Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 67.087892] scp (244) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:41748' (ECDSA) to the list of known hosts. 2025/01/26 14:43:59 fuzzer started 2025/01/26 14:43:59 dialing manager at localhost:40883 [ 69.962192] cgroup: Unknown subsys name 'net' [ 70.049565] cgroup: Unknown subsys name 'cpuset' [ 70.080552] cgroup: Unknown subsys name 'rlimit' [ 75.463073] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/26 14:44:17 syscalls: 221 2025/01/26 14:44:17 code coverage: enabled 2025/01/26 14:44:17 comparison tracing: enabled 2025/01/26 14:44:17 extra coverage: enabled 2025/01/26 14:44:17 setuid sandbox: enabled 2025/01/26 14:44:17 namespace sandbox: enabled 2025/01/26 14:44:17 Android sandbox: enabled 2025/01/26 14:44:17 fault injection: enabled 2025/01/26 14:44:17 leak checking: enabled 2025/01/26 14:44:17 net packet injection: enabled 2025/01/26 14:44:17 net device setup: enabled 2025/01/26 14:44:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/26 14:44:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/26 14:44:17 USB emulation: enabled 2025/01/26 14:44:17 hci packet injection: enabled 2025/01/26 14:44:17 wifi device emulation: enabled 2025/01/26 14:44:17 802.15.4 emulation: enabled 2025/01/26 14:44:17 fetching corpus: 0, signal 0/0 (executing program) 2025/01/26 14:44:19 starting 8 fuzzer processes 14:44:19 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x108, 0x0, &(0x7f0000000540)=[@increfs={0x40046304, 0x3}, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}, @fda={0x66646185, 0x0, 0x0, 0x39}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/40, 0x28, 0x1, 0x39}, @flat=@weak_binder={0x77622a85, 0x100b, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/210, 0xd2, 0x2, 0x1f}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/203, 0xcb, 0x2, 0x1b}, @fda={0x66646185, 0x3, 0x0, 0x31}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}, 0x400}, @clear_death], 0x3a, 0x0, &(0x7f0000000680)="4c0dcac2c8549f9084ca0ad01960162155a74647dc38fbb56b52e7e68a3ede5a8295da62b5852dbcbe11af10c88c2f1d0845d8875ece70070a28"}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000700)={0x29b, 0xfa, 0xffff}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x0, 0x118, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40) r1 = syz_open_dev$mouse(&(0x7f0000000840), 0x3, 0x200040) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000880)) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000008c0)) ioctl$VT_RELDISP(r1, 0x5605) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000940)={0x3, &(0x7f0000000900)=[{}, {}, {}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000980)={'ip_vti0\x00', r0, 0x10, 0x87a9, 0x40, 0xfa, {{0x13, 0x4, 0x1, 0x1b, 0x4c, 0x64, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x2b, 0x1, 0x5, [{@broadcast, 0x1}, {@remote, 0xd625}]}, @timestamp={0x44, 0x8, 0x14, 0x0, 0x0, [0xfff]}, @ra={0x94, 0x4, 0x1}, @end, @end, @generic={0x89, 0x10, "68d086831ce9f7b180cfddf8118f"}]}}}}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e40)={0x4c, 0x0, &(0x7f0000000cc0)=[@reply={0x40406301, {0x368, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000c00)={@flat=@weak_handle={0x77682a85, 0x110a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000a40)=""/140, 0x8c, 0x2, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000b00)=""/252, 0xfc, 0x0, 0x34}}, &(0x7f0000000c80)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x1}], 0xc9, 0x0, &(0x7f0000000d40)="af8e3267f281f1118e8ae558b01218dbad9782b3ee74ed6fbaf00e2fb340cebea104753ba0bd1440b59a3310c22111746cbdf0d01f0bbe7b99efce47a13cba1748a268bb2cd0ef5358c97ce6765512103c1e8afed643dc0b16301039cdce3b2b04675acc102872804eb0711f491446a99abe903d918e925ebb0a9eee1fa2af8331fa3fb5f73d35f7b1dcf1afd079d02d4cbf5dcee4f2430ce07e09aec3d9ddb297c05bd5182036180de54d3cdccb241b265f5daa6738d5cdf066ebfb12f206137f01dc843d1eb974aa"}) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000e80)) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000f00)={0x1, &(0x7f0000000ec0)=[{}]}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000f40)={0x2, 0x4d8, 0x6}) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000001000)) 14:44:19 executing program 2: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0x8, 0x4, 0xfe00}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41c1, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x1, 0x1, 0x6b11}) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000000c0)=""/139) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000180)) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000240)) prctl$PR_CAPBSET_READ(0x17, 0x14) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000280)={0x3f, 0x4, 0x7}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000006c0)={0x0, 0x0, 0xa, 0x13, 0x13e, &(0x7f00000002c0)="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"}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000b00)={0x0, 0x1, 0x11, 0x6, 0x13a, &(0x7f0000000700)="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"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000b40), 0x40000, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000bc0)={0x2, &(0x7f0000000b80)=[{}, {}]}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x33b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40088a0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000d00)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000d40)=""/53) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000d80)={0x1ff, 0x1, 0x6, 0x41, 0x0, "6f7252491c5d1854886338e391278db975f7e7"}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000dc0)={0x3, 0x9}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x400c804) 14:44:19 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x401, 0x210081) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x3, 0x100, 0x8, 0x8000, 0x1, 0x5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x3}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f0000000100)={0x0, 0x5}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x28}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10000, 0x20, 0xa6fc, 0x100, 0xc68, 0x40000020}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4040044) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0xeb2451ac58565d25, 0x70bd26, 0xfff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x49015}, 0x20004090) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x44e181, 0x0) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000000440)) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000004c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private0, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000640)={0x73622a85, 0x1, 0x1}) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000680)) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x88, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x24008040) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1c804}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xc8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf029}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40480c5}, 0x4004) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000a00), 0x539901, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000a40)={'\x00', 0x4, 0x1, 0x6}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40010) 14:44:19 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x10018044) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x10, 0x8000, 0x8, 0xff, {{0x8, 0x4, 0x2, 0x3b, 0x20, 0x66, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@ssrr={0x89, 0x7, 0x1e, [@broadcast]}, @end, @noop, @end]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x278}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x5, 0x2100) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40080) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0x8088) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000740), 0xaf1, 0x347102) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x80d0}, 0x200000c0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r6) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r10, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x4000004) 14:44:19 executing program 4: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000005, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2}, 0xcc2) r2 = socket$inet6(0xa, 0x80000, 0x4d6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e21, 0x7, 0x4e20, 0x1ff, 0x2, 0xa0, 0x0, 0x3b, r3, r0}, {0x6, 0x0, 0x9, 0x9, 0x4, 0xff, 0x0, 0x30000}, {0x7, 0x800, 0xff, 0x800}, 0x7, 0x6e6bb4, 0x0, 0x1, 0x3}, {{@in6=@remote, 0x4d4, 0x6c}, 0xa, @in6=@remote, 0x34ff, 0x2, 0x3, 0x71, 0x0, 0x2, 0x2}}, 0xe8) syz_io_uring_submit(0x0, r1, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) r4 = socket(0x1d, 0x800, 0x8) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000400)={'filter\x00', 0x0, [0x6d439b79, 0x200, 0x90b2, 0xffffff8a, 0x6]}, &(0x7f0000000480)=0x54) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r6, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000640), 0x100000001, 0x105441) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000880)={&(0x7f00000006c0), 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xdc, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000008c0)={'mangle\x00', 0x0, [0x8, 0x1, 0xbe, 0x8, 0x2da]}, &(0x7f0000000940)=0x54) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r9, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x4810) [ 89.560759] audit: type=1400 audit(1737902659.154:7): avc: denied { execmem } for pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:44:19 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)={0x29, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0xaa9}, @calipso={0x7, 0x18, {0x1, 0x4, 0x72, 0x0, [0x4, 0x6]}}, @generic={0x9, 0xc1, "6d945fb49a8278de0285e4e36cb87e000509be041dfbea4564fb562e6794508acc130dc247e2c3fbc8f66484e8df6137028770dc2ec721f5754f348448d491b744b8c8037accc7f6922a21dcd501520ce743b82a4239eb7370ca7aab33d6868a5e56ca2bf56a19ccf29d9ae438798feca41280382cd27e361cab7df05ad8920808f1aaa08b082a0885b8732e2b856a720a90457f8c6f34a1288a740936709bcec6abc6e866480746aefafdeecbf433a9b0fb3be8a39afe2c265cd6e0ae87c5f534"}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x8}, @ra={0x5, 0x2, 0x8000}]}, 0x100) syz_usb_connect$uac1(0x2, 0x9b, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x42, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f, 0x86}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x3, 0x8, "4b27ad"}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0x7f, 0x3a, "24193cb3e1c8"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x6, 0x5, 0x8, 0xef}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x1, 0x0, {0x7, 0x25, 0x1, 0x1, 0x0, 0x6316}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x4, 0x7f, {0x7, 0x25, 0x1, 0x80, 0x4, 0x1}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x9, 0x7, 0x0, 0x10, 0x1}, 0x43, &(0x7f0000000300)={0x5, 0xf, 0x43, 0x6, [@generic={0xc, 0x10, 0xa, "0e038ab6bfc23454f0"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x1, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x82, 0x8, 0x8, 0x7ff, 0x3f}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa, 0x40, 0xff, 0x9, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x4e}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x7, 0xfd, 0x7f, 0x7}]}, 0x7, [{0x15, &(0x7f0000000380)=@string={0x15, 0x3, "3339f51f10742ab5478259b05361f1635c9af1"}}, {0x80, &(0x7f00000003c0)=@string={0x80, 0x3, "4be2021ab2329285c8bf3771d0f27cc1b989b289772ac04b52c40a15be71fe29b093a25dacb9ca721d07c97b03eb02b375b3e062c314b51f03ce787efbe27150fa64f33ae2906cae155da5917d19384d8e3b777ac7742eaa7d1d627d704f50289d8ad8d575673fcc496fa70968658b54a0f3f541bf69b3964bf0491c63ec"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41a}}, {0xf0, &(0x7f0000000500)=@string={0xf0, 0x3, "0d6de5b732b1f2e233bbed22d96cec574bb9de19d8a9a83a385e5a864b1d5fa34389fed379a4df26ca7da904f498ec8c1ad791cb2e7e85f09843b945343b5ae891ecc78892f2322ef1eeb6ea1ac9a484f0b1a7b25cba81bc86a2335407fe82c36403d1d616016d63351639691baeb06b0b94ed454ebfbcbfe57e30c36c77c597331ea34aa8207c377a6af4596f711597978cbebe7bc5267d7d45eb62da50352c78f7984f6f26a00bd3fb0b7d3a622fd4ef447e92e5b9d689b1d27bc00c0d3423c7cd23bb7ea8df9b10a73d95a5a810f5933b8380f0b3490790c8732f2c71e6d8ff1efe8f7ec4980f2d104a015a06"}}, {0xae, &(0x7f0000000600)=@string={0xae, 0x3, "109dc5cfb8d337bd461feae7539ed07d1b1d6d4d5121aaca279d6fc0e3032d50939711675e8e171eaf2bdebdd90bc536d9bbb30a63bd5919cbdc1f95023c7af64ae581c8aa55b6c02e1ed4b19bd6bae360271c0ca05a452a72bb6e699a56fdf7ca059d0a5f6ad3d93ccde71f660417d983055aa19f34c9c5198e910557df7064eb79f491db0cdfa1287e26dd8e979ff6b0483559d79a483bab72465141ddb78480d77f14ec1f01b76e433140"}}]}) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000780)=0x1c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1, @in6=@empty}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f00000008c0)=0xe8) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x30, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000a00), 0x220080, 0x0) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000a40)={'\x00', 0x3, 0x3, 0x2}) r2 = syz_open_dev$mouse(&(0x7f0000000ac0), 0x5, 0x46c281) r3 = socket(0x29, 0x1, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@remote, @in6=@dev}}, {{@in=@private}}}, &(0x7f0000000c00)=0xe8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, r2, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000001c40)=@IORING_OP_WRITE={0x17, 0x2, 0x6000, @fd=r0, 0x401, &(0x7f0000000c40)="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", 0x1000, 0x6}, 0x5019) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001c80)={{{@in=@remote, @in6=@empty}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000001d80)=0xe8) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000001dc0)={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x2}, {0xa, 0x4e24, 0x800, @empty, 0x6}, 0x1, [0x0, 0xe8, 0x1, 0x1, 0x8, 0x0, 0x4, 0x7ff]}, 0x5c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e80), r2) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x44, r5, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffe}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xdf9a}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x804) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000001fc0)={0x8, 0x11, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0xffff}, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x58, {0x2, 0x14, 0x20, 0x0, [0x200, 0x85, 0x0, 0x10001, 0x991, 0x4, 0xd99, 0x80000000000, 0x4, 0xffff]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}]}, 0x98) 14:44:19 executing program 6: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000140)) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000180)={{0x5, 0x26e}, {0x800, 0x7}, 0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', r2, 0x80, 0x1, 0x8, 0x9, {{0x9, 0x4, 0x0, 0x9, 0x24, 0x65, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x39}, {[@generic={0x89, 0x10, "14ce580f8fd62ef458c5af45d649"}]}}}}}) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f00000002c0)={0x6}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x20, 0x7, 0x4, 0x8, {{0x3e, 0x4, 0x3, 0x2c, 0xf8, 0x67, 0x0, 0x8, 0x0, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0x13, 0xb7, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback]}, @timestamp_addr={0x44, 0x2c, 0x75, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x9c4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@broadcast, 0x2}, {@rand_addr=0x64010100, 0xfffffffc}, {@multicast2, 0x7fff}]}, @cipso={0x86, 0x41, 0x0, [{0x0, 0xc, "f557f29ff0522ddc8a35"}, {0x6, 0x5, "26f1ab"}, {0x2, 0x2}, {0x0, 0x7, "4989fb8585"}, {0xb, 0x11, "8ff7992b2a558756bb7aabf036efb7"}, {0x0, 0x8, "cbf30518bb96"}, {0x6, 0x8, "9fc6f6cf1b3a"}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x44, [@local]}, @generic={0x82, 0xd, "4943d1d26c9ab8631bce54"}, @cipso={0x86, 0x17, 0x1, [{0x1, 0x11, "06d6f56397c63eca49373b295be8a5"}]}, @timestamp_addr={0x44, 0x34, 0x69, 0x1, 0x2, [{@multicast1, 0xc7}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x9}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xe2}, {@broadcast, 0x7}, {@rand_addr=0x64010102, 0x100}, {@local}]}]}}}}}) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000900)={0x14, "f14b02814c53b969ae3fd3f333650a6700ec853c"}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000940)={'\x00', 0x1, 0x2, 0x7f}) r3 = syz_open_dev$hiddev(&(0x7f00000009c0), 0x5, 0x400200) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000a00)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00'}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000a80)={0x17}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000dc0), 0x42000, 0x0) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000e00)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e40)='./binderfs2/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x1) 14:44:19 executing program 7: ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x3f, 0xf}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0xbb, 0x4653, 0x1}) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000080)={'\x00', 0x4, 0x0, 0x5}) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000100)={'\x00', 0x8000, 0x0, 0x101}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x210400, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000001c0)=""/8) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000200)={'\x00', 0x4, 0x0, 0x7}) r1 = syz_open_dev$mouse(0xfffffffffffffffe, 0x2, 0x240) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000280)={0x7, 0x87a}) r2 = syz_io_uring_complete(0x0) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f00000002c0)={'\x00', 0x1f, 0x1, 0xfffffff9}) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000340)={{0xee6, 0x2}, {0xfff, 0x4}, 0xfff}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000380)={0x8, 0x200, 0x40}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000003c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x28, 0x0, &(0x7f0000000400)=[@clear_death={0x400c630f, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x1}], 0x57, 0x0, &(0x7f0000000440)="74b7a6404ffc8bb3d2d140c998585e9be6874e9d9cb22d9656a7b60c14d5877ecdc2e55ec2b6c0e8afbf9eb1041c83b4fa58013d02848b55329078e53a22acdf768a5d2c370b69b94d4871ef1255452c41e50b2dc7a212"}) r3 = syz_open_dev$mouse(&(0x7f0000000500), 0x79, 0x182) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000540)={{0x26, 0x3}, {0x40, 0x1}, 0x0, 0x1}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x700, 0xf0, 0xa684, 0x7, {{0x46, 0x4, 0x0, 0x5, 0x118, 0x67, 0x0, 0x3, 0x2f, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}, @cipso={0x86, 0xf, 0x0, [{0x7, 0x9, "eec1e55aee6ceb"}]}, @timestamp_addr={0x44, 0x3c, 0xa3, 0x1, 0x3, [{@remote, 0x5}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x2}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}]}, @cipso={0x86, 0x3d, 0x3, [{0x0, 0x5, "789201"}, {0x5, 0xa, "eaf42ad28f6ba9d7"}, {0x0, 0x3, "f8"}, {0x5, 0xd, "480136e6f29afe41a7d812"}, {0x1, 0x7, "432208c910"}, {0x0, 0x11, "2e7c7b69548ef23b91c767eea727f4"}]}, @timestamp_addr={0x44, 0x2c, 0x95, 0x1, 0x1, [{@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7ff}, {@loopback, 0x8}]}, @timestamp={0x44, 0x18, 0x80, 0x0, 0x3, [0x6, 0x10001, 0x9, 0x7, 0x7]}, @cipso={0x86, 0x22, 0x0, [{0x0, 0x6, "52899bbc"}, {0x5, 0xe, "65049b9cab00030d51c6744d"}, {0x5, 0x8, "a7b318750bec"}]}, @generic={0x89, 0x11, "664e254338ba051d021b4771b7eb5d"}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000700)) [ 90.999964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.002244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.004152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.009731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.013302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.015517] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.059732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.065380] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.069267] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.080503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.094258] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.096399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.121318] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.133693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.145687] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.160129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.168272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.171112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.175174] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.177681] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.179663] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.182429] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.183487] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.193302] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.199331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.201935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.209209] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.212876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.215220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.229585] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.231100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.231604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.239437] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.242511] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.244368] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.253397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.258974] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.259519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.262333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.270874] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.272690] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.277309] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.282522] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.288712] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.292229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.298423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.300310] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.307640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.087970] Bluetooth: hci0: command tx timeout [ 93.216142] Bluetooth: hci3: command tx timeout [ 93.216729] Bluetooth: hci1: command tx timeout [ 93.343155] Bluetooth: hci6: command tx timeout [ 93.406932] Bluetooth: hci7: command tx timeout [ 93.408295] Bluetooth: hci5: command tx timeout [ 93.409053] Bluetooth: hci2: command tx timeout [ 93.409573] Bluetooth: hci4: command tx timeout [ 95.136055] Bluetooth: hci0: command tx timeout [ 95.262914] Bluetooth: hci1: command tx timeout [ 95.263372] Bluetooth: hci3: command tx timeout [ 95.391996] Bluetooth: hci6: command tx timeout [ 95.456562] Bluetooth: hci4: command tx timeout [ 95.457662] Bluetooth: hci2: command tx timeout [ 95.458148] Bluetooth: hci5: command tx timeout [ 95.458589] Bluetooth: hci7: command tx timeout [ 97.182884] Bluetooth: hci0: command tx timeout [ 97.311846] Bluetooth: hci3: command tx timeout [ 97.312328] Bluetooth: hci1: command tx timeout [ 97.438866] Bluetooth: hci6: command tx timeout [ 97.505877] Bluetooth: hci2: command tx timeout [ 97.506320] Bluetooth: hci7: command tx timeout [ 97.506740] Bluetooth: hci5: command tx timeout [ 97.507232] Bluetooth: hci4: command tx timeout [ 99.232859] Bluetooth: hci0: command tx timeout [ 99.359883] Bluetooth: hci1: command tx timeout [ 99.360335] Bluetooth: hci3: command tx timeout [ 99.486885] Bluetooth: hci6: command tx timeout [ 99.551020] Bluetooth: hci4: command tx timeout [ 99.551519] Bluetooth: hci5: command tx timeout [ 99.552429] Bluetooth: hci7: command tx timeout [ 99.552922] Bluetooth: hci2: command tx timeout [ 151.314207] syz-executor.1 (289) used greatest stack depth: 23680 bytes left [ 154.350693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.355939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.357352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.361749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.366347] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.367578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.407994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.412086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.415032] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.426983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.432259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.434941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.470740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.476113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.479266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.491633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.511267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.522373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.548266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.552952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.554729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.562368] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.583888] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.585028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.696595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.709080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.715694] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.723487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.752173] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.753104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.760896] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.776061] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.777592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.802612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.803586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.805673] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.817118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.820148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.822466] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.823145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.824576] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.829732] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.836066] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.843137] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.848333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.883361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.915437] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.925998] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.448848] Bluetooth: hci0: command tx timeout [ 156.511898] Bluetooth: hci1: command tx timeout [ 156.639108] Bluetooth: hci3: command tx timeout [ 156.639228] Bluetooth: hci2: command tx timeout [ 156.894908] Bluetooth: hci4: command tx timeout [ 156.958902] Bluetooth: hci5: command tx timeout [ 156.959594] Bluetooth: hci6: command tx timeout [ 157.024446] Bluetooth: hci7: command tx timeout [ 158.495870] Bluetooth: hci0: command tx timeout [ 158.560846] Bluetooth: hci1: command tx timeout [ 158.686970] Bluetooth: hci2: command tx timeout [ 158.687441] Bluetooth: hci3: command tx timeout [ 158.943235] Bluetooth: hci4: command tx timeout [ 159.006930] Bluetooth: hci6: command tx timeout [ 159.008567] Bluetooth: hci5: command tx timeout [ 159.073049] Bluetooth: hci7: command tx timeout [ 160.544855] Bluetooth: hci0: command tx timeout [ 160.607130] Bluetooth: hci1: command tx timeout [ 160.734903] Bluetooth: hci3: command tx timeout [ 160.735711] Bluetooth: hci2: command tx timeout [ 160.991156] Bluetooth: hci4: command tx timeout [ 161.054943] Bluetooth: hci5: command tx timeout [ 161.054970] Bluetooth: hci6: command tx timeout [ 161.118978] Bluetooth: hci7: command tx timeout [ 162.590876] Bluetooth: hci0: command tx timeout [ 162.654910] Bluetooth: hci1: command tx timeout [ 162.782886] Bluetooth: hci3: command tx timeout [ 162.783901] Bluetooth: hci2: command tx timeout [ 163.040087] Bluetooth: hci4: command tx timeout [ 163.102995] Bluetooth: hci5: command tx timeout [ 163.103022] Bluetooth: hci6: command tx timeout [ 163.167077] Bluetooth: hci7: command tx timeout [ 216.176601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.179934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.183028] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.190660] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.196606] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.202349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.235682] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.241743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.244748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.245162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.248952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.253521] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.260264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.266187] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.269559] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.271425] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.273562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.273969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.310054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.314533] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.320092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.321121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.323407] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.323987] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.338028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.342113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.344923] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.346208] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.350239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.350314] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.358621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.370021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.373820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.376622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.383935] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.387120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.401058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.419395] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.433125] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.434407] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.456339] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.458724] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.524406] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.531484] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.536251] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.550634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.573070] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.576127] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.271955] Bluetooth: hci0: command tx timeout [ 218.334918] Bluetooth: hci1: command tx timeout [ 218.336054] Bluetooth: hci2: command tx timeout [ 218.398834] Bluetooth: hci4: command tx timeout [ 218.462884] Bluetooth: hci3: command tx timeout [ 218.526894] Bluetooth: hci5: command tx timeout [ 218.655904] Bluetooth: hci6: command tx timeout [ 218.718855] Bluetooth: hci7: command tx timeout [ 220.319881] Bluetooth: hci0: command tx timeout [ 220.383899] Bluetooth: hci2: command tx timeout [ 220.384429] Bluetooth: hci1: command tx timeout [ 220.447978] Bluetooth: hci4: command tx timeout [ 220.512924] Bluetooth: hci3: command tx timeout [ 220.576803] Bluetooth: hci5: command tx timeout [ 220.703858] Bluetooth: hci6: command tx timeout [ 220.767812] Bluetooth: hci7: command tx timeout [ 222.367845] Bluetooth: hci0: command tx timeout [ 222.432001] Bluetooth: hci2: command tx timeout [ 222.432583] Bluetooth: hci1: command tx timeout [ 222.495922] Bluetooth: hci4: command tx timeout [ 222.559914] Bluetooth: hci3: command tx timeout [ 222.623881] Bluetooth: hci5: command tx timeout [ 222.751998] Bluetooth: hci6: command tx timeout [ 222.815879] Bluetooth: hci7: command tx timeout [ 224.415855] Bluetooth: hci0: command tx timeout [ 224.479882] Bluetooth: hci1: command tx timeout [ 224.480332] Bluetooth: hci2: command tx timeout [ 224.543830] Bluetooth: hci4: command tx timeout [ 224.608555] Bluetooth: hci3: command tx timeout [ 224.671940] Bluetooth: hci5: command tx timeout [ 224.800041] Bluetooth: hci6: command tx timeout [ 224.865801] Bluetooth: hci7: command tx timeout [ 278.579200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.582471] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.585673] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.593542] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.597477] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.600645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.732063] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.734493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.736597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.743221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.754632] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.756721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.770837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.798454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.801229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.805575] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.808510] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.811127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.915721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.930514] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.932817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.944225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.950196] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.957445] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.086217] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.089935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.092393] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.097659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.101965] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.104470] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.180224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.190154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.194273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.202963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.240738] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.250401] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.308620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.313398] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.316520] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.370567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.373614] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.375607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.561106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.691428] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.697586] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.715656] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.718708] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.723053] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.670907] Bluetooth: hci0: command tx timeout [ 280.798923] Bluetooth: hci1: command tx timeout [ 280.862939] Bluetooth: hci2: command tx timeout [ 281.054995] Bluetooth: hci3: command tx timeout [ 281.183029] Bluetooth: hci4: command tx timeout [ 281.438895] Bluetooth: hci5: command tx timeout [ 281.502947] Bluetooth: hci6: command tx timeout [ 281.822919] Bluetooth: hci7: command tx timeout [ 282.720257] Bluetooth: hci0: command tx timeout [ 282.846847] Bluetooth: hci1: command tx timeout [ 282.910928] Bluetooth: hci2: command tx timeout [ 283.102842] Bluetooth: hci3: command tx timeout [ 283.230850] Bluetooth: hci4: command tx timeout [ 283.487809] Bluetooth: hci5: command tx timeout [ 283.550853] Bluetooth: hci6: command tx timeout [ 283.871000] Bluetooth: hci7: command tx timeout [ 284.766858] Bluetooth: hci0: command tx timeout [ 284.894959] Bluetooth: hci1: command tx timeout [ 284.958950] Bluetooth: hci2: command tx timeout [ 285.150979] Bluetooth: hci3: command tx timeout [ 285.280882] Bluetooth: hci4: command tx timeout [ 285.534885] Bluetooth: hci5: command tx timeout [ 285.598818] Bluetooth: hci6: command tx timeout [ 285.919825] Bluetooth: hci7: command tx timeout [ 286.814851] Bluetooth: hci0: command tx timeout [ 286.942836] Bluetooth: hci1: command tx timeout [ 287.006892] Bluetooth: hci2: command tx timeout [ 287.198863] Bluetooth: hci3: command tx timeout [ 287.326929] Bluetooth: hci4: command tx timeout [ 287.582910] Bluetooth: hci5: command tx timeout [ 287.646842] Bluetooth: hci6: command tx timeout [ 287.967009] Bluetooth: hci7: command tx timeout [ 341.612706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.615345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.617997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.630180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.635604] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.638063] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.675461] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.679550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.682099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.687234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.693300] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.697197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.872643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.878179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.881491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.887046] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.890130] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.892543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.955718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.958661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.960718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.965667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.972664] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.974599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.043389] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.059937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.076677] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.084089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.087183] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.089162] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.136509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.151664] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.164088] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.184197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.185582] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.202180] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.234118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.237708] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.240291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.297194] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.314151] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.324198] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.079666] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.156229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.158375] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.173163] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.178058] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.182169] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.711865] Bluetooth: hci0: command tx timeout [ 343.774831] Bluetooth: hci1: command tx timeout [ 343.967179] Bluetooth: hci2: command tx timeout [ 344.097386] Bluetooth: hci3: command tx timeout [ 344.223617] Bluetooth: hci4: command tx timeout [ 344.414890] Bluetooth: hci5: command tx timeout [ 344.479887] Bluetooth: hci7: command tx timeout [ 345.311077] Bluetooth: hci6: command tx timeout [ 345.759896] Bluetooth: hci0: command tx timeout [ 345.822848] Bluetooth: hci1: command tx timeout [ 346.014847] Bluetooth: hci2: command tx timeout [ 346.142902] Bluetooth: hci3: command tx timeout [ 346.271065] Bluetooth: hci4: command tx timeout [ 346.462996] Bluetooth: hci5: command tx timeout [ 346.526868] Bluetooth: hci7: command tx timeout [ 347.358913] Bluetooth: hci6: command tx timeout [ 347.806827] Bluetooth: hci0: command tx timeout [ 347.870895] Bluetooth: hci1: command tx timeout [ 348.062824] Bluetooth: hci2: command tx timeout [ 348.190900] Bluetooth: hci3: command tx timeout [ 348.319055] Bluetooth: hci4: command tx timeout [ 348.511435] Bluetooth: hci5: command tx timeout [ 348.574856] Bluetooth: hci7: command tx timeout [ 349.406857] Bluetooth: hci6: command tx timeout [ 349.855354] Bluetooth: hci0: command tx timeout [ 349.918854] Bluetooth: hci1: command tx timeout [ 350.110978] Bluetooth: hci2: command tx timeout [ 350.239427] Bluetooth: hci3: command tx timeout [ 350.368795] Bluetooth: hci4: command tx timeout [ 350.559783] Bluetooth: hci5: command tx timeout [ 350.622907] Bluetooth: hci7: command tx timeout [ 351.454858] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 14:49:28 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000080000 RCX=ffffffff81e34433 RDX=ffff88800e0bd340 RSI=0000000000000000 RDI=0000000000000005 RBP=00000000000007ff RSP=ffff88802a07fce8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88802a07fde8 R13=ffff88800bc5eea0 R14=ffffffff85d20b60 R15=0000000000000000 RIP=ffffffff81e34436 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3ac8ce9260 CR3=0000000033a16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000016 RCX=ffffffff814fe11a RDX=fffffbfff0fe15e5 RSI=0000000000000008 RDI=ffffffff87f0af20 RBP=ffff88802fb6dd90 RSP=ffff88802614f440 R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=ffffffff87f0af27 R11=0000000000000000 R12=ffff88802fb6d340 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff814fe122 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557d56c400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6202dba6f4 CR3=0000000035d50000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000000000ff00000000 XMM02=0000000000000000000000ff00000000 XMM03=000000000000000000000000ff000000 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000