Warning: Permanently added '[localhost]:56533' (ECDSA) to the list of known hosts.
2025/04/23 11:16:05 fuzzer started
2025/04/23 11:16:05 dialing manager at localhost:42253
syzkaller login: [  108.198474] cgroup: Unknown subsys name 'net'
[  108.308971] cgroup: Unknown subsys name 'cpuset'
[  108.340597] cgroup: Unknown subsys name 'rlimit'
2025/04/23 11:16:27 syscalls: 2214
2025/04/23 11:16:27 code coverage: enabled
2025/04/23 11:16:27 comparison tracing: enabled
2025/04/23 11:16:27 extra coverage: enabled
2025/04/23 11:16:27 setuid sandbox: enabled
2025/04/23 11:16:27 namespace sandbox: enabled
2025/04/23 11:16:27 Android sandbox: enabled
2025/04/23 11:16:27 fault injection: enabled
2025/04/23 11:16:27 leak checking: enabled
2025/04/23 11:16:27 net packet injection: enabled
2025/04/23 11:16:27 net device setup: enabled
2025/04/23 11:16:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/23 11:16:27 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/23 11:16:27 USB emulation: enabled
2025/04/23 11:16:27 hci packet injection: enabled
2025/04/23 11:16:27 wifi device emulation: enabled
2025/04/23 11:16:27 802.15.4 emulation: enabled
2025/04/23 11:16:27 fetching corpus: 0, signal 0/0 (executing program)
2025/04/23 11:16:29 starting 8 fuzzer processes
11:16:29 executing program 0:
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x520400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x800, 0x70bd27, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8001)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40820}, 0x20)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xabbfb6de13270340}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x101}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x45)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x101840, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xc0, 0x1, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_EXP={0xac, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x40, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x5}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x52}, @CTA_EXPECT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040021}, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x401001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {<r6=>r2}}, './file0\x00'})
semctl$IPC_RMID(0x0, 0x0, 0x0)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x98, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ca}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x44}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x98b}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x40081}, 0xc0c0)
fcntl$setlease(r7, 0x400, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x2f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4000010)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000b40)={{0x1, 0x1, 0x18, <r8=>r6, {0x20}}, './file0\x00'})
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x64, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x4004000)

11:16:29 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x9, 0x6}, {0x2, 0x1}, 0x1, 0x5, 0x6})
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)="baf1c5cd532bc31b35355d85a80c97cde24e16e1b05149e13ab5dc58ef1468ea6f62b7aa121ce2620ba53b996de5c05343c9cd50fa0dc72653850a3e832161b63eb383afb14c53e3c5b6e22204fd2390cff42cfff97d1a9e199194ead4bab6a88fb04b100a439067ec05244d8fb1e2161e3c651efca3df18ba47d0008bab24", 0x7f, r0}, 0x68)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0xb367}}, './file0\x00'})
write$snapshot(r1, &(0x7f0000000200)="9ec51930e1c8842856d8804691973dd5c86dfc45e6f1610c730fd0209ea366278f746bda989e460e493a478731aa97905a9238d1a1b08612b92540dbcc2380a2566a42d105288fce1b45348385cb86994aa67c82670f4d43c686efb78a5e380ad5c4b15206200edfb76838e97d8ed2303b47eeed435cd29b6cabc869ad36209e417ee7bab1b716de4c4cd49d76e079eb90a5313bd86808712bb6f9d9a38d2beca507d2ac2f280dd36498058554f2e18d3f1de478aaa2bc7b6b4b7baaffd2d482e0f45ada504798fdecfe4c278b43d522f42b77b0a7f48ed9737222a76cfd10314e9411248f0d1eaca8f3eafc7d6178c6", 0xf0)
sync_file_range(r1, 0x100000001, 0x40, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000300)=0x6)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000340)={0x1f, 0xc7, "6c3bb6ed46bfa495d268a1c897c8e9613e51374af85e9c763786919d906647dcd16869b32c430bf1dc2f05c2c83e6cf99c4122b83b1915aaa1b5c30291085d8b490e716f98c6768b0811a1d2b1d3499880faff081fa137d16bbd8e072cf64bf3d8509804c7d4514836dec5a583f25c5002a358ccc6777b4c040fe3a65a9349a793dfd8190114581377e220eb649045a3bc8afd7456db13b512fba68ccc06475a13b39ac973e058e2faafc6dd8149a2d94ae29229ea2c144bb3bb14fb7517d86299f25486b6cc54"})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x2a02, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000480)=0xfffffffffffffffd)
mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x81400, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}, {@msize={'msize', 0x3d, 0x9}}, {@afid={'afid', 0x3d, 0x5}}, {@msize={'msize', 0x3d, 0x400}}, {@debug={'debug', 0x3d, 0x4}}, {@cachetag={'cachetag', 0x3d, '/dev/vga_arbiter\x00'}}, {@cache_loose}, {@afid={'afid', 0x3d, 0x5}}]}})
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000640)={0x265, 0x0, 0x7, 0xfca0, 0x5, 0xff})
r3 = syz_open_dev$vcsa(&(0x7f0000000740), 0x200, 0x111302)
fsetxattr$security_selinux(r3, &(0x7f0000000780), &(0x7f00000007c0)='system_u:object_r:sshd_var_run_t:s0\x00', 0x24, 0x3)
r4 = openat2(r1, &(0x7f0000000800)='./file1\x00', &(0x7f0000000840)={0x10080, 0x80, 0x1}, 0x18)
sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x5, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000980), 0x10001, 0x0)
splice(r3, &(0x7f00000009c0)=0x60c, r0, &(0x7f0000000a00)=0x8, 0x200, 0x2)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x178, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe0}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x11c4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_RULES={0x100, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xdf5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x63}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x526}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb6c2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x20000100)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000cc0)=""/30, &(0x7f0000000d00)=0x1e)

11:16:29 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x1e, 0x8, 0x3, 0x40, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7, 0x10001, 0x4}})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f00000000c0)={0x200, 0x200})
socketpair(0x1d, 0x4, 0x7, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000180))
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000001c0)={0x3, 0xb9, @start={0x0, 0x0, "2ce5a213746625ba5f74db509c6ad6a9b83dfc7ece4f56d956b18a0d3cfc9c6d2a4504d8b917bb7d63f08ae9a142851bb05b3224d6dca36c07bb03f6e03e93c7c23dde5957a25670444c54a792a9168b06b631331662347eabfbea80f96861f70cd0f7fb0baafcbf74cc5875c5fd43609ce0930c671cfbe33983b5129dbd20feefdcb45cb7f5b37379d0f2e83af7ff5d3af5380ad2b254bff892c38896c2c01368b2666b76c9877331c046bc1c71d2f492a9182f1908a39837d085433403beac834a9fafb0240c5a489a10dc309dd943106225de68dc62ef4b48328ca8e7616135eaf107946d3046f1dcede99424bdcda3b11f5262cff25ba41d7711e72aa2ac3e77f266f3d6c78b0249ab127391f760cecec9bc8910824cec80cc39e654e1c7e1ecee5ccbbd3708acd4159ef3c01faae8fc84fbb629b0f8575e4b764dc08ea2b95ecd551fab6dba906d73b88aed540307d24fe2cd6f37a2a56916089f8a8d090dc4b070e27acfe70e35ee5c9256b5d5251382806cc80601c90eb0b56fe2cacce1af8ed95d78648d1124e686b365867dba35cb1b6f79e14b083f23681ee41f205bf797a3aef82bba167919d60626d3d77d3df3f07574f5b47e9b3d06cd9a8fa94f560322d4c3fabf0fff8da27cf11c30e61e9d724b37482a1f3ae0c45b6008e363296c8fe5440b1f1950f3ad60ce36d2b26f42ff5d154cf299601484ae19a3c0c7b3f4e86c96a96d0c32d17f723bc6eb9075f742c50525ed5b8d7a5cc8b1455c0a674c1c3516c18d6e5bfe58041abc5087ab58998677af780098832128caf6b06f4c88746631442433ad1729525271261afb519d111b9cefbc087ad1f001a380e8aae6c449f329971681b9b2727634454609427fc03853269898432a582fc4e01a2aeb3b9728456af253f751f7f4fd7b2813d365b600e46b49151ac7c4462c49bb988f23bdc5ea26985de7b511356f26d78c2bad05e276d6b500f9133f681edfa77539ff9b71346a80d610020411fb2b8ae3626b3ecfa73342c4112a609df00c0c9a7b5567ffabc1fa11221abb5bbe42d99c343e41390304b1dcd8896f21e29e8518dab8c9e4897eb3e01d30f6810d356ae0e30df1102ee03e9275058230e74a363024a766d25f6d876c69aaf9a1f455be3045b4f997060cd5a0e8a740667bf23a79b3ed07b6bea054ed811745e5979a618f9eeb44598de842aabffe53f4ffb09d0c614574d9a79e39681aed63e861714fb2666fd5cc401617e3bba006543e163234650e3cf741fffaae3736eb78d9acdc9f25a26548219cc93dca45128696b7d9f568f31023bb75d9bccda5b4194a341c0a7b5d92f5689090ae6586409f3e7dea87fd0d27d5ca850ca45d8b6af43e44f32af6a5c7a273fd78308c80e4cedddcdb19bdbfe3a25db858294bc48fe71aab42d8b6eace494bb3011e7941fedb7b1a39", "376df31a7dcbb2dfb043f860dc7809502dbe990819f0e7ebcb852b5d8b6e03b7d1eccf3edfcb35f2f79f61cd69d3a270dfaffd7ea86831c40b0184587e2abf2af805b71f5dc84e487677392d627c79110253a9580168713030e8a65f4d56780b81eec7991b142a31391ae08f25944f274a9ac6032cb3c4e39ea8446bd89bce9b85965aae71163cc0bbc3a4c6c28aceec85ec6f41987dcf5f00e22849f965138cd3a96d544ae1671c9784adb1b22a937a0ead13777d538ebea6589a33de02cfc551bc8c7f114a61d8fd75e584862d07bd457bfb621e50ceb5bb2ed4596edf668dce0d0d655170828474e24906f0ae7f74c0c80ea6ce73f00f0bbc30d544d1fc74b0b870e311e8d48b766e0152a7651e45c4ae44a91b76def248ce23a0d61578a5c262291adf2af2ebfcc6b1b641edd94287781f1202f1f6958fe8ab6d68e5280a708a71f890ca82ed1fc9445df5b2690164fc0968fb3652bd695915be463d3542f68bd15c381f9968b23e1e114030646a1bb0ce052c9119ad62216516bf4a3cb5f9a9074e6f955ebd8593fe039b1e4fc8338ca22f4f59bd7d2637b5de3f7578d5a2448cc32f1a951545987c89d9985058e66091b0fe09e0bb1196354bbe14700853b64c4cdf9840f1a708c9e9e54572a49191d2a462ccea672c3b8b17b9ec3b43b4877af6115587ba2d94dbb1f89381cbd6efaad6a21cb5950a0b9923fb59a190987b3de7639b18a52955f14de0bf2f8e6918480091766f142bb5ebecdaa472451a8e33504d780249e7871316caccbb4047355fa14b6baad7badaa38dcfffadbde5e430783c4eb5867da993ee461fcff754bb3e72160a0c81c89be37ece3495a16e57168634ae16020062b9f237508d62018f93eb4c200a64eddd9ca97f43e73556ebeeaed16283114cc3efceea62bb1b65f628afb6a15a69bf09ec7c2e5b4948cdeaab00f89da233f45f64175bb9867a294b9c8e2ca14ac5feebf7cae051a3d246adfaadc4293b1ad5f1265ae00d3bbaa21ab97800a47bdf9aeb73a284b4e1f83aeb4044ba9f8ca62ad0014da288d9c12f24c81273e0b5879c56ded4170c2055744343f4b709394d19b8bc4c4d8ed3b03dabf3bb3bf25abefec389cf4fb084804bf6975a4af34f6c8a103a721ae162b8c016f151a11c2dbd77bbe081f6305a894d549bb112cdef1eb903e0943c4e736d85f38bffeb2d5ec143ae7fd7c0429380afc49e4f5bea9583efcaed8be3ec7a5a4fb20131fd13a05ed123029008aff54fc42aa972153f0c062b9f93dd9759856ead76fdf19fc8f812faf83158b3126d2ba5d6efb87a398e7a330367e12f985dad44d753a6364b5b0c8c0a1eab5490fb7c06fba8d5adc509fd041cfd37fa44bcbf8215b3273eded69d3b3a08e5a51cc33564aa68290e5e61007298ef0fc1d47c1484dd1b909d781db3dddfaf41c31a5e7b05"}, [0x8, 0x2, 0x1d, 0x9, 0x800, 0xffffffffffffffff, 0xfffffffffffffae0, 0x7, 0xffff, 0x100000001, 0x100, 0x1, 0xc648, 0xb97, 0x3, 0x8001, 0x6, 0x0, 0x2bb, 0x8001, 0x6, 0x1, 0x7, 0x9, 0xd00, 0x2f9, 0x4, 0x77, 0x3, 0xfffffffffffffffd, 0x1, 0x6, 0x80000000, 0x1, 0x1, 0x9, 0x0, 0x5, 0x6, 0x8db, 0x400, 0x33ee9d56, 0x5, 0x7fff, 0x10000, 0x2, 0xff, 0x5, 0x8001, 0x6, 0x0, 0x81, 0x3ff, 0x4, 0x8, 0x1000, 0x9, 0x6, 0xd0, 0x1, 0x1, 0x7, 0x6, 0xd2]})
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x20}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044881}, 0x44010)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000d00)=0x1f)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000e40)={@ipv4={""/10, ""/2, @remote}}, &(0x7f0000000e80)=0x14)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000ec0), 0x480a01, 0x0)
poll(&(0x7f0000000f00)=[{r1, 0x40}, {r2, 0x8028}, {r1, 0x8040}, {r0, 0x8001}, {r3, 0x8000}, {r1, 0x8040}, {r1, 0x741}], 0x7, 0x68)
r4 = semget(0x1, 0x2, 0x730)
semctl$GETZCNT(r4, 0x0, 0xf, &(0x7f0000000f40)=""/149)
r5 = accept4$inet6(r1, &(0x7f0000001000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001040)=0x1c, 0x100800)
getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000001080), &(0x7f00000010c0)=0x4)
r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001100)='blkio.reset_stats\x00', 0x2, 0x0)
fcntl$setlease(r6, 0x400, 0x2)
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1a, 0x13, [{0x60}, {0x12, 0x1}, {0x48, 0x1}, {0x16, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x18, 0x1}, {0x4, 0x1}, {0xc}, {0x5}, {0x16, 0x1}, {0x24}, {0x48, 0x1}, {0x18}, {0x60}, {0x9, 0x1}, {0xb, 0x1}, {0x48}, {0x1b}, {0x884a271d437f1c2e, 0x1}, {0x16}, {0x9}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x8000)

11:16:29 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000850}, 0x1)
r3 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0xa4801, 0x60, 0xc}, 0x18)
setsockopt(r3, 0xf8, 0x20, &(0x7f0000000200)="d4b37fb26b2d1dbd9d1122d692fc52a264424d986ed20e687ec1317d83e7075d580c7a2b751c30a1aa7d8020a4a71cb5f89599be10212cb0b44aff3ac9c355f831f8f2dda221d24647da394e09b73384bd8ee8d8da0ccea8081fecc42a5e4936ccfb293b7b71c0199ab5abc3f1e4c358f85fbbf6df27155b9583fd7502a11d10eef252f0705d3e9a1206754792ecc4a9b1f54468b1d672f5c1c108cbf83dac0c4f6b66259e8a57e54b5ab7e0e0d762fdcbb5884928863b0a1f1c60cca14c4af90cc7c1ee031358a2309f82fcf8fa0ddda7a60ad9ee17ce", 0xd7)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000300)=""/206, &(0x7f0000000400)=0xce)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000440))
unlinkat(r1, &(0x7f0000000480)='./file0\x00', 0x200)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000500)={0x33d, 0x8, '\x00', 0x0, &(0x7f00000004c0)=[0x0]})
open(&(0x7f0000000540)='./file0\x00', 0x100, 0xc)
io_cancel(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x6a, r1, &(0x7f0000000580)="9267bab20bc58436a3f1e6a667b46a4f37ac985ff1cacd861bbe9a1df2093c69753eaf7ad5de880c33c61c13d7129f98a9a75f134b42187408574404c60593d1b60ca26955a7571f140bdcb8e2a35c1f5d5b7c21a954c9d603f7d3cd01db77362f5d9120088a61275e5862019c38aac996556a7bf21003d3395d415c0d20bed273bae4f5c84296779ce893c224129b883b5982b92f680d3d806dc91e932034647be95318960f1b6495bd91c1956a5597982939da5e9799c3c95a6d644bf5ce9956a358379201b76a08270a9382d5cfaeb75dc24738f0402ae7b17acb0707d5155c0c4aa7ba8b26a194317347", 0xec, 0x1f, 0x0, 0x1, r0}, &(0x7f00000006c0))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x8440, 0x0)
getsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000740), &(0x7f0000000780)=0x4)
prctl$PR_GET_UNALIGN(0x5, &(0x7f00000007c0))
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000003900), 0x84000, 0x0)
recvmsg$unix(r0, &(0x7f0000003e40)={&(0x7f0000003940), 0x6e, &(0x7f0000003d00)=[{&(0x7f00000039c0)=""/247, 0xf7}, {&(0x7f0000003ac0)=""/74, 0x4a}, {&(0x7f0000003b40)=""/7, 0x7}, {&(0x7f0000003b80)=""/46, 0x2e}, {&(0x7f0000003bc0)=""/26, 0x1a}, {&(0x7f0000003c00)=""/225, 0xe1}], 0x6, &(0x7f0000003d80)=[@cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}, 0x100)
setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000003e80)={r6, 0xee00, 0xee01}, 0xc)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004040)={&(0x7f0000003f00)={0x104, 0x464, 0x20, 0x70bd27, 0x25dfdbfd, "d68a7e52c961629244a479a5418335231aaea5c81c2bd6a5fb546f0dc0db293da6124726f34f761bf8b1698a0927f3548389e11a4d0400d0233ab3f1b1937a3d70b603f1185643ba70ec7264e4326f0df7ab874e27a0c3cd6b4e1ec9532da463ed24344e42f249519604a078b6446397ae5052a0a01a343ba037ef5ad6a351578b0c40c979db2d5b31d0d1e41096262ed253aba249551e808b82425fe0ae7ec3e1909f1c8976d33da1a71d11fd874a5b69326a27db226ca5cc0cb67e3ee20e12aa436732b744ba5a6d182eeffe92ed9934121b38948df90cb072e06ca8bea294ccd857bffc9ba2c7af383407ea08de36ca69", ["", "", ""]}, 0x104}, 0x1, 0x0, 0x0, 0x40400c4}, 0x40)
ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f00000040c0))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000004100)={0x8, 'wg0\x00', {'netpci0\x00'}, 0x9})

[  132.004977] audit: type=1400 audit(1745406989.584:7): avc:  denied  { execmem } for  pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:16:29 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x105202)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000080)={<r2=>0x0, "a7f7cae79aea5b59baa315146b5a7f4d"})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001080)={{r1}, {@val={r2}, @actul_num={@void, 0x0, 0x54}}})
write$tcp_congestion(0xffffffffffffffff, &(0x7f00000010c0)='lp\x00', 0x3)
r3 = openat$cgroup(r1, &(0x7f0000001100)='syz0\x00', 0x200002, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000001140)={0x200, 0xbe2, 0x0, 0xfef7, 0x5, [{0xc1, 0x6, 0x7d6, '\x00', 0x400}, {0xfffffffffffffff8, 0x600000000, 0x4, '\x00', 0x4}, {0x0, 0x8, 0x0, '\x00', 0x1989}, {0x1, 0x7ff, 0x8, '\x00', 0x808}, {0xaca0731, 0x5, 0x8, '\x00', 0xa86}]})
openat$cgroup_type(r1, &(0x7f0000001280), 0x2, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
recvmmsg$unix(r1, &(0x7f0000004b40)=[{{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001340)=""/128, 0x80}, {&(0x7f00000013c0)=""/41, 0x29}, {&(0x7f0000001400)=""/20, 0x14}, {&(0x7f0000001440)=""/241, 0xf1}], 0x4}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000001800)=[{&(0x7f0000001600)=""/105, 0x69}, {&(0x7f0000001680)=""/194, 0xc2}, {&(0x7f0000001780)=""/31, 0x1f}, {&(0x7f00000017c0)=""/16, 0x10}], 0x4, &(0x7f0000001840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001900)=""/98, 0x62}, {&(0x7f0000001980)=""/130, 0x82}], 0x2, &(0x7f0000001a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b40)=""/177, 0xb1}], 0x1, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001cc0)=@abs, 0x6e, &(0x7f0000003080)=[{&(0x7f0000001d40)=""/119, 0x77}, {&(0x7f0000001dc0)=""/132, 0x84}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/24, 0x18}, {&(0x7f0000002ec0)=""/247, 0xf7}, {&(0x7f0000002fc0)=""/52, 0x34}, {&(0x7f0000003000)=""/111, 0x6f}], 0x7}}, {{&(0x7f0000003100), 0x6e, &(0x7f0000003400)=[{&(0x7f0000003180)=""/197, 0xc5}, {&(0x7f0000003280)=""/186, 0xba}, {&(0x7f0000003340)=""/165, 0xa5}], 0x3, &(0x7f0000003440)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003480), 0x6e, &(0x7f0000004940)=[{&(0x7f0000003500)=""/31, 0x1f}, {&(0x7f0000003540)=""/3, 0x3}, {&(0x7f0000003580)=""/176, 0xb0}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/180, 0xb4}, {&(0x7f0000004700)=""/243, 0xf3}, {&(0x7f0000004800)=""/234, 0xea}, {&(0x7f0000004900)=""/28, 0x1c}], 0x8, &(0x7f00000049c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x150}}], 0x7, 0x40004000, &(0x7f0000004d00))
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000004d40)={{0x1, 0x1, 0x18, r7, {0x400}}, './file0\x00'})
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004dc0), r5)
sendmsg$IPVS_CMD_GET_INFO(r11, &(0x7f0000004e80)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004e40)={&(0x7f0000004e00)={0x1c, r13, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}}, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000004ec0)={{0xa, 0x4e20, 0x7, @local, 0xcf72}, {0xa, 0x4e22, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x13}, 0xd131, [0x1ff, 0x40000000, 0x5, 0xff, 0x4, 0x7f, 0x3b4e, 0x11e]}, 0x5c)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000005040)={'syztnl2\x00', &(0x7f0000004f80)={'gretap0\x00', <r14=>0x0, 0x700, 0x7, 0x800, 0x3, {{0x25, 0x4, 0x1, 0xc, 0x94, 0x65, 0x0, 0x1f, 0x2f, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x44, 0xb4, 0x1, 0x5, [{@loopback, 0x100}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4}, {@empty, 0x3f}, {@private=0xa010101, 0x81}, {@multicast1, 0x7ff}, {@rand_addr=0x64010101, 0xdc1d}, {@private=0xa010100, 0x3}, {@multicast2, 0x7fff}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x92, [@broadcast, @local, @local, @loopback]}, @timestamp={0x44, 0x14, 0xf1, 0x0, 0x6, [0x100000, 0x7fffffff, 0x8, 0x101]}, @ssrr={0x89, 0xf, 0xb, [@empty, @multicast1, @empty]}]}}}}})
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000005080)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000005180)=0xe8)
getpeername$packet(r10, &(0x7f0000005300)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000005340)=0x14)
sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000005580)={&(0x7f0000004f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005540)={&(0x7f0000005380)={0x1a4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000)

11:16:29 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000040)={{0x1, 0xdb20d7b388438496, 0x7, 0x8, 0x6f5, 0x6}, 0x136, [0x10000, 0x20, 0xfffffbff, 0xc96d, 0x5, 0x1, 0xad1, 0x1, 0x1000, 0x8, 0x6, 0xa583, 0x1f, 0x8, 0xffffffff, 0x8, 0x5, 0x697, 0x7ff, 0xdba2, 0x7fff, 0x2, 0x1, 0x20, 0x8001, 0xff5, 0x3, 0x1f, 0x5cea, 0x5, 0x1ff, 0xd75, 0x80, 0x1, 0x1, 0x8, 0xffffffb3, 0xc9, 0x400, 0x7fffffff, 0x100, 0x7ff, 0x1, 0xfffffffe, 0x7fffffff, 0x6, 0x9, 0x6, 0x2, 0x401, 0x1, 0x9d, 0x5, 0x2, 0x80, 0x34b78e93, 0xfcf, 0x5, 0x10001, 0x7, 0x6, 0x5, 0x0, 0x3, 0xff, 0x8, 0x4, 0x8, 0x0, 0x8001, 0x7, 0x400, 0x101, 0xfffffff8, 0x3, 0xfd, 0x101, 0xfffff001, 0x80, 0x8, 0x5a6, 0x10001, 0x8, 0x8, 0xffffffff, 0x5, 0x8, 0x4, 0x8, 0xfffffff7, 0x3, 0x7, 0x6ac843d2, 0x3, 0x7a9, 0x81, 0x7f, 0x0, 0x2000, 0x6, 0x6, 0xfb5, 0x5, 0xffffffd1, 0x8, 0xfff, 0x93, 0x3f, 0x3ff, 0xfffffc01, 0x5, 0x8, 0x8, 0x1, 0x8, 0x5, 0x4, 0x6, 0x3, 0x81, 0x10001, 0x3d, 0x3, 0x8, 0x1, 0x80, 0x80000000, 0x2, 0x80, 0x0, 0x93, 0x5, 0x3, 0x4, 0x7ff, 0xfffffffb, 0x800, 0x7, 0x1, 0x401, 0x8e, 0x0, 0x800, 0x2, 0x81, 0x800, 0x6d9c, 0xfffffff7, 0x5, 0x800, 0x7ff, 0x0, 0x9, 0x55, 0x1ff, 0x5, 0x3, 0x0, 0x2, 0x6, 0x7, 0x4, 0x0, 0x4, 0x1, 0x1000, 0x10000, 0x0, 0x7fffffff, 0x1f, 0x7, 0x9, 0x2, 0xfffffff8, 0x8, 0xbd, 0x4, 0x2, 0x9f, 0x401, 0xe5, 0x1, 0x80000001, 0x40, 0x5e, 0x0, 0x101, 0xffffffff, 0x265e, 0x7, 0xfffffff8, 0x81, 0x0, 0x1, 0x7ff, 0x20, 0x81, 0x56, 0x0, 0x5, 0x6, 0xffffffff, 0x7, 0xb9, 0x4, 0x2, 0x7fffffff, 0x2, 0x89cd, 0x4, 0x4, 0x7, 0x8, 0xfffffffb, 0x3ff, 0xfffffffa, 0x0, 0x3, 0x8, 0x8000, 0x1, 0xd2, 0x8, 0x9, 0xfffffffa, 0xd58e, 0x6c, 0x10000, 0xfff, 0x3, 0x4, 0x6, 0x1, 0x800, 0x7, 0x1ff, 0x40, 0x3ff, 0x1000, 0x4, 0x9, 0x56ef, 0x1, 0x1e, 0x4, 0x8000, 0x7ff, 0xd9, 0x100, 0x0, 0x1000, 0x8c2, 0x7f, 0x80, 0x75, 0x9, 0x530, 0x3, 0x5, 0x200, 0x2, 0x9, 0x7, 0x0, 0x7, 0x9, 0x5, 0x81, 0xc4, 0xff, 0x1, 0x1, 0x2, 0x4, 0x1ff, 0x988a, 0x3, 0x9, 0x0, 0x5, 0x3, 0x364, 0x9, 0x7fff, 0xd57b, 0x2e, 0x5, 0x11, 0x49, 0xa9b9, 0x1, 0xdc1, 0x8, 0x3, 0x96, 0x3, 0x10000, 0x8, 0x5, 0x9, 0x7, 0x405c, 0x80000001, 0xe5, 0xfb, 0x7f, 0x9, 0x101, 0x7, 0x8001, 0x1, 0x1, 0x6, 0x8, 0x9, 0x4, 0x6, 0x7, 0x401, 0x5, 0x3, 0x80000000, 0xfffffc01, 0x3f, 0x1, 0x2, 0x11, 0x4, 0x81, 0x200, 0x7, 0x4, 0x6, 0xfffffed9, 0x1, 0x8, 0x6, 0xb38a, 0xde, 0x20, 0x5, 0x3, 0x401, 0x7, 0x9, 0x5, 0x7, 0x5, 0x0, 0x8, 0x3f, 0x9, 0x0, 0x4, 0x8000, 0xffffffc0, 0x8, 0x5, 0x5, 0x401, 0x8, 0x8, 0x1, 0xfa4, 0x1f, 0x245, 0x56d, 0x0, 0x17e, 0x3ff, 0x5, 0x0, 0x3ff, 0xf32e, 0xff, 0x0, 0x9ab4, 0x638e, 0x53dce015, 0x92e, 0x63, 0xfffff3d7, 0x100, 0x4, 0xffff, 0x0, 0x101, 0x2, 0xad9, 0x3ff, 0x2, 0x3, 0x8, 0xf9fb, 0x20, 0x0, 0x9, 0x1, 0x4, 0x7, 0x7fff, 0x1, 0xffffff81, 0x0, 0x2, 0xf99e, 0x5, 0xfffff424, 0x8, 0x5, 0x80, 0x5b6f674f, 0x4, 0x7, 0xfffffffd, 0x4, 0xc110, 0x80000000, 0xc1, 0x8, 0x10, 0x3, 0x0, 0x3, 0xe69a, 0xffffff41, 0xd27, 0x4, 0x8000, 0xe42, 0xdeb, 0x0, 0x3, 0x2, 0x8, 0x1000, 0x31d, 0x401, 0x800, 0x1, 0x58, 0x2, 0x8, 0x8, 0x6, 0x4, 0x800, 0xfffffeff, 0x2, 0x7, 0x4, 0x40, 0x0, 0x3, 0x7fffffff, 0x80000000, 0x240d, 0x8, 0x0, 0x4, 0x900000, 0x4, 0x1, 0x80000001, 0x80, 0x9, 0x10000, 0xb0, 0x20, 0x10001, 0x94, 0x22, 0x7, 0x3, 0x7, 0xff, 0x9, 0x1, 0x3f2, 0x2, 0x0, 0x5, 0x0, 0xce65, 0x3, 0x4, 0x3, 0x7, 0x495, 0x0, 0x4, 0x2, 0x8000, 0x8001, 0x0, 0xbd, 0x800, 0x7, 0x3, 0x8, 0xfff, 0x3f, 0xffffffff, 0x8, 0x7ff, 0x10000, 0x5, 0x2, 0x85d7, 0xd9d2, 0x400, 0x4, 0x9, 0x3, 0x8, 0x6, 0xffffffff, 0x7, 0xfffffffa, 0x20, 0x1000, 0x0, 0x4, 0x3, 0x1ff, 0x467, 0xe1a, 0x0, 0xfffffc01, 0xea, 0x3, 0x7f, 0x8, 0xfffffba7, 0xc1ae, 0x80, 0x7, 0x401, 0x7, 0x7fffffff, 0x5, 0x9, 0xb53e, 0x7, 0xa9, 0x4, 0x1, 0x22c, 0xdda, 0x1, 0x401, 0x0, 0x5, 0x9, 0xaa4, 0x3, 0x2, 0xfffffbff, 0xff, 0x1, 0x7f, 0xfffffff8, 0x2, 0x8cd, 0x10001, 0x50000000, 0x5, 0x2, 0x3f, 0xffff, 0x240, 0x4, 0xbe4, 0x8001, 0x7, 0x1ff, 0x7, 0x0, 0x9, 0x4, 0x200, 0xfffffffc, 0x0, 0x10000, 0x3, 0x8000, 0x6, 0x8, 0x1ff, 0x4, 0x5, 0x400, 0x9, 0xff, 0x8, 0x0, 0x8, 0x1, 0xc6, 0x2, 0x81, 0xaf, 0xe0, 0x0, 0x9, 0x7fffffff, 0x8, 0x2, 0xffffffff, 0x8001, 0x4, 0x7, 0x81, 0xffff, 0x4, 0x2, 0x4, 0x5, 0x10001, 0x8, 0x2, 0xfffffff7, 0xfffffffc, 0x10000, 0x6, 0x67d, 0xfffffff8, 0x100, 0x2, 0x42, 0x0, 0x5, 0x974b, 0x1, 0x80, 0x800, 0x3, 0x1000, 0x8, 0x400, 0x24b6cfec, 0xffffff89, 0x3f, 0x3, 0x3, 0xcd0, 0x12e, 0x0, 0xffff, 0x200, 0x3, 0x51, 0xc8c6, 0x6, 0x9, 0xfff, 0x401, 0x4, 0x9, 0x2, 0x3, 0xfffe, 0x34a3, 0x8000, 0x9, 0x6, 0x2, 0x80000001, 0x8, 0x9, 0x62, 0x7fff, 0x6, 0x532, 0x2, 0x2, 0x1, 0x1, 0x400, 0x5, 0x7, 0xfffffffc, 0x1f, 0x2000000, 0x8000, 0x0, 0x7f, 0x1, 0x9, 0x1, 0x7, 0x7, 0x5a, 0x3, 0x4, 0x65, 0x9, 0x4, 0x1ff, 0x8000, 0x4, 0x19d4, 0x7ff, 0x4, 0x5, 0x1, 0xfffff800, 0x1000, 0x1, 0x1, 0x0, 0x10001, 0x5, 0x30000000, 0x9, 0x9, 0x80000001, 0x8000, 0x6a0, 0x5, 0x2ef70ebe, 0x3, 0x39, 0x6, 0xfff, 0x2, 0x3, 0x6, 0xffffffff, 0x0, 0x60e, 0x1, 0x8000, 0x5, 0x4, 0x0, 0xf0, 0x3, 0x6, 0x3, 0x200, 0x0, 0x8, 0x3, 0x7, 0x87, 0x68, 0x1, 0xffff, 0x100, 0x3f, 0xffffffff, 0x3, 0x4, 0x4, 0x4, 0x800, 0x3ff, 0x80000001, 0x8, 0x25, 0x80, 0x8, 0xffffff16, 0x7, 0x0, 0x9, 0x4, 0x3ff, 0x9, 0xfffffff7, 0x0, 0x2, 0x0, 0xd853, 0x5e37, 0x5, 0x7ff, 0x8, 0x3, 0xc2, 0x6e6, 0x4, 0x7a, 0x9, 0x81, 0x189e, 0xff, 0x101, 0x4, 0x8, 0x0, 0x1, 0x5, 0x0, 0x80000000, 0x6, 0x6, 0x0, 0x9, 0x0, 0x8000, 0x4, 0x5, 0x1, 0x4, 0x7, 0x6, 0x6, 0x92b3, 0xfff, 0x9, 0x7, 0x7, 0x9, 0x0, 0x5, 0x9c8, 0x0, 0x400, 0x8, 0x9ee, 0x0, 0x3, 0x1, 0x3d468cbb, 0x6, 0x7, 0x8, 0x3, 0x1000, 0x7ff, 0x101, 0x1, 0x1, 0xffffffad, 0x0, 0x6dae, 0x5, 0xaf6, 0x5, 0x1, 0xb0, 0x2, 0xfffffffc, 0x627, 0x81, 0x5, 0xeef7, 0xfffffffe, 0x9, 0x2, 0x80, 0x7fffffff, 0x6, 0x6, 0x2, 0x380a9b83, 0x0, 0x1f, 0x4, 0x1, 0x3, 0x4, 0x1, 0xce2, 0x7, 0x1f, 0xffffffff, 0x8, 0x7fffffff, 0x5, 0x4c4, 0x80000000, 0x7, 0x200, 0x5, 0x80000000, 0xff, 0x0, 0x7fffffff, 0x5, 0x7, 0x0, 0x4, 0x80000001, 0x1, 0x400, 0xc5, 0x7, 0x7f, 0x4, 0x101, 0x9, 0x76d, 0x7f, 0x800, 0x9, 0x800, 0x6, 0x9, 0x400, 0x0, 0x8, 0x39dc, 0x80000000, 0x3, 0x0, 0x101, 0x10001, 0x6, 0x8, 0x3, 0x0, 0x5, 0x3ff, 0x4, 0x0, 0x70, 0x4, 0x1, 0x9, 0x1, 0x7, 0x1, 0xffffff00, 0x7, 0xffff0000, 0x46, 0x1, 0xffff0001, 0x101, 0x81, 0x9, 0x100, 0x3, 0xffff8001, 0x4, 0x3, 0x1f, 0x8, 0xb85, 0x9, 0x2, 0x8, 0x1, 0x7a41, 0x6, 0x2, 0x6, 0x57bf, 0xc4, 0x9, 0x400, 0x3, 0x0, 0x9, 0x7b71, 0xc, 0x401, 0x7f, 0x7, 0x3, 0xcc6, 0x1ff, 0x8, 0x400, 0x2, 0x401, 0x7, 0xac5b, 0x8, 0xf362, 0x8001, 0x6b, 0x9, 0x20, 0x3, 0x1f, 0x7ff, 0x0, 0x2, 0x4, 0x7, 0x5, 0x101, 0xfff, 0xf05, 0x1ff, 0x33aefeca, 0x8, 0x6, 0x100, 0x7, 0x81, 0x1, 0x400, 0x8, 0x6, 0x3, 0x80000000, 0x1, 0x5, 0x400, 0x5, 0x6, 0x2, 0x0, 0x400, 0x81, 0xfb6, 0x0, 0x881d, 0x8, 0xff, 0x81, 0x80000000, 0x3, 0x0, 0x2, 0x3, 0x2e, 0x100, 0x8]})
ioctl$RTC_WIE_OFF(r0, 0x7010)
clock_gettime(0x0, &(0x7f00000010c0)={<r1=>0x0, <r2=>0x0})
mq_timedreceive(r0, &(0x7f0000001080)=""/64, 0x40, 0x6, &(0x7f0000001100)={r1, r2+10000000})
r3 = openat$cgroup_devices(r0, &(0x7f0000001140)='devices.allow\x00', 0x2, 0x0)
ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000001180)={0x3, 0x1, 0x2, 0x40, 0x80})
r4 = syz_mount_image$vfat(&(0x7f0000001c00), &(0x7f0000001c40)='./file0\x00', 0x1, 0xa, &(0x7f0000002340)=[{&(0x7f0000001c80)="e77595eb0a1937fe6dea390e14683c817efca70912b29a3b15de42099d9bd5c998217a34bddc4ded1a4a4fa26eb442b76aabed6bfd05da2677771a198633230a72af30a435a1a98322e35a4fc8081a163173d75b0ea29d838fbb0871a97409162472c64a460cdeee73d70474ef5a25e2598fa22dfc3a62cd571348882935acbb776d742b53c238068622142e47f5873b847a34f81d1563807b9a075c536dc9db2365717c1b758d9480ecb2741e036d2c6d7cc937de4c9e7a1a0e7f1780c5a5983f6a4ff5dfc0616f06cc8c227bc6cd705459dab394f0f5417b3bda035b87fa", 0xdf, 0x8f}, {&(0x7f0000001d80)="f15190c62ca9e68901ce100c5c4caa1a7172108a36c33d75504fb326389d2d12b4cd486b399b129e0200d5cfcae72d3cd9466259381fa9d72618a17a3c716a41baebe80b25d8868727945a4217e9bb50dcedd78aa8bece98988b2a81701814c8fad8ee4633a36e37213ed764c2240832209fd6a94ed4203014df224a5edf8dd3a35420edea2d101fbd0186e44e82959494fa2e3d49fc782d198a4a6ec84b566131c0172ce8e357ad7fb723b5568cb2c81d8286dd485bc6f8d7c297b319f79e2caa4004e9454558b15b03370a2f0f92", 0xcf}, {&(0x7f0000001e80)="8487b5268a09e62c95e18680821f2de3e79fee489b3950dde8f46ec58e22d91a37dfc5f22ca258ad8836376fcdfb8eaa797c106bbf0e236865", 0x39, 0x65da}, {&(0x7f0000001ec0), 0x0, 0x5}, {&(0x7f0000001f00)="5c9ee8ab4b03b375ec46991b0a6a506ac4c75282bfab770eb83c5a0a811a8a4cf1e2d9562bd39b3bbb2f0e6559b176603626c4e6fd4539f25cf4ff71eb47e4700bebba18b6e92e94657c22fd258e5d74c84a461fd98356acb62ae17ef923751c5aaeeb118b559e2dbce934fcf91ba3b1e55dbd88bff7a841383643c09c70b0dfe49d9cf18cb4e3d806f64873a371ced94cd99e600bedc95daf5c5857ff0fd5ac77d24fe56372f76cae1ea655b77a2ee7b2b1ad5d4e5b7c24224d7d170efd06c0b5d0829f041bde165754864348f9edf4ce09ab55d99f5e0c6373eefb88e46e", 0xdf, 0x7}, {&(0x7f0000002000)="bb5af9ea4ab8bc2d03d13ecc216857869de282e8db83b1fce59aed764c1d492dab4f7964182de98679065e731fae51e4421ec4e125597d7a701cf6e742184f2f00d0e86cd14bffc396c526f53e605190d329183f0b", 0x55, 0x8}, {&(0x7f0000002080)="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", 0xfd, 0xfffffffffffffffc}, {&(0x7f0000002180)="3fe9276273a88464a5f60bd953ab9f367442e4b45daa14e515f56a416e8009a126c4e1a6c02a7ba106f20fb6438ca9863e92dc9076e33582ee9e570a11dd579d37e6dc9b7e57de9b0db55ed780db48397b319ced39755f5d58897087fd44eeb9b1eb25858befe5e035f20db3e5c524f0c531169219a0d44e8a236d32ac79a4c143c0c3f676a1873c03dfc5275bd216af52b4edc738715d82779e8be5a733fb0a", 0xa0, 0xfffffffffffffffc}, {&(0x7f0000002240)="7786aa5cfc7d75e4cd738870ca8a83fd79c3ec459fa4d5c5db9d9703bcbc84d08af682865fc23d2d04ee97a426e81b5a6412afd25aa281e73b2660c5943eb0bfdc0234d37aa1f4fe35fea7f9bae6b0886b2a813121b20b89eedd484381acd70739d2b489dc6e78b02327c4ab14708e1e521b4329228156eeafd85a119de3231b448915", 0x83, 0x7f}, {&(0x7f0000002300)="233b9b9798ed352705738c7a6eab632790397afba9e4dcb85ba1b180b676f22072a7faa68c0a08cca40721503ce482e8083f2eb6deeeabeedd29", 0x3a, 0x401}], 0x81a440, &(0x7f0000002440)={[{@numtail}, {@nonumtail}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uni_xlateno}, {@numtail}, {@shortname_win95}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@permit_directio}]})
close_range(r4, 0xffffffffffffffff, 0x2)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000002500))
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000002540)={0x2e, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e24, 0x0, 'lblc\x00', 0x0, 0x8001, 0x6f}, 0x2c)
pipe2$9p(&(0x7f0000002580)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000025c0)={{0x1, 0x1, 0x18, <r6=>r3, {r5}}, './file0\x00'})
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000002600)={0x80, 0x5, 0x0, 0x3, 0x6, 0x9})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000003080)={0x0, 'syzkaller1\x00', {0x2}, 0x48})
clock_gettime(0x0, &(0x7f0000003140)={<r7=>0x0, <r8=>0x0})
mq_timedsend(r0, &(0x7f00000030c0)="e7cba530e2e362102c643703ab1eb97a8fe3890d4edc9cc372d28c2e25481b5544ad2d436c1664c03c4b84cb36cde4367edc6c84e7ba3c90a2811585aa6de12993863256324951faa70ce60257be78b1503052ae2f73aba6a34b441bedcc9089f0f46f6d17ca90bf6e83dee69d52", 0x6e, 0x9, &(0x7f0000003180)={r7, r8+10000000})
r9 = syz_open_dev$vcsa(&(0x7f00000031c0), 0x6, 0x8040)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r9, 0x80047213, &(0x7f0000003200))
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000003300)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x20008005)

11:16:29 executing program 6:
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x6, 0x2, [0x800, 0x482e, 0x3, 0x7, 0x10001, 0x7, 0x10000]}}]}, 0x50)
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'veth1_macvtap\x00', {0x3}, 0x400})
connect(0xffffffffffffffff, &(0x7f0000000140)=@nfc={0x27, 0x1, 0x2, 0x3}, 0x80)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x90)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=',\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c)
r1 = timerfd_create(0x8, 0x1000)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000340)={{0x2, 0x0, 0x2, 0x2}, 0x0, 0x1, 0x3a})
readahead(r1, 0xd9ec, 0x2)
ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000003c0)={0x2, 0x5})
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xd09d7581243a116c}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40040)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000500)=[0xc2c, 0xfa8])
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x138, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf4cf}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x200, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r2)
r3 = signalfd4(r0, &(0x7f00000007c0)={[0x101]}, 0x8, 0x80000)
getsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000800), &(0x7f0000000840)=0x4)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000880), 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000008c0), 0x20000, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0)

11:16:29 executing program 7:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x202040, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000040)={r0})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0xb5, 0x40, 0x7f})
write$9p(0xffffffffffffffff, &(0x7f00000000c0)="1e2c06c1bc4abb8ed30b1bbbcae6af98368151c83460b97a676d222baef189e547c3996c829b7ac10e468ae5f428cdedf02e24a5405ea1edd2260f9a2b7fffd926533666854b7976cdb9096b9e4f2fef7d977deeb92435376956eb7699768aee4bf98f30d1dc514620ce9b56b3a724", 0x6f)
ioctl$KDMKTONE(r0, 0x4b30, 0x401)
setgid(0xee01)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0xff, 0x34, 0x5})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f76}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1aa2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48818}, 0x4008085)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="e705f7a21158e3dcbceb4451900b9b681d5281742d18e4ab530175db90464c1932f426fef2542c53b296189f9e060546ee6827b852d0aa76c70384a7aa282ad2699d4f4d43cb99750b7999f0327d382095ce0d19783a333be910ff0b2e9afbbf59956369413c72003e1e2e347196", 0x6e)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
r2 = openat$cgroup_subtree(r1, &(0x7f0000000380), 0x2, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x8800, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xbc, 0x1, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x79dd}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x20}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2144}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
bind$bt_hci(r1, &(0x7f0000000580)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
fcntl$dupfd(r1, 0x406, r1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000980)={{'\x00', 0x3}, {0x6}, 0x0, 0x0, 0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)="a78e3a05af6c08057da2dc526114f5dd82bb9de90c9f34961ac661143f61bb5013ead6374b8a595e2c1a6eee189711ee0592374aed7a264792b82bdece54f1abea9651f36639cd10c6083c757da44ec91113fc345cf3d85399aec93d7227f67112b2b25152e424eb62390cbb92f16390305f354cbed6ef2c8cec0e7548df6aca6fc13ca14d296a4e64ba5ffe615f45467684833b7f8b94f9625b899161d4c9368d4a21f22fce0f9e503172798bc9b0474a5ac7ebf6b5434bef2145316e1f264bded3310d62a812837c0d6429341bcc455fac8373684c3b363f48c8f7", 0xdc, 0x0, &(0x7f0000000740)={0x2, 0x16d, {0x1, 0xc, 0xbd, "0601c81fe2339d0e1919a7e87c08856e71b5d7ed64f1b98f79a62e283c5ce3b25c0d390f7f68ead6a3aa5be54c9d30bc8641ad941de4dd9163f1eb4f9503eeaaa7db9c63a1895ee0d3582ec0dc673c804ba0be6c0a3d940c1dc0a9e137725a3e742446ce5f680e1a724c3d23b2c385af1f63a98300354b240b77ad00e5ba16e0340cc7133cf11c8aff7c7605da0ab0e155af1856ec37a1066d6da4ddca9cfa16c5e14b7a0b0bbdb120b8ac3972a899ef47a8db3d76ee2a3ce1b8bd96bb", 0xa3, "b826744aadfba92482eb59b882d443dc240295ede66e8cefc973646fcab3fddffa55e844c9445c3bd0b7834a0d642d6b98915671258f4bb4e1eb7f443e95279167c13f0ac23045cb3ab5bbbd3debe7b8aecf2a5cc7c04911c0ba76df7d152b0fd0d0b48ceb7e63d60f7cabcc0e09193df2a8d879167ddd8dd90308c8023fff662240bef34531bdb1887b78c0476887707a684c23e0cf336957f2ecc81dcd10a5b66e28"}, 0xa3, "f7ffbb7ce1b0999d83ac5b663a65747b479f258888221c49cb41fd8a5f8c6bae00a3119e861f6c8b82a157ffecd3405d2e025230c96037c718c5e1e72ddf08768206a58f1f047e92e25cd444043f07920cc3379c7f75a9572408f98d558076eb047e2ba0b9860787a8cf29d7151a4c9d47aa7261f51250299486f62e77e7bad849a899aa5b64c8fffa12322bb92bd87155306bb11897ee157d256a0de6bac0bf8949aa"}, 0x21c})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)

[  133.600080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  133.602436] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  133.608121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  133.612576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  133.622512] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  133.629455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  133.637707] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  133.640056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  133.643925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  133.648419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  133.710730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  133.718958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  133.732432] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  133.734494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  133.745811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  133.751595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  133.754407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  133.755828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  133.757183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  133.759224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  133.773301] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  133.778602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  133.780881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  133.784968] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  133.797472] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  133.805835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  133.811363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  133.813002] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  133.816857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  133.819717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  133.821050] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  133.822256] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  133.830297] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  133.830880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  133.880839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  133.883472] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  133.893155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  133.895963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  133.910252] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  133.920473] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  135.676461] Bluetooth: hci0: command tx timeout
[  135.737275] Bluetooth: hci1: command tx timeout
[  135.802818] Bluetooth: hci2: command tx timeout
[  135.865679] Bluetooth: hci4: command tx timeout
[  135.929272] Bluetooth: hci6: command tx timeout
[  135.994252] Bluetooth: hci5: command tx timeout
[  135.994308] Bluetooth: hci3: command tx timeout
[  135.996028] Bluetooth: hci7: command tx timeout
[  137.723540] Bluetooth: hci0: command tx timeout
[  137.785465] Bluetooth: hci1: command tx timeout
[  137.850268] Bluetooth: hci2: command tx timeout
[  137.913486] Bluetooth: hci4: command tx timeout
[  137.977289] Bluetooth: hci6: command tx timeout
[  138.041526] Bluetooth: hci3: command tx timeout
[  138.041605] Bluetooth: hci7: command tx timeout
[  138.042351] Bluetooth: hci5: command tx timeout
[  139.771057] Bluetooth: hci0: command tx timeout
[  139.834229] Bluetooth: hci1: command tx timeout
[  139.898434] Bluetooth: hci2: command tx timeout
[  139.962248] Bluetooth: hci4: command tx timeout
[  140.025281] Bluetooth: hci6: command tx timeout
[  140.089376] Bluetooth: hci7: command tx timeout
[  140.089456] Bluetooth: hci3: command tx timeout
[  140.090365] Bluetooth: hci5: command tx timeout
[  141.819232] Bluetooth: hci0: command tx timeout
[  141.882219] Bluetooth: hci1: command tx timeout
[  141.947204] Bluetooth: hci2: command tx timeout
[  142.009408] Bluetooth: hci4: command tx timeout
[  142.073471] Bluetooth: hci6: command tx timeout
[  142.138061] Bluetooth: hci5: command tx timeout
[  142.139483] Bluetooth: hci3: command tx timeout
[  142.139998] Bluetooth: hci7: command tx timeout
[  196.440964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  196.444891] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  196.447616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  196.449719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  196.451291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  196.457498] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  196.460762] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  196.462615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  196.474579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.477149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  196.480839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  196.484377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.485495] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  196.493461] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  196.496865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  196.520410] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.536861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.542472] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.559606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.563676] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  196.694805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  196.701540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  196.713633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  196.715777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  196.736169] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  196.737918] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  196.740425] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  196.744608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  196.746223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  196.757248] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  196.757289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  196.766723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  196.771538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  196.781446] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  196.790577] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  196.793832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  196.795771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  196.815201] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  196.815254] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  196.833629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  198.521503] Bluetooth: hci2: command tx timeout
[  198.585830] Bluetooth: hci0: command tx timeout
[  198.587218] Bluetooth: hci1: command tx timeout
[  198.649568] Bluetooth: hci3: command tx timeout
[  198.905818] Bluetooth: hci5: command tx timeout
[  198.907504] Bluetooth: hci4: command tx timeout
[  198.969327] Bluetooth: hci6: command tx timeout
[  199.033333] Bluetooth: hci7: command tx timeout
[  200.569420] Bluetooth: hci2: command tx timeout
[  200.635260] Bluetooth: hci1: command tx timeout
[  200.635948] Bluetooth: hci0: command tx timeout
[  200.698722] Bluetooth: hci3: command tx timeout
[  200.953707] Bluetooth: hci5: command tx timeout
[  200.954540] Bluetooth: hci4: command tx timeout
[  201.018328] Bluetooth: hci6: command tx timeout
[  201.081726] Bluetooth: hci7: command tx timeout
[  202.619185] Bluetooth: hci2: command tx timeout
[  202.682240] Bluetooth: hci0: command tx timeout
[  202.682876] Bluetooth: hci1: command tx timeout
[  202.749496] Bluetooth: hci3: command tx timeout
[  203.002671] Bluetooth: hci5: command tx timeout
[  203.003577] Bluetooth: hci4: command tx timeout
[  203.066244] Bluetooth: hci6: command tx timeout
[  203.129240] Bluetooth: hci7: command tx timeout
[  204.666041] Bluetooth: hci2: command tx timeout
[  204.729547] Bluetooth: hci0: command tx timeout
[  204.730393] Bluetooth: hci1: command tx timeout
[  204.794642] Bluetooth: hci3: command tx timeout
[  205.049313] Bluetooth: hci5: command tx timeout
[  205.050032] Bluetooth: hci4: command tx timeout
[  205.114168] Bluetooth: hci6: command tx timeout
[  205.177231] Bluetooth: hci7: command tx timeout
[  258.315477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  258.317723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  258.323742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  258.334838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  258.341721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  258.464899] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  258.468603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  258.472518] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  258.472680] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  258.477608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  258.479852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  258.485617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  258.489916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  258.491921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  258.499007] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  258.571467] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  258.579720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  258.585627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  258.597686] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  258.608401] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  258.653717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  258.675613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  258.702788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  258.710605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  258.723297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  258.737081] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  258.740978] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  258.742891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  258.747621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  258.750183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  258.752713] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  258.761983] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  258.768981] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  258.772783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  258.782379] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  258.833730] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  258.836873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  258.873865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  258.913278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  258.917009] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  260.411191] Bluetooth: hci0: command tx timeout
[  260.537467] Bluetooth: hci2: command tx timeout
[  260.602270] Bluetooth: hci1: command tx timeout
[  260.666222] Bluetooth: hci3: command tx timeout
[  260.793494] Bluetooth: hci5: command tx timeout
[  260.857557] Bluetooth: hci7: command tx timeout
[  260.921317] Bluetooth: hci4: command tx timeout
[  260.985675] Bluetooth: hci6: command tx timeout
[  262.457812] Bluetooth: hci0: command tx timeout
[  262.585743] Bluetooth: hci2: command tx timeout
[  262.650145] Bluetooth: hci1: command tx timeout
[  262.713266] Bluetooth: hci3: command tx timeout
[  262.841312] Bluetooth: hci5: command tx timeout
[  262.905195] Bluetooth: hci7: command tx timeout
[  262.969255] Bluetooth: hci4: command tx timeout
[  263.033325] Bluetooth: hci6: command tx timeout
[  264.505186] Bluetooth: hci0: command tx timeout
[  264.635148] Bluetooth: hci2: command tx timeout
[  264.697390] Bluetooth: hci1: command tx timeout
[  264.762648] Bluetooth: hci3: command tx timeout
[  264.889321] Bluetooth: hci5: command tx timeout
[  264.953664] Bluetooth: hci7: command tx timeout
[  265.017444] Bluetooth: hci4: command tx timeout
[  265.081178] Bluetooth: hci6: command tx timeout
[  266.555024] Bluetooth: hci0: command tx timeout
[  266.681346] Bluetooth: hci2: command tx timeout
[  266.745180] Bluetooth: hci1: command tx timeout
[  266.809240] Bluetooth: hci3: command tx timeout
[  266.937396] Bluetooth: hci5: command tx timeout
[  267.001317] Bluetooth: hci7: command tx timeout
[  267.065438] Bluetooth: hci4: command tx timeout
[  267.129225] Bluetooth: hci6: command tx timeout
[  318.964284] syz-executor.2 (4662) used greatest stack depth: 24400 bytes left
[  320.909854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  320.913899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  320.915920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  320.920996] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  320.924266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  320.977090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  320.980650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  320.982290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  320.986439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  320.990859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  321.039174] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  321.042634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  321.047867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  321.062345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  321.066757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  321.179936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  321.184591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  321.186466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  321.192024] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  321.197040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  321.245192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  321.255482] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  321.271512] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.301728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.303335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.305190] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.308512] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  321.312735] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  321.314612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.325735] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  321.365763] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  321.375876] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  321.385287] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  321.386640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  321.388997] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  321.390806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  321.405269] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  321.409084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  321.455766] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  321.475186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  323.002226] Bluetooth: hci0: command tx timeout
[  323.065225] Bluetooth: hci1: command tx timeout
[  323.129748] Bluetooth: hci2: command tx timeout
[  323.258232] Bluetooth: hci3: command tx timeout
[  323.385396] Bluetooth: hci4: command tx timeout
[  323.386324] Bluetooth: hci5: command tx timeout
[  323.705235] Bluetooth: hci6: command tx timeout
[  323.705246] Bluetooth: hci7: command tx timeout
[  325.051362] Bluetooth: hci0: command tx timeout
[  325.113357] Bluetooth: hci1: command tx timeout
[  325.178455] Bluetooth: hci2: command tx timeout
[  325.306236] Bluetooth: hci3: command tx timeout
[  325.433274] Bluetooth: hci5: command tx timeout
[  325.433292] Bluetooth: hci4: command tx timeout
[  325.753192] Bluetooth: hci6: command tx timeout
[  325.755300] Bluetooth: hci7: command tx timeout
[  327.097185] Bluetooth: hci0: command tx timeout
[  327.161224] Bluetooth: hci1: command tx timeout
[  327.225208] Bluetooth: hci2: command tx timeout
[  327.353546] Bluetooth: hci3: command tx timeout
[  327.483259] Bluetooth: hci4: command tx timeout
[  327.483499] Bluetooth: hci5: command tx timeout
[  327.801233] Bluetooth: hci7: command tx timeout
[  327.801267] Bluetooth: hci6: command tx timeout
[  329.145252] Bluetooth: hci0: command tx timeout
[  329.209219] Bluetooth: hci1: command tx timeout
[  329.273185] Bluetooth: hci2: command tx timeout
[  329.401433] Bluetooth: hci3: command tx timeout
[  329.530169] Bluetooth: hci4: command tx timeout
[  329.530195] Bluetooth: hci5: command tx timeout
[  329.850178] Bluetooth: hci6: command tx timeout
[  329.850727] Bluetooth: hci7: command tx timeout
[  383.430992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  383.434551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  383.441531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  383.448921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  383.453687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  383.565036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  383.572639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  383.575156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  383.579729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  383.581479] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  383.581577] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  383.589395] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  383.592829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.594994] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  383.601565] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  383.797995] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  383.809047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  383.820625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  383.846061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  383.855726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.878395] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  383.881383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  383.884067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  383.939563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  383.952802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  383.954494] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.973263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  384.017982] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  384.035760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  384.040563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  384.044992] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  384.052282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  384.053897] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  384.060999] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  384.064802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  384.080938] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  384.097792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  384.113330] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  384.120988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  384.204897] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  385.530496] Bluetooth: hci0: command tx timeout
[  385.657191] Bluetooth: hci1: command tx timeout
[  385.658429] Bluetooth: hci2: command tx timeout
[  385.914312] Bluetooth: hci3: command tx timeout
[  386.041216] Bluetooth: hci4: command tx timeout
[  386.105900] Bluetooth: hci6: command tx timeout
[  386.169197] Bluetooth: hci5: command tx timeout
[  386.297365] Bluetooth: hci7: command tx timeout
[  387.579130] Bluetooth: hci0: command tx timeout
[  387.705566] Bluetooth: hci1: command tx timeout
[  387.706687] Bluetooth: hci2: command tx timeout
[  387.961217] Bluetooth: hci3: command tx timeout
[  388.089202] Bluetooth: hci4: command tx timeout
[  388.153512] Bluetooth: hci6: command tx timeout
[  388.218455] Bluetooth: hci5: command tx timeout
[  388.345472] Bluetooth: hci7: command tx timeout
[  389.625385] Bluetooth: hci0: command tx timeout
[  389.753226] Bluetooth: hci2: command tx timeout
[  389.753886] Bluetooth: hci1: command tx timeout
[  390.009463] Bluetooth: hci3: command tx timeout
[  390.137483] Bluetooth: hci4: command tx timeout
[  390.201335] Bluetooth: hci6: command tx timeout
[  390.266367] Bluetooth: hci5: command tx timeout
[  390.395254] Bluetooth: hci7: command tx timeout
[  391.674420] Bluetooth: hci0: command tx timeout
[  391.803211] Bluetooth: hci2: command tx timeout
[  391.803336] Bluetooth: hci1: command tx timeout
[  392.058526] Bluetooth: hci3: command tx timeout
[  392.186471] Bluetooth: hci4: command tx timeout
[  392.250501] Bluetooth: hci6: command tx timeout
[  392.315275] Bluetooth: hci5: command tx timeout
[  392.441474] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
11:21:34  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff85c1b9c0 RDI=ffff888024f40a80 RBP=00000000000f204c RSP=ffff88806ce08cb8
R8 =0000000000000000 R9 =1ffff11006e0a033 R10=ffffffff8640ed17 R11=0000000000094be5
R12=0000000000000001 R13=ffff88806ce36f80 R14=ffff888024f40080 R15=ffffffff85c59320
RIP=ffffffff8159b486 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564d000 00000000 00000000
LDT=0000 fffffe5e00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff94fac9028 CR3=000000001625a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88801374d000 RBX=ffff88800cee2630 RCX=ffff888013777b00 RDX=ffff8880165c82c0
RSI=ffff888013777a00 RDI=0000000000000000 RBP=ffff88800c7db378 RSP=ffff888033047800
R8 =0000000000000000 R9 =ffffed1006608ef1 R10=0000000000000003 R11=0000000000000000
R12=ffff888013777a00 R13=0000000000000100 R14=0000000000000001 R15=0000000000000286
RIP=ffffffff81b13341 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574d000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f99b6aa01f0 CR3=000000002fce4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000