Warning: Permanently added '[localhost]:63078' (ECDSA) to the list of known hosts. 2025/01/26 12:15:19 fuzzer started 2025/01/26 12:15:19 dialing manager at localhost:40883 syzkaller login: [ 70.851329] cgroup: Unknown subsys name 'net' [ 70.974358] cgroup: Unknown subsys name 'cpuset' [ 71.001366] cgroup: Unknown subsys name 'rlimit' [ 76.749567] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/26 12:15:36 syscalls: 2217 2025/01/26 12:15:36 code coverage: enabled 2025/01/26 12:15:36 comparison tracing: enabled 2025/01/26 12:15:36 extra coverage: enabled 2025/01/26 12:15:36 setuid sandbox: enabled 2025/01/26 12:15:36 namespace sandbox: enabled 2025/01/26 12:15:36 Android sandbox: enabled 2025/01/26 12:15:36 fault injection: enabled 2025/01/26 12:15:36 leak checking: enabled 2025/01/26 12:15:36 net packet injection: enabled 2025/01/26 12:15:36 net device setup: enabled 2025/01/26 12:15:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/26 12:15:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/26 12:15:36 USB emulation: enabled 2025/01/26 12:15:36 hci packet injection: enabled 2025/01/26 12:15:36 wifi device emulation: enabled 2025/01/26 12:15:36 802.15.4 emulation: enabled 2025/01/26 12:15:36 fetching corpus: 50, signal 7922/9336 (executing program) 2025/01/26 12:15:36 fetching corpus: 100, signal 10630/13134 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/14603 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/15835 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/17077 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/18320 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/19555 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/20849 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/22096 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/23359 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/24603 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/25827 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/27089 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/28342 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/28904 (executing program) 2025/01/26 12:15:36 fetching corpus: 112, signal 10897/28904 (executing program) 2025/01/26 12:15:39 starting 8 fuzzer processes 12:15:39 executing program 0: arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) 12:15:39 executing program 1: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x400, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x4e24, 0x6, 0x4e21, 0x6, 0x2, 0x80, 0x20, 0xff, 0x0, r0}, {0x2, 0x80000001, 0x8, 0x401, 0x1, 0x0, 0x400, 0x1}, {0x2, 0x8, 0x1000, 0x1ec882be}, 0xbb, 0x6e6bbb, 0x0, 0x0, 0x2, 0x3}, {{@in6=@local, 0x4d6, 0x33}, 0xa, @in6=@local, 0x3506, 0x1, 0x1, 0x1, 0x0, 0x1, 0x7}}, 0xe8) unlink(&(0x7f0000000240)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x7}}, './file1\x00'}) r2 = accept(r1, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000380)=0x80) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x101000, 0xe8) setxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x2) mount$cgroup(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x840, &(0x7f0000000540)={[{@subsystem='blkio'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '][^%+:)*}'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@fsname={'fsname', 0x3d, ']'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f00000034c0)=[{{&(0x7f0000000600), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/31, 0x1f}], 0x1, &(0x7f0000000700)}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/8, 0x8}, {&(0x7f0000000800)=""/137, 0x89}, {&(0x7f00000008c0)=""/82, 0x52}], 0x3, &(0x7f0000000980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000a00), 0x6e, &(0x7f0000002d80)=[{&(0x7f0000000a80)=""/85, 0x55}, {&(0x7f0000000b00)=""/242, 0xf2}, {&(0x7f0000000c00)=""/78, 0x4e}, {&(0x7f0000000c80)=""/168, 0xa8}, {&(0x7f0000000d40)=""/58, 0x3a}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x7, &(0x7f0000002e00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002e80)=""/173, 0xad}, {&(0x7f0000002f40)=""/62, 0x3e}, {&(0x7f0000002f80)=""/165, 0xa5}, {&(0x7f0000003040)=""/212, 0xd4}, {&(0x7f0000003140)=""/16, 0x10}], 0x5, &(0x7f0000003200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/117, 0x75}], 0x2, &(0x7f0000003480)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x5, 0x42, &(0x7f0000003600)={0x0, 0x989680}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000003900)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000038c0)={&(0x7f0000003680)={0x240, 0x12, 0x200, 0x70bd2c, 0x25dfdbfb, {0x26, 0x5, 0x8, 0x0, {0x4e21, 0x4e24, [0x1, 0x3, 0x1, 0x3c], [0x17, 0x800, 0x7, 0x5], 0x0, [0x7, 0x6]}, 0x9b, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "3d9910bef0a75ab40d3fec8627707ea46a6c036f31a1964ac26c010894c2bde63131610b93235d777983e371aa9344bdaef7b0fa9bb7322a9ef35bcb9fbcf30540f731f83c9ba2016db21045b25226db140f648a6db64ca52d2477b62550f37f6e277757563f14dc9278cb0212263ab2369bc802d2af1e60ecf012b43336475c11096fc7056b2dd790e7af7ed394fbc2cb6cc31faabc4133035fa5706ef0bfb3d6b4304b4802bd5dd8a872c7789f00e1e9bdc41554bf54713be671973148874d36623d44b1919b65a7005a"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "09b4cd5c75737b69ec5d2ed9712900749d6717476d5b634b7b07a3d4bf64594b73c5a7696adaa73103b9987aefd87e412b5bbb7d89d279ca60aa9d5a49c976659101c35ac595461bb2c42d00cb58dc34f63c586fd18ae5e4fa18f6a29f9a33e74f00e9a3ceecaffe835e25639f1a9bef261c14fa0da7f1845b64572b9505793b5bf6c61b2e7ff08a7629304e4bbbafbb479f83b0c501b33ad4d519404f58bc90f70ad4a98a0e7b61e9c1967ec08a066dad15775796f511790e3f4339dcb42497c9ad071731c3e1d802942b334a6eb44428a37179d7fb"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "f27ccf5400854723d80f63268972379f9e04b6e0bb2aa156b93a26e713483eef026c2a806badd7dc522c3c9d2deca44588f5b96321eef2f31d6cf8d1f82e7de8eef987b7"}]}, 0x240}, 0x1, 0x0, 0x0, 0x40040}, 0x4000008) listxattr(&(0x7f0000003940)='./file0\x00', &(0x7f0000003980)=""/209, 0xd1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000004000)={&(0x7f0000003a80)=@ll={0x11, 0xf8, 0x0, 0x1, 0xab, 0x6, @remote}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b00)="23933b42450bc0b91a3f29420e4660bfd087dd6f3f7c", 0x16}, {&(0x7f0000003b40)="a0ae765fef6686ef386142124b1ae66d76e38d3076fc51a0ccef261cbfb7d125460fc41f3cdd69dcfe358aedf2039df8060188ff455a6c2ac37d39fe1ea7b02e8ac09305d4dade002de1f51cc8c1eaa3ba323193e948467e5a2683c4a8b21127c67c28ac715ffe543772eaf7cb57db8637b5a2dbf28c845dda503a51a8bdfc50751a2716fac87c75365f7e33ef32b243092abd244dacc038404bc025274098ae35516f5876689c6da8a1d03ce8de11da2fde773d6caa4539bcfcea659365e3502f84d7acc0be37b3d94b37a78180e8a76c700b26f13e63f1ec40f4", 0xdb}, {&(0x7f0000003c40)="8c1caaa744999548552e1208da85f3", 0xf}, {&(0x7f0000003c80)="7ea6a85a97a661d587ed87b60ab22923f4e75a46c7dfdaafa9061e9b9b38f72aae1a79d70a8cc1cfb8afc7d4130f74ac03bdff40f5a4fd1df9a9231d581726a2b02cf4be37337f0877311cd9eedba76be4b5000c5d6bbe0b445f6d601b32a2bed57c45ef6a2c057406a61d50138edd1823abbda7bd1a96913909e2ca642c62d62979b7fc818ba04dadf403e201a0016594b3168b9d890b45e8e1bee7661f159346869336553e0158295bf647e1f74ae407ea02c0b878e00ba7f590e8c998ba70aabc4b18317aac8fe978f5d1c22f01e9e9930501", 0xd4}, {&(0x7f0000003d80)="e33d72dca68f34bc9d8a556ceaf5ffae3a2004cba254595c3ad4a90e39139583ece7a5a4164d6702aa88a2783cc7133143289abf6d4dcbdf0e7313a08b2730627cd62fbcd7449b8e3c", 0x49}, {&(0x7f0000003e00)="824c3332d7b1ee4a5bd1b109028ed4b046271e3855ed0f700803bb46a087b0f51abbb28d0583e0357963bf3a69ff8fbcf64c4e561344", 0x36}, {&(0x7f0000003e40)="9aa7f5e69527c4466c1d3b46e8b39fe9dabc0e436d4cdc3456f01c3ed549b8686af9fc53fcb0db34", 0x28}, {&(0x7f0000003e80)="62806026a1813552a9e5ed98f4d9ea689f8337e1f5e69f9807671db25be609b3cec321dfdc8f174d9f53da8c6810343e2f3a1e78be08cc9b0517387dec08fef73a312aba399bdac080edd269bd782fcee401d46fc1299db5399f8c6ef78e3401243477c385638c8531b7b26c66b27174e5999e38bad5079d666491cd5be6d3cec437a7cacb57e61637fbf8faefa56480d9e4f8d6a84b5ea50feceb510c356c691e79c1944f3c28ebbdc19867f64184e60c22e895ccdcb95975739a", 0xbb}], 0x8, &(0x7f0000003fc0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x30}, 0x40001) unlinkat(r1, &(0x7f0000004040)='./file1\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000004080)={0x80, 0xcd05, 0x5, 0x8, 0x3, [{0xe9, 0x3, 0x1ff, '\x00', 0x200}, {0x2, 0x8, 0xc58, '\x00', 0x800}, {0x7, 0x7ff, 0x10001, '\x00', 0x80}]}) setxattr$incfs_metadata(&(0x7f0000004180)='./file0\x00', &(0x7f00000041c0), &(0x7f0000004200)="05f25f2aa4791fccb84be8c2a4b4ca9e408fe51ab220eba450675185d4c6de76b9c79094641157c0f446112c6952f36a51daca98d74d488fa2f1ec01b07e50a69056672484f9c576132e835df5efbe0710ed8bea2639f42d1e81d40e380877f7ca3af9bc4c1a3a6092c008119e93540939cdcbb3f4c50007ccb0331283ff2afa0dbca3b41d69008ca50472babe581e7ed2986320ec2ad476910e2d4b04f96daee45ea52087be7e2db00615ac8366a7af95411de03ef312d89292d0f81e7e6d379848c8ab77c674a0a481ae952d02ebfdabcc195bb71d764270f8cd20e6b1557e8d8ec0d9854939e16f", 0xe9, 0x2) mount$9p_xen(&(0x7f0000004300), &(0x7f0000004340)='./file2\x00', &(0x7f0000004380), 0x3111020, &(0x7f00000043c0)={'trans=xen,', {[{@debug={'debug', 0x3d, 0xdb80}}], [{@subj_role={'subj_role', 0x3d, '%*^T\\!'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x38, 0x30, 0x64, 0x30, 0x32, 0x34, 0x61], 0x2d, [0x34, 0x35, 0x38, 0x66], 0x2d, [0x61, 0x66, 0x30, 0x35], 0x2d, [0x66, 0x36, 0x64, 0x38], 0x2d, [0x63, 0x63, 0x34, 0x65, 0x37, 0x61, 0x30, 0x37]}}}, {@subj_user={'subj_user', 0x3d, ']'}}, {@measure}, {@fowner_lt={'fowner<', r6}}, {@smackfsdef}, {@uid_lt={'uid<', r0}}]}}) socketpair(0x27, 0x80000, 0x9, &(0x7f0000004480)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r7, 0x40, 0x6) 12:15:39 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 12:15:39 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x124, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20040081}, 0x22000094) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c040}, 0x10) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x7, 0xa, 0x0, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x8800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40800420}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r3, 0x100, 0x70bd2a, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004810}, 0x4008081) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x424, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x5, 0x0, 0x2f, [0x1, 0x7, 0xfffffff9, 0x2, 0x1f, 0x6c, 0x6, 0x4, 0x3, 0x0, 0x4, 0x6, 0x1, 0x7fff, 0x1, 0x200, 0x5, 0xfff, 0x2, 0x0, 0x1, 0x71, 0xfffffc01, 0x157, 0x3f, 0x0, 0x81, 0x0, 0x800, 0x6, 0x6, 0x80000000, 0xffffff95, 0x200, 0x6, 0x8, 0x3, 0x7, 0x6, 0x8, 0xc940, 0x5, 0x10000, 0x2, 0xe35c, 0x44f0, 0xdc019dd, 0x9, 0x4, 0x80, 0x10001, 0x0, 0x7, 0xffff, 0x5, 0x0, 0x9, 0x4, 0x3, 0x4, 0x1f, 0x2, 0x5], [0x20, 0x8001, 0x7, 0xffff, 0x9, 0x101, 0x800, 0x200, 0x6, 0x7, 0x1, 0x4, 0x9, 0x6887, 0x2, 0x20, 0xb6e, 0x2, 0x3f, 0x8, 0x20, 0x9, 0x401, 0xffffff9f, 0x3f, 0x40, 0xd7, 0x7fff, 0xfffffff9, 0x7, 0xffffffff, 0x8345, 0x4, 0x0, 0x3f, 0x7fff, 0x676bb98c, 0x6, 0xffff8001, 0x94, 0x0, 0x8, 0x1, 0x7fffffff, 0x200, 0x8, 0x2b4, 0xfff, 0x0, 0x7, 0x0, 0x8, 0x8, 0x5, 0x180000, 0x6, 0x8, 0x1000, 0x9, 0x3, 0x7fffffff, 0x200, 0x4, 0x5], [0x8, 0x1000, 0x20, 0x81, 0x10000000, 0x101, 0x80, 0x1, 0x6, 0x1ff, 0x0, 0x0, 0xb803, 0xff, 0x2, 0x20, 0x2, 0x87, 0x800, 0x82, 0x4, 0xffff8000, 0x1000, 0x1000, 0x6, 0x3, 0xf27, 0x285, 0x6, 0x6, 0x1, 0x7f, 0x4, 0x70dcc90c, 0x101, 0x0, 0x4, 0x401, 0x0, 0x7, 0x5, 0x8, 0x1, 0xd8, 0xfffffe01, 0x401, 0x2, 0x5, 0xa31, 0x9, 0xffffe8fd, 0x8, 0x81, 0x7ff, 0x79c, 0x3, 0xa22, 0x1, 0x9, 0x8, 0x296, 0x8001, 0x9, 0x1], [0x13a8, 0x80, 0x0, 0x5, 0x8001, 0x0, 0x0, 0x1f, 0x5, 0xfffffeff, 0xffff, 0x7, 0x7, 0x7, 0x538, 0x0, 0x10000, 0x617, 0x7ff, 0x2, 0x176, 0xfff, 0x10001, 0x5, 0x1f, 0x100, 0x800, 0x10000, 0xe69, 0x1, 0x4, 0x7fffffff, 0xb28, 0x200, 0x952, 0x9, 0x7, 0xc7b6, 0x7ff, 0x7fffffff, 0x1, 0x9, 0x9, 0x9dcf, 0x6, 0xfa94, 0x40, 0x3ff, 0x5, 0x6, 0x20, 0x3ff, 0x1, 0x6, 0x7, 0x8, 0xbc, 0xe00000, 0x5, 0x1, 0x0, 0xfffffa8a, 0x1, 0x3], 0x1, ['\x00']}, ["", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x14}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x74, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x34, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ebfa861a72eadd6efaa24b26179dfcf7"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000034}, 0x4000004) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, r7, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c041) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000041) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x78, r8, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x40050) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x32}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}}, 0x8004) 12:15:39 executing program 5: ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='veth1_macvtap\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9b4b41988d72a79bc5080cd34cce06973cd0927e4edce9364122988f26d94d436f96a4d01934a1e71e1339b2ad55a814300d30f2c9f726346cae0fcb556b1028b7478d8452b0a07612b33be102da90db76bbcc6ac4603e1c5c4a3a57cd45a980345163554373be62ed27946f5fed422afa0723dabd26b101d371ecb75971f6f1f029776d2b62fd12048c74df31196929541c", 0x92, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x1}, 0x1c) r1 = pidfd_getfd(r0, r0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e21, 0x0, @loopback, 0x200}, {0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, '\x00', 0x30}, 0xfff}, 0x1, [0x9, 0x6, 0x7fff, 0x1ff, 0xfffffffb, 0x0, 0x8001]}, 0x5c) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x80000) ioctl$int_in(r2, 0x5421, &(0x7f0000000280)=0x5) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000002c0)={0x2c, 0xe, 0x1, 0x80, 0x0, [@loopback, @remote, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, @local, @remote, @local]}, 0x78) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000340)=@generic={0x3, 0x7, 0x1800000000000000}) r3 = mq_open(&(0x7f0000000380)='\xff\xff', 0x1, 0x90, &(0x7f00000003c0)={0x2, 0x626e, 0x1, 0x4}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={r2, 0x800, 0x76be5f3b, 0x4b7d}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000440)={0xffffffffffffffff, 0x7, 0x2, 0x8}) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000480)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x1, 0x10001}}, './file0\x00'}) read(r5, &(0x7f0000000500)=""/18, 0x12) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000600)=@get={0x1, &(0x7f0000000540)=""/130, 0x7fff}) r6 = open(&(0x7f0000000640)='./file0\x00', 0x290c1, 0x4) listen(r6, 0x5) 12:15:39 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8801}, 0x4004) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0xeddc02dc1a3bbcb3, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000300)=""/161, &(0x7f00000003c0)=0xa1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='lp\x00', 0x3) sendmsg$TIPC_NL_SOCK_GET(r0, 0xfffffffffffffffe, 0x840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) [ 90.657867] audit: type=1400 audit(1737893739.867:7): avc: denied { execmem } for pid=268 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000bc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f00000004c0)={0x6b0, r2, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x22c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x800, 0x800, 0x6, 0x20, 0x0, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x7}, {0x0, 0x2}, {0x0, 0x8}, {0x6, 0x8}, {}, {0x3, 0x6}, {0x2, 0x2}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x7, 0x1}, {0x2, 0x2}, {0x2, 0x2}, {0x7}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x6}, {0x7, 0x9}, {0x4, 0x5}, {0x7, 0x5}, {0x1, 0x1}, {0x3}, {0x4, 0x2}, {0x6, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x1}, {0x5}, {0x5, 0x4}, {0x5, 0x9}, {0x3, 0x2}, {}, {0x5, 0x5}, {0x4}, {0x4, 0x8}, {}, {0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0x5}, {0x2, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x16, 0x6, 0xc, 0x6c, 0x12, 0x1, 0x48, 0x48, 0xb, 0x1b, 0xc, 0x12, 0x36, 0x24, 0x4, 0x24, 0x3, 0x6c, 0xb, 0x1b, 0xc, 0x30, 0x12, 0x3]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x5, 0x4, 0x1b, 0x5, 0x16, 0x18, 0x36, 0x2, 0x6, 0x1b, 0x30, 0xc, 0x4, 0x3, 0x30, 0x30, 0x18, 0x48, 0x6c, 0x1b, 0x1b, 0x4c0223dd81cfc2f3, 0x5, 0x12, 0x36]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x24, 0x18, 0x3, 0x1, 0x2, 0x3, 0x4, 0x60, 0xb]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x9}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0x6}, {0x7, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x3}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x8}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x1}, {0x2, 0x6}, {0x4}, {0x1, 0x5}, {0x5, 0x1}, {0x4, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x8}, {0x3, 0x3}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5238, 0x6, 0x1, 0x3ff, 0x3f, 0x9, 0x3fad, 0x8]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x9}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x3}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x4}, {0x6, 0x6}, {0x5}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x8}, {0x6}, {0x7, 0x1}, {0x3, 0x6}, {0x1}, {0x0, 0x5}, {0x3, 0x6}, {0x5}, {0x5, 0x7}, {0x2, 0x8}, {0x7, 0x7}, {0x7, 0x2}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x7}, {0x3, 0x4}, {0x6, 0x2}, {0x6}, {0x5, 0x4}, {0x3, 0x6}, {0x3}, {0x4, 0x7}, {0x6, 0x6}, {0x7, 0x1}, {0x7}, {0x4}, {0x0, 0x6}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x1, 0x2, 0x48, 0x6c, 0x6c, 0x9, 0x48, 0x6c, 0x9]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x1b, 0x78, 0x36, 0x1b, 0x36, 0x26, 0x78, 0x24, 0x5, 0x5, 0xc, 0x3, 0x1]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x1, 0xb, 0x60, 0x5, 0xc, 0x9, 0x1b, 0x4, 0x48, 0x1, 0x30, 0xd3e89b22d3b56745, 0x9, 0x9, 0x2, 0x60, 0x24, 0x0, 0xc5bbee8c5ad9c76f, 0x36, 0x5, 0x48, 0x24, 0x6c, 0xc, 0xb, 0x16]}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x6c, 0x48, 0x36, 0x6c, 0xb, 0x12, 0xb, 0x9, 0x36, 0x2, 0x30, 0x5, 0x60, 0x1, 0x12, 0x36, 0x30, 0x9, 0x9, 0x3, 0xc, 0x3, 0x1, 0x33, 0x1b, 0x1, 0x18, 0x5, 0xc, 0xc, 0x1]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0xa}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x2}, {0x7, 0x3}, {0x0, 0x4}, {0x6, 0x3}, {0x7, 0x4}, {0x5, 0x9}, {0x6}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x3, 0x6}, {0x5, 0x9}, {0x4, 0x7}, {0x3, 0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x7, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x7, 0x1}, {0x6, 0x1}, {0x7, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x6}, {0x3, 0x9}, {0x3}, {0x6, 0x9}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x2, 0x4}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x5, 0x1}, {0x5, 0x3}, {0x7, 0x9}, {0x3, 0x9}, {0x5, 0x9}, {0x1, 0xa}, {0x4, 0x5}, {0x5}, {0x2, 0x6}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x400, 0x20, 0x0, 0xfff, 0x522, 0x40, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x4, 0x1, 0x1b, 0x59, 0x0, 0x30, 0xc, 0x1b, 0x3, 0x0, 0x5, 0x9, 0xc, 0x1b, 0xc, 0x48, 0x24, 0x6, 0xb, 0x6c, 0x4, 0xc, 0x6, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x18c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0xa}, {0x5, 0x3}, {0x5, 0x19}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x5}, {0x1}, {0x7, 0x5}, {0x0, 0xa}, {0x5, 0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x6, 0x9}, {0x4, 0xa}, {0x4}, {0x4, 0x8}, {0x3, 0x5}, {0x5, 0x5}, {0x1, 0x7}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x3, 0x8}, {0x6, 0x8}, {0x6, 0x1c}, {0x1, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x6, 0x4, 0xfff8, 0x101, 0x1, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0xa}, {0x7, 0x3}, {0x3, 0x2}, {0x0, 0x6}, {0x3, 0x2}, {0x1, 0x5}, {0x5, 0x8}, {0x2, 0x9}, {0x6, 0x6}, {0x5}, {0x1, 0x3}, {0x0, 0xa}, {0x2}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0xa}, {0x7, 0x9}, {0x0, 0xa}, {0x7, 0x3}, {0x5, 0xa}, {0x7, 0x9}, {0x3, 0x8}, {0x6, 0x5}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x1}, {0x3, 0x7}, {0x3, 0x7}, {0x6, 0x1}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x3, 0x4}, {0x4, 0x7}, {0x7, 0x3}, {0x0, 0x1}, {}, {0x7, 0x2}, {0x1}, {0x4, 0x9}, {0x7, 0x5}, {0x7, 0x3}, {0x4, 0x6}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x4}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x0, 0x8}, {0x3, 0x9}, {0x6, 0x8}, {0x2, 0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x0, 0x1b, 0x6, 0x77, 0x6, 0x6c, 0x3, 0x30, 0x1b, 0x60, 0x24]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x48, 0x60, 0x5, 0x5, 0x30, 0x18, 0x60, 0x3, 0x6c, 0x24, 0x6, 0x9, 0x2, 0x9, 0x2, 0x1, 0x18, 0x3, 0x2, 0x5, 0x2, 0x1]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3c, 0x1, 0x7, 0x5, 0x98c, 0x1, 0xc8]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x2}, {0x0, 0x9}, {0x0, 0x9}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x33, 0x12, 0x1b, 0x12, 0x48, 0x16, 0x17, 0x60, 0x3, 0x60, 0x24, 0xc, 0x1, 0x6, 0x60, 0x5, 0x16, 0x48, 0x1b, 0x9, 0x60, 0x3, 0x2, 0x16, 0x30, 0x30, 0x60, 0xb, 0x1, 0x24, 0x6]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1b, 0x30, 0x24, 0x6c, 0x5, 0x1, 0x6, 0x2, 0xc, 0x48, 0x9, 0x18, 0x36, 0x5, 0x4, 0x60, 0x1, 0x12, 0x6a, 0x30, 0x1b, 0x16, 0x2]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x18, 0x36]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x9}, {0x1, 0x4}, {0x2, 0xa}, {0x2, 0x9}, {0x2, 0x3}, {0x6}, {0x6, 0xa}, {0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x4}, {0x6, 0x7}, {0x6, 0x2}, {0x3, 0x4}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x6, 0x1}, {0x2}, {0x5, 0x4}, {0x5, 0x3}, {0x5, 0xa}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81, 0x1, 0x6, 0x8, 0xff81, 0x8, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x1, 0x1, 0xaad3, 0x0, 0x800, 0x8]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x6c, 0x20, 0x48, 0x36, 0x12, 0x4, 0xb, 0x3, 0x48, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x3, 0x7f6, 0x1, 0x44e, 0x7ff, 0xcc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x2, 0xfff9, 0x4, 0x1, 0x9, 0x200]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0xa}, {0x4, 0xa}, {0x7, 0x6}, {0x0, 0x8}, {0x3, 0x8}, {0x5, 0xa}, {0x2, 0x5}, {0x2}, {0x3, 0x4}, {0x1, 0x6}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x2}, {0x5, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x4, 0x3}, {0x1}, {0x4, 0x6}, {0x7, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x3}, {0x6, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x6}, {0x1, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x7}, {0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x2, 0x3}, {0x2, 0x3}, {0x0, 0x2}, {0x4, 0x2}, {0x7, 0x8}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x2, 0x12, 0x3, 0x16, 0x12, 0x1, 0x12, 0x6, 0x12, 0x30, 0x1, 0x6, 0x27, 0x6c, 0x9, 0xb, 0x6, 0x5, 0x4, 0x16, 0x4, 0x60, 0x12, 0x6, 0x18, 0x32, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x5}, {0x7, 0x8}, {0x1, 0x8}, {0x5, 0x8}, {0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x8}, {0x4, 0xa}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0xa}, {0x7, 0xa}, {0x7}, {0x0, 0x4}, {0x5, 0x6}, {0x5, 0x8}, {0x7, 0x1}, {0x4}, {0x6, 0x9}, {0x2, 0x6}, {0x6, 0x6}, {0x2, 0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x4}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x2, 0x8}, {0x4, 0x6}, {0x1, 0xa}, {0x4, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x8}, {0x2, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0x3, 0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x1, 0xab4, 0x101, 0x8, 0x1f, 0x20]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdb2, 0x8000, 0x8, 0x1, 0xf2b3, 0x6, 0x156, 0xe65]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2}, {0x1, 0x6}, {0x4, 0x3}, {0x7, 0x7}, {0x4, 0x4}, {0x2}, {0x7, 0x6}, {0x1, 0x9}, {0x5, 0x3}, {0x7, 0x3}, {0x5, 0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x2, 0x2}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x8}, {0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x12, 0x5, 0x60, 0x24, 0x1, 0x60, 0x3, 0x4, 0x16, 0x6c, 0x30, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x24, 0x36, 0x2, 0x18, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x1}, {0x6, 0x1}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x1}, {}, {0x2, 0x2}, {0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x6, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x6, 0x9}, {0x2, 0x3}, {0x6, 0x5}, {0x5, 0x3}, {0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x7, 0x3}, {0x0, 0xa}, {0x7, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0x5}, {0x7, 0xa}, {0x5, 0x2}, {0x4, 0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0xa}, {0x4, 0x3}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x1, 0x1c7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x6, 0x5, 0x1f, 0x9, 0x8, 0x62b6]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x5, 0x9}, {0x0, 0x7}, {0x4}, {0x6, 0x8}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x3}, {0x1, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x6, 0x1}, {}, {0x1, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x8001, 0x5, 0xffff, 0x4, 0xfff7, 0xbb8, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff5e, 0xfff, 0x5e33, 0x81, 0x9, 0x5, 0x1, 0x381]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x0, 0x1, 0x0, 0x0, 0x100, 0x7, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x4, 0x4, 0x2192, 0x0, 0xfff, 0x9, 0x4b55]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x5, 0x3ff, 0xd381, 0xff, 0x617, 0x800]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x3, 0xb, 0x16, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x6b0}}, 0x81) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r3, &(0x7f0000001180)={&(0x7f0000000c00)=@nfc, 0x80, &(0x7f0000001100)=[{&(0x7f0000000c80)=""/243, 0xf3}, {&(0x7f0000000d80)=""/128, 0x80}, {&(0x7f0000000e00)=""/199, 0xc7}, {&(0x7f0000000f00)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/20, 0x14}, {&(0x7f0000001000)=""/29, 0x1d}, {&(0x7f0000001040)=""/172, 0xac}], 0x7}, 0x40002002) fdatasync(r3) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000011c0), 0x100, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x104, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000001400)) r5 = fcntl$dupfd(r3, 0x0, r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x17, 0x5, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}}, 0x40000) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001580)={0x11c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0xfe, 0x45, "8b0ee870dcfba88b4f56ee63fc982c6514b71d2d501b2dda0c782b5c5bdb5e3fc2421b0ce898e8017c75f0c78bae1ae52b638aa3f3af678385107524e50a9c7883dc5d36bc8bba493a8fa202caf697f332c299d36cbb0c2baa737e0d96c113b8464bcb92ccff8e71fa55dd0cc865f1c54cf9392f82010df16b5284a6c4cd95dc03ad1c00d57a1549c04dfb6c4cdd6ef092b8916015c82580693137937c6a6273324e8fd2fe1f072f401e3f86994f4e9b6a6903cc14ff78e1ecf71c390d50c5efcc3facf61df1440ef46bfda814653255d9dea1626d7110de6fd5a6a70d18b075894432acb18981f50a231d8a101134977550dccc40757397a2b0"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4044804}, 0x20044001) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x8041) 12:15:39 executing program 6: ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x3, 'ip6tnl0\x00', {0xad9}, 0x98}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000013c0)={0xac, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/45, 0x2d, 0x2, 0x2c}, @flat=@handle={0x73682a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/108, 0x6c, 0x1, 0x1b}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x1000}, @acquire, @increfs={0x40046304, 0x1}, @increfs={0x40046304, 0x3}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x4dca6e6eb0dba972, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/79, 0x4f, 0x2, 0x3a}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x15}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}], 0x1000, 0x0, &(0x7f00000003c0)="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"}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000001400)) r0 = memfd_secret(0x80000) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x74, 0x0, 0x208, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xeb8b}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80000000}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x200}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x50}, 0x10) fchdir(r0) pread64(0xffffffffffffffff, &(0x7f0000001580)=""/152, 0x98, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x58, 0x2, 0x8, 0x101, 0x0, 0x0, {0x8, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000001880)={&(0x7f0000001780), 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x70, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8c10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b40)={&(0x7f0000001900)={0x230, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_MARK_MASK={0x8}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}]}}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_TUPLE_REPLY={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x20}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4a}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}]}}, @CTA_NAT_DST={0x44, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x5, 0x200, 0x7, 0x6b8, 0x9, 0x9, 0x3]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0x230}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008810) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000001bc0)={0x10001, 0x5, 0x0, 'queue1\x00', 0x1}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000001c80), &(0x7f0000001cc0)=0x30) syz_open_dev$vcsn(&(0x7f0000001d00), 0xff, 0x800) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000001d40)={'wg0\x00', 0xfff}) bind$bt_sco(r0, &(0x7f0000001d80)={0x1f, @none}, 0x8) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001dc0)=""/109, &(0x7f0000001e40)=0x6d) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 12:15:39 executing program 7: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 91.957182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.961337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.962772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.966503] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.968508] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.969763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.214811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.217746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.219560] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.229213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.232656] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.234699] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.248648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.263877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.267319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.276391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.287275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.289735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.290833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.297114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.298866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.302734] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.303945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.308793] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.317372] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.330836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.331974] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.334321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.336637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.341408] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.348360] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.350121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.360467] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.365251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.368601] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.369934] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.371483] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.373801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.377370] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.378252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.384491] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.385193] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.385840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.390347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.391497] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.454801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.487321] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.493254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.047528] Bluetooth: hci0: command tx timeout [ 94.302179] Bluetooth: hci2: command tx timeout [ 94.367759] Bluetooth: hci1: command tx timeout [ 94.430400] Bluetooth: hci3: command tx timeout [ 94.432303] Bluetooth: hci6: command tx timeout [ 94.432347] Bluetooth: hci4: command tx timeout [ 94.494249] Bluetooth: hci7: command tx timeout [ 94.558317] Bluetooth: hci5: command tx timeout [ 96.094296] Bluetooth: hci0: command tx timeout [ 96.350176] Bluetooth: hci2: command tx timeout [ 96.414190] Bluetooth: hci1: command tx timeout [ 96.478157] Bluetooth: hci4: command tx timeout [ 96.478285] Bluetooth: hci3: command tx timeout [ 96.478609] Bluetooth: hci6: command tx timeout [ 96.542132] Bluetooth: hci7: command tx timeout [ 96.606218] Bluetooth: hci5: command tx timeout [ 98.142130] Bluetooth: hci0: command tx timeout [ 98.398080] Bluetooth: hci2: command tx timeout [ 98.462661] Bluetooth: hci1: command tx timeout [ 98.526133] Bluetooth: hci6: command tx timeout [ 98.526177] Bluetooth: hci3: command tx timeout [ 98.526662] Bluetooth: hci4: command tx timeout [ 98.591064] Bluetooth: hci7: command tx timeout [ 98.654122] Bluetooth: hci5: command tx timeout [ 100.190090] Bluetooth: hci0: command tx timeout [ 100.446248] Bluetooth: hci2: command tx timeout [ 100.511224] Bluetooth: hci1: command tx timeout [ 100.574147] Bluetooth: hci3: command tx timeout [ 100.574257] Bluetooth: hci4: command tx timeout [ 100.574655] Bluetooth: hci6: command tx timeout [ 100.638123] Bluetooth: hci7: command tx timeout [ 100.702089] Bluetooth: hci5: command tx timeout [ 154.365739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.371358] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.383323] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.387576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.389713] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.390936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.470481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.478199] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.479799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.485566] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.487433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.493410] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.499165] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.504931] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.507522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.509329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.515159] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.521304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.561467] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.565677] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.577540] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.598254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.630238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.646588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.693743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.701338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.706734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.748240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.767322] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.770182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.812215] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.815930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.823147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.837423] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.842699] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.844207] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.868755] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.881196] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.899055] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.906471] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.918664] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.921738] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.925349] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.938483] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.939843] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.951200] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.968650] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.973476] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.447117] Bluetooth: hci0: command tx timeout [ 156.574174] Bluetooth: hci1: command tx timeout [ 156.574240] Bluetooth: hci2: command tx timeout [ 156.703111] Bluetooth: hci3: command tx timeout [ 156.830190] Bluetooth: hci4: command tx timeout [ 156.895124] Bluetooth: hci5: command tx timeout [ 157.022226] Bluetooth: hci6: command tx timeout [ 157.087254] Bluetooth: hci7: command tx timeout [ 158.494270] Bluetooth: hci0: command tx timeout [ 158.622192] Bluetooth: hci2: command tx timeout [ 158.623241] Bluetooth: hci1: command tx timeout [ 158.752080] Bluetooth: hci3: command tx timeout [ 158.879212] Bluetooth: hci4: command tx timeout [ 158.943295] Bluetooth: hci5: command tx timeout [ 159.070105] Bluetooth: hci6: command tx timeout [ 159.134086] Bluetooth: hci7: command tx timeout [ 160.543058] Bluetooth: hci0: command tx timeout [ 160.670099] Bluetooth: hci1: command tx timeout [ 160.670618] Bluetooth: hci2: command tx timeout [ 160.798076] Bluetooth: hci3: command tx timeout [ 160.926090] Bluetooth: hci4: command tx timeout [ 160.990109] Bluetooth: hci5: command tx timeout [ 161.119136] Bluetooth: hci6: command tx timeout [ 161.182215] Bluetooth: hci7: command tx timeout [ 162.590310] Bluetooth: hci0: command tx timeout [ 162.718072] Bluetooth: hci2: command tx timeout [ 162.719066] Bluetooth: hci1: command tx timeout [ 162.846094] Bluetooth: hci3: command tx timeout [ 162.974211] Bluetooth: hci4: command tx timeout [ 163.038654] Bluetooth: hci5: command tx timeout [ 163.166110] Bluetooth: hci6: command tx timeout [ 163.230070] Bluetooth: hci7: command tx timeout [ 216.306669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.308384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.309848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.314066] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.317564] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.318758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.419319] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.420851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.425349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.436086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.441085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.443143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.634322] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.638201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.642503] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.650765] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.654744] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.655909] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.699665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.701640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.708899] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.710483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.713112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.715517] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.724226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.725877] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.727128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.732567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.737243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.740103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.824911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.830685] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.834711] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.840163] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.843695] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.845500] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.995750] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.006377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.009511] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.054475] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.072276] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.074324] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.095465] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.096638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.117331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.188287] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.233968] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.242464] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.398109] Bluetooth: hci0: command tx timeout [ 218.462241] Bluetooth: hci1: command tx timeout [ 218.718217] Bluetooth: hci2: command tx timeout [ 218.783193] Bluetooth: hci4: command tx timeout [ 218.783657] Bluetooth: hci3: command tx timeout [ 218.974348] Bluetooth: hci5: command tx timeout [ 219.230127] Bluetooth: hci6: command tx timeout [ 219.358121] Bluetooth: hci7: command tx timeout [ 220.446060] Bluetooth: hci0: command tx timeout [ 220.510106] Bluetooth: hci1: command tx timeout [ 220.766050] Bluetooth: hci2: command tx timeout [ 220.830129] Bluetooth: hci4: command tx timeout [ 220.831143] Bluetooth: hci3: command tx timeout [ 221.023813] Bluetooth: hci5: command tx timeout [ 221.279113] Bluetooth: hci6: command tx timeout [ 221.407175] Bluetooth: hci7: command tx timeout [ 222.496040] Bluetooth: hci0: command tx timeout [ 222.559048] Bluetooth: hci1: command tx timeout [ 222.815028] Bluetooth: hci2: command tx timeout [ 222.879128] Bluetooth: hci3: command tx timeout [ 222.879191] Bluetooth: hci4: command tx timeout [ 223.072040] Bluetooth: hci5: command tx timeout [ 223.328135] Bluetooth: hci6: command tx timeout [ 223.455067] Bluetooth: hci7: command tx timeout [ 224.543053] Bluetooth: hci0: command tx timeout [ 224.607621] Bluetooth: hci1: command tx timeout [ 224.863161] Bluetooth: hci2: command tx timeout [ 224.926101] Bluetooth: hci3: command tx timeout [ 224.926607] Bluetooth: hci4: command tx timeout [ 225.118073] Bluetooth: hci5: command tx timeout [ 225.374203] Bluetooth: hci6: command tx timeout [ 225.502146] Bluetooth: hci7: command tx timeout [ 278.509934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.513787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.518817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.526516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.529353] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.532037] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.765561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.769652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.775099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.783563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.786826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.788883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.858879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.871573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.873548] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.880231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.883328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.885056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.909306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.924499] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.926488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.930433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.935640] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.940636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.006276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.024534] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.028407] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.058419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.060313] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.062881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.074771] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.076736] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.079570] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.082523] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.084517] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.093743] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.097049] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.120709] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.125325] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.126449] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.151715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.167186] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.173744] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.176745] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.182413] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.226294] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.260336] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.280312] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.607016] Bluetooth: hci0: command tx timeout [ 280.863138] Bluetooth: hci1: command tx timeout [ 280.927028] Bluetooth: hci2: command tx timeout [ 281.054146] Bluetooth: hci3: command tx timeout [ 281.119372] Bluetooth: hci4: command tx timeout [ 281.246122] Bluetooth: hci6: command tx timeout [ 281.502524] Bluetooth: hci5: command tx timeout [ 281.568063] Bluetooth: hci7: command tx timeout [ 282.655051] Bluetooth: hci0: command tx timeout [ 282.911038] Bluetooth: hci1: command tx timeout [ 282.974152] Bluetooth: hci2: command tx timeout [ 283.102396] Bluetooth: hci3: command tx timeout [ 283.168258] Bluetooth: hci4: command tx timeout [ 283.294068] Bluetooth: hci6: command tx timeout [ 283.550108] Bluetooth: hci5: command tx timeout [ 283.614253] Bluetooth: hci7: command tx timeout [ 284.702032] Bluetooth: hci0: command tx timeout [ 284.959095] Bluetooth: hci1: command tx timeout [ 285.022054] Bluetooth: hci2: command tx timeout [ 285.150433] Bluetooth: hci3: command tx timeout [ 285.215094] Bluetooth: hci4: command tx timeout [ 285.343097] Bluetooth: hci6: command tx timeout [ 285.598107] Bluetooth: hci5: command tx timeout [ 285.662321] Bluetooth: hci7: command tx timeout [ 286.750567] Bluetooth: hci0: command tx timeout [ 287.007017] Bluetooth: hci1: command tx timeout [ 287.071143] Bluetooth: hci2: command tx timeout [ 287.199040] Bluetooth: hci3: command tx timeout [ 287.263026] Bluetooth: hci4: command tx timeout [ 287.392027] Bluetooth: hci6: command tx timeout [ 287.647235] Bluetooth: hci5: command tx timeout [ 287.711861] Bluetooth: hci7: command tx timeout [ 339.039868] syz-executor.0 (10203) used greatest stack depth: 23504 bytes left [ 341.036702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.038533] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.040288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.044698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.047098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.048328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.419208] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.422296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.425737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.431578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.434569] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.437228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.522111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.526135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.528621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.534400] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.539878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.542291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.545808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.565976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.572614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.575604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.579408] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.581574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.646182] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.662428] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.671488] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.683114] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.687411] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.689377] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.691331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.693898] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.696754] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.700360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.703293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.708191] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.710640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.715174] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.720697] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.767453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.784656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.793113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.811456] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.813801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.830153] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.835283] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.837979] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.842380] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.072028] Bluetooth: hci0: command tx timeout [ 343.519069] Bluetooth: hci1: command tx timeout [ 343.646041] Bluetooth: hci2: command tx timeout [ 343.774983] Bluetooth: hci4: command tx timeout [ 343.838038] Bluetooth: hci3: command tx timeout [ 343.902665] Bluetooth: hci5: command tx timeout [ 343.966265] Bluetooth: hci6: command tx timeout [ 343.967498] Bluetooth: hci7: command tx timeout [ 345.118258] Bluetooth: hci0: command tx timeout [ 345.566047] Bluetooth: hci1: command tx timeout [ 345.695363] Bluetooth: hci2: command tx timeout [ 345.823287] Bluetooth: hci4: command tx timeout [ 345.887106] Bluetooth: hci3: command tx timeout [ 345.951336] Bluetooth: hci5: command tx timeout [ 346.014044] Bluetooth: hci6: command tx timeout [ 346.015036] Bluetooth: hci7: command tx timeout [ 347.167087] Bluetooth: hci0: command tx timeout [ 347.614101] Bluetooth: hci1: command tx timeout [ 347.744064] Bluetooth: hci2: command tx timeout [ 347.870034] Bluetooth: hci4: command tx timeout [ 347.934159] Bluetooth: hci3: command tx timeout [ 347.998148] Bluetooth: hci5: command tx timeout [ 348.062039] Bluetooth: hci7: command tx timeout [ 348.062511] Bluetooth: hci6: command tx timeout [ 349.214150] Bluetooth: hci0: command tx timeout [ 349.662296] Bluetooth: hci1: command tx timeout [ 349.790120] Bluetooth: hci2: command tx timeout [ 349.918328] Bluetooth: hci4: command tx timeout [ 349.982202] Bluetooth: hci3: command tx timeout [ 350.046140] Bluetooth: hci5: command tx timeout [ 350.112332] Bluetooth: hci7: command tx timeout [ 350.113027] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 12:20:48 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88803bcec1c8 RCX=ffffffff813a1b72 RDX=ffff8880276fd340 RSI=ffffffff813a1b4f RDI=0000000000000007 RBP=ffff8880276fd340 RSP=ffff88803bcefdf8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=dffffc0000000000 R14=ffff88803bce8000 R15=dffffc0000000000 RIP=ffffffff8171a348 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f70e13c3f88 CR3=000000002e03e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff817228bb RDX=ffff88802ebfd340 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff88803b0f7748 R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c70708 R15=ffff88803bef5000 RIP=ffffffff8171a340 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa9c09d86f4 CR3=000000003054a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fa9c09e747000007fa9c09e6f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000