syzkaller login: [ 118.170278] sshd (250) used greatest stack depth: 23880 bytes left Warning: Permanently added '[localhost]:20103' (ECDSA) to the list of known hosts. 2025/02/21 15:04:30 fuzzer started 2025/02/21 15:04:30 dialing manager at localhost:37817 [ 132.989297] cgroup: Unknown subsys name 'net' [ 133.210991] cgroup: Unknown subsys name 'cpuset' [ 133.267138] cgroup: Unknown subsys name 'rlimit' 2025/02/21 15:04:51 syscalls: 2217 2025/02/21 15:04:51 code coverage: enabled 2025/02/21 15:04:51 comparison tracing: enabled 2025/02/21 15:04:51 extra coverage: enabled 2025/02/21 15:04:51 setuid sandbox: enabled 2025/02/21 15:04:51 namespace sandbox: enabled 2025/02/21 15:04:51 Android sandbox: enabled 2025/02/21 15:04:51 fault injection: enabled 2025/02/21 15:04:51 leak checking: enabled 2025/02/21 15:04:51 net packet injection: enabled 2025/02/21 15:04:51 net device setup: enabled 2025/02/21 15:04:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/02/21 15:04:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/02/21 15:04:51 USB emulation: enabled 2025/02/21 15:04:51 hci packet injection: enabled 2025/02/21 15:04:51 wifi device emulation: enabled 2025/02/21 15:04:51 802.15.4 emulation: enabled 2025/02/21 15:04:51 fetching corpus: 0, signal 0/0 (executing program) 2025/02/21 15:04:53 starting 8 fuzzer processes 15:04:53 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x40, 0x8100) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x6}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4) r2 = geteuid() fchown(r0, r2, 0xffffffffffffffff) r3 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x81, 0x5, &(0x7f0000000540)=[{&(0x7f0000000240)="7fa46dd04e92032ef7b021d667a8cfed8c808c3b826117ace6be32843ab946358ffc358cfa7d0509af6ced970e661d9089f0923fb74e1303cd324955a5cd228e804000484f4825db6dc848426461debfb61169d08561516e53b687f7e4ab384663602f295caca65476e095ff066d2ba86b37038abaf881aeeccb8b230908c58fc5c71a2a0f215a45f1404592e9f8288ef51c2f27bcd704516c6cfb26f6cd3acc5a7b11994a683ebfd3edae1dd0d6fa50e747a8c06b862c02a288ba0554acceaec6748f428f42e32b3cb37ca63372a8ea99bf2c192506702db0dc56243a2ba456eb4246", 0xe3, 0x1ff}, {&(0x7f0000000340)="771dee6bd1d62f6a7dca8dd883c949dcd1c38156adfaec1c0ee771be3129822478bb20f6ee0e0d5edc685df9c4eadd5b70b7a69ccd42e239f67e8e2a3fd6fd", 0x3f, 0x59c8d6cd}, {&(0x7f0000000380)="d1a235c1847779d45d90790663812ad65963d3b3340b6a32ba2be1d763dd5c0c8adc47c4e7ff9d5060de958216250760da9ce128dee2cc765b3acbc17654191495cf16913d2bfe0b0c0ede748a95e43b6a2d3dd07d6cd5bbad167340ea74", 0x5e, 0x335}, {&(0x7f0000000400)="0823bbb1a9269877df944113100f03fc0d4fad63b418cb91e7ae20a840df06e844ba47566a516bb94781b92977c3dee0fc605cde7ac9d5642ae336aef6e25e791417631a771197c4aa333933d7a9aec717e8cdb0ed9e234dcd0cbb328251f4d2039d7278a8933425830a59073797a84a06fa182728f9", 0x76}, {&(0x7f0000000480)="867ea682db1502d98596e0b16bab88fba0d95d02d7bede4dc0771bc4ab6861b5956e677cfc965c79cb461e48f1cd887a01131d1ae0353829937ed75af34a179d2384153acf4ea8b170603a818d689a4fa86c3eed5f21be99861f0dc15a14ac189b12abea36004d70d11f1d453b03294c921b9c95ff71b342e3f83f386087262339f8492d5673893abcecf7a6125a522a3c04352c1a8d8c370b7707cb951c38f7bb474a5f6e7fd6c060be2008c8431fafad0bae537b", 0xb5, 0x386}], 0x220409, &(0x7f00000005c0)={[{@shortname_winnt}, {@rodir}, {@nonumtail}, {@nonumtail}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'pci\x00'}}, {@fowner_eq={'fowner', 0x3d, r2}}]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000640)={{r3}, {@val, @max}}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000680)=0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x400000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x400080c0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8982, &(0x7f0000000880)={0x8, 'ip6tnl0\x00', {'bridge0\x00'}, 0x1f4f}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f00000008c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000900)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f0000001280)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000000980)={0x890, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8813, 0x6}}}}, [@NL80211_ATTR_FRAME={0x142, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @device_a, @initial, {0x6, 0x20}}, {0x2, 0x0, 0x0, 0x0, 0x5}}, {@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x9}, @device_a, @device_b, @random="2b33daf6b5fa", {0x9, 0x8}, @broadcast}, {0x4, 0x0, 0x1}}}, @a_msdu=[{@device_b, @broadcast, 0xf3, "79ae6cc04681c856a70549015db98a42ec6dca39b3a4a76efda08c9b171901b8156f56a50ff23cc93ac3520139574f19fe7b4836af8c045fdf9db4b2aa385af75470e8ab3a027c8087b75c41f343922d9fb61afb2977918b99aa22fbb778016049a6b60f3de7f08dd56112a8c3b8950bbdd2b21257698e1ac45d67bdada86a2533f348a048a624723955c94ee7cc0f74c72f34ce57a8d4b7272bec3e5eeb11ee127df06114520404f4c8c88644135ed1bcdfae03544531e7ef5b7655a6599a04ee3df36028737e5a9257515323783e095e47729528de8c0d867ab78da915ad95ff6359259758686ca25ed3e22ff09d499480b0"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1f}, @device_a, @from_mac=@device_b}}, @NL80211_ATTR_FRAME={0x6f2, 0x33, @data_frame={@no_qos=@type10={{0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @random="272548d04542", @broadcast, @device_a, {0x6, 0x3e}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x890}}, 0x4040051) ioctl$SNDRV_TIMER_IOCTL_TREAD(r9, 0x40045402, &(0x7f00000012c0)=0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000001b80)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a80)={0x88, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) 15:04:53 executing program 2: prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000080) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20440000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x15c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x15c}}, 0x408e1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/pci_bus', 0x296201, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x80c0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000004c0)=""/4096) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x28042}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x38, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000015c0), 0x10000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2008040}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0xac, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4e}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbf}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x200000c0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000001a00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000017c0)={0x1d8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_generic(r3, &(0x7f0000001e40)={&(0x7f0000001a40), 0xc, &(0x7f0000001e00)={&(0x7f0000001a80)={0x348, 0x1c, 0x100, 0x70bd29, 0x25dfdbff, {0x1f}, [@nested={0x2c7, 0x85, 0x0, 0x1, [@generic="c0d20f1a928c71a426cdceb239239d28e6d83eea0dc026c17e3b232a84af71ea50af3cbac5c1218b3ed2ff5c204f92108f0a76ea8c4e6907a5ce3c7d8af1de6a0fca6137b26e106658f72f28469aea36719b835365095eef9b24b2a594ccb36165db4b385fa71cc5cd7f1f9434bbf2965b98b3dcdba0c2432f85d37b3d44de680a30a331a70b657b38bb3519a8f3d1acb6c0232130e124667339d6d983d05a4f470abba19ed7a98fc967a38e83ebccb9c4e7837249d343934a0e631619a86667d884790d32cb2483be5d2624d5ca37ea0f08a9c55a05811906aaed019c62a665d38ae5321d779af9e089f486d1", @generic="25c4448b6f81773ca88d24bda966832aa64a347d061822b9c61fcb88479f6748733fbae1a44285f65aaa6dbcd31e7080c2fda0fa303b0df9fefb9a64fad2d534e7aaf14deef07eafb49738b12413834c0ce723cebbefff37a6749c2efbcea6be54f9c5dbd62036721b857e17bfe0fa52c406ccdc16abb10247e7fb951e70edde3d924fc3ebb1f7033a7f6e98e3853c4725fc26562fc31cc320d149b2f045f0ea9f8b761f1b50970732cad7b40d9699ac506442e9282cec2f30fb41e85e7b8b498ddaac6846f7fc0296f0fdf28fdd5f5bff1d70ca1b7628bd5da92613d0256a895b629275c0680d8b7a70a729150a", @generic="3e1226bc89ea92cc827a5e92356ec2a8caa4f255bc28cbf37e04850c10f6182fcfe359a7fa5428f6278fad8f9fd97fefa04a6b931b292f7b43d84ca1dc6009d0fcc1d3a72c5c5e89da30b4b24e7f776d31cca6b6c79b01bb46de1f68dc36be022017596ac567f6dcdfca16a0cf2e87a97e174259e1e35ec2b92b6f0feebc669064", @generic="48c55d3fea38b83b5d09e02a03f0d99d3c6d2f3e6b1180448f5a3d8d794c14840d3d35d63adc8ee87596cc519ce6b3a598cbc2915c4ed3a3cfb000b501c3288e2cb6efff62f21e4ef8cc0b48d3b7a7f3861b8853e2a1d6b412ddf025d9130b0f63bdc981b58431"]}, @nested={0x63, 0xc, 0x0, 0x1, [@generic="af8e75baff943a8026e44646af894f1ce6b7c8f7a45f4208e0f05dcca35bfe2eec85b5cc636b43caff4bf132960d8770d9c9bbffb2412d2deb8e9f36593da855f606b20368ad7c37b79fe78da167ae16d8c66f117ac11b", @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}}]}, @typed={0x8, 0x22, 0x0, 0x0, @fd=r3}]}, 0x348}, 0x1, 0x0, 0x0, 0xc041}, 0x8041) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x20, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004}, 0x8010) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x20008024}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x5a}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000020c0), r2) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000002180)={&(0x7f0000002080), 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x40, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x7) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002200), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x4c, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x68, 0x15, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x51) 15:04:53 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x5, 0x1fe, 0x22, @mcast1, @mcast2, 0x40, 0x80, 0x3, 0xce36}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x80, 0x19, 0x3, {{0x16, 0x4, 0x0, 0x1, 0x58, 0x66, 0x0, 0x74, 0xca97297284da966e, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x73, 0x3, 0x0, [{@multicast1, 0xfffffffd}, {@loopback}, {@multicast1, 0x3}, {@private=0xa010102, 0xffffdf9c}]}, @timestamp={0x44, 0x8, 0xb4, 0x0, 0x4, [0x81]}, @generic={0x94, 0xd, "8d53e39fc915894e40d64f"}, @ssrr={0x89, 0xb, 0xb5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x9, 0x3, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7800, 0x8, 0x3ff, 0x825}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x15c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10000001}, 0x4008000) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000580)={0x5ab, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000008e00), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000008ec0)={&(0x7f0000008dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000008e80)={&(0x7f0000008e40)={0x14, r3, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x801) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000008f00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe76}}, './file0\x00'}) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000009300)={&(0x7f0000008f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000092c0)={&(0x7f0000008f80)={0x33c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1800000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fbd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff257}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb246}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x595817d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x372414bf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x475}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20000}, 0x20008080) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000009380), r4) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000009700)={&(0x7f0000009340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000096c0)={&(0x7f00000093c0)={0x2e0, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2e6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x366}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x73}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1c, @private2, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @private2, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8cd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8372}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20004081}, 0x24000000) setxattr$security_selinux(&(0x7f0000009740)='./file0\x00', &(0x7f0000009780), &(0x7f00000097c0)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f00000098c0)={&(0x7f0000009800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009880)={&(0x7f0000009840)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x20040001) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) fcntl$addseals(r4, 0x409, 0x5) flistxattr(r4, &(0x7f0000009900)=""/205, 0xcd) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000009a00)='/proc/key-users\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f0000009a40)={0x8, 0x9, 0x100, 0x8, 0x10001, 0x7, 0x100000001}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000009a80)={r2, 0x1, 0x6}, 0x10) [ 155.675324] audit: type=1400 audit(1740150294.001:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:04:54 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x80000000, 0x4, [{0xffffffff00000000, 0x0, 0x100000000, '\x00', 0x80}, {0xfffffffffffffff9, 0x0, 0x7, '\x00', 0x404}, {0x80000000, 0x2, 0x778d, '\x00', 0x1080}, {0xff, 0x7d, 0x1, '\x00', 0x281}]}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x4, 0x7, 0x1, 0x4, 0x40, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7807, 0x8810, 0x0, 0x7f}}) ioctl$TIOCEXCL(r0, 0x540c) fgetxattr(r0, &(0x7f00000001c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000200)=""/119, 0x77) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x215d, 0x7}}, './file0\x00'}) connect$netlink(r2, &(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000300)=""/17) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x6) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x170, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x44}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x204a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6a4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x95}, 0x801) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000600)={0x20000000}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = dup(r2) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x15, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000780)={0x0, @xdp={0x2c, 0x8, r1, 0xc}, @ethernet={0x306, @broadcast}, @can={0x1d, r1}, 0xf38, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000740)='syz_tun\x00', 0xfffffffffffff3a4, 0x2, 0x8001}) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, 0x6, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x55c2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4840) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000940), 0x400800, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000980)=0x4) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f00000009c0)) 15:04:54 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x188, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xfff8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9e}, {0x6, 0x11, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x663}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}}]}, 0x188}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x20000800) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/user\x00') ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000480)={&(0x7f0000000440)=""/59, 0x3b, 0x100, 0x3}) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x0, 0x101283) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f0000000680)=0xe8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20008011) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xaa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x80c5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r7, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x810) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000a40)={0x6, 0x9, 0x2, 0x8, 0x5, [{0x8, 0xffff, 0x77e}, {0x0, 0x4b38000000000, 0x800, '\x00', 0x1008}, {0x200, 0x9, 0x1, '\x00', 0x580}, {0x8, 0x0, 0xfff, '\x00', 0x1}, {0x53, 0x81, 0x1, '\x00', 0x804}]}) sendmsg$AUDIT_SET(r0, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, 0x3e9, 0x1, 0x70bd2a, 0x25dfdbfb, {0xc, 0x0, 0x1, 0x0, 0x1f, 0x9, 0xef, 0x8, 0x0, 0x6}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x200040c1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x2e}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40020c0}, 0x41) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x68, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xa00000, @media='ib\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x2004c9c0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) lseek(r8, 0x5, 0x4) 15:04:54 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$cgroup_type(r0, &(0x7f0000000000), 0x9) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x2, 0x4) r1 = dup(r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x45) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0xb, 0x5, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x80, 0x700, 0x40, 0x1}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4100200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, r2, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10000, 0x55}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x751ec68702dcda24) ioctl$KIOCSOUND(r1, 0x4b2f, 0x6) ioctl$CDROMCLOSETRAY(r1, 0x5319) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000580)={r0}) r5 = perf_event_open$cgroup(&(0x7f00000005c0)={0x5, 0x80, 0x30, 0x4, 0x4, 0x7, 0x0, 0x4, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x1, 0xf}, 0x28, 0x9, 0x9, 0x0, 0x3, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x3}, r0, 0xa, r0, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000640)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x76}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x96dc}]}, 0x24}}, 0x40) r6 = signalfd4(r5, &(0x7f0000000780)={[0x100]}, 0x8, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3f, 0x3d}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}]}, 0x78}}, 0x40) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0x100, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x101, 0x37}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xffffffe0}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x401}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x23, 0x1, @random="6cde0f1e3a07ba044bf88a032c974d5ed08815d697641e6d767de6727e6924"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x401}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7f}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) 15:04:54 executing program 6: ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003000)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000000100)=""/211, 0xd3}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000580)=""/49, 0x31}], 0x7, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000700)=""/58, 0x3a}, {&(0x7f0000000740)=""/74, 0x4a}, {&(0x7f00000007c0)=""/54, 0x36}, {&(0x7f0000000800)=""/98, 0x62}], 0x4, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/60, 0x3c}, {&(0x7f0000000a40)=""/170, 0xaa}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000002000)=[{&(0x7f0000000c00)=""/162, 0xa2}, {&(0x7f0000000cc0)=""/78, 0x4e}, {&(0x7f0000000d40)=""/176, 0xb0}, {&(0x7f0000000e00)=""/244, 0xf4}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/152, 0x98}, {&(0x7f0000001fc0)=""/36, 0x24}], 0x7, &(0x7f0000002080)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000002140)=""/55, 0x37}, {&(0x7f0000002180)=""/161, 0xa1}, {&(0x7f0000002240)=""/105, 0x69}, {&(0x7f00000022c0)=""/120, 0x78}, {&(0x7f0000002340)=""/188, 0xbc}, {&(0x7f0000002400)}, {&(0x7f0000002440)=""/27, 0x1b}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/153, 0x99}, {&(0x7f0000002580)=""/33, 0x21}], 0xa, &(0x7f0000002680)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002740)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f00000027c0)=""/200, 0xc8}, {&(0x7f00000028c0)=""/53, 0x35}, {&(0x7f0000002900)=""/174, 0xae}, {&(0x7f00000029c0)=""/20, 0x14}, {&(0x7f0000002a00)=""/121, 0x79}], 0x5, &(0x7f0000002b00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000002b80)=@abs, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002c00)=""/27, 0x1b}], 0x1}}, {{&(0x7f0000002c80), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002d00)=""/82, 0x52}, {&(0x7f0000002d80)=""/173, 0xad}], 0x2, &(0x7f0000002e80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}], 0x8, 0x2041, &(0x7f0000003200)={0x77359400}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000003240)) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000003280)) r12 = openat$null(0xffffffffffffff9c, &(0x7f00000032c0), 0x600000, 0x0) ioctl$PIO_UNIMAPCLR(r12, 0x4b68, &(0x7f0000003300)={0x8, 0x2, 0x8}) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000003340)) r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003380)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r11, 0x2, &(0x7f0000003400)=[r10, r13, r6, r14, r5, r15], 0x6) r16 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r16, 0x402c542d, &(0x7f0000003440)={0x1, 0x82, 0x111, 0x400, 0x21, "1cdde7ba639192ef673201564c1aaacb3911be", 0x73c, 0x5}) ioctl$BTRFS_IOC_INO_PATHS(r8, 0xc0389423, &(0x7f00000034c0)={0x200, 0x20, [0x8, 0xfffffffffffffffa, 0x4, 0x81], &(0x7f0000003480)=[0x0, 0x0, 0x0, 0x0]}) sendmsg$AUDIT_TRIM(r9, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x801900}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x10, 0x3f6, 0x100, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000003600)={{0x1, 0x1, 0x18, r2, @in_args={0x4}}, './file0\x00'}) ioctl$KDFONTOP_COPY(r17, 0x4b72, &(0x7f0000003a40)={0x3, 0x1, 0x7, 0x19, 0x178, &(0x7f0000003640)}) r18 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003a80)='./binderfs2/custom1\x00', 0x402, 0x0) fcntl$setflags(r18, 0x2, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000003c00)={0x5, 0x0, &(0x7f0000003bc0)=[r16, r4, r3]}, 0x3) 15:04:54 executing program 7: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20000014) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4028}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x4, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24000000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000400)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000440)=""/110, &(0x7f00000004c0)=0x6e) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4008051) timer_create(0x6, &(0x7f0000000740)={0x0, 0x8, 0x1, @thr={&(0x7f0000000600)="6e7cd5c6dde9a0d7957f942b6ee7a3924c787584b710cfdc69ec86734d3f7aa723c5746150c316554511679ab8d574e1f28171316e434aa46082ee570119b81a97f6259731f65636e519cf7d9a6db635", &(0x7f0000000680)="2dd44550b1db6d950903e00d6f852da9068de3ff459ff7bbfb40f07dc8dd11a3c1139a966de7a79012aca820fd8b80f0f43d3e378abdb5ce6e9c318e5913a61f96d0a5bef141d5ba497cbe089e45ee21ad5237b834425041d59fc5dc63b41f6b5a2f93afe93c6698f55594806bdcd1a29dad3a12911c3f096a934d6180814748176ccfc006fa12cbee0e1ffd4dd6d487f64a76a1a4d6750ff03b228823d99d85a3ababd4da67789366e5100adfd5e95ee972c6"}}, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wg0\x00', 0x0}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000800), 0x40000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x68}}, 0xc0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xa810ab1533c1b889}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:var_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x81}, 0x718e2a43055e1dc2) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000b00)={0x9, 0x8, 0x7, 0x7}, 0x10) getpgid(r0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000b40)=0x7fff) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000bc0)={0x2, &(0x7f0000000b80)=[{0xf07, 0x7f, 0x1, 0x3}, {0x3, 0xc4, 0x1, 0x6}]}, 0x10) prctl$PR_SET_PTRACER(0x59616d61, 0x0) [ 157.047188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.052872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.054597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.059181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.062202] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.068010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.171017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.177563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.179152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.189601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.195923] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.197677] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.230073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.232066] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.235767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.274770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.285183] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.287747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.326838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.343765] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.350624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.359914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.371517] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.375003] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.375021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.382092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.385609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.387965] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.390798] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.393737] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.398464] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.401375] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.404726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.409198] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.417798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.426153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.433678] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.434572] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.435859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.440694] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.443648] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.456844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.458489] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.460752] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.479763] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.483243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.502592] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.507597] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.121147] Bluetooth: hci0: command tx timeout [ 159.313440] Bluetooth: hci1: command tx timeout [ 159.377504] Bluetooth: hci2: command tx timeout [ 159.505143] Bluetooth: hci5: command tx timeout [ 159.505970] Bluetooth: hci3: command tx timeout [ 159.568971] Bluetooth: hci6: command tx timeout [ 159.569190] Bluetooth: hci7: command tx timeout [ 159.632521] Bluetooth: hci4: command tx timeout [ 161.170499] Bluetooth: hci0: command tx timeout [ 161.362448] Bluetooth: hci1: command tx timeout [ 161.425846] Bluetooth: hci2: command tx timeout [ 161.552497] Bluetooth: hci5: command tx timeout [ 161.554004] Bluetooth: hci3: command tx timeout [ 161.616895] Bluetooth: hci6: command tx timeout [ 161.617694] Bluetooth: hci7: command tx timeout [ 161.681854] Bluetooth: hci4: command tx timeout [ 163.216860] Bluetooth: hci0: command tx timeout [ 163.408532] Bluetooth: hci1: command tx timeout [ 163.474744] Bluetooth: hci2: command tx timeout [ 163.601620] Bluetooth: hci3: command tx timeout [ 163.601748] Bluetooth: hci5: command tx timeout [ 163.665532] Bluetooth: hci7: command tx timeout [ 163.665840] Bluetooth: hci6: command tx timeout [ 163.729553] Bluetooth: hci4: command tx timeout [ 165.265199] Bluetooth: hci0: command tx timeout [ 165.456494] Bluetooth: hci1: command tx timeout [ 165.521153] Bluetooth: hci2: command tx timeout [ 165.649545] Bluetooth: hci3: command tx timeout [ 165.649598] Bluetooth: hci5: command tx timeout [ 165.712497] Bluetooth: hci6: command tx timeout [ 165.714329] Bluetooth: hci7: command tx timeout [ 165.776673] Bluetooth: hci4: command tx timeout [ 217.837871] syz-executor.0 (291) used greatest stack depth: 23168 bytes left [ 220.621770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.626254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.637423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.648195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.651831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.661010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.708509] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.715725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.717218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.724684] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.729816] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.731591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.810109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.818725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.820231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.833957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.836195] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.838041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.842792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.843009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.852953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.854647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.860208] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.863251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.865033] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.869738] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.870705] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.874745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.879757] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.882257] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.898753] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.903983] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.912894] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.920439] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.925265] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.954107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.955520] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.981196] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.982460] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.990878] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.996813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.997856] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.010815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.015064] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 221.027833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.048707] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 221.056759] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 221.066277] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 222.737858] Bluetooth: hci0: command tx timeout [ 222.800553] Bluetooth: hci1: command tx timeout [ 222.993417] Bluetooth: hci2: command tx timeout [ 222.993482] Bluetooth: hci4: command tx timeout [ 222.995009] Bluetooth: hci3: command tx timeout [ 223.056875] Bluetooth: hci5: command tx timeout [ 223.121444] Bluetooth: hci6: command tx timeout [ 223.184934] Bluetooth: hci7: command tx timeout [ 224.784655] Bluetooth: hci0: command tx timeout [ 224.848992] Bluetooth: hci1: command tx timeout [ 225.040887] Bluetooth: hci3: command tx timeout [ 225.041748] Bluetooth: hci2: command tx timeout [ 225.041778] Bluetooth: hci4: command tx timeout [ 225.105727] Bluetooth: hci5: command tx timeout [ 225.170546] Bluetooth: hci6: command tx timeout [ 225.232559] Bluetooth: hci7: command tx timeout [ 226.833900] Bluetooth: hci0: command tx timeout [ 226.896680] Bluetooth: hci1: command tx timeout [ 227.089584] Bluetooth: hci3: command tx timeout [ 227.089754] Bluetooth: hci4: command tx timeout [ 227.090114] Bluetooth: hci2: command tx timeout [ 227.153096] Bluetooth: hci5: command tx timeout [ 227.217459] Bluetooth: hci6: command tx timeout [ 227.282158] Bluetooth: hci7: command tx timeout [ 228.881620] Bluetooth: hci0: command tx timeout [ 228.946429] Bluetooth: hci1: command tx timeout [ 229.138411] Bluetooth: hci2: command tx timeout [ 229.138958] Bluetooth: hci4: command tx timeout [ 229.139503] Bluetooth: hci3: command tx timeout [ 229.200815] Bluetooth: hci5: command tx timeout [ 229.266059] Bluetooth: hci6: command tx timeout [ 229.329119] Bluetooth: hci7: command tx timeout [ 283.436200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.446292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.449004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.459040] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.469103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.471179] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.881923] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.889940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.892993] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.900222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.905972] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.908784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.949151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.962871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.974208] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.977969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.979892] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.981644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.993546] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.003509] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.011596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.011682] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.021476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 284.025463] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 284.026946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 284.028878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.031073] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 284.047203] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 284.070233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.084002] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 284.089854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.095899] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.103645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.144265] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 284.147670] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.151172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 284.158029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 284.161534] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.166956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.174379] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 284.185711] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 284.197981] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 284.306106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 284.318653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 284.325277] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 284.366881] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 284.372683] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 284.378893] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.520927] Bluetooth: hci0: command tx timeout [ 285.969449] Bluetooth: hci1: command tx timeout [ 286.160674] Bluetooth: hci3: command tx timeout [ 286.160714] Bluetooth: hci2: command tx timeout [ 286.288544] Bluetooth: hci5: command tx timeout [ 286.288604] Bluetooth: hci6: command tx timeout [ 286.353437] Bluetooth: hci4: command tx timeout [ 286.481649] Bluetooth: hci7: command tx timeout [ 287.569884] Bluetooth: hci0: command tx timeout [ 288.018928] Bluetooth: hci1: command tx timeout [ 288.208905] Bluetooth: hci2: command tx timeout [ 288.209710] Bluetooth: hci3: command tx timeout [ 288.336561] Bluetooth: hci6: command tx timeout [ 288.336762] Bluetooth: hci5: command tx timeout [ 288.400666] Bluetooth: hci4: command tx timeout [ 288.528757] Bluetooth: hci7: command tx timeout [ 289.616996] Bluetooth: hci0: command tx timeout [ 290.065427] Bluetooth: hci1: command tx timeout [ 290.256673] Bluetooth: hci3: command tx timeout [ 290.257472] Bluetooth: hci2: command tx timeout [ 290.384499] Bluetooth: hci6: command tx timeout [ 290.386028] Bluetooth: hci5: command tx timeout [ 290.449454] Bluetooth: hci4: command tx timeout [ 290.577681] Bluetooth: hci7: command tx timeout [ 291.664485] Bluetooth: hci0: command tx timeout [ 292.115579] Bluetooth: hci1: command tx timeout [ 292.305651] Bluetooth: hci2: command tx timeout [ 292.305928] Bluetooth: hci3: command tx timeout [ 292.432668] Bluetooth: hci5: command tx timeout [ 292.432752] Bluetooth: hci6: command tx timeout [ 292.497155] Bluetooth: hci4: command tx timeout [ 292.625530] Bluetooth: hci7: command tx timeout [ 346.163790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.167928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.170847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.180989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.193223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 346.202186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.549013] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.559681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.562745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.575247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.580624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 346.584996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.585835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.603912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.616800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.644854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.660961] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 346.663266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.663493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 346.678221] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 346.698962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 346.736420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.757428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.761831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.764996] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 346.767311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.777649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.791616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.794928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.825149] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 346.828046] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 346.831883] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 346.835006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.839225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 346.841388] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 346.844868] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 346.847993] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 346.854025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.856206] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.861064] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.865076] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 346.875804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.890944] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 346.904805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 346.916811] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 346.922297] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 346.925869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.926813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 348.240936] Bluetooth: hci0: command tx timeout [ 348.624847] Bluetooth: hci1: command tx timeout [ 348.752520] Bluetooth: hci2: command tx timeout [ 348.880494] Bluetooth: hci3: command tx timeout [ 348.950540] Bluetooth: hci4: command tx timeout [ 349.008505] Bluetooth: hci5: command tx timeout [ 349.072891] Bluetooth: hci7: command tx timeout [ 349.073893] Bluetooth: hci6: command tx timeout [ 350.290523] Bluetooth: hci0: command tx timeout [ 350.673759] Bluetooth: hci1: command tx timeout [ 350.801487] Bluetooth: hci2: command tx timeout [ 350.931023] Bluetooth: hci3: command tx timeout [ 350.993513] Bluetooth: hci4: command tx timeout [ 351.057584] Bluetooth: hci5: command tx timeout [ 351.121719] Bluetooth: hci6: command tx timeout [ 351.122303] Bluetooth: hci7: command tx timeout [ 352.336824] Bluetooth: hci0: command tx timeout [ 352.720476] Bluetooth: hci1: command tx timeout [ 352.849824] Bluetooth: hci2: command tx timeout [ 352.976548] Bluetooth: hci3: command tx timeout [ 353.040460] Bluetooth: hci4: command tx timeout [ 353.105056] Bluetooth: hci5: command tx timeout [ 353.169007] Bluetooth: hci7: command tx timeout [ 353.170676] Bluetooth: hci6: command tx timeout [ 354.386455] Bluetooth: hci0: command tx timeout [ 354.769400] Bluetooth: hci1: command tx timeout [ 354.897450] Bluetooth: hci2: command tx timeout [ 355.024792] Bluetooth: hci3: command tx timeout [ 355.090196] Bluetooth: hci4: command tx timeout [ 355.153699] Bluetooth: hci5: command tx timeout [ 355.217553] Bluetooth: hci6: command tx timeout [ 355.218091] Bluetooth: hci7: command tx timeout [ 408.940971] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.943898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.948079] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.954805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.957119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 408.960971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.183284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.188880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.191533] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.196033] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.201942] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.203851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.262543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.264186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.266741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.276194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.286735] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 409.289850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 409.534631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.538795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.545826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.587772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.595592] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 409.617542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.630169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 409.633122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 409.634786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 409.640815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 409.643015] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 409.651886] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 409.652889] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.661011] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 409.665304] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 409.668682] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 409.675738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 409.677325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 409.689573] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.691556] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 409.718778] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.721957] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 409.738586] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 409.740870] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 409.750946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.750977] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 409.778231] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 409.789376] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 409.790933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 409.792186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.024505] Bluetooth: hci0: command tx timeout [ 411.280594] Bluetooth: hci1: command tx timeout [ 411.344463] Bluetooth: hci2: command tx timeout [ 411.728499] Bluetooth: hci3: command tx timeout [ 411.792928] Bluetooth: hci6: command tx timeout [ 411.793698] Bluetooth: hci4: command tx timeout [ 411.926122] Bluetooth: hci5: command tx timeout [ 411.926931] Bluetooth: hci7: command tx timeout [ 413.074822] Bluetooth: hci0: command tx timeout [ 413.328577] Bluetooth: hci1: command tx timeout [ 413.393484] Bluetooth: hci2: command tx timeout [ 413.777921] Bluetooth: hci3: command tx timeout [ 413.840506] Bluetooth: hci4: command tx timeout [ 413.840985] Bluetooth: hci6: command tx timeout [ 413.968833] Bluetooth: hci7: command tx timeout [ 413.969319] Bluetooth: hci5: command tx timeout [ 415.121432] Bluetooth: hci0: command tx timeout [ 415.377456] Bluetooth: hci1: command tx timeout [ 415.442694] Bluetooth: hci2: command tx timeout [ 415.825566] Bluetooth: hci3: command tx timeout [ 415.888578] Bluetooth: hci6: command tx timeout [ 415.889967] Bluetooth: hci4: command tx timeout [ 416.017818] Bluetooth: hci5: command tx timeout [ 416.019599] Bluetooth: hci7: command tx timeout [ 417.169409] Bluetooth: hci0: command tx timeout [ 417.425638] Bluetooth: hci1: command tx timeout [ 417.489757] Bluetooth: hci2: command tx timeout [ 417.873811] Bluetooth: hci3: command tx timeout [ 417.937843] Bluetooth: hci4: command tx timeout [ 417.937991] Bluetooth: hci6: command tx timeout [ 418.065748] Bluetooth: hci5: command tx timeout [ 418.065813] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:09:59 Registers: info registers vcpu 0 RAX=ffffffff815b08c9 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff8880095f7c01 RSI=ffff8880095f7cb0 RDI=ffff8880095f7920 RBP=ffff8880095f7920 RSP=ffff8880095f7858 R8 =ffffffff86844a38 R9 =ffff8880095f7908 R10=000000000003abb9 R11=0000000000022c06 R12=ffff8880095f7928 R13=ffff8880095f7910 R14=ffff8880095f7cb8 R15=ffff8880095f78c8 RIP=ffffffff8134b315 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f443991d3c0 CR3=0000000028f90000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87f14648 RBX=ffffffff87f27888 RCX=ffffffff814f850e RDX=fffffbfff0fe27c9 RSI=0000000000000008 RDI=ffffffff87f14688 RBP=ffff888030fe5db8 RSP=ffff88802d897378 R8 =0000000000000000 R9 =fffffbfff0fe27c8 R10=ffffffff87f13e47 R11=0000000000000000 R12=ffff888030fe5340 R13=0000000000000000 R14=ffffffff86404e70 R15=0000000000000000 RIP=ffffffff81502616 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faf5ce4a6f4 CR3=0000000018b00000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007faf5ce5947000007faf5ce58f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000