syzkaller login: [ 66.423309] hrtimer: interrupt took 4354066 ns Warning: Permanently added '[localhost]:51891' (ECDSA) to the list of known hosts. 2025/01/17 11:48:20 fuzzer started 2025/01/17 11:48:21 dialing manager at localhost:45115 [ 77.407055] cgroup: Unknown subsys name 'net' [ 77.518743] cgroup: Unknown subsys name 'cpuset' [ 77.578835] cgroup: Unknown subsys name 'rlimit' [ 82.651151] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 93.639075] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/17 11:48:38 syscalls: 212 2025/01/17 11:48:38 code coverage: enabled 2025/01/17 11:48:38 comparison tracing: enabled 2025/01/17 11:48:38 extra coverage: enabled 2025/01/17 11:48:38 setuid sandbox: enabled 2025/01/17 11:48:38 namespace sandbox: enabled 2025/01/17 11:48:38 Android sandbox: enabled 2025/01/17 11:48:38 fault injection: enabled 2025/01/17 11:48:38 leak checking: enabled 2025/01/17 11:48:38 net packet injection: enabled 2025/01/17 11:48:38 net device setup: enabled 2025/01/17 11:48:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/17 11:48:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/17 11:48:38 USB emulation: enabled 2025/01/17 11:48:38 hci packet injection: enabled 2025/01/17 11:48:38 wifi device emulation: enabled 2025/01/17 11:48:38 802.15.4 emulation: enabled 2025/01/17 11:48:38 fetching corpus: 0, signal 0/0 (executing program) 2025/01/17 11:48:40 starting 8 fuzzer processes 11:48:40 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x23f8b5ec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000880}, 0x40000) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x100000001) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x40, 0x40, 0x6, 0x4, {{0xf, 0x4, 0x3, 0x38, 0x3c, 0x65, 0x0, 0xea, 0x2f, 0x0, @private=0xa010101, @empty, {[@lsrr={0x83, 0x27, 0xf5, [@local, @dev={0xac, 0x14, 0x14, 0x42}, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @local, @multicast2]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}]}, 0x38}}, 0x20000010) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x96040, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) fcntl$getown(r4, 0x9) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/netconsole', 0x0, 0x22) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10800}, 0x44805) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), r6) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xbc, r7, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0xac, 0x0, &(0x7f0000000a40)=[@increfs={0x40046304, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/35, 0x23, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/215, 0xd7, 0x1, 0x40}, @fda={0x66646185, 0x6, 0x0, 0x2d}}, &(0x7f0000000880)={0x0, 0x28, 0x50}}}, @increfs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000980)={@ptr={0x70742a85, 0x0, &(0x7f00000008c0)=""/190, 0xbe, 0x0, 0x2e}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000a00)={0x0, 0x28, 0x40}}}, @request_death={0x400c630e, 0x3}, @register_looper], 0x8f, 0x0, &(0x7f0000000b00)="8b1beb03b46f356b32190f1e60881ce2dc273f101b2b7fd91bd74fcea681e517384a2dcd7ada541008bfb78d0f90cd041db1da00eb93323b61512dbd7ce03a7c5fea4df3bb2a373295b178ffb5eef328cddf61be72a11828d8e965707a16b69134cb0aada055a675f6b4773ce27a313f94b2c59d0a2f856f123e4cbd8dba7585b848c5b09c5ee29226f93f7f51d032"}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c00), 0x2002, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x844) 11:48:40 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x91}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ec}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x421}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x80) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000884}, 0x40800) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x230000, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r2) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5a0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000040) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r2) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x722d}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x84}, 0x4090) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7087}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x80d0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f00000007c0)={0x10000005}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r6) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000940)={'veth0_to_bond', 0x32, 0x31}, 0x10) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r7, 0x11, 0xa, &(0x7f0000000980), &(0x7f00000009c0)=0x4) 11:48:40 executing program 2: r0 = syz_io_uring_setup(0x7445, &(0x7f0000000000)={0x0, 0xecf1, 0x8, 0x0, 0x1e6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0x50, r0, 0x8000000) r3 = open(&(0x7f0000000100)='./file0\x00', 0x161001, 0x87) syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r3, 0x0, r0}, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/ipv6', 0x88400, 0x1d2) pread64(r0, &(0x7f00000001c0)=""/104, 0x68, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8c}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x5487ec4828eb924c}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x40010, r4, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r5) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}}, 0x4000040) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r4) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x81) pipe(&(0x7f0000000740)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffe}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 11:48:40 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/firmware_class', 0x2, 0x1c8) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000100)=0x7f, 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000140), 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) connect$802154_dgram(r1, &(0x7f0000000280)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xd5fd7) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x158, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x65f}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000680)={0x4, 0x200, "a95fa7", 0x3, 0x6}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000700)={0x3}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x8000, 0x0) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000780)) r5 = syz_open_dev$sg(&(0x7f00000007c0), 0x609, 0x10040) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5, 0x6, 0x0, 0x8, 0x0, 0x1}, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x98, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x79}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40004000}, 0x8000) [ 96.050526] audit: type=1400 audit(1737114520.768:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:48:40 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10cc2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x1}, @enter_looper], 0x69, 0x0, &(0x7f0000000140)="022274683bb6e47bd321821845127f3a0742f0f49528cda5c0ee4b0a79548d3f0a99f69cf863516552b0d510b3fe4d1aa246f3033817d67ec7aa19c30c9d15696b9ab828e8ba78f9c570fc9a7eb6681e1ba5f0c5975779fee708ac63fead97524d300faa3b4bbb06e7"}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x404002, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000240)={0x28, 0x16, 0xa, 0x14, 0xb, 0x4, 0x2, 0x98}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000002c0)={'dummy0', 0x32, 0x38}, 0x9) pipe(&(0x7f0000000300)={0xffffffffffffffff}) sendmsg$802154_dgram(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000340)="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", 0x1000}, 0x1, 0x0, 0x0, 0x20004800}, 0x400c040) syz_genetlink_get_family_id$fou(&(0x7f00000013c0), r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x100, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000001440), &(0x7f0000001480)=0x4) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000014c0), 0x565002, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000001500)={0x1, 0x0, {0x1b, 0x9, 0xa, 0x11, 0x6, 0x7, 0x1, 0x125}}) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f0000001540)) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001580)={'batadv0', 0x32, 0x32}, 0xa) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20000090) 11:48:40 executing program 5: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair(0x23, 0x800, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x171402, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) socketpair(0x2b, 0x1, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4084) sendmsg$802154_dgram(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14, &(0x7f0000000500)={&(0x7f0000000480)="39661aa123f3428d12fa32d05d722c62303beb4eb4369909f4ee522c9f1ce928171d5320e1da5bfeef7fa308d936d0e2b305cc4266124f5cc74596cbe0ffd98b4efdeff36bb1fce1996adfad50ca4118", 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4c0d1) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x95}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x82182, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000740)=0x1, 0x4) r6 = open(&(0x7f0000000780)='./file0\x00', 0x40000, 0x100) io_uring_setup(0x427, &(0x7f00000007c0)={0x0, 0x9def, 0x8, 0x3, 0xb2, 0x0, r6}) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000840), &(0x7f0000000880)=0x10) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000008c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'tunl0\x00', &(0x7f0000000940)={'gretap0\x00', 0x0, 0x40, 0x10, 0x10000, 0x1, {{0x4c, 0x4, 0x2, 0x4, 0x130, 0x65, 0x0, 0x6, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x48, 0x1, 0x9, [{@rand_addr=0x6, 0x9}]}, @timestamp_prespec={0x44, 0x2c, 0x25, 0x3, 0x7, [{@broadcast, 0x2}, {@rand_addr=0x64010102, 0x1}, {@private=0xa010102, 0x3}, {@private=0xa010102, 0x7ff}, {@broadcast, 0x9}]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0xe, "9f9076cb686a62189e93f25f"}, @generic={0x94, 0xb, "36f10824b56c074a1c"}, @cipso={0x86, 0x2a, 0x2, [{0x5, 0x7, "f6bc157b8b"}, {0x5, 0x8, "681227069022"}, {0x0, 0xa, "038bb78d25158b3e"}, {0x0, 0xb, "9a3f35557fc028dffe"}]}, @timestamp_addr={0x44, 0x44, 0x21, 0x1, 0x9, [{@multicast2, 0xd4}, {@private=0xa010102, 0x40000000}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffffd}, {@empty, 0xfffffffa}, {@rand_addr=0x64010100}, {@private=0xa010100, 0x5}, {@loopback, 0x142}, {@loopback, 0x3}]}, @noop, @noop, @timestamp_addr={0x44, 0x54, 0x9d, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0xe7d}, {@local, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@loopback, 0x6}, {@loopback, 0xffffffe3}, {@multicast1, 0x92}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x7ff}, {@loopback, 0x1000}, {@local, 0x7}]}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x10) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xfc, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2cd4dbe}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x14}, 0x0) 11:48:40 executing program 6: fcntl$notify(0xffffffffffffffff, 0x402, 0x21) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000200)=[@exit_looper, @register_looper, @decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x9df471113154edfe, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/199, 0xc7}, @fda={0x66646185, 0xa, 0x2, 0x3f}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r1}, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x2}], 0x37, 0x0, &(0x7f0000000280)="442973ee85ce042e60def63f825de37040113e06846b858edd751111684d54f35a7887275d0ab45573103b155eda354cf6234439ce6a36"}) ioctl$RTC_AIE_ON(r0, 0x7001) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x20800, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000340)) ioctl$RTC_VL_CLR(r0, 0x7014) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/hidraw', 0x84000, 0x80) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r4, 0x110, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x40010) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000540)) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/binder-control\x00', 0x3, 0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f00000005c0)={'custom1\x00'}) ioctl$RTC_UIE_OFF(r2, 0x7004) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000740), r2) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044080) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r3) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10040008}, 0x4000081) 11:48:40 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x8, 0x20, 0xa7b, 0x7, {{0x3b, 0x4, 0x0, 0x4, 0xec, 0x65, 0x0, 0x4, 0x29, 0x0, @local, @private=0xa010101, {[@timestamp_prespec={0x44, 0x54, 0xbe, 0x3, 0xf, [{@multicast1, 0x5}, {@rand_addr=0x64010102, 0x80000001}, {@broadcast, 0x4}, {@loopback, 0x7}, {@private=0xa010102, 0x3f}, {@multicast1}, {@empty, 0x730c}, {@broadcast, 0x9}, {@rand_addr=0x64010102, 0x100}, {@multicast2, 0x4}]}, @end, @cipso={0x86, 0x7e, 0xffffffffffffffff, [{0x5, 0xf, "a67330eb568c4d8fc04862747e"}, {0x7, 0x4, "2bb0"}, {0x0, 0x10, "deb306ac407ea1f6b4a40b9a284b"}, {0x6, 0xa, "38361847abd65ec3"}, {0x0, 0x12, "0a5ab09481876b5f85f3a3634fbaaa6d"}, {0x0, 0xf, "a6edae67c9221689b69edf0833"}, {0x0, 0x7, "3f5a48165e"}, {0x5, 0xa, "b9468fbd1a6a71a5"}, {0x6, 0x11, "e90abc61fd964564d0142519d95724"}, {0x5, 0x8, "a083d76ba105"}]}, @timestamp_prespec={0x44, 0x4, 0x29, 0x3, 0xb}]}}}}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x404000, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10104}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x4004000) fcntl$notify(r0, 0x402, 0x80000008) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80) r3 = open(&(0x7f00000005c0)='./file0\x00', 0x800, 0x89) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000841) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000840)={'gretap0\x00', &(0x7f00000007c0)={'erspan0\x00', r1, 0x8000, 0x1, 0x9, 0x3, {{0x15, 0x4, 0x3, 0x23, 0x54, 0x64, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x7, 0x12, "4c82a761492813a75c6c2e0f4009caf7"}, @cipso={0x86, 0x20, 0x3, [{0x1, 0x7, "a1beb88136"}, {0x2, 0xe, "2f19cb8d6c86bbb1aa6be829"}, {0x5, 0x5, "275511"}]}, @ssrr={0x89, 0xb, 0xb7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/module/i8042', 0x5a9200, 0x16) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa9d}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000ac0)={'tunl0\x00', r5, 0x1, 0x20, 0xa7c, 0x2, {{0x21, 0x4, 0x0, 0x2, 0x84, 0x67, 0x0, 0xa9, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @generic={0x83, 0x6, "ae6430c1"}, @rr={0x7, 0x13, 0xe6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty]}, @lsrr={0x83, 0x1f, 0xdf, [@dev={0xac, 0x14, 0x14, 0xd}, @multicast2, @rand_addr=0x64010102, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x34, 0xfc, 0x3, 0x7, [{@empty, 0x56584ae7}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0xca30}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@remote, 0x2}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', r7, 0x8000, 0x8, 0x27c, 0x0, {{0xb, 0x4, 0x2, 0x6, 0x2c, 0x65, 0x0, 0x79, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0xe6, [@empty, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x16}]}]}}}}}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x38d4f3c3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48040) [ 97.550897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.552465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.553874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.564656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.570485] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.576096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.723168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.725173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.726582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.734154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.736027] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.737486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.779172] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.780631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.786974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.801754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.805876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.807543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.808783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.811021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.811502] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.814054] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.814996] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.832243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.837838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.841556] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.844201] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.848049] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.848098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.848379] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.849902] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.850218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.861130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.873302] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.879901] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.889103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.895128] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.895885] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.907935] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.908459] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.912076] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.918271] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.923890] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.937898] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 97.938373] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.974306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.983771] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.986150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.617423] Bluetooth: hci0: command tx timeout [ 99.807860] Bluetooth: hci1: command tx timeout [ 99.871806] Bluetooth: hci3: command tx timeout [ 99.936229] Bluetooth: hci4: command tx timeout [ 99.936428] Bluetooth: hci2: command tx timeout [ 100.001821] Bluetooth: hci5: command tx timeout [ 100.063871] Bluetooth: hci6: command tx timeout [ 100.063893] Bluetooth: hci7: command tx timeout [ 101.690968] Bluetooth: hci0: command tx timeout [ 101.860562] Bluetooth: hci1: command tx timeout [ 101.920025] Bluetooth: hci3: command tx timeout [ 101.985005] Bluetooth: hci2: command tx timeout [ 101.985029] Bluetooth: hci4: command tx timeout [ 102.047820] Bluetooth: hci5: command tx timeout [ 102.111780] Bluetooth: hci6: command tx timeout [ 102.111833] Bluetooth: hci7: command tx timeout [ 103.711757] Bluetooth: hci0: command tx timeout [ 103.903776] Bluetooth: hci1: command tx timeout [ 103.967752] Bluetooth: hci3: command tx timeout [ 104.031778] Bluetooth: hci4: command tx timeout [ 104.033184] Bluetooth: hci2: command tx timeout [ 104.096083] Bluetooth: hci5: command tx timeout [ 104.160779] Bluetooth: hci7: command tx timeout [ 104.161804] Bluetooth: hci6: command tx timeout [ 105.760998] Bluetooth: hci0: command tx timeout [ 105.952758] Bluetooth: hci1: command tx timeout [ 106.017020] Bluetooth: hci3: command tx timeout [ 106.102808] Bluetooth: hci2: command tx timeout [ 106.102928] Bluetooth: hci4: command tx timeout [ 106.155179] Bluetooth: hci5: command tx timeout [ 106.208057] Bluetooth: hci6: command tx timeout [ 106.212048] Bluetooth: hci7: command tx timeout [ 160.190305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.192917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.193926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.196599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.202253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.203259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.327941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.332786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.339525] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.343626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.350171] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.350811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.381344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.390779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.450122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.517456] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.519376] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 160.520488] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.530727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.533395] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.534508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.541580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.543589] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.544569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.548904] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.552419] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.560987] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 160.563115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.568226] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 160.569877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.572772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.573582] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.576361] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.577738] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 160.578360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 160.590851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.590964] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 160.591281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.596473] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.602163] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.607431] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 160.609279] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 160.610610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 160.676213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.699133] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.725374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.730891] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.732092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.273089] Bluetooth: hci0: command tx timeout [ 162.400872] Bluetooth: hci1: command tx timeout [ 162.592720] Bluetooth: hci6: command tx timeout [ 162.592771] Bluetooth: hci2: command tx timeout [ 162.593147] Bluetooth: hci4: command tx timeout [ 162.719760] Bluetooth: hci7: command tx timeout [ 162.847785] Bluetooth: hci3: command tx timeout [ 162.848135] Bluetooth: hci5: command tx timeout [ 164.321340] Bluetooth: hci0: command tx timeout [ 164.459841] Bluetooth: hci1: command tx timeout [ 164.665854] Bluetooth: hci4: command tx timeout [ 164.666852] Bluetooth: hci6: command tx timeout [ 164.667501] Bluetooth: hci2: command tx timeout [ 164.793689] Bluetooth: hci7: command tx timeout [ 164.896803] Bluetooth: hci5: command tx timeout [ 164.896917] Bluetooth: hci3: command tx timeout [ 166.369701] Bluetooth: hci0: command tx timeout [ 166.495888] Bluetooth: hci1: command tx timeout [ 166.688802] Bluetooth: hci2: command tx timeout [ 166.688927] Bluetooth: hci6: command tx timeout [ 166.688988] Bluetooth: hci4: command tx timeout [ 166.816928] Bluetooth: hci7: command tx timeout [ 166.944353] Bluetooth: hci3: command tx timeout [ 166.945068] Bluetooth: hci5: command tx timeout [ 168.416780] Bluetooth: hci0: command tx timeout [ 168.547940] Bluetooth: hci1: command tx timeout [ 168.745716] Bluetooth: hci2: command tx timeout [ 168.745841] Bluetooth: hci4: command tx timeout [ 168.745939] Bluetooth: hci6: command tx timeout [ 168.869721] Bluetooth: hci7: command tx timeout [ 169.052981] Bluetooth: hci5: command tx timeout [ 169.053087] Bluetooth: hci3: command tx timeout [ 222.725913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.731520] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.737547] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.743235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.746379] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.752974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.821030] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.828551] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.829879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.837454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.841591] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.842834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.897279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.901698] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.902987] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.906052] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.907784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 222.909135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.979616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.987293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.992895] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.995590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.995906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.003177] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.003478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.011935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.014964] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.018025] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.018057] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.025973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.029918] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.037081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.038957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.078881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.095424] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.097155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.112966] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.137757] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.220756] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.235890] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.238892] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 223.239092] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.248165] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 223.255020] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.267578] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.270990] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.277304] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.278672] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.801742] Bluetooth: hci0: command tx timeout [ 224.928931] Bluetooth: hci1: command tx timeout [ 224.993004] Bluetooth: hci2: command tx timeout [ 225.189052] Bluetooth: hci4: command tx timeout [ 225.189623] Bluetooth: hci5: command tx timeout [ 225.313823] Bluetooth: hci3: command tx timeout [ 225.314320] Bluetooth: hci7: command tx timeout [ 225.376769] Bluetooth: hci6: command tx timeout [ 226.847731] Bluetooth: hci0: command tx timeout [ 226.975749] Bluetooth: hci1: command tx timeout [ 227.039737] Bluetooth: hci2: command tx timeout [ 227.231977] Bluetooth: hci5: command tx timeout [ 227.232098] Bluetooth: hci4: command tx timeout [ 227.361844] Bluetooth: hci7: command tx timeout [ 227.361966] Bluetooth: hci3: command tx timeout [ 227.423788] Bluetooth: hci6: command tx timeout [ 228.895804] Bluetooth: hci0: command tx timeout [ 229.023736] Bluetooth: hci1: command tx timeout [ 229.087731] Bluetooth: hci2: command tx timeout [ 229.281716] Bluetooth: hci5: command tx timeout [ 229.282368] Bluetooth: hci4: command tx timeout [ 229.407798] Bluetooth: hci3: command tx timeout [ 229.409475] Bluetooth: hci7: command tx timeout [ 229.475706] Bluetooth: hci6: command tx timeout [ 230.945689] Bluetooth: hci0: command tx timeout [ 231.072107] Bluetooth: hci1: command tx timeout [ 231.135763] Bluetooth: hci2: command tx timeout [ 231.328718] Bluetooth: hci5: command tx timeout [ 231.329344] Bluetooth: hci4: command tx timeout [ 231.461700] Bluetooth: hci3: command tx timeout [ 231.461818] Bluetooth: hci7: command tx timeout [ 231.519773] Bluetooth: hci6: command tx timeout [ 285.157978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.177593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.187374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.189928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.191524] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.192837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.291396] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.293904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.295887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.299038] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.303863] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.305923] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.402186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.405924] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.413564] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.425152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.429482] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.433801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.552271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.558714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.560519] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.566131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.567218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.571887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.572070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.575173] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.576282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.592119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.613811] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.617006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.617530] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.627160] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.630990] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.639330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.663034] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.675004] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 285.675766] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.678097] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 285.679587] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 285.680475] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.683472] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 285.687047] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 285.689871] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.699860] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 285.700076] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.704983] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.706578] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 285.721119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.327759] Bluetooth: hci0: command tx timeout [ 287.401601] Bluetooth: hci1: command tx timeout [ 287.521522] Bluetooth: hci2: command tx timeout [ 287.647723] Bluetooth: hci3: command tx timeout [ 287.751703] Bluetooth: hci4: command tx timeout [ 287.775733] Bluetooth: hci7: command tx timeout [ 287.775813] Bluetooth: hci6: command tx timeout [ 287.776126] Bluetooth: hci5: command tx timeout [ 289.376754] Bluetooth: hci0: command tx timeout [ 289.439735] Bluetooth: hci1: command tx timeout [ 289.567690] Bluetooth: hci2: command tx timeout [ 289.695811] Bluetooth: hci3: command tx timeout [ 289.760804] Bluetooth: hci4: command tx timeout [ 289.823784] Bluetooth: hci5: command tx timeout [ 289.823810] Bluetooth: hci6: command tx timeout [ 289.823886] Bluetooth: hci7: command tx timeout [ 291.423866] Bluetooth: hci0: command tx timeout [ 291.503936] Bluetooth: hci1: command tx timeout [ 291.616056] Bluetooth: hci2: command tx timeout [ 291.744062] Bluetooth: hci3: command tx timeout [ 291.808660] Bluetooth: hci4: command tx timeout [ 291.873772] Bluetooth: hci5: command tx timeout [ 291.874506] Bluetooth: hci7: command tx timeout [ 291.875197] Bluetooth: hci6: command tx timeout [ 293.472744] Bluetooth: hci0: command tx timeout [ 293.535884] Bluetooth: hci1: command tx timeout [ 293.663736] Bluetooth: hci2: command tx timeout [ 293.791939] Bluetooth: hci3: command tx timeout [ 293.855707] Bluetooth: hci4: command tx timeout [ 293.919709] Bluetooth: hci6: command tx timeout [ 293.920891] Bluetooth: hci7: command tx timeout [ 293.920977] Bluetooth: hci5: command tx timeout [ 347.953395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.955323] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.961857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.971158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.992481] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.993778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.203350] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.207302] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.209444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.213930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 348.215315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 348.216949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 348.225506] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.227544] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 348.228931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.235373] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 348.237099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 348.238316] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.421192] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.449879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.455257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.472682] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.477188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.478408] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.508194] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.508533] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.514026] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.516914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.528931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.529756] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.530215] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.531186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.534272] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.539763] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.552817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.554479] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.564569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.566200] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 348.567362] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.577823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.587799] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 348.594866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.652256] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 348.725979] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 348.728948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 348.765260] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 348.786715] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 348.789177] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 350.115682] Bluetooth: hci0: command tx timeout [ 350.303797] Bluetooth: hci1: command tx timeout [ 350.304233] Bluetooth: hci2: command tx timeout [ 350.624751] Bluetooth: hci3: command tx timeout [ 350.624757] Bluetooth: hci4: command tx timeout [ 350.687858] Bluetooth: hci5: command tx timeout [ 350.687887] Bluetooth: hci6: command tx timeout [ 350.879951] Bluetooth: hci7: command tx timeout [ 352.159873] Bluetooth: hci0: command tx timeout [ 352.353711] Bluetooth: hci2: command tx timeout [ 352.353967] Bluetooth: hci1: command tx timeout [ 352.671701] Bluetooth: hci4: command tx timeout [ 352.684640] Bluetooth: hci3: command tx timeout [ 352.735752] Bluetooth: hci6: command tx timeout [ 352.749753] Bluetooth: hci5: command tx timeout [ 352.929051] Bluetooth: hci7: command tx timeout [ 354.211360] Bluetooth: hci0: command tx timeout [ 354.403815] Bluetooth: hci1: command tx timeout [ 354.403927] Bluetooth: hci2: command tx timeout [ 354.719710] Bluetooth: hci3: command tx timeout [ 354.719823] Bluetooth: hci4: command tx timeout [ 354.783716] Bluetooth: hci5: command tx timeout [ 354.783823] Bluetooth: hci6: command tx timeout [ 354.975710] Bluetooth: hci7: command tx timeout [ 356.259675] Bluetooth: hci0: command tx timeout [ 356.456697] Bluetooth: hci2: command tx timeout [ 356.456811] Bluetooth: hci1: command tx timeout [ 356.772672] Bluetooth: hci4: command tx timeout [ 356.772782] Bluetooth: hci3: command tx timeout [ 356.832694] Bluetooth: hci6: command tx timeout [ 356.833348] Bluetooth: hci5: command tx timeout [ 357.024988] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:53:50 Registers: info registers vcpu 0 RAX=0000000080010100 RBX=fffffffffffffee1 RCX=ffffffff815fdbe1 RDX=ffff888034eb9bc0 RSI=0000000000000003 RDI=0000000000000005 RBP=0000000000000002 RSP=ffff88806ce09768 R8 =0000000000000000 R9 =ffff888034eba608 R10=0000000000000002 R11=0000000000000001 R12=ffff88806ce2b800 R13=fffffbfff0b42040 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff815fdbe1 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f682bfad790 CR3=000000002b1d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000ffffff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88806cf00000 RCX=ffffffff81993bf0 RDX=0000000000000000 RSI=ffffffff81993cf0 RDI=ffff88806cf36250 RBP=0000000000000014 RSP=ffff888022e8fe50 R8 =0000000000000000 R9 =fffffbfff0fe13e4 R10=0000000000000001 R11=0000000000000000 R12=ffff888015b73900 R13=00007f2822ac8028 R14=ffff888015b73900 R15=0000000000000000 RIP=ffffffff815937b0 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2822ac8028 CR3=00000000268d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000