Warning: Permanently added '[localhost]:42442' (ECDSA) to the list of known hosts. 2025/01/23 18:39:52 fuzzer started 2025/01/23 18:39:53 dialing manager at localhost:45511 syzkaller login: [ 70.152602] cgroup: Unknown subsys name 'net' [ 70.247580] cgroup: Unknown subsys name 'cpuset' [ 70.279995] cgroup: Unknown subsys name 'rlimit' [ 76.505797] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 18:40:12 syscalls: 2217 2025/01/23 18:40:12 code coverage: enabled 2025/01/23 18:40:12 comparison tracing: enabled 2025/01/23 18:40:12 extra coverage: enabled 2025/01/23 18:40:12 setuid sandbox: enabled 2025/01/23 18:40:12 namespace sandbox: enabled 2025/01/23 18:40:12 Android sandbox: enabled 2025/01/23 18:40:12 fault injection: enabled 2025/01/23 18:40:12 leak checking: enabled 2025/01/23 18:40:12 net packet injection: enabled 2025/01/23 18:40:12 net device setup: enabled 2025/01/23 18:40:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 18:40:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 18:40:12 USB emulation: enabled 2025/01/23 18:40:12 hci packet injection: enabled 2025/01/23 18:40:12 wifi device emulation: enabled 2025/01/23 18:40:12 802.15.4 emulation: enabled 2025/01/23 18:40:12 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 18:40:15 starting 8 fuzzer processes 18:40:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_ivalue}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c000}, 0xc011) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000180)=""/164) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000000300)={'batadv_slave_1\x00', @ifru_ivalue}) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000380)) r5 = dup(r0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r6, 0x8, 0x70bd29, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3cd}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffff000}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x95}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48010}, 0x4048000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r4) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x201, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}}, 0x10) sync_file_range(r1, 0x8, 0x80000001, 0x4) r8 = dup2(r1, r0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r9, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfb}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2, {0xffff00000000000}}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40844}, 0x4008044) 18:40:15 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5762}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff0000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd0a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, 0x17, 0xa, 0xb80, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x118, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, 0x180}, 0x1, 0x0, 0x0, 0x2bd950ac55aae487}, 0x440c5) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x400c1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000480)={0xff, 0x40, 0x1, 0x2, 0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40048c1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) r3 = socket$inet(0x2, 0x2, 0x400) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000700)={0x80000000, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8001, 0x1a}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000940), 0x448000, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000980), 0x3, 0x108000) fcntl$setownex(r6, 0xf, &(0x7f00000009c0)={0x1}) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000a00)=""/190, &(0x7f0000000ac0)=0xbe) r7 = dup2(r6, r1) fsetxattr$trusted_overlay_origin(r7, &(0x7f0000000b00), &(0x7f0000000b40), 0x2, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000c00)={0x2, 0x50, '\x00', 0x1, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 18:40:15 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40048c0) r1 = accept(0xffffffffffffffff, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f00000001c0)=0x80) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000002}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x5) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r4, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x841}, 0x20040000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x190, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_CT={0xec, 0xb, 0x0, 0x1, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_NAT_SRC={0xd8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1}}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x101}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008810}, 0x40801) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000a80)) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x94, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:xen_device_t:s0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x24040040) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x43c}]}, 0x24}, 0x1, 0x0, 0x0, 0x401c081}, 0x1000) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000e80)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004018) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000f00), r3) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000f40)={@private0, 0x0}, &(0x7f0000000f80)=0x14) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000001040)={&(0x7f0000000ec0), 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) 18:40:15 executing program 2: io_pgetevents(0x0, 0x0, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={[0x10000]}, 0x8}) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x481, 0x0) mq_timedreceive(r0, &(0x7f0000000140)=""/179, 0xb3, 0x4, &(0x7f0000000200)={0x77359400}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000280)=@add_del={0x2, &(0x7f0000000240)='sit0\x00'}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x2003, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000300)={0x5, 0x10000, 0x1000, 0x6, 0xc842, 0x40}) r3 = openat$incfs(r2, &(0x7f0000000340)='.pending_reads\x00', 0x2102, 0x1a3) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f00000003c0), 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000440)={0x10001, 0x0, &(0x7f0000000400)}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000480)) fsetxattr$trusted_overlay_upper(r4, &(0x7f00000004c0), &(0x7f0000000500)={0x0, 0xfb, 0xe4, 0x4, 0x2, "ee82c95ec1eb90c839db7ae2538b022d", "b32c6b7606c8c66c0aabd1e3b0b0f334aa355b898cd7a610eacf88a9a3efc3751f5a886bcde9c0ec03ef14c4a429990800681479132c2db0bc1c107c7f61328a10769c95d147695a5b68fdcad587b7a7cd49387c2ad6bc3e96d3bcbad62c9b57b24dcd0f4461124340f5d45cb920bfadcd71e20d6fa5a6445f7a5f1e1f471e3a8f4f1744ba45dcb8e00a9e74552b995d6254741568ead33775e35ff5167673187b0fc481e0bbfc89501e465e9848fa1f2941326612ba20f62606aba8d62272baaee489a19f014aeef0b7a38b5c8e17"}, 0xe4, 0x3) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x18000, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000640), 0x4) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000680)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000006c0)) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x800, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) 18:40:15 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x92c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=@srh={0x89, 0x4, 0x4, 0x2, 0x7, 0x8, 0xf8f, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}, 0x28) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"b1c17d4d9ba3ae3c124f0fec8ee4aa66", 0x0, 0x0, {0x38000000000, 0x4}, {0xffffffff, 0xff}, 0x3f, [0x9, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x1, 0x7, 0x1f, 0x6, 0x4, 0x6, 0x5, 0x16, 0x81, 0x802b]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"eccb0c0bde4129b3352e9e2e504e9241", r0, 0x0, {0x4, 0x328}, {0x1000, 0x5}, 0x9, [0x8001, 0x7, 0xd0, 0x101, 0x8, 0x62b, 0x308a, 0x8, 0x2, 0xdd, 0x9, 0x4, 0x8, 0x8, 0x7, 0x1]}) r1 = openat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', 0x0, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0xfffffffffffffffc, 0x0) symlinkat(&(0x7f0000001500)='./file0/../file0\x00', r1, &(0x7f0000001540)='./file0\x00') r2 = socket(0x14, 0x5, 0x9) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000001580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ppoll(&(0x7f0000001800)=[{r3, 0x40}, {r5, 0x10}], 0x2, &(0x7f0000001840)={0x0, 0x3938700}, &(0x7f0000001880)={[0x65d]}, 0x8) recvfrom$unix(r4, &(0x7f00000018c0)=""/94, 0x5e, 0x40002020, &(0x7f0000001940)=@file={0x0, './file0/../file0\x00'}, 0x6e) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001a40), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0/../file0\x00', &(0x7f0000001a00), 0x1001008, &(0x7f0000001a80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_any}, {@version_L}], [{@appraise_type}, {@dont_hash}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x66, 0x61, 0x63, 0x61, 0x31, 0x34, 0x37], 0x2d, [0x37, 0x34, 0x38, 0x66], 0x2d, [0x35, 0x30, 0x65, 0x61], 0x2d, [0xc0b037a4b69805b, 0x38, 0x6bafbdb860a279c0, 0x31], 0x2d, [0x33, 0x38, 0x34, 0x38, 0x30, 0x31, 0x35, 0x31]}}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'root'}}, {@measure}]}}) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000001b80)={@dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x34}}, 0x8) r7 = openat2(0xffffffffffffffff, &(0x7f0000001bc0)='./file1\x00', &(0x7f0000001c00)={0x109000, 0x91, 0x4}, 0x18) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c80)={0xdc, 0x2, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x9}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc800}, 0x0) [ 92.150712] audit: type=1400 audit(1737657615.336:7): avc: denied { execmem } for pid=271 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:40:15 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x702441) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x810480, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x4, 0xbc, 0x9}) fcntl$getflags(r2, 0x401) fcntl$setflags(r1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000180)={{r1}, 0x0, 0x10, @inherit={0x50, &(0x7f0000000100)={0x1, 0x1, 0xcbb, 0x0, {0x3c, 0x0, 0x6, 0x81, 0x10000}, [0x7]}}, @name="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"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001200)={"3224e9baa5ce5374d74d1bbe3555e8b3", 0x0, 0x0, {0xeaa, 0xcf24}, {0x401, 0x5}, 0x401, [0x9, 0x800, 0x7, 0xb2, 0xffff, 0x1, 0x3, 0x0, 0x100000001, 0x7, 0x3, 0x6, 0xfffffffffffeffff, 0x40, 0x60c, 0xb8d]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001300)={{}, r6, 0xa, @unused=[0x6, 0x8, 0x3, 0x58], @devid}) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000002300)={{0x20, 0x8}, 0x100, './file0\x00'}) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000002440)={{0x8, 0x80}, 0x1, 0x80000001, 0x2, {0xab, 0x9}, 0x3, 0x7fffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000024c0)={0x1f, 0x7fffffff, 0x6, 0x2, 0x4, [{0x9, 0x400, 0x7, '\x00', 0x1804}, {0x50, 0x200, 0x1, '\x00', 0x1800}, {0x6, 0xfffffffffffffff9, 0x101}, {0x7fffffff, 0x100, 0x7, '\x00', 0x200}]}) dup2(r0, r2) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=""/239}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000004d80)={{}, {@val, @max}}) 18:40:15 executing program 6: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_pts(r0, 0xa00) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x2, 0x8000, 0x1f, 0x6, 0x14, "b8015593b2145d1f4afe00ed2e7d95338dede5"}) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x64) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0x5, 0x3}) r2 = dup(r0) recvmsg$unix(r2, &(0x7f0000001880)={&(0x7f0000000100), 0x6e, &(0x7f0000001700)=[{&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/71, 0x47}, {&(0x7f0000001500)=""/122, 0x7a}, {&(0x7f0000001580)=""/78, 0x4e}, {&(0x7f0000001600)=""/251, 0xfb}], 0xa, &(0x7f00000017c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x40000100) getsockopt$inet_int(r7, 0x0, 0x16, &(0x7f00000018c0), &(0x7f0000001900)=0x4) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) ioctl$RTC_PLL_SET(r9, 0x40207012, &(0x7f0000001980)={0xfffffff8, 0x1, 0x3, 0x4, 0x8, 0x8000, 0x8000}) r10 = openat$cgroup_ro(r6, &(0x7f00000019c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) r11 = getpgid(r8) fcntl$setown(r10, 0x8, r11) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001a00)='lp\x00', 0x3) r12 = openat$cgroup_freezer_state(r5, &(0x7f0000001a40), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r12, {0x2}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000001ac0)=[@sack_perm, @sack_perm, @timestamp, @timestamp, @window={0x3, 0x8, 0x6}, @window={0x3, 0x56, 0x20d}], 0x6) 18:40:15 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000040)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "d58f4923ce9081"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001040)={{r1, 0xf5cc, 0x4, 0x8001, 0x2, 0x4, 0x8, 0xc0000000, 0xffff1288, 0x80000000, 0x1, 0x5, 0x8001, 0x4, 0x7}}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x200484d1) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000022c0)={&(0x7f0000002140), 0xc, &(0x7f0000002280)={&(0x7f0000002180)={0xd8, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20044004) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000002300)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$binfmt_elf64(r2, &(0x7f0000002340)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3, 0x1f, 0x3, 0x6, 0x3, 0x6, 0x6, 0xad, 0x40, 0x393, 0xffff8001, 0x2, 0x38, 0x2, 0xf800, 0xfff, 0x6}, [{0x7, 0x545, 0x31, 0x7, 0x4, 0x80, 0x8, 0x2}, {0x3, 0x8001, 0x76, 0x3, 0xb1c, 0x6, 0x327, 0x1}], "c107b5d02060e5f6e06d3ee71a6ce60aa8688cce4c8d18db912071f4baf9f6f0dfb385dd08df174f84f44b6369f3c34b40d9ca535ce78d7e6a2f935b0b5c9811f01b7dbda4162f0dedea786a09f3c019fa317b5ee5d3c7897e138557b659bab33d89ea9c32c574927c9fac6d49b569186f04beebaf36b6bc257cf53c43c405e8dc98f8de6a962cb22da3a93a14a95ec0645463f0a9a58ef3477fdadd6f0abd0d8a6774c5a6d6987d916036834c3a837da20f676b9af8397e85713ab7ca9a16", ['\x00']}, 0x26f) r3 = openat$incfs(r0, &(0x7f00000025c0)='.log\x00', 0x400440, 0xb2) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000002600)=[r0, r0], 0x2) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000002640)={0x8, 0x6, 0x8}) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000002800)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000027c0)={&(0x7f00000026c0)={0xd8, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8a89}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x20001090) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002840)={{0x1, 0x1, 0x18, r3, {0xfff}}, './file0\x00'}) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000002b40)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002b00)={&(0x7f00000028c0)={0x230, 0x17, 0xa, 0x202, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0xf4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x230}, 0x1, 0x0, 0x0, 0x20008004}, 0x800) r5 = accept(r3, &(0x7f0000002b80)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000002c00)=0x80) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000002c80), r4) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x30, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0xff, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) fcntl$setpipe(r4, 0x407, 0x0) r7 = pidfd_getfd(r3, r5, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000002d80)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, {0x1, @remote}, 0x8, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 'vlan0\x00'}) [ 93.766775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.772301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.776664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.781452] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.788351] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.793455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.800761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.810272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.812666] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.815631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.832453] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.834018] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.836557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.840791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.856390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.868489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.894108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.896972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.910331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.922885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.932650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.941909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.957516] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.967030] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.976590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.979590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.980498] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.986608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.999526] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.999987] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.009549] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.011129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.021541] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.035912] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.038303] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.040170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.051821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.054722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.056600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.058611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.078545] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.080562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.092762] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.099853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.108118] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.109503] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.116668] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.123900] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.905821] Bluetooth: hci0: command tx timeout [ 95.905858] Bluetooth: hci1: command tx timeout [ 95.969170] Bluetooth: hci2: command tx timeout [ 96.098382] Bluetooth: hci3: command tx timeout [ 96.161575] Bluetooth: hci4: command tx timeout [ 96.161603] Bluetooth: hci5: command tx timeout [ 96.226194] Bluetooth: hci7: command tx timeout [ 96.226293] Bluetooth: hci6: command tx timeout [ 97.953193] Bluetooth: hci0: command tx timeout [ 97.954250] Bluetooth: hci1: command tx timeout [ 98.018145] Bluetooth: hci2: command tx timeout [ 98.148164] Bluetooth: hci3: command tx timeout [ 98.209203] Bluetooth: hci4: command tx timeout [ 98.209223] Bluetooth: hci5: command tx timeout [ 98.273246] Bluetooth: hci6: command tx timeout [ 98.273279] Bluetooth: hci7: command tx timeout [ 100.003179] Bluetooth: hci1: command tx timeout [ 100.003210] Bluetooth: hci0: command tx timeout [ 100.066165] Bluetooth: hci2: command tx timeout [ 100.194117] Bluetooth: hci3: command tx timeout [ 100.259122] Bluetooth: hci4: command tx timeout [ 100.259211] Bluetooth: hci5: command tx timeout [ 100.321219] Bluetooth: hci7: command tx timeout [ 100.322115] Bluetooth: hci6: command tx timeout [ 102.051203] Bluetooth: hci0: command tx timeout [ 102.051708] Bluetooth: hci1: command tx timeout [ 102.113150] Bluetooth: hci2: command tx timeout [ 102.242216] Bluetooth: hci3: command tx timeout [ 102.305207] Bluetooth: hci5: command tx timeout [ 102.306203] Bluetooth: hci4: command tx timeout [ 102.369165] Bluetooth: hci7: command tx timeout [ 102.369625] Bluetooth: hci6: command tx timeout [ 153.675948] syz-executor.5 (286) used greatest stack depth: 23248 bytes left [ 155.885908] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.893080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.895793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.901417] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.905779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.911872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.005635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.007356] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.009086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.012543] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.014442] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.015707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.024280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.034605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.038213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.040989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.042531] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.043532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.150889] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.161962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.168160] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.194668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.198668] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.199851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.212357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.216891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.224861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.225411] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.228531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.241404] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.244723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.246332] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.251602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.253589] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.258179] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.270876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.273680] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.274972] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.276020] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.283874] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.291452] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.295990] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.298000] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.299619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.307919] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.338916] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.349999] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.354869] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.986133] Bluetooth: hci0: command tx timeout [ 158.050126] Bluetooth: hci1: command tx timeout [ 158.113172] Bluetooth: hci2: command tx timeout [ 158.371110] Bluetooth: hci4: command tx timeout [ 158.371888] Bluetooth: hci5: command tx timeout [ 158.372789] Bluetooth: hci3: command tx timeout [ 158.374195] Bluetooth: hci6: command tx timeout [ 158.434136] Bluetooth: hci7: command tx timeout [ 160.034115] Bluetooth: hci0: command tx timeout [ 160.098119] Bluetooth: hci1: command tx timeout [ 160.162114] Bluetooth: hci2: command tx timeout [ 160.417252] Bluetooth: hci3: command tx timeout [ 160.417896] Bluetooth: hci6: command tx timeout [ 160.419192] Bluetooth: hci5: command tx timeout [ 160.419626] Bluetooth: hci4: command tx timeout [ 160.481085] Bluetooth: hci7: command tx timeout [ 162.082286] Bluetooth: hci0: command tx timeout [ 162.145145] Bluetooth: hci1: command tx timeout [ 162.210927] Bluetooth: hci2: command tx timeout [ 162.466649] Bluetooth: hci3: command tx timeout [ 162.468218] Bluetooth: hci6: command tx timeout [ 162.468721] Bluetooth: hci4: command tx timeout [ 162.470056] Bluetooth: hci5: command tx timeout [ 162.530152] Bluetooth: hci7: command tx timeout [ 164.130228] Bluetooth: hci0: command tx timeout [ 164.194208] Bluetooth: hci1: command tx timeout [ 164.260072] Bluetooth: hci2: command tx timeout [ 164.513594] Bluetooth: hci5: command tx timeout [ 164.514819] Bluetooth: hci3: command tx timeout [ 164.515963] Bluetooth: hci4: command tx timeout [ 164.516851] Bluetooth: hci6: command tx timeout [ 164.578203] Bluetooth: hci7: command tx timeout [ 218.288244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.290390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.291989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.300390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.303209] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.304372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.421555] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.427252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.434271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.440262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.446304] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.448351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.471598] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.477639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.478831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.497761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.509109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.512386] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.548105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.562681] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.571131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.585319] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.589310] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.591643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.623374] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.630241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.631480] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.634309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.643450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.666257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.667565] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.677288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.678862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.681180] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.694554] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.703493] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.706131] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.712902] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.721333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.749365] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.778707] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.778809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.805251] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.808376] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.811264] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.812257] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.813535] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.840166] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.321161] Bluetooth: hci0: command tx timeout [ 220.514208] Bluetooth: hci1: command tx timeout [ 220.577084] Bluetooth: hci2: command tx timeout [ 220.706154] Bluetooth: hci3: command tx timeout [ 220.834114] Bluetooth: hci5: command tx timeout [ 220.834938] Bluetooth: hci4: command tx timeout [ 220.961142] Bluetooth: hci6: command tx timeout [ 221.028056] Bluetooth: hci7: command tx timeout [ 222.369309] Bluetooth: hci0: command tx timeout [ 222.562100] Bluetooth: hci1: command tx timeout [ 222.626187] Bluetooth: hci2: command tx timeout [ 222.754079] Bluetooth: hci3: command tx timeout [ 222.881203] Bluetooth: hci4: command tx timeout [ 222.881723] Bluetooth: hci5: command tx timeout [ 223.010167] Bluetooth: hci6: command tx timeout [ 223.075064] Bluetooth: hci7: command tx timeout [ 224.418289] Bluetooth: hci0: command tx timeout [ 224.610177] Bluetooth: hci1: command tx timeout [ 224.673239] Bluetooth: hci2: command tx timeout [ 224.802090] Bluetooth: hci3: command tx timeout [ 224.930168] Bluetooth: hci4: command tx timeout [ 224.930642] Bluetooth: hci5: command tx timeout [ 225.058189] Bluetooth: hci6: command tx timeout [ 225.122104] Bluetooth: hci7: command tx timeout [ 226.466084] Bluetooth: hci0: command tx timeout [ 226.658186] Bluetooth: hci1: command tx timeout [ 226.723088] Bluetooth: hci2: command tx timeout [ 226.852160] Bluetooth: hci3: command tx timeout [ 226.978132] Bluetooth: hci5: command tx timeout [ 226.978606] Bluetooth: hci4: command tx timeout [ 227.106664] Bluetooth: hci6: command tx timeout [ 227.170217] Bluetooth: hci7: command tx timeout [ 280.685099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.688250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.691531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.698229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.705554] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.708267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.757206] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.767376] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.769383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.781742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.787554] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.789563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.839936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.846250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.852360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.861553] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.873536] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.880805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.907305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.918957] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.923352] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.952961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.957633] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.959770] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.008985] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.020821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.025562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.031399] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.034841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.037075] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.039834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.050263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.057629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.060130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.061915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.065234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.066516] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.068935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.070742] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.078562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.096628] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.103496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.138352] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.140766] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.149322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.152197] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.186463] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 281.227526] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.786254] Bluetooth: hci0: command tx timeout [ 282.849252] Bluetooth: hci1: command tx timeout [ 282.978141] Bluetooth: hci2: command tx timeout [ 283.041137] Bluetooth: hci4: command tx timeout [ 283.108080] Bluetooth: hci7: command tx timeout [ 283.297154] Bluetooth: hci5: command tx timeout [ 283.297199] Bluetooth: hci3: command tx timeout [ 283.426192] Bluetooth: hci6: command tx timeout [ 284.833109] Bluetooth: hci0: command tx timeout [ 284.899113] Bluetooth: hci1: command tx timeout [ 285.025083] Bluetooth: hci2: command tx timeout [ 285.089118] Bluetooth: hci4: command tx timeout [ 285.153083] Bluetooth: hci7: command tx timeout [ 285.345545] Bluetooth: hci5: command tx timeout [ 285.346280] Bluetooth: hci3: command tx timeout [ 285.473208] Bluetooth: hci6: command tx timeout [ 286.881115] Bluetooth: hci0: command tx timeout [ 286.947198] Bluetooth: hci1: command tx timeout [ 287.073127] Bluetooth: hci2: command tx timeout [ 287.137134] Bluetooth: hci4: command tx timeout [ 287.201134] Bluetooth: hci7: command tx timeout [ 287.393347] Bluetooth: hci3: command tx timeout [ 287.393531] Bluetooth: hci5: command tx timeout [ 287.523076] Bluetooth: hci6: command tx timeout [ 288.931076] Bluetooth: hci0: command tx timeout [ 288.993210] Bluetooth: hci1: command tx timeout [ 289.123059] Bluetooth: hci2: command tx timeout [ 289.185180] Bluetooth: hci4: command tx timeout [ 289.249117] Bluetooth: hci7: command tx timeout [ 289.442429] Bluetooth: hci3: command tx timeout [ 289.443382] Bluetooth: hci5: command tx timeout [ 289.570291] Bluetooth: hci6: command tx timeout [ 343.281819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.285116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.287432] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.302303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.307506] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 343.309691] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.359085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.366686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.370509] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.379122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.383444] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.389682] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.407101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.410425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.412384] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.416403] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.419635] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.438876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.529627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.538692] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.545594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.547252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.560183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.573955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.577082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.589403] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.591395] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.594366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.605209] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.611752] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.686959] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.694374] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.696499] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.708338] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.732434] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.739686] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.843421] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.850630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.854956] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.881510] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.901298] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.907737] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.218892] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.234429] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.283168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.333407] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.369690] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.378420] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.378552] Bluetooth: hci0: command tx timeout [ 345.442230] Bluetooth: hci1: command tx timeout [ 345.505218] Bluetooth: hci2: command tx timeout [ 345.699122] Bluetooth: hci4: command tx timeout [ 345.699131] Bluetooth: hci3: command tx timeout [ 345.891094] Bluetooth: hci5: command tx timeout [ 345.953090] Bluetooth: hci6: command tx timeout [ 346.465135] Bluetooth: hci7: command tx timeout [ 347.425098] Bluetooth: hci0: command tx timeout [ 347.489137] Bluetooth: hci1: command tx timeout [ 347.553084] Bluetooth: hci2: command tx timeout [ 347.747032] Bluetooth: hci3: command tx timeout [ 347.747108] Bluetooth: hci4: command tx timeout [ 347.937310] Bluetooth: hci5: command tx timeout [ 348.002046] Bluetooth: hci6: command tx timeout [ 348.513225] Bluetooth: hci7: command tx timeout [ 349.474164] Bluetooth: hci0: command tx timeout [ 349.537358] Bluetooth: hci1: command tx timeout [ 349.602150] Bluetooth: hci2: command tx timeout [ 349.793226] Bluetooth: hci3: command tx timeout [ 349.793315] Bluetooth: hci4: command tx timeout [ 349.986440] Bluetooth: hci5: command tx timeout [ 350.052100] Bluetooth: hci6: command tx timeout [ 350.561167] Bluetooth: hci7: command tx timeout [ 351.521148] Bluetooth: hci0: command tx timeout [ 351.585125] Bluetooth: hci1: command tx timeout [ 351.649100] Bluetooth: hci2: command tx timeout [ 351.841177] Bluetooth: hci3: command tx timeout [ 351.841372] Bluetooth: hci4: command tx timeout [ 352.033077] Bluetooth: hci5: command tx timeout [ 352.098044] Bluetooth: hci6: command tx timeout [ 352.609160] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:45:21 Registers: info registers vcpu 0 RAX=00000104753be550 RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000104 RSI=ffff88806ce28300 RDI=000000000004af10 RBP=ffff88806ce28300 RSP=ffff88806ce09ed0 R8 =0000000000000001 R9 =ffff8880378b2608 R10=00000000000d686b R11=0000000000000001 R12=000000000004af10 R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce2cac0 RIP=ffffffff8131e4e5 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcca24f3540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcca29a8000 CR3=000000002b29e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000061e2f430 RBX=000000005435de10 RCX=000000000000000b RDX=000000000000000b RSI=000000008170c181 RDI=ffff88806cf09bf8 RBP=0000000000000001 RSP=ffff88806cf09b50 R8 =0000000000000004 R9 =00000000f8dcd511 R10=ffffffff864043d7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffff88806cf09bb0 R15=ffff888013349800 RIP=ffffffff82580464 RFL=00000a13 [-O--A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb80561e008 CR3=000000002f7b0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000