 05:54:28 fetching corpus: 3550, signal 148495/191520 (executing program)
2025/01/17 05:54:28 fetching corpus: 3600, signal 149482/192448 (executing program)
2025/01/17 05:54:28 fetching corpus: 3650, signal 150043/193226 (executing program)
2025/01/17 05:54:28 fetching corpus: 3700, signal 150512/193974 (executing program)
2025/01/17 05:54:28 fetching corpus: 3750, signal 151215/194807 (executing program)
2025/01/17 05:54:28 fetching corpus: 3800, signal 151537/195505 (executing program)
2025/01/17 05:54:28 fetching corpus: 3850, signal 152009/196191 (executing program)
2025/01/17 05:54:28 fetching corpus: 3900, signal 152393/196892 (executing program)
2025/01/17 05:54:29 fetching corpus: 3950, signal 152846/197598 (executing program)
2025/01/17 05:54:29 fetching corpus: 4000, signal 153298/198265 (executing program)
2025/01/17 05:54:29 fetching corpus: 4050, signal 153787/198918 (executing program)
2025/01/17 05:54:29 fetching corpus: 4100, signal 154301/199599 (executing program)
2025/01/17 05:54:29 fetching corpus: 4150, signal 154633/200247 (executing program)
2025/01/17 05:54:29 fetching corpus: 4200, signal 155023/200863 (executing program)
2025/01/17 05:54:29 fetching corpus: 4250, signal 155506/201518 (executing program)
2025/01/17 05:54:29 fetching corpus: 4300, signal 156060/202166 (executing program)
2025/01/17 05:54:29 fetching corpus: 4350, signal 156705/202809 (executing program)
2025/01/17 05:54:29 fetching corpus: 4400, signal 157020/203386 (executing program)
2025/01/17 05:54:30 fetching corpus: 4450, signal 157644/203985 (executing program)
2025/01/17 05:54:30 fetching corpus: 4500, signal 158256/204580 (executing program)
2025/01/17 05:54:30 fetching corpus: 4550, signal 158788/205161 (executing program)
2025/01/17 05:54:30 fetching corpus: 4600, signal 159431/205752 (executing program)
2025/01/17 05:54:30 fetching corpus: 4650, signal 159917/206301 (executing program)
2025/01/17 05:54:30 fetching corpus: 4700, signal 160249/206840 (executing program)
2025/01/17 05:54:30 fetching corpus: 4750, signal 160692/207365 (executing program)
2025/01/17 05:54:30 fetching corpus: 4800, signal 161345/207918 (executing program)
2025/01/17 05:54:30 fetching corpus: 4850, signal 161680/208446 (executing program)
2025/01/17 05:54:31 fetching corpus: 4900, signal 161947/208985 (executing program)
2025/01/17 05:54:31 fetching corpus: 4950, signal 162673/209511 (executing program)
2025/01/17 05:54:31 fetching corpus: 5000, signal 163309/210040 (executing program)
2025/01/17 05:54:31 fetching corpus: 5050, signal 163759/210524 (executing program)
2025/01/17 05:54:31 fetching corpus: 5100, signal 164407/211036 (executing program)
2025/01/17 05:54:31 fetching corpus: 5150, signal 164787/211500 (executing program)
2025/01/17 05:54:31 fetching corpus: 5200, signal 165096/211943 (executing program)
2025/01/17 05:54:31 fetching corpus: 5250, signal 165582/212393 (executing program)
2025/01/17 05:54:31 fetching corpus: 5300, signal 165984/212871 (executing program)
2025/01/17 05:54:31 fetching corpus: 5350, signal 166456/213105 (executing program)
2025/01/17 05:54:32 fetching corpus: 5400, signal 166785/213105 (executing program)
2025/01/17 05:54:32 fetching corpus: 5450, signal 167129/213105 (executing program)
2025/01/17 05:54:32 fetching corpus: 5500, signal 167878/213105 (executing program)
2025/01/17 05:54:32 fetching corpus: 5550, signal 168212/213105 (executing program)
2025/01/17 05:54:32 fetching corpus: 5600, signal 168609/213105 (executing program)
2025/01/17 05:54:32 fetching corpus: 5650, signal 169116/213105 (executing program)
2025/01/17 05:54:32 fetching corpus: 5700, signal 169470/213105 (executing program)
2025/01/17 05:54:32 fetching corpus: 5750, signal 169863/213105 (executing program)
2025/01/17 05:54:33 fetching corpus: 5800, signal 170322/213105 (executing program)
2025/01/17 05:54:33 fetching corpus: 5850, signal 170724/213105 (executing program)
2025/01/17 05:54:33 fetching corpus: 5900, signal 171127/213105 (executing program)
2025/01/17 05:54:33 fetching corpus: 5950, signal 171425/213105 (executing program)
2025/01/17 05:54:33 fetching corpus: 6000, signal 171827/213105 (executing program)
2025/01/17 05:54:33 fetching corpus: 6050, signal 172103/213105 (executing program)
2025/01/17 05:54:33 fetching corpus: 6100, signal 173037/213105 (executing program)
2025/01/17 05:54:33 fetching corpus: 6150, signal 173311/213105 (executing program)
2025/01/17 05:54:33 fetching corpus: 6200, signal 173547/213105 (executing program)
2025/01/17 05:54:34 fetching corpus: 6250, signal 173951/213105 (executing program)
2025/01/17 05:54:34 fetching corpus: 6300, signal 174460/213105 (executing program)
2025/01/17 05:54:34 fetching corpus: 6350, signal 174898/213105 (executing program)
2025/01/17 05:54:34 fetching corpus: 6400, signal 175155/213105 (executing program)
2025/01/17 05:54:34 fetching corpus: 6450, signal 175525/213105 (executing program)
2025/01/17 05:54:34 fetching corpus: 6500, signal 175912/213105 (executing program)
2025/01/17 05:54:34 fetching corpus: 6550, signal 176170/213105 (executing program)
2025/01/17 05:54:34 fetching corpus: 6600, signal 176484/213105 (executing program)
2025/01/17 05:54:34 fetching corpus: 6650, signal 176924/213105 (executing program)
2025/01/17 05:54:34 fetching corpus: 6700, signal 177354/213105 (executing program)
2025/01/17 05:54:35 fetching corpus: 6750, signal 177613/213105 (executing program)
2025/01/17 05:54:35 fetching corpus: 6800, signal 177968/213105 (executing program)
2025/01/17 05:54:35 fetching corpus: 6850, signal 178552/213105 (executing program)
2025/01/17 05:54:35 fetching corpus: 6900, signal 178837/213105 (executing program)
2025/01/17 05:54:35 fetching corpus: 6950, signal 179087/213105 (executing program)
2025/01/17 05:54:35 fetching corpus: 7000, signal 179338/213105 (executing program)
2025/01/17 05:54:35 fetching corpus: 7050, signal 179773/213105 (executing program)
2025/01/17 05:54:35 fetching corpus: 7100, signal 180184/213105 (executing program)
2025/01/17 05:54:35 fetching corpus: 7150, signal 180596/213105 (executing program)
2025/01/17 05:54:35 fetching corpus: 7200, signal 180841/213105 (executing program)
2025/01/17 05:54:36 fetching corpus: 7250, signal 181065/213105 (executing program)
2025/01/17 05:54:36 fetching corpus: 7300, signal 181417/213105 (executing program)
2025/01/17 05:54:36 fetching corpus: 7350, signal 181896/213105 (executing program)
2025/01/17 05:54:36 fetching corpus: 7400, signal 182176/213105 (executing program)
2025/01/17 05:54:36 fetching corpus: 7450, signal 182626/213105 (executing program)
2025/01/17 05:54:36 fetching corpus: 7500, signal 182861/213105 (executing program)
2025/01/17 05:54:36 fetching corpus: 7550, signal 183099/213105 (executing program)
2025/01/17 05:54:36 fetching corpus: 7600, signal 183330/213105 (executing program)
2025/01/17 05:54:36 fetching corpus: 7650, signal 183640/213105 (executing program)
2025/01/17 05:54:37 fetching corpus: 7700, signal 183880/213105 (executing program)
2025/01/17 05:54:37 fetching corpus: 7750, signal 184139/213105 (executing program)
2025/01/17 05:54:37 fetching corpus: 7800, signal 184525/213114 (executing program)
2025/01/17 05:54:37 fetching corpus: 7850, signal 184822/213114 (executing program)
2025/01/17 05:54:37 fetching corpus: 7900, signal 185139/213114 (executing program)
2025/01/17 05:54:37 fetching corpus: 7950, signal 185489/213114 (executing program)
2025/01/17 05:54:37 fetching corpus: 8000, signal 185792/213114 (executing program)
2025/01/17 05:54:38 fetching corpus: 8050, signal 186022/213114 (executing program)
2025/01/17 05:54:38 fetching corpus: 8100, signal 186367/213114 (executing program)
2025/01/17 05:54:38 fetching corpus: 8150, signal 186613/213114 (executing program)
2025/01/17 05:54:38 fetching corpus: 8200, signal 186843/213114 (executing program)
2025/01/17 05:54:38 fetching corpus: 8250, signal 187321/213114 (executing program)
2025/01/17 05:54:38 fetching corpus: 8300, signal 187565/213114 (executing program)
2025/01/17 05:54:38 fetching corpus: 8350, signal 188125/213114 (executing program)
2025/01/17 05:54:38 fetching corpus: 8400, signal 188441/213114 (executing program)
2025/01/17 05:54:38 fetching corpus: 8450, signal 188743/213114 (executing program)
2025/01/17 05:54:39 fetching corpus: 8500, signal 188976/213114 (executing program)
2025/01/17 05:54:39 fetching corpus: 8550, signal 189367/213114 (executing program)
2025/01/17 05:54:39 fetching corpus: 8600, signal 189607/213114 (executing program)
2025/01/17 05:54:39 fetching corpus: 8650, signal 189774/213114 (executing program)
2025/01/17 05:54:39 fetching corpus: 8700, signal 189975/213114 (executing program)
2025/01/17 05:54:39 fetching corpus: 8750, signal 190409/213114 (executing program)
2025/01/17 05:54:39 fetching corpus: 8800, signal 190708/213114 (executing program)
2025/01/17 05:54:39 fetching corpus: 8850, signal 191027/213114 (executing program)
2025/01/17 05:54:39 fetching corpus: 8900, signal 191231/213114 (executing program)
2025/01/17 05:54:39 fetching corpus: 8950, signal 191413/213114 (executing program)
2025/01/17 05:54:40 fetching corpus: 9000, signal 191917/213114 (executing program)
2025/01/17 05:54:40 fetching corpus: 9050, signal 192196/213114 (executing program)
2025/01/17 05:54:40 fetching corpus: 9100, signal 192481/213114 (executing program)
2025/01/17 05:54:40 fetching corpus: 9150, signal 192719/213114 (executing program)
2025/01/17 05:54:40 fetching corpus: 9200, signal 192957/213114 (executing program)
2025/01/17 05:54:40 fetching corpus: 9250, signal 193243/213114 (executing program)
2025/01/17 05:54:40 fetching corpus: 9300, signal 193499/213114 (executing program)
2025/01/17 05:54:40 fetching corpus: 9350, signal 193725/213114 (executing program)
2025/01/17 05:54:41 fetching corpus: 9400, signal 193960/213114 (executing program)
2025/01/17 05:54:41 fetching corpus: 9450, signal 194147/213114 (executing program)
2025/01/17 05:54:41 fetching corpus: 9500, signal 194359/213114 (executing program)
2025/01/17 05:54:41 fetching corpus: 9550, signal 194601/213114 (executing program)
2025/01/17 05:54:41 fetching corpus: 9600, signal 194862/213114 (executing program)
2025/01/17 05:54:41 fetching corpus: 9650, signal 195124/213114 (executing program)
2025/01/17 05:54:41 fetching corpus: 9700, signal 195339/213114 (executing program)
2025/01/17 05:54:41 fetching corpus: 9750, signal 195491/213114 (executing program)
2025/01/17 05:54:41 fetching corpus: 9800, signal 195716/213114 (executing program)
2025/01/17 05:54:41 fetching corpus: 9850, signal 196018/213114 (executing program)
2025/01/17 05:54:42 fetching corpus: 9900, signal 196227/213114 (executing program)
2025/01/17 05:54:42 fetching corpus: 9950, signal 196539/213114 (executing program)
2025/01/17 05:54:42 fetching corpus: 10000, signal 196839/213114 (executing program)
2025/01/17 05:54:42 fetching corpus: 10050, signal 197032/213114 (executing program)
2025/01/17 05:54:42 fetching corpus: 10100, signal 197236/213114 (executing program)
2025/01/17 05:54:42 fetching corpus: 10150, signal 197453/213114 (executing program)
2025/01/17 05:54:42 fetching corpus: 10200, signal 197701/213114 (executing program)
2025/01/17 05:54:42 fetching corpus: 10250, signal 197997/213114 (executing program)
2025/01/17 05:54:42 fetching corpus: 10300, signal 198170/213114 (executing program)
2025/01/17 05:54:42 fetching corpus: 10350, signal 198482/213114 (executing program)
2025/01/17 05:54:43 fetching corpus: 10400, signal 198925/213114 (executing program)
2025/01/17 05:54:43 fetching corpus: 10450, signal 199171/213114 (executing program)
2025/01/17 05:54:43 fetching corpus: 10500, signal 199316/213114 (executing program)
2025/01/17 05:54:43 fetching corpus: 10550, signal 199463/213114 (executing program)
2025/01/17 05:54:43 fetching corpus: 10600, signal 199644/213114 (executing program)
2025/01/17 05:54:43 fetching corpus: 10650, signal 200014/213114 (executing program)
2025/01/17 05:54:43 fetching corpus: 10700, signal 200304/213114 (executing program)
2025/01/17 05:54:43 fetching corpus: 10750, signal 200564/213114 (executing program)
2025/01/17 05:54:43 fetching corpus: 10800, signal 200827/213114 (executing program)
2025/01/17 05:54:43 fetching corpus: 10850, signal 201030/213114 (executing program)
2025/01/17 05:54:44 fetching corpus: 10900, signal 201253/213114 (executing program)
2025/01/17 05:54:44 fetching corpus: 10950, signal 201527/213114 (executing program)
2025/01/17 05:54:44 fetching corpus: 11000, signal 201772/213114 (executing program)
2025/01/17 05:54:44 fetching corpus: 11050, signal 202145/213114 (executing program)
2025/01/17 05:54:44 fetching corpus: 11100, signal 202324/213114 (executing program)
2025/01/17 05:54:44 fetching corpus: 11150, signal 202573/213114 (executing program)
2025/01/17 05:54:44 fetching corpus: 11200, signal 202760/213114 (executing program)
2025/01/17 05:54:45 fetching corpus: 11250, signal 202907/213114 (executing program)
2025/01/17 05:54:45 fetching corpus: 11300, signal 203157/213114 (executing program)
2025/01/17 05:54:45 fetching corpus: 11350, signal 203329/213114 (executing program)
2025/01/17 05:54:45 fetching corpus: 11400, signal 203523/213114 (executing program)
2025/01/17 05:54:45 fetching corpus: 11450, signal 203751/213114 (executing program)
2025/01/17 05:54:45 fetching corpus: 11500, signal 203914/213114 (executing program)
2025/01/17 05:54:45 fetching corpus: 11540, signal 204072/213114 (executing program)
2025/01/17 05:54:45 fetching corpus: 11540, signal 204072/213114 (executing program)
2025/01/17 05:54:48 starting 8 fuzzer processes
05:54:48 executing program 0:
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)
prctl$PR_GET_DUMPABLE(0x3)

05:54:48 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4c1, 0x10)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)=0x4)
socketpair$unix(0x1, 0x3131fcfc6c457c46, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000001c0)={&(0x7f00000000c0)=""/242, 0xf2, 0x8, 0x62})
close_range(r1, r1, 0x0)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000200)={0xfff, 0x1, 0x0, [{0x5, 0x5, 0x1, 0x1f, 0x5, 0x9, 0x92}]})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000280)={{0x4}, {0xda}, 0x3f, 0x2, 0x6})
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000300)={'mangle\x00', 0x2c, "7e269901bddf2464b2c63a4a72f2aaf80622b003710738761a0290743a87f0d527b68e59969f82421c0161f5"}, &(0x7f0000000380)=0x50)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockname$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f0000000400)=0x10)
r3 = syz_open_dev$mouse(&(0x7f0000000440), 0x100000001, 0x240040)
recvmsg$unix(r3, &(0x7f0000000740)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/21, 0x15}, {&(0x7f0000000540)=""/92, 0x5c}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x10022)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000780)={'vxcan1\x00'})
ioctl$FIONCLEX(r4, 0x5450)
r6 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000800)={0x0, r7, 0x1, 0x1, 0x1719, 0x8001})
creat(&(0x7f0000000840)='./file0\x00', 0xad)
r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000880), 0x101000, 0x0)
dup3(r8, r3, 0x80000)

05:54:48 executing program 3:
process_vm_writev(0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/66, 0x42}, {&(0x7f0000000080)=""/65, 0x41}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/70, 0x46}, {&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f0000000280)=""/16, 0x10}, {&(0x7f00000002c0)=""/50, 0x32}], 0x7, &(0x7f0000000540)=[{&(0x7f0000000380)=""/64, 0x40}, {&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/9, 0x9}], 0x4, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000600)=<r0=>0x0)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x4, 0x5, 0xe1, 0x81, 0x0, 0x5, 0x34406, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0x10001}, 0x10000, 0x5, 0xfffffeff, 0x6, 0x9, 0xfff, 0x9, 0x0, 0x2, 0x0, 0xd8}, r0, 0x2, r1, 0x8)
process_vm_writev(0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/123, 0x7b}, {&(0x7f0000000700)=""/89, 0x59}, {&(0x7f0000000780)=""/236, 0xec}, {&(0x7f0000000880)=""/134, 0x86}, {&(0x7f0000000940)=""/211, 0xd3}], 0x5, &(0x7f0000000e80)=[{&(0x7f0000000ac0)=""/5, 0x5}, {&(0x7f0000000b00)=""/51, 0x33}, {&(0x7f0000000b40)=""/1, 0x1}, {&(0x7f0000000b80)=""/99, 0x63}, {&(0x7f0000000c00)=""/72, 0x48}, {&(0x7f0000000c80)=""/87, 0x57}, {&(0x7f0000000d00)=""/85, 0x55}, {&(0x7f0000000d80)=""/237, 0xed}], 0x8, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x4000010, r2, 0x8000000)
r3 = syz_io_uring_setup(0x15b8, &(0x7f0000000f00)={0x0, 0x4d8e, 0x10, 0x1, 0x4a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000f80), &(0x7f0000000fc0)=<r4=>0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000001000)='blkio.bfq.sectors\x00', 0x0, 0x0)
fallocate(r5, 0x1, 0x3, 0xfff)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000002, 0x80010, r3, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x114, &(0x7f0000001040)=0x1, 0x0, 0x4)
creat(&(0x7f0000001080)='./file0\x00', 0x20)
r7 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
preadv(r7, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/175, 0xaf}, {&(0x7f00000011c0)=""/193, 0xc1}, {&(0x7f00000012c0)=""/77, 0x4d}, {&(0x7f0000001340)=""/148, 0x94}], 0x5, 0x1, 0x3)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd)
syz_io_uring_submit(0x0, r4, &(0x7f0000001480)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/tty/ldiscs\x00', 0x0, 0x0)
fchdir(r8)
setxattr$security_evm(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540), &(0x7f0000001580)=@v1={0x2, "eea4e7879e8dd3b70b9d55c51ea7947a4dca871d"}, 0x15, 0x0)

05:54:48 executing program 2:
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x80, 0xfffffff8})
r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000080)={r1})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0xffffffffffffffff, 0x801)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r2=>0x0})
r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/rt_acct\x00')
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000200)={0xc9c, r4, 0x10, 0x70bd25, 0x8, {{}, {@void, @val={0xc, 0x99, {0xc2d6, 0x41}}}}, [@NL80211_ATTR_FRAME={0x342, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @broadcast, @device_a, {0xc, 0x40}}, @a_msdu=[{@device_b, @device_b, 0x15, "4e638e2dcc235ab37c3a7d2d17cca3f6d087f119ed"}, {@device_a, @device_b, 0x2f, "4c9ab8f517a28e1a83bbabbc09c3b37f91b8a7e0c0fe42f0de4b6fbef9b5a12d5caf60f5d19c4c4210a0a2da8cfa66"}, {@broadcast, @device_a, 0xad, "a3aa624397e3c851cd6cb6d3400782e90d96b192df64994e2b79cf5eeb07f7749e448b665a3110cb745ddba4de2887f5772553d53f66ee80a2eeb9b008b405413c3c3de2281b52e94a739580fbf50bff9d6c9cfec77f1b63327c65c263fb3598b3c393365d39897daf5326b994ce2219396c7fc8842df111884c29497992daa2eddb9a9678fe667cccc0c606d2da9baff1a7df6566b26acb4869101dd3660487979dcb77d81d4005c0b6859d36"}, {@device_a, @device_a, 0xa4, "332d54b472762a60c4bbde250c6fd27469c6f2e6e92919ffe9423b53200d26d4242ccfd11e90be2b8460777bbb62304451d4e976b4bfb8b335aed730d3d6bd9415c9987bd3fbe48baff058cef5d56f45136101e08ab0d0ce2df2829239dc02bf6b662cadf0acb0e9fa57d40e202a85b1e01812d03b3c77eb571aab56f4c5b72acc7c14c58d465fd2d68086baec43d983639241203d73bb9ceea8c806dd6ce7641b2cc755"}, {@device_b, @device_a, 0x53, "bbf54fe297f9b174e748dc26d6f4919093586c7369a27a1148c52156b2f98f7252f9450cac9fa909afa5a1e461599b5886d486a8b0adc00f0d072a49b35ff588eb790b5a94b63e868a49377510e9e893ecd305"}, {@device_a, @device_b, 0x83, "f0ea53ba5cd2a863c2f3d971dba33bb7904492be738c3feaabf7fe1a1ffd0fe47c854bec8e17c27d8baeceeb9620c3060f360f5f426d3cc864630cf58369e47d22d682e31512032afd7c32745d36c15524ef38975a3074024298725c9864920de45a61c48f0e56d42a81aa2d00c050a9a5b53bed1dc7dd8abdf529a46ec61642273ffb"}, {@broadcast, @device_a, 0x45, "3b9fd7ac63fdd486b56cbd5b60344c3f157403dd351ae11475d0a5a3e1c218ffb50209785cc98b0f91c75ec4ab1daad956098f355765810648257a2841bf241f0b60f24373"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22f0}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x924, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, {0xc6}, @device_b, @device_b, @broadcast, {0x3, 0x80}, @broadcast}, {0x9, 0x1, 0x3, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x8}, @device_a, @device_a, @random="11ad39843174", {0x2, 0x1f}, @broadcast}, {0x6, 0x1, 0x1, 0x1, 0x54}}}, @ver_80211n={0x0, 0x5, 0x0, 0x3, 0x0, 0x1}}, @random="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"}}]}, 0xc9c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000f40))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r3)
r5 = syz_open_dev$vcsu(&(0x7f0000001000), 0xfffffffffffffeff, 0x8000)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001540)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f0000001080)={0x464, r4, 0x14, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff}}}}, [@NL80211_ATTR_TX_RATES={0x24c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x800, 0x2, 0x0, 0x9d, 0xcfb4, 0xff81, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe7a, 0x0, 0x7f, 0x0, 0x400, 0x7, 0x7]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x5}, {0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x6, 0x1}, {0x0, 0x2}, {0x2, 0x9}, {0x6, 0x6}, {0x2, 0x5}, {0x0, 0x6}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x7}, {0x4, 0x3}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x9}, {0x6, 0x2}, {0x1, 0x1}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x6}, {0x5}, {0x3, 0x4}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x3}, {0x4, 0x9}, {0x4, 0x4}, {0x0, 0x2}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7fff, 0x3, 0x1, 0xfffd, 0x0, 0xcc0a, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x12, 0x1b, 0xb, 0x12, 0x2, 0xb, 0x60, 0x9, 0x12, 0x6c, 0x18, 0x60, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x29, 0x4, 0xf801, 0x34, 0x7, 0x7ff, 0x6, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x3, 0x8001, 0xf54, 0x0, 0x0, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x4, 0x16, 0x60, 0xc, 0x5, 0x24, 0x1, 0x18, 0x4]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xab7, 0x7ff, 0x1, 0x2, 0x3f, 0x400, 0x7f, 0x4]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x9}, {0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0x5}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x5}, {0x0, 0x3}, {0x5, 0x9}, {0x3, 0x1}, {0x5, 0x3}, {0x0, 0x2}, {0x7, 0x6}, {0x5, 0x3}, {0x5}, {0x1, 0x3}, {0x2}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x3}, {0x1, 0x7}, {0x5, 0x8}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x8}, {0x6}, {0x3, 0x5}, {0x1}, {0x3, 0x6}, {0x5, 0x2}, {0x4, 0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x3}, {0x7, 0x4}, {0x4}, {0x2, 0x6}, {0x4, 0x6}, {0x6, 0x8}, {0x6, 0xa}, {0x2, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {0x6, 0x4}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0x1e}, {0x7}, {0x7, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x2}, {0x6}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {0x3, 0x6}, {0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x3, 0x5}, {0x2, 0x9}, {0x3, 0x8}, {0x7, 0x7}, {0x5, 0x1}, {0x2, 0x6}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x3}, {0x7, 0x1}, {0x1, 0x9}, {0x5, 0x6}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x2, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x6}, {0x3, 0x7}, {0x7, 0x1}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0x6}, {0x5}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x60, 0x0, 0x60, 0x6, 0x1, 0x1b, 0x12, 0x1b, 0x48, 0xc, 0x4, 0x6, 0xc, 0x2]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x6, 0xc, 0x3, 0x1, 0x18, 0x60, 0x18, 0x1b, 0x24, 0x3, 0x4]}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff8, 0x800, 0x6, 0x6, 0x3, 0x1000, 0x2]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x2}, {0x5, 0x3}, {0x2, 0x5}, {0x2, 0x1}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x6}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x2}, {0x0, 0x1}, {0x7, 0x7}, {0x2, 0x1}, {}, {0x7, 0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x7, 0x8}, {0x6, 0x5}, {0x4}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x7, 0x6}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x7}, {0x3, 0x9}, {0x4, 0x4}, {0x3, 0x1}, {0x3, 0x3}, {0x3, 0x7}, {0x2, 0x1}, {0x7, 0x9}, {0x3, 0x3}, {0x4}, {0x3, 0x4}, {0x1, 0x6}, {0x4, 0x6}, {0x7, 0x3}, {0x3}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x5}, {0x0, 0x9}, {0x7, 0x1}, {0x4, 0x7}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x7, 0x3}, {}, {0x3, 0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x9}, {0x4, 0x3}, {0x6, 0x3}, {0x4}, {0x2, 0xa}, {0x6}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x1b, 0x36, 0x2, 0x6, 0xb, 0xc, 0x5, 0x6, 0x30, 0x4, 0x3, 0x6c, 0x36, 0x48, 0x16, 0x59, 0x1, 0x1b, 0x3, 0x6, 0x18]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x30, 0x18, 0x24, 0x18, 0x6, 0x1b, 0x60, 0x48, 0x3, 0x36, 0x3d, 0x1b, 0x4, 0x18, 0x48, 0x1, 0x2, 0x4, 0x48, 0x9, 0x4, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x1f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x3, 0x8, 0x1, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1ff, 0x2, 0x7, 0xd06c, 0x4, 0xe49, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x9203, 0x100, 0x1, 0xdb, 0x0, 0x6, 0x8000]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x0, 0x4, 0x60, 0x30, 0x60, 0x4, 0x18, 0xc, 0x0, 0x9]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5bdb, 0x3, 0x6, 0x0, 0x4, 0x4, 0xff2d, 0x1523]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x1f, 0x4, 0x2, 0x8, 0x8000, 0xf800, 0x400]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0x6}, {0x1}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x2, 0xa}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0x8}, {0x6, 0x8}, {0x1}, {0x0, 0x3}, {0x4, 0x8}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x2, 0x9}, {0x4, 0x7}, {0x5, 0x9}, {0x6, 0x3}, {0x7, 0x3}, {0x5, 0x5}, {0x2, 0x6}, {0x2, 0x2}, {0x7, 0x4}, {0x5, 0x4}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x5}, {0x1}]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x9}, {0x4, 0x1}, {0x2, 0x2}, {0x0, 0x3}, {0x6, 0x9}, {0x4, 0x6}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x0, 0x1}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0x2}, {0x3, 0x7}, {0x7, 0x9}, {0x5}, {}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x7}, {0x3, 0x4}, {0x6, 0xa}, {0x6, 0x9}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x7}, {0x3, 0x6}, {0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x6}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x4}, {0x0, 0x8}, {0x5}, {0x3, 0x4}, {0x1, 0x9}, {}, {0x2, 0x7}, {0x6, 0x6}, {0x7, 0x2}, {0x6, 0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {}, {0x5, 0x2}, {0x6, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x3, 0x7}, {0x5}, {0x3}, {0x4, 0x8}, {0x7, 0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x3}, {0x2}, {0x3, 0x5}, {0x2, 0x1}, {0x3, 0x7}, {0x7, 0x6}, {0x2, 0x4}, {0x5, 0x6}, {0x6, 0x2}, {0x1}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x3}, {0x6, 0x3}, {0x2, 0x7}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0x8}, {0x5, 0x7}, {0x2, 0x1}, {0x0, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x0, 0x3ff, 0x7, 0x3, 0xfffe, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x85e, 0xff, 0x4, 0x7334, 0x800, 0x9, 0x8001, 0x1]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x8}, {0x6, 0x4}, {0x2, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x1}, {0x2, 0x4}, {0x6, 0x6}, {0x1, 0x8}, {0x2, 0x4}, {0x1, 0x8}, {0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x2}, {0x3, 0x8}, {0x2, 0xa}, {0x5, 0x4}, {0x4, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0xa}, {0x3, 0x5}, {0x6, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x7, 0x1f}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x9}, {0x4, 0x9}, {0x1, 0x7}, {0x4, 0x3}, {0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0x3}, {0x5}, {0x3, 0x4}, {0x6, 0x2}, {0x5, 0x5}, {0x4, 0x7}, {0x6, 0x3}, {}, {0x7, 0xa}, {0x7, 0xa}, {0x6, 0x8}, {0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x30, 0x5, 0x6c, 0x16, 0x3, 0x48, 0x1, 0x36, 0x2, 0x4, 0x24]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x3, 0xc, 0x24, 0x1b, 0x6c, 0x1, 0x2, 0x48, 0x9, 0xc, 0x16, 0xc, 0x4, 0x30, 0x5, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x7fff, 0x1, 0x3, 0xc8f, 0x20, 0x7]}}]}]}]}, 0x464}, 0x1, 0x0, 0x0, 0x40}, 0x24000081)
epoll_pwait(r3, &(0x7f0000001580)=[{}], 0x1, 0x5, &(0x7f00000015c0)={[0xa0]}, 0x8)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x400}, {0xc, 0x90, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x4008000)
r6 = syz_open_dev$vcsa(&(0x7f0000001740), 0x100000001, 0x100)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001780))
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001800), 0x64080, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r5)
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0x94, r8, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x69c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)

05:54:48 executing program 4:
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080))
prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180))
prctl$PR_GET_ENDIAN(0x13, &(0x7f00000001c0))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000200))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000240))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000280))
prctl$PR_GET_ENDIAN(0x13, &(0x7f00000002c0))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000300))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000340))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000380))
prctl$PR_GET_ENDIAN(0x13, &(0x7f00000003c0))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000440))
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000480))
prctl$PR_GET_ENDIAN(0x13, &(0x7f00000004c0))

05:54:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x5010}, 0x40010)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_START_REQ(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xf67bc1e5bf9d2159}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x6c}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x11}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x14}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x20}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000804)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x13}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xe1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4004004)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1bc, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37d07bfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x212e1f1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x440f38ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bc130eb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd829db}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1806d800}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbdd8e88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x567e2913}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47c74a77}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x94, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e195b7d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac0e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5106}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57c4f6b9}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6877}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26729cc9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59e6}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1015}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x100}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x172dc947}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x275d8701}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x631adf1d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f48}]}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0xc004}, 0x8001)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4886080}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x84, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x80000)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r6)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r8, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r0)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r2)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}]}, 0x78}}, 0x40000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c00)={'wpan1\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r8, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}]}, 0x24}}, 0x8000)

[  112.547537] audit: type=1400 audit(1737093288.815:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:54:48 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x5800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x110, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x4)
r1 = accept4(r0, &(0x7f0000000380)=@pppoe, &(0x7f0000000400)=0x80, 0x100800)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r2=>r0, {0x7}}, './file0/file0\x00'})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000006c0)={0x3, 'caif0\x00', {0x5}, 0xfffa})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl2\x00', <r3=>0x0, 0x0, 0x81, 0x2, 0x7, 0x1a, @private0, @empty, 0x20, 0x1, 0x0, 0xfffffffe}})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8304804}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044}, 0x50)
getpeername$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl0\x00', <r5=>r3, 0x2f, 0xa3, 0xff, 0x5, 0x40, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, 0x20, 0x8000, 0x1}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xc4, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000004300)={'ip6gre0\x00', &(0x7f0000004280)={'ip6_vti0\x00', <r7=>r4, 0x2f, 0x9, 0x7, 0x7fff, 0x20, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x8, 0x9, 0x81}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000043c0)={'sit0\x00', &(0x7f0000004340)={'syztnl2\x00', r7, 0x4, 0x9, 0x8, 0x8c, 0x41, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x700, 0x8, 0x33}})
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000004440), r0)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000004500)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004480)={0x1c, r8, 0x10, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000004540)={{0x1, 0x1, 0x18, <r9=>r0, {r6}}, './file1\x00'})
perf_event_open(&(0x7f0000004580)={0x5, 0x80, 0xc, 0x4, 0x2, 0x3f, 0x0, 0x9, 0x40, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1, 0xb4f}, 0x30, 0x100000001, 0x80c, 0x7, 0x1ff, 0x100, 0x9, 0x0, 0x9, 0x0, 0x78e06cf}, 0x0, 0xd, 0xffffffffffffffff, 0x9)
accept4(r9, &(0x7f0000004600)=@vsock, &(0x7f0000004680)=0x80, 0x400)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000004b00)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x4c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2a}, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000}, 0x0)

05:54:48 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1f}}, './file0\x00'})
r1 = accept$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r1, {0x3f}}, './file1\x00'})
r3 = open_tree(r2, &(0x7f0000000140)='./file0\x00', 0x0)
r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
dup(r4)
lsetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@random={'btrfs.', 'cgroup.procs\x00'}, &(0x7f0000000240)='+\\\x00', 0x3, 0x2)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000002c0)={0x1, 0x51c6, 0x24, &(0x7f0000000280)=""/36})
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
r5 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x5, 0x3, 0x20, 0x2, 0x0, 0x0, 0x400, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x5, @perf_config_ext={0x5, 0x5}, 0x82, 0x1, 0x3, 0x9, 0x3, 0x1, 0xffff, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
mknodat$null(r6, &(0x7f0000000400)='./file0\x00', 0x8000, 0x103)
ioctl$FIONCLEX(r5, 0x5450)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440))
write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file1', [{0x20, '+\\\x00'}, {0x20, '+\\\x00'}, {0x20, '}%$'}, {0x20, 'cgroup.procs\x00'}, {0x20, '+\\\x00'}], 0xa, "772ce1fccb94353246e3876c679400c3f8f7f35f97cc32f0f8d7984ee2a8ebe43858b0f79b7b14e17e4beeb8019cd2d7436c107c318d6a37587fd42f28ddcd32d3ada8148e548cd8b0a714092d7b53063a6c7fe071c23d278a192345b71efc79d064dd7f0a3a09b1560b6b3f6860c4e7e8446b593ce6d23bbcbc71220948cbce55b42feacdf9caf340f070a52bec589d78daa3879dc8e29346ae35630762f79e846aca5042dabfc0ba8ec0817dfc04504494a57ade512cd85a859f660d21a50469c2837c4e39fa390bce1da1e3240babbc14a82e7c810e047c4e1a00f33f43eb26b11788cd328ae4f7578c6105e8b7c1b71a010d"}, 0x11d)
r7 = openat2(r3, &(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x101000, 0x8, 0x16}, 0x18)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000800), 0x4)
r8 = syz_io_uring_complete(0x0)
execveat(r8, &(0x7f0000000840)='./file0/file0\x00', &(0x7f00000008c0)=[&(0x7f0000000880)='#! '], &(0x7f0000000940)=[&(0x7f0000000900)=',-]@\x00'], 0x1000)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000a00)={{r4}, 0x0, 0x4, @unused=[0xdb8f, 0x4, 0x8, 0x1000], @subvolid=0xa24})

[  113.845126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.847200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.849110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.854305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.856542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.858574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.862575] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  113.864905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.866242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.879189] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.894147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  113.896388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.969087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.974056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.977028] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.983597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.993892] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  113.996546] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.998307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.001907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.004069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  114.017864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  114.022308] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.026217] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  114.028394] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  114.033736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  114.035822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  114.077558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  114.077622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  114.082260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.085777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  114.089097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.092127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.105919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  114.112850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.115934] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  114.117959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.118112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  114.123218] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.146533] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  114.149090] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  114.162226] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  114.165591] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  114.165963] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  114.170227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  114.186391] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  114.189831] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  114.192425] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  115.923394] Bluetooth: hci1: command tx timeout
[  115.923401] Bluetooth: hci0: command tx timeout
[  116.114164] Bluetooth: hci3: command tx timeout
[  116.114212] Bluetooth: hci2: command tx timeout
[  116.178039] Bluetooth: hci4: command tx timeout
[  116.178228] Bluetooth: hci5: command tx timeout
[  116.242037] Bluetooth: hci6: command tx timeout
[  116.306751] Bluetooth: hci7: command tx timeout
[  117.971700] Bluetooth: hci1: command tx timeout
[  117.971733] Bluetooth: hci0: command tx timeout
[  118.161831] Bluetooth: hci3: command tx timeout
[  118.161990] Bluetooth: hci2: command tx timeout
[  118.225929] Bluetooth: hci5: command tx timeout
[  118.226246] Bluetooth: hci4: command tx timeout
[  118.289764] Bluetooth: hci6: command tx timeout
[  118.353702] Bluetooth: hci7: command tx timeout
[  120.018094] Bluetooth: hci0: command tx timeout
[  120.019618] Bluetooth: hci1: command tx timeout
[  120.209943] Bluetooth: hci2: command tx timeout
[  120.210065] Bluetooth: hci3: command tx timeout
[  120.273873] Bluetooth: hci4: command tx timeout
[  120.273933] Bluetooth: hci5: command tx timeout
[  120.339801] Bluetooth: hci6: command tx timeout
[  120.401811] Bluetooth: hci7: command tx timeout
[  122.067569] Bluetooth: hci1: command tx timeout
[  122.067696] Bluetooth: hci0: command tx timeout
[  122.257723] Bluetooth: hci2: command tx timeout
[  122.258735] Bluetooth: hci3: command tx timeout
[  122.321743] Bluetooth: hci5: command tx timeout
[  122.321775] Bluetooth: hci4: command tx timeout
[  122.386712] Bluetooth: hci6: command tx timeout
[  122.450771] Bluetooth: hci7: command tx timeout
[  173.658224] syz-executor.3 (283) used greatest stack depth: 23520 bytes left
[  176.103523] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.107842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.110434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.119980] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.125056] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  176.129321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.350525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.355045] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.359131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.369110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.373268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  176.375334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.492618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.499906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.524328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.534370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.544028] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  176.547516] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.572739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.604551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  176.605326] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  176.624599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  176.644055] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.645306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.648901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.676850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  176.682286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  176.683133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.689599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.691203] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.691607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.692544] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  176.701416] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.705087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  176.707109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  176.728608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  176.729766] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  176.745826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  176.746307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  176.749347] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  176.768360] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  176.781311] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  176.783932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  176.794992] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  176.826941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  176.832124] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  176.838290] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  176.859359] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  178.193869] Bluetooth: hci0: command tx timeout
[  178.450935] Bluetooth: hci1: command tx timeout
[  178.641816] Bluetooth: hci2: command tx timeout
[  178.834840] Bluetooth: hci4: command tx timeout
[  178.835456] Bluetooth: hci3: command tx timeout
[  178.897817] Bluetooth: hci6: command tx timeout
[  178.962097] Bluetooth: hci5: command tx timeout
[  178.962865] Bluetooth: hci7: command tx timeout
[  180.241862] Bluetooth: hci0: command tx timeout
[  180.497729] Bluetooth: hci1: command tx timeout
[  180.690678] Bluetooth: hci2: command tx timeout
[  180.881962] Bluetooth: hci3: command tx timeout
[  180.882433] Bluetooth: hci4: command tx timeout
[  180.946055] Bluetooth: hci6: command tx timeout
[  181.009840] Bluetooth: hci7: command tx timeout
[  181.009983] Bluetooth: hci5: command tx timeout
[  182.290024] Bluetooth: hci0: command tx timeout
[  182.545772] Bluetooth: hci1: command tx timeout
[  182.737973] Bluetooth: hci2: command tx timeout
[  182.929786] Bluetooth: hci4: command tx timeout
[  182.929930] Bluetooth: hci3: command tx timeout
[  182.993902] Bluetooth: hci6: command tx timeout
[  183.057805] Bluetooth: hci5: command tx timeout
[  183.057929] Bluetooth: hci7: command tx timeout
[  184.337717] Bluetooth: hci0: command tx timeout
[  184.593955] Bluetooth: hci1: command tx timeout
[  184.786691] Bluetooth: hci2: command tx timeout
[  184.978859] Bluetooth: hci3: command tx timeout
[  184.979029] Bluetooth: hci4: command tx timeout
[  185.041866] Bluetooth: hci6: command tx timeout
[  185.105717] Bluetooth: hci5: command tx timeout
[  185.105807] Bluetooth: hci7: command tx timeout
[  238.299021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  238.300482] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  238.302067] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  238.307030] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  238.309892] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  238.311365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.689423] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.691910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.693582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.698650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.701678] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  238.703514] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.757160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  238.759914] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  238.760478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  238.762547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  238.764918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  238.766127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  238.769932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.771350] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  238.772034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.780387] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.784033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  238.785355] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  238.785915] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  238.790993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.792187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.806036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.807571] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  238.809087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.866152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  238.878235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.884706] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.884742] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.893733] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.896024] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.898945] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.903216] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.905965] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  238.910910] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  238.911321] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.920960] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.942998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  238.957440] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  238.959541] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.960060] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.983112] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  238.986052] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  240.338693] Bluetooth: hci0: command tx timeout
[  240.786743] Bluetooth: hci1: command tx timeout
[  240.849826] Bluetooth: hci2: command tx timeout
[  240.850766] Bluetooth: hci4: command tx timeout
[  240.850892] Bluetooth: hci3: command tx timeout
[  240.978083] Bluetooth: hci7: command tx timeout
[  241.041856] Bluetooth: hci5: command tx timeout
[  241.043786] Bluetooth: hci6: command tx timeout
[  242.388725] Bluetooth: hci0: command tx timeout
[  242.834377] Bluetooth: hci1: command tx timeout
[  242.898741] Bluetooth: hci3: command tx timeout
[  242.899047] Bluetooth: hci4: command tx timeout
[  242.899164] Bluetooth: hci2: command tx timeout
[  243.025715] Bluetooth: hci7: command tx timeout
[  243.089930] Bluetooth: hci6: command tx timeout
[  243.090681] Bluetooth: hci5: command tx timeout
[  244.433714] Bluetooth: hci0: command tx timeout
[  244.881693] Bluetooth: hci1: command tx timeout
[  244.947669] Bluetooth: hci3: command tx timeout
[  244.947697] Bluetooth: hci4: command tx timeout
[  244.947775] Bluetooth: hci2: command tx timeout
[  245.073814] Bluetooth: hci7: command tx timeout
[  245.137679] Bluetooth: hci6: command tx timeout
[  245.139674] Bluetooth: hci5: command tx timeout
[  246.481859] Bluetooth: hci0: command tx timeout
[  246.929709] Bluetooth: hci1: command tx timeout
[  246.993782] Bluetooth: hci4: command tx timeout
[  246.993846] Bluetooth: hci2: command tx timeout
[  246.993862] Bluetooth: hci3: command tx timeout
[  247.121697] Bluetooth: hci7: command tx timeout
[  247.185729] Bluetooth: hci5: command tx timeout
[  247.185895] Bluetooth: hci6: command tx timeout
[  300.769868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.776206] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.780334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.788015] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.791291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  300.792507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  301.282520] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  301.287315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  301.294921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.299851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  301.308549] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.314563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.325487] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.327074] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.327547] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.332875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.333907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.345232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  301.349541] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  301.351370] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.358901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.366490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.374330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.375468] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  301.377337] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.379839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.381264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.382092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.385988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  301.386568] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  301.389994] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.390349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.394684] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  301.395471] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.401150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  301.437197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.454192] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  301.464796] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  301.474024] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  301.491192] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.511122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  301.518945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.544418] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  301.563115] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  301.606582] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  301.612446] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  301.616063] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  301.635779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  302.867685] Bluetooth: hci0: command tx timeout
[  303.442729] Bluetooth: hci1: command tx timeout
[  303.442795] Bluetooth: hci5: command tx timeout
[  303.570858] Bluetooth: hci3: command tx timeout
[  303.570913] Bluetooth: hci2: command tx timeout
[  303.633797] Bluetooth: hci4: command tx timeout
[  303.634896] Bluetooth: hci6: command tx timeout
[  303.697986] Bluetooth: hci7: command tx timeout
[  304.914632] Bluetooth: hci0: command tx timeout
[  305.489930] Bluetooth: hci1: command tx timeout
[  305.490112] Bluetooth: hci5: command tx timeout
[  305.618841] Bluetooth: hci2: command tx timeout
[  305.618882] Bluetooth: hci3: command tx timeout
[  305.682108] Bluetooth: hci6: command tx timeout
[  305.682126] Bluetooth: hci4: command tx timeout
[  305.745696] Bluetooth: hci7: command tx timeout
[  306.961810] Bluetooth: hci0: command tx timeout
[  307.538809] Bluetooth: hci5: command tx timeout
[  307.539083] Bluetooth: hci1: command tx timeout
[  307.667809] Bluetooth: hci3: command tx timeout
[  307.667927] Bluetooth: hci2: command tx timeout
[  307.729792] Bluetooth: hci6: command tx timeout
[  307.729926] Bluetooth: hci4: command tx timeout
[  307.793665] Bluetooth: hci7: command tx timeout
[  309.011242] Bluetooth: hci0: command tx timeout
[  309.585795] Bluetooth: hci1: command tx timeout
[  309.587398] Bluetooth: hci5: command tx timeout
[  309.713999] Bluetooth: hci3: command tx timeout
[  309.714098] Bluetooth: hci2: command tx timeout
[  309.777644] Bluetooth: hci6: command tx timeout
[  309.777722] Bluetooth: hci4: command tx timeout
[  309.841707] Bluetooth: hci7: command tx timeout
[  362.974662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.977471] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.983805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.992778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.996509] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  363.002373] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.436096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.438198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.441289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.445110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.449181] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  363.450150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  363.571120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  363.576780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  363.582871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.592751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.598176] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.599897] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.602111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  363.605029] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.606241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.622408] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.625190] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  363.626036] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.706534] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.709944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.713042] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.723446] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.736512] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  363.741981] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.752365] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.766162] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.776084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  363.780218] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.782265] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.785902] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.789490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.794056] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  363.798140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  363.805981] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  363.808474] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.811319] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  363.816287] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  363.830493] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  363.842923] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  363.851483] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  363.853374] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  363.855054] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  365.073750] Bluetooth: hci0: command tx timeout
[  365.521826] Bluetooth: hci1: command tx timeout
[  365.714077] Bluetooth: hci2: command tx timeout
[  365.714162] Bluetooth: hci3: command tx timeout
[  365.841985] Bluetooth: hci4: command tx timeout
[  365.905725] Bluetooth: hci5: command tx timeout
[  365.905828] Bluetooth: hci6: command tx timeout
[  365.969699] Bluetooth: hci7: command tx timeout
[  367.122614] Bluetooth: hci0: command tx timeout
[  367.569690] Bluetooth: hci1: command tx timeout
[  367.761696] Bluetooth: hci3: command tx timeout
[  367.763246] Bluetooth: hci2: command tx timeout
[  367.891638] Bluetooth: hci4: command tx timeout
[  367.954733] Bluetooth: hci6: command tx timeout
[  367.955661] Bluetooth: hci5: command tx timeout
[  368.017722] Bluetooth: hci7: command tx timeout
[  369.170162] Bluetooth: hci0: command tx timeout
[  369.617665] Bluetooth: hci1: command tx timeout
[  369.810729] Bluetooth: hci2: command tx timeout
[  369.810997] Bluetooth: hci3: command tx timeout
[  369.938981] Bluetooth: hci4: command tx timeout
[  370.001664] Bluetooth: hci5: command tx timeout
[  370.001693] Bluetooth: hci6: command tx timeout
[  370.066622] Bluetooth: hci7: command tx timeout
[  371.217719] Bluetooth: hci0: command tx timeout
[  371.667602] Bluetooth: hci1: command tx timeout
[  371.858014] Bluetooth: hci2: command tx timeout
[  371.858662] Bluetooth: hci3: command tx timeout
[  371.985765] Bluetooth: hci4: command tx timeout
[  372.049639] Bluetooth: hci6: command tx timeout
[  372.049680] Bluetooth: hci5: command tx timeout
[  372.113699] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
05:59:54  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88800e280378 RCX=ffffffff813c70f4 RDX=ffff888038581bc0
RSI=0000000000000000 RDI=0000000000000005 RBP=dffffc0000000000 RSP=ffff88803abcfb80
R8 =0000000000000000 R9 =fffffbfff0c80800 R10=0000000000000029 R11=0000000000000000
R12=0000000000000029 R13=0000000000000000 R14=ffff88800a6e8800 R15=0000000000000000
RIP=ffffffff813c70f7 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f230e91080 CR3=000000000a660000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000000000ff000000000000000000
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=fffffbfff0fe13e6 RBX=fffffbfff0fe13e7 RCX=ffffffff814fd719 RDX=0000000000000001
RSI=0000000000000008 RDI=ffffffff87f09f30 RBP=fffffbfff0fe13e6 RSP=ffff88803f7ef218
R8 =0000000000000000 R9 =fffffbfff0fe13e6 R10=ffffffff87f09f37 R11=0000000000000532
R12=ffff888016031bc0 R13=ffffffff85cece00 R14=0000000000000098 R15=0000000000000000
RIP=ffffffff81aba924 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe7f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556457d2afa8 CR3=000000003240c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000