Warning: Permanently added '[localhost]:5819' (ECDSA) to the list of known hosts. 2025/01/23 15:02:09 fuzzer started 2025/01/23 15:02:10 dialing manager at localhost:38529 syzkaller login: [ 70.611800] cgroup: Unknown subsys name 'net' [ 70.722302] cgroup: Unknown subsys name 'cpuset' [ 70.757826] cgroup: Unknown subsys name 'rlimit' [ 76.597410] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 15:02:27 syscalls: 2217 2025/01/23 15:02:27 code coverage: enabled 2025/01/23 15:02:27 comparison tracing: enabled 2025/01/23 15:02:27 extra coverage: enabled 2025/01/23 15:02:27 setuid sandbox: enabled 2025/01/23 15:02:27 namespace sandbox: enabled 2025/01/23 15:02:27 Android sandbox: enabled 2025/01/23 15:02:27 fault injection: enabled 2025/01/23 15:02:27 leak checking: enabled 2025/01/23 15:02:27 net packet injection: enabled 2025/01/23 15:02:27 net device setup: enabled 2025/01/23 15:02:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 15:02:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 15:02:27 USB emulation: enabled 2025/01/23 15:02:27 hci packet injection: enabled 2025/01/23 15:02:27 wifi device emulation: enabled 2025/01/23 15:02:27 802.15.4 emulation: enabled 2025/01/23 15:02:28 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/23 15:02:28 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/23 15:02:28 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/23 15:02:28 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/23 15:02:28 fetching corpus: 0, signal 0/10000 (executing program) 2025/01/23 15:02:28 fetching corpus: 0, signal 0/11663 (executing program) 2025/01/23 15:02:28 fetching corpus: 0, signal 0/11663 (executing program) 2025/01/23 15:02:30 starting 8 fuzzer processes 15:02:30 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/wmi', 0x10200, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x6, 0x1e, &(0x7f0000000040)="749c773df7f32df839b9c8f7678cd9ad641edc51e356f82cd9d2fc37cbf2", 0x0, 0xc8246b57a80056d}, {0x101, 0x2, &(0x7f0000000080)="671e", 0x1}]}) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7f, 0x7f}, 0x100, './file0\x00'}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x200000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x240, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x4080) r3 = openat$cgroup_ro(r0, &(0x7f0000000440)='memory.numa_stat\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r4, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x40, 0x1, 0x50, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, @empty, 0x20, 0x20, 0x4, 0x2}}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x7, 0x8, 0x3f, 0x9, 0x6, 0x7, 0x4, 0x1, 0x100, 0x7, 0x8, 0x0, 0x7ff, 0x3ff, 0x6]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0x4, 0xfff7, 0xfff8, 0x1}}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x2, 0x2, 0x0, {0x9, 0xff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x3, 0x81}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20004014) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x1f) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x20, 0x5, 0x42, @local, @private2, 0x7, 0x700, 0x0, 0x3367}}) 15:02:30 executing program 1: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'system.', '\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace(0x10, r0) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:boot_t:s0\x00', 0x1c, 0x1) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x46, 0x1, 0x1}, &(0x7f0000000180)=[{}]) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000002c0)={&(0x7f0000000240)=""/66, 0x42}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000340)={0x1, 0x2, {0x1, 0x1, 0x3, 0x0, 0x1}, 0x3}) r2 = fsmount(r1, 0x1, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x3, 0x8, 0x801, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3158}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c080}, 0x800) r3 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r3, 0x3, &(0x7f00000006c0)=""/18) r4 = syz_open_dev$mouse(&(0x7f0000000700), 0x1, 0x1cb000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000840)=@get={0x1, &(0x7f0000000780)=""/189, 0x7}) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000880)={[0xffffffffffffffe1]}, &(0x7f00000008c0), &(0x7f0000000980)={r5, r6+10000000}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, &(0x7f00000009c0)) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000ac0)={&(0x7f0000000a80)=""/44, 0x2c}) 15:02:30 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x40014) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x29001020}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x12d03f6fe92e748f) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f8, 0x4, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000080}, 0x48000) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000500)=0x1) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000780), 0x7, 0x400000) r3 = syz_open_dev$vcsn(&(0x7f0000000800), 0xbf, 0x80000) sendmsg$netlink(r2, &(0x7f0000001c80)={&(0x7f00000007c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc, &(0x7f0000001bc0)=[{&(0x7f0000000840)={0x1178, 0x31, 0x200, 0x70bd27, 0x25dfdbff, "", [@nested={0x66, 0xb, 0x0, 0x1, [@generic="c9763900b20d1a0cf1ce4568677807d3bd36c20fe01b53fc242177307fbea3100e45f041c2eaf8e4b9ca75f8e562", @generic="0b0ae473752576e69c6cd155d63a59a2", @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x8e, 0x0, 0x0, @uid}, @typed={0x8, 0x1c, 0x0, 0x0, @uid=0xee01}]}, @nested={0x10f1, 0x1e, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @fd=r0}, @generic="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", @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@empty}, @generic="f82fd772dd83cacaa4bccfb74aaf985fa7cc742dd2f526dd93dfa272839806a674142a80b8cbf1d27efd2ad392069d97eadc28ca4f35579f70e58bef8a9fac20245541095900dbb69b69069dee908a9a37cc24fd9abae58a1a4c979c2b6c7ce4d9916f844dcf2c833d59920b979225c2a88be68067e47de93243313d6573f69d81", @typed={0x27, 0x7b, 0x0, 0x0, @binary="433fc43f8cfc6e05c67a8fa50fdde0ade6d3e173d94a4944eee18fb0f9e9f2a78f8f56"}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x3c, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x6f, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, @nested={0x4, 0x93}, @typed={0x8, 0x88, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1178}, {&(0x7f00000019c0)={0x194, 0x3e, 0x100, 0x70bd29, 0x25dfdbfc, "", [@nested={0x78, 0x26, 0x0, 0x1, [@typed={0x72, 0x69, 0x0, 0x0, @binary="e1b1b495a70fd983d0f0bda9ed4492111e84ee347f75fb9aaaf46bfee07e93777c370bd4ec8d8652405f409e2e079568125415cdcd5f16554373c0838c47965446d5afe7f6c37fa540507c622bf876600eeec7c24500acea39578524f5bc8f32b770314e77b4b49a175adb1b6c93"}]}, @generic="2cf483729366225dc7778200f1098e19ce0532e67fe2bf2266d7da64aad37b74fd84a11a321128656d56c707a1bc5016d4d96bcb28e5f73e0a57a82b26723ee62682d56d18cce3c03fd2f0a49ec407cca003856359683b595479f950723b2829e476fb315779159001c84f2bdccff6909fef87a1f529ebeee7e8cf70fa8ef24e93b0bf493f9810940fff9afaa1f5da1718b997794029a256e21153354d9c4e83eeae50a8899bbfc28f3bf117f4d1165fd8c37544a15680ef79026bc2ab810cb1dc", @nested={0x46, 0x63, 0x0, 0x1, [@generic="a6586797e27a400e7b681662e2ece2001c63db9c1115c49d4b8faf35d0f2198659e808a938d1b9be6aa2deefd364f4d6a44414366644787688836372c04312e13978"]}]}, 0x194}, {&(0x7f0000001b80)={0x18, 0x1f, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@remote}]}, 0x18}], 0x3, &(0x7f0000001c00)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x58, 0xede5d92fdfc9c4a1}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001cc0), 0x20500, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff230e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8054}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000001e40)={0x1, 0x2, 'client0\x00', 0xffffffff80000002, "1b7992b0898e4667", "c822534625e5813a03e66ad04c2c3c4cfef4b9971882a586e9406bfb6fb90542", 0x2, 0x200}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001f40), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x28, r5, 0x0, 0x401, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}}, 0x2048080) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000002200)={&(0x7f0000002040), 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffe00}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}}, 0x8000) 15:02:31 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffff8743, 0xfffffffffffffff8) syncfs(0xffffffffffffffff) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) timerfd_gettime(r0, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x664401, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) r2 = mq_open(&(0x7f0000000180)='!(I{),}*\x00', 0x40, 0x0, &(0x7f00000001c0)={0xff, 0xfffffffffffffffc, 0x2400000000, 0x1}) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000200)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000280)={0x0, 'vlan0\x00', {0x1}, 0x7}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee01}}, './file0\x00'}) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3f, 0x7, 0x0, 0x9, 0x11, 0x10, "d280aab7976641f8fa37181e0acccd3855ee4ea83fd61b286173a28897f494870606dd4d338513157618923100eea94bf821e3d714bcb4f90bf5fcfcb0478812", "7604b249fe7f161366c8b94cee1fcd81de429a16f87dc93ff0796b96866eec2b6f5f80117b7cdaacdad2806470fabb3ca4ddb04a3958302d1aed8a64fad0a1f7", "75390850a7db64fac1147b7d5a694db4dce7d29d4bf82bfe5f68a11100007d11", [0x1, 0x10000]}) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000400)=0x7) write$P9_RUNLINKAT(r3, &(0x7f0000000440)={0x7, 0x4d, 0x1}, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg$unix(r5, &(0x7f0000000840)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)=""/2, 0x2}], 0x1, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)=""/147, 0x93}], 0x1, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}], 0x2, 0x143, &(0x7f00000008c0)={0x0, 0x989680}) fcntl$lock(r6, 0x6, &(0x7f0000000900)={0x2, 0x3, 0x5, 0x7739, r8}) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x7c, 0x1, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1cb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xed32}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc}, @NFACCT_PKTS={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040008}, 0x8000) write$P9_RWRITE(r5, &(0x7f0000000a80)={0xb, 0x77, 0x1, 0x20}, 0xb) 15:02:31 executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x28}, {r0}, {0xffffffffffffffff, 0x4006}, {0xffffffffffffffff, 0x1400}], 0x4, 0x2) r1 = syz_io_uring_complete(0x0) fgetxattr(r1, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f00000000c0)=""/224, 0xe0) r2 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1, 0x3, &(0x7f0000000480)=[{&(0x7f0000000240)="605a8a9230e88cb5c1167c28d5937b2f371f61cddac37490dda9d0fb0cc3c7c206313d1be8d5e73df817d3de600906d254c568e261a3115b276a5b79a15652084d9b7dab956138f66684298416ecf228", 0x50, 0x3ff}, {&(0x7f00000002c0)="65567e4da998b7e82e05990f15f09cf58b9312d0d4a22b455a498aab02003790f264a58734679ba6bb1d7b87552d0ad142d72c394d97600bc1ec32530ff513dfafcbcd91ab7991f518c96f81f765d6a5bb1ecacf5752d4648e4b36744c206ff3740d82d254f27a15962ef1ddb5f99e78d06eee591be9bcb331a6fbf84651e61cd5398525b0730759459a988f8a3ea15f173187ab917b56b12ea10f841eb4b5bf98c9", 0xa2, 0x1000}, {&(0x7f0000000380)="75ae53623c9ba1fc3fa0722a4d405ffcf3543fcc431606a6987c2aa3b651e991fe4b0a48dcbc28eff5d6d157081a3b6234c9f4643ab26a6e27f323d71590b6cf5a6bf35273201ad09663c5d61a56ae7f554bd71339f4b5e7aec016daefb81b9196e37a2f6ca85d4f926949e7b1271484d93bcb79a4cc8ffdbcbb5d35d4566a9f652a7b75c305916891242455e484d720f3dd36643da15836a33ca83aa61e053dec8ef4f818f43399db3841e406b29a0fa043ea3e5b2879dedc0dc8fe5ae7f6c365389a183b1ac65045011cc8e2581e79c6a89acd2fcf111fd8fc8d162aed61fe6449", 0xe2, 0x9}], 0x10480, &(0x7f0000000500)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70, 0x31, 0x37, 0x33]}}, {@huge_within_size}, {@huge_advise}, {@huge_within_size}, {@gid={'gid', 0x3d, 0xee01}}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x8}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'com.apple.FinderInfo\x00'}}, {@appraise_type}, {@permit_directio}, {@subj_user}, {@obj_user={'obj_user', 0x3d, 'com.apple.FinderInfo\x00'}}, {@euid_lt={'euid<', 0xee00}}, {@fowner_lt={'fowner<', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_type={'subj_type', 0x3d, '*$'}}]}) fsetxattr$security_ima(r2, &(0x7f0000000680), &(0x7f00000006c0)=@ng={0x4, 0x14, "b42631a5e9df68e200982ab51d8a7b"}, 0x11, 0x1) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000700)={0x3, 0x2}, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000740)={0x84, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @enc_lim={0x4, 0x1, 0x5}, @pad1]}, 0x18) r3 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000000780)) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f00000007c0)=@bca={0x3, 0xbc, "74ef2a130b4ca92591dfe0c9ee3a4ab37f390d58a371a1c566702b0a9fc04e84ac9dc38300d3a5cff4b36c1006fc4a6d705d99d7171fb50e595cba7b5cba7c93de1e6a193f3651c85bef45bb12e076eddcc92aff98b4e08062ee7c7c30685b4d224c13b6c2e114643dc189c83ec4a5a3208ab2bdc3c8d6807b4c92ef4c01c80b21e23e39dd21666575863323e4d5a2292597e4321d0e14394c715511ae38b67a20134e8081d6e4452dda71685b8bcb3ecaa1016791a1dd34a7ae43ae"}) r4 = accept4$unix(r1, &(0x7f0000001000), &(0x7f0000001080)=0x6e, 0x800) fcntl$setownex(r4, 0xf, &(0x7f00000010c0)={0x1}) r5 = signalfd(r0, &(0x7f0000001100)={[0x31]}, 0x8) r6 = openat$cgroup(r1, &(0x7f0000001140)='syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000001180)={{0x1, 0x1, 0x18, r6, {0xfff, 0x7}}, './file0\x00'}) setxattr$security_ima(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), &(0x7f0000001240)=@v2={0x3, 0x3, 0x9, 0x3963, 0x47, "5a21c7820559f00d693d9f8615ab03b7dd540c43025174aeaef596b4d5c3241cb34fd794b29a4a6e35f1bd83b5db2411f55b19191b7b29964381ae5c69ea2f6cd53ca8bdfe0af0"}, 0x50, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000012c0)={0x4, 0xff, "c25495", 0xcd, 0x8c}) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000001300)=@req3={0x76, 0x1, 0x6, 0x4, 0x10000, 0x3f, 0x6}, 0x1c) ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f0000001380)) [ 90.927859] audit: type=1400 audit(1737644551.062:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:02:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x375}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @key_params=[@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67719594ea"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dcd549d160"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0da61120a9799b7057dabdb4d3"}, @NL80211_ATTR_KEY_SEQ={0x4}], @NL80211_ATTR_MAC={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2004c800}, 0x8001) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000001c0)={0x0, 0x0, [0x6, 0x2, 0x2, 0x0, 0x9, 0x1f]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xb44}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) r3 = signalfd(r1, &(0x7f0000000380)={[0x5]}, 0x8) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x104, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, @out_args}, './file1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x2f, 0x0, 0x9, 0xe7c0, 0x1b, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x40, 0x7800, 0x8, 0x1}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x94, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004001}, 0x40800) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4009095}, 0x850) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000980)={@msf={0xc2, 0x5, 0xff}, 0x2, 0xe, &(0x7f0000000940)=""/14}) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a40)={{r5, r6/1000+60000}}, 0x100) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a80), 0x800, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000000ac0)={{0xa, 0x4e20, 0x101, @private2, 0x2}, {0xa, 0x4e22, 0x12, @private2}, 0x9, [0x1ff, 0x60, 0xfff, 0x1, 0x7, 0x2, 0xffff7fff, 0xfff]}, 0x5c) syz_io_uring_setup(0x1e04, &(0x7f0000000b40)={0x0, 0xd0c6, 0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000c40)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x8001) 15:02:31 executing program 6: arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) setpgid(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80000001, 0x14}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x400c001) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x140400c1) setxattr$security_evm(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)=@v1={0x2, "9cdd1650e52255cb35bde564c400fae063e374"}, 0x14, 0x2) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000600)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x8000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000780)=0x0) wait4(r6, 0x0, 0x1000000, &(0x7f00000007c0)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ptrace$pokeuser(0x6, 0x0, 0x5, 0x60076a92) 15:02:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2a}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dummy0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1c19609ca488a22151b36718d49b46cfd8a51f2ffdf3cb0d"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "35e99abbeddf2c97a685d2fddd25f8c622c738b945c82580"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'erspan0\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xf8}, 0x1, 0x0, 0x0, 0x200100c4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x194, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffff7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7a6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffb}}]}, 0x194}, 0x1, 0x0, 0x0, 0x44040}, 0x40000) r3 = signalfd4(r1, &(0x7f0000000480)={[0xffffffff9c0f83ad]}, 0x8, 0x80800) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000004c0)={0x8001, 0x8, 0x0, 0x8001, 0x12, "3994d6677091a88a631eb3d53c6ebae8a3b1a9"}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000500), 0xffffffffc3feafa7, 0x121040) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000540)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r6, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xde}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40040c0) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x1f, &(0x7f00000006c0)={0x29, 0x1ff, 0x100}) r7 = syz_open_dev$vcsa(&(0x7f0000000740), 0x400, 0x400180) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x8c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x9a}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xafa}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x7e}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x7}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x7a}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4c050}, 0x4045) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40048d1}, 0x4040000) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r10, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x62}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x10) [ 92.213767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.218200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.227854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.255545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.263761] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.265365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.540350] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.543016] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.552592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.555072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.572121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.579621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.602009] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.613899] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.616336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.619000] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.626463] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.630386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.630726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.636463] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.640662] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.641328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.642089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.642800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.649378] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.650199] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.650777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.655264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.662487] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.665605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.669242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.677314] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.677771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.678543] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.705643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.706543] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.706992] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.709529] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.715530] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.738511] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.744925] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.748677] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.767303] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.794841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.798144] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.803313] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.828699] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.834807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.305547] Bluetooth: hci0: command tx timeout [ 94.621512] Bluetooth: hci1: command tx timeout [ 94.687492] Bluetooth: hci4: command tx timeout [ 94.749778] Bluetooth: hci6: command tx timeout [ 94.749815] Bluetooth: hci3: command tx timeout [ 94.750316] Bluetooth: hci2: command tx timeout [ 94.814214] Bluetooth: hci5: command tx timeout [ 94.941881] Bluetooth: hci7: command tx timeout [ 96.371484] Bluetooth: hci0: command tx timeout [ 96.669526] Bluetooth: hci1: command tx timeout [ 96.747327] Bluetooth: hci4: command tx timeout [ 96.801297] Bluetooth: hci6: command tx timeout [ 96.801399] Bluetooth: hci3: command tx timeout [ 96.801551] Bluetooth: hci2: command tx timeout [ 96.861573] Bluetooth: hci5: command tx timeout [ 96.989559] Bluetooth: hci7: command tx timeout [ 98.397513] Bluetooth: hci0: command tx timeout [ 98.717516] Bluetooth: hci1: command tx timeout [ 98.782216] Bluetooth: hci4: command tx timeout [ 98.845568] Bluetooth: hci2: command tx timeout [ 98.845666] Bluetooth: hci3: command tx timeout [ 98.845764] Bluetooth: hci6: command tx timeout [ 98.909667] Bluetooth: hci5: command tx timeout [ 99.038506] Bluetooth: hci7: command tx timeout [ 100.465785] Bluetooth: hci0: command tx timeout [ 100.767478] Bluetooth: hci1: command tx timeout [ 100.829510] Bluetooth: hci4: command tx timeout [ 100.893546] Bluetooth: hci6: command tx timeout [ 100.893657] Bluetooth: hci3: command tx timeout [ 100.893719] Bluetooth: hci2: command tx timeout [ 100.957697] Bluetooth: hci5: command tx timeout [ 101.085692] Bluetooth: hci7: command tx timeout [ 154.941159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.948792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.949604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.952313] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.957939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.958632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.008202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.014617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.019832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.026193] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.030173] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.031851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.115070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.116639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.117240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.121777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.123498] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.125610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.135203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.142222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.153681] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.180058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.182553] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.189134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.191537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.203587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.216520] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.233746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.236901] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.238130] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.314019] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.317509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.322227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.342537] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.390642] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.397941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.609081] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.610544] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.611775] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.637145] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.639592] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.643038] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.651005] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.652607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.653887] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.661633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.662710] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.663187] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.021634] Bluetooth: hci0: command tx timeout [ 157.149539] Bluetooth: hci2: command tx timeout [ 157.149992] Bluetooth: hci1: command tx timeout [ 157.277680] Bluetooth: hci3: command tx timeout [ 157.342544] Bluetooth: hci4: command tx timeout [ 157.598517] Bluetooth: hci5: command tx timeout [ 157.726795] Bluetooth: hci6: command tx timeout [ 157.726857] Bluetooth: hci7: command tx timeout [ 159.081463] Bluetooth: hci0: command tx timeout [ 159.200707] Bluetooth: hci2: command tx timeout [ 159.200804] Bluetooth: hci1: command tx timeout [ 159.325753] Bluetooth: hci3: command tx timeout [ 159.390515] Bluetooth: hci4: command tx timeout [ 159.653679] Bluetooth: hci5: command tx timeout [ 159.784466] Bluetooth: hci7: command tx timeout [ 159.784630] Bluetooth: hci6: command tx timeout [ 161.117686] Bluetooth: hci0: command tx timeout [ 161.245522] Bluetooth: hci1: command tx timeout [ 161.245657] Bluetooth: hci2: command tx timeout [ 161.373516] Bluetooth: hci3: command tx timeout [ 161.438504] Bluetooth: hci4: command tx timeout [ 161.694029] Bluetooth: hci5: command tx timeout [ 161.822714] Bluetooth: hci6: command tx timeout [ 161.822942] Bluetooth: hci7: command tx timeout [ 163.168228] Bluetooth: hci0: command tx timeout [ 163.297498] Bluetooth: hci1: command tx timeout [ 163.297622] Bluetooth: hci2: command tx timeout [ 163.426944] Bluetooth: hci3: command tx timeout [ 163.510473] Bluetooth: hci4: command tx timeout [ 163.742499] Bluetooth: hci5: command tx timeout [ 163.869535] Bluetooth: hci6: command tx timeout [ 163.869643] Bluetooth: hci7: command tx timeout [ 217.410989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.419024] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.430008] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.441341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.443143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.444314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.531098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.546743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.550511] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.575124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.581915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.585621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.585854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.588227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.589078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.611673] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.614512] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.617690] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.670751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.683601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.684796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.690247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.692256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.693737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.750886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.769842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.781555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.791884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.816800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.828350] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.832634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.836961] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.839806] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.841284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.845497] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.871618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.882010] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.883138] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.886772] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.909638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.914764] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.917984] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.950750] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.959949] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.970678] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.978530] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.993901] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.015245] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.486516] Bluetooth: hci0: command tx timeout [ 219.613641] Bluetooth: hci1: command tx timeout [ 219.678488] Bluetooth: hci2: command tx timeout [ 219.742688] Bluetooth: hci3: command tx timeout [ 219.935735] Bluetooth: hci4: command tx timeout [ 219.936116] Bluetooth: hci6: command tx timeout [ 219.997523] Bluetooth: hci5: command tx timeout [ 220.125525] Bluetooth: hci7: command tx timeout [ 221.547437] Bluetooth: hci0: command tx timeout [ 221.661524] Bluetooth: hci1: command tx timeout [ 221.747583] Bluetooth: hci2: command tx timeout [ 221.801512] Bluetooth: hci3: command tx timeout [ 221.981547] Bluetooth: hci6: command tx timeout [ 221.981578] Bluetooth: hci4: command tx timeout [ 222.046470] Bluetooth: hci5: command tx timeout [ 222.174613] Bluetooth: hci7: command tx timeout [ 223.581624] Bluetooth: hci0: command tx timeout [ 223.714063] Bluetooth: hci1: command tx timeout [ 223.773599] Bluetooth: hci2: command tx timeout [ 223.838463] Bluetooth: hci3: command tx timeout [ 224.031197] Bluetooth: hci6: command tx timeout [ 224.031323] Bluetooth: hci4: command tx timeout [ 224.093482] Bluetooth: hci5: command tx timeout [ 224.221509] Bluetooth: hci7: command tx timeout [ 225.630645] Bluetooth: hci0: command tx timeout [ 225.757513] Bluetooth: hci1: command tx timeout [ 225.821483] Bluetooth: hci2: command tx timeout [ 225.885480] Bluetooth: hci3: command tx timeout [ 226.078598] Bluetooth: hci6: command tx timeout [ 226.078968] Bluetooth: hci4: command tx timeout [ 226.141552] Bluetooth: hci5: command tx timeout [ 226.271350] Bluetooth: hci7: command tx timeout [ 280.083726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.085558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.089762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.092901] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.100605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.105704] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.110209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.121743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.126110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.131075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.135442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.151530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.151554] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.155848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.162876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.211180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.218530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.219857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.221966] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.223039] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.224477] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.235719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.236978] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.237466] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.247234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.262223] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.265733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.308891] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.314711] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.316469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.442290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.442862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.443610] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.444627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.445573] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.446571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.446791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.448518] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.449647] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.450180] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.451233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.457314] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.477560] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.477780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.506552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.506557] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.508061] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.510049] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.141488] Bluetooth: hci1: command tx timeout [ 282.269501] Bluetooth: hci0: command tx timeout [ 282.333572] Bluetooth: hci2: command tx timeout [ 282.333594] Bluetooth: hci3: command tx timeout [ 282.464532] Bluetooth: hci4: command tx timeout [ 282.527427] Bluetooth: hci6: command tx timeout [ 282.589574] Bluetooth: hci7: command tx timeout [ 282.589639] Bluetooth: hci5: command tx timeout [ 284.189642] Bluetooth: hci1: command tx timeout [ 284.317499] Bluetooth: hci0: command tx timeout [ 284.381728] Bluetooth: hci2: command tx timeout [ 284.382627] Bluetooth: hci3: command tx timeout [ 284.510442] Bluetooth: hci4: command tx timeout [ 284.575407] Bluetooth: hci6: command tx timeout [ 284.637521] Bluetooth: hci5: command tx timeout [ 284.640411] Bluetooth: hci7: command tx timeout [ 286.238448] Bluetooth: hci1: command tx timeout [ 286.368471] Bluetooth: hci0: command tx timeout [ 286.429616] Bluetooth: hci3: command tx timeout [ 286.431101] Bluetooth: hci2: command tx timeout [ 286.559520] Bluetooth: hci4: command tx timeout [ 286.636440] Bluetooth: hci6: command tx timeout [ 286.686684] Bluetooth: hci7: command tx timeout [ 286.686811] Bluetooth: hci5: command tx timeout [ 288.295432] Bluetooth: hci1: command tx timeout [ 288.425414] Bluetooth: hci0: command tx timeout [ 288.481458] Bluetooth: hci2: command tx timeout [ 288.481575] Bluetooth: hci3: command tx timeout [ 288.627489] Bluetooth: hci4: command tx timeout [ 288.677411] Bluetooth: hci6: command tx timeout [ 288.747021] Bluetooth: hci5: command tx timeout [ 288.747147] Bluetooth: hci7: command tx timeout [ 342.412749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.414602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.415694] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.418954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.427168] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.429116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.502086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.506511] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.508222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.511087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.513171] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.514391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.635490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.642711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.643923] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.646616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.652651] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.653840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.724135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.743653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.754514] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.770168] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.772253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.772607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.773289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.774155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.777537] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.784564] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.788785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.789106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.791943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.803299] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.808757] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.810173] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.811103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.811619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.833737] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.833975] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.925598] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.926191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.948447] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.956573] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.997095] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.108318] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.122589] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.264285] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.311707] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.323047] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.482453] Bluetooth: hci0: command tx timeout [ 344.543029] Bluetooth: hci1: command tx timeout [ 344.740562] Bluetooth: hci2: command tx timeout [ 344.861464] Bluetooth: hci3: command tx timeout [ 344.989495] Bluetooth: hci5: command tx timeout [ 344.989973] Bluetooth: hci4: command tx timeout [ 345.056758] Bluetooth: hci6: command tx timeout [ 345.501584] Bluetooth: hci7: command tx timeout [ 346.525454] Bluetooth: hci0: command tx timeout [ 346.591560] Bluetooth: hci1: command tx timeout [ 346.785717] Bluetooth: hci2: command tx timeout [ 346.910616] Bluetooth: hci3: command tx timeout [ 347.038456] Bluetooth: hci4: command tx timeout [ 347.038564] Bluetooth: hci5: command tx timeout [ 347.101483] Bluetooth: hci6: command tx timeout [ 347.549555] Bluetooth: hci7: command tx timeout [ 348.573818] Bluetooth: hci0: command tx timeout [ 348.637457] Bluetooth: hci1: command tx timeout [ 348.829432] Bluetooth: hci2: command tx timeout [ 348.958445] Bluetooth: hci3: command tx timeout [ 349.085503] Bluetooth: hci5: command tx timeout [ 349.085618] Bluetooth: hci4: command tx timeout [ 349.149483] Bluetooth: hci6: command tx timeout [ 349.597539] Bluetooth: hci7: command tx timeout [ 350.621658] Bluetooth: hci0: command tx timeout [ 350.685613] Bluetooth: hci1: command tx timeout [ 350.883417] Bluetooth: hci2: command tx timeout [ 351.020394] Bluetooth: hci3: command tx timeout [ 351.136737] Bluetooth: hci4: command tx timeout [ 351.138133] Bluetooth: hci5: command tx timeout [ 351.200756] Bluetooth: hci6: command tx timeout [ 351.645452] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:07:40 Registers: info registers vcpu 0 RAX=0000000080010001 RBX=fffffbfff0b42050 RCX=ffffffff8163e797 RDX=ffff88802d9a8000 RSI=0000000000000000 RDI=0000000000000001 RBP=1ffffffff0b42040 RSP=ffff88806ce09c80 R8 =0000000000000001 R9 =ffff88802d9a8a48 R10=0000000000000001 R11=0000000000000001 R12=00000000000ab9f3 R13=ffff88806ce09ce0 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8163e79a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fabf749f540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fabf7972000 CR3=000000001aad2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81ab94a4 RBX=ffffffff815ec480 RCX=ffffffff8684cc01 RDX=1ffff11006953f06 RSI=ffffffff81ab94a4 RDI=ffff888034a9f8a0 RBP=ffff888034a9f870 RSP=ffff888034a9f7c0 R8 =ffffffff8684cc3e R9 =ffff888034a9f818 R10=000000000003ab7c R11=000000000002419e R12=ffff888034a9f8a0 R13=0000000000000000 R14=ffff88802d9ab780 R15=0000000000092cc0 RIP=ffffffff84ab2f40 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f200a73c540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f200a7643c0 CR3=0000000035db4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000