Warning: Permanently added '[localhost]:18393' (ECDSA) to the list of known hosts.
2025/04/25 05:12:47 fuzzer started
2025/04/25 05:12:48 dialing manager at localhost:46629
syzkaller login: [   93.393807] cgroup: Unknown subsys name 'net'
[   93.517798] cgroup: Unknown subsys name 'cpuset'
[   93.560056] cgroup: Unknown subsys name 'rlimit'
2025/04/25 05:13:03 syscalls: 204
2025/04/25 05:13:03 code coverage: enabled
2025/04/25 05:13:03 comparison tracing: enabled
2025/04/25 05:13:03 extra coverage: enabled
2025/04/25 05:13:03 setuid sandbox: enabled
2025/04/25 05:13:03 namespace sandbox: enabled
2025/04/25 05:13:03 Android sandbox: enabled
2025/04/25 05:13:03 fault injection: enabled
2025/04/25 05:13:03 leak checking: enabled
2025/04/25 05:13:03 net packet injection: enabled
2025/04/25 05:13:03 net device setup: enabled
2025/04/25 05:13:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/25 05:13:03 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/25 05:13:03 USB emulation: enabled
2025/04/25 05:13:03 hci packet injection: enabled
2025/04/25 05:13:03 wifi device emulation: enabled
2025/04/25 05:13:03 802.15.4 emulation: enabled
2025/04/25 05:13:03 fetching corpus: 0, signal 0/0 (executing program)
2025/04/25 05:13:05 starting 8 fuzzer processes
05:13:05 executing program 0:
ioprio_set$uid(0x0, 0xffffffffffffffff, 0x2004)
ioprio_set$uid(0x0, 0xffffffffffffffff, 0x2004)
r0 = geteuid()
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="b7fcad0663607281343e1b828db160dfeeb25dda9a3e974a85b7ffeb59d1675eacd441f315bff63419c66881c1e900e5c35064b9ad3aaeb7ce6bca5432245714bef011a9acb69301eeaa522c383d7f0d9f00ef01a112885ac0327079f3e2a7e2ea7ba8be75d51b0e0fe3b3cc05aa283a5dd86e0301ad2ddd4fa9f334b6fc0debb8574d62a46c73a268a302ee86a8d15727cb7565522abdd0883a5f525a95cab34d3b69171f5a68da129e5717ae097fcd4c0e9add357f6b80f865a1fbcd7b6a663a0536afc9b7db88", 0xc8, 0x6729}], 0x80, &(0x7f00000001c0)={[{@nouid32}, {@nolazytime}, {@norecovery}, {@jqfmt_vfsold}, {@noinit_itable}, {@nogrpid}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '&!\\'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_lt={'euid<', r0}}, {@dont_hash}, {@dont_hash}]})
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x76d31332beebba88, 0x0)
ioprio_get$uid(0x3, r0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x24000, 0x0)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x1a8202, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000340)={0x10000015})
epoll_wait(r4, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x1ff)
ioprio_get$uid(0x3, r0)
symlinkat(&(0x7f0000000400)='./file0\x00', r3, &(0x7f0000000440)='./file0/file0\x00')
faccessat(r2, &(0x7f0000000480)='./file0\x00', 0x30)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000004c0))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x20000001})
r5 = openat$incfs(r1, &(0x7f0000000540)='.pending_reads\x00', 0x1, 0x8)
ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000580)={'macvlan1\x00'})
getresuid(&(0x7f0000000740)=<r6=>0x0, &(0x7f0000000780), &(0x7f00000007c0))
syz_mount_image$ext4(&(0x7f00000005c0)='ext2\x00', &(0x7f0000000600)='./file0\x00', 0x200, 0x1, &(0x7f0000000700)=[{&(0x7f0000000640)="9d80c0cd401a45997b21f9d7bb31d5a1d3398da46d6ff9f77b2fd8697b500ef66ec6f021a0d199eab468838ee9b23752cfd81b530ebc4258aa563c2bd4783f476bd705f9b16ae41bee177c3c037e441ce8fca062acf74f0f7494d27f876f425c27acf3b7a9a0f9fc41d21dc1ef40c0a5c474c1178bf53e9fcf45b4ffdb63a3e8963a874e0d5a016b2e37c5df616fa1a9c16257b0b8b2dc506c75abc9cc06", 0x9e, 0xb190a6e}], 0x4, &(0x7f0000000800)={[{@bh}, {@sysvgroups}], [{@smackfsroot={'smackfsroot', 0x3d, '{'}}, {@uid_gt={'uid>', r6}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]})

05:13:05 executing program 1:
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x5, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000014}, 0x1)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r0=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x44040}, 0x80)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r1)
prctl$PR_SET_FPEXC(0xc, 0x100000)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xa2810098}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x6000000)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x100, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r4)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000680), r4)
prctl$PR_GET_FP_MODE(0x2e)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r5)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x9, 0x6, 0x181, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x80)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), r5)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x811c062897374edc}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008050}, 0x4000000)

05:13:05 executing program 2:
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x15d5)
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x27e)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x2000, 0x160)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x3, 0x1d, 0xa, 0xc, 0x8, 0x11b, 0x3, 0x8f, 0x1}})
r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x511043)
ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f00000000c0)={0x9, 0x3, 0x2924, 0x5, 0x1000, 0xffffffff})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x115603, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0xe, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000001)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7ff}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20040840)
execveat(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000380)=',.#]:[,:\xfe%*+\xdd@-n.\x00', &(0x7f00000003c0)='/dev/loop-control\x00', &(0x7f0000000400)='@\'\x00'], &(0x7f0000000540)=[&(0x7f0000000480)='/dev/rtc#\x00', &(0x7f00000004c0)='/dev/loop-control\x00', &(0x7f0000000500)='.log\x00'], 0x100)
r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20e2060}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000)
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000680)={0x3, 0x39, 0x0, 0xd, 0x8, 0x10000, 0x6, 0xc4, 0x1})
socket$inet_icmp(0x2, 0x2, 0x1)
r5 = openat$incfs(0xffffffffffffff9c, &(0x7f00000006c0)='.pending_reads\x00', 0x20000, 0x90)
ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x626b)
prctl$PR_GET_FP_MODE(0x2e)

05:13:05 executing program 3:
modify_ldt$write(0x1, &(0x7f0000000000)={0x8, 0x100000, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
clock_gettime(0x4, &(0x7f0000000040))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x800)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000)
clock_gettime(0x0, &(0x7f0000000200)={<r1=>0x0, <r2=>0x0})
clock_settime(0x4, &(0x7f0000000240)={r1, r2+10000000})
r3 = epoll_create(0x9)
epoll_pwait2(r3, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x5, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x3f]}, 0x8)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x200)
r4 = geteuid()
getresuid(&(0x7f0000000340)=<r5=>0x0, &(0x7f0000000380), &(0x7f00000003c0))
setresuid(r4, r4, r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x4, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x841)
r7 = socket(0x2b, 0xa, 0x3)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10011}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1578}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4511c345c7bb9ba1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x75e2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa4}}, 0x48000)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0), 0x400383, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x80)

[  111.162400] audit: type=1400 audit(1745557986.014:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:13:06 executing program 4:
r0 = epoll_create1(0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wg1\x00', @link_local})
r1 = epoll_create(0x76e6)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x1d})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x5)
r4 = epoll_create(0x385c)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)={0x80000000})
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xd34)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000140)={0x90002003})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x22802, 0x0)
ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f00000001c0)=0x1)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x202a03, 0x0)
ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000280)={0x20000000})
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
r7 = epoll_create(0x51)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)={0x8000000a})

05:13:06 executing program 5:
r0 = socket(0x11, 0x2, 0x1e44)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x9, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x880)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x3, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x21393c3e}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44880)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0xe, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x48054)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48c5)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x90)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x5)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x12)
syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r0)
sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0xf, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000)
syz_genetlink_get_family_id$smc(&(0x7f0000000ac0), r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff}}]}, 0x20}}, 0x20)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x50, 0x0, 0x701, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x8084}, 0x40080)

05:13:06 executing program 7:
ptrace$getregset(0x4204, 0xffffffffffffffff, 0x201, &(0x7f0000000080)={&(0x7f0000000000)=""/116, 0x74})
ptrace$getregset(0x4204, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=""/45, 0x2d})
r0 = getpgrp(0x0)
wait4(r0, &(0x7f0000000140), 0x40000000, &(0x7f0000000180))
r1 = getpid()
capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f0000000280)={0x1, 0x200, 0x8070, 0x9, 0x3e04})
r2 = getpid()
sched_getscheduler(r0)
wait4(r0, &(0x7f00000002c0), 0x8, &(0x7f0000000300))
r3 = getpgrp(r2)
process_vm_readv(r3, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f00000004c0)=""/225, 0xe1}, {&(0x7f00000005c0)=""/76, 0x4c}, {&(0x7f0000000640)=""/12, 0xc}, {&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/38, 0x26}, {&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000780)=""/94, 0x5e}, {&(0x7f0000000800)=""/80, 0x50}], 0xa, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/177, 0xb1}, {&(0x7f0000000a00)=""/78, 0x4e}, {&(0x7f0000000a80)=""/184, 0xb8}], 0x3, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000b80)=""/120, 0x78)
read$char_usb(0xffffffffffffffff, &(0x7f0000000c00)=""/211, 0xd3)
write$char_usb(0xffffffffffffffff, &(0x7f0000000d00)="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", 0x1000)
sched_setaffinity(r0, 0x8, &(0x7f0000001d00)=0x6)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000002000)=[{&(0x7f0000001d40)=""/1, 0x1}, {&(0x7f0000001d80)=""/109, 0x6d}, {&(0x7f0000001e00)=""/76, 0x4c}, {&(0x7f0000001e80)=""/159, 0x9f}, {&(0x7f0000001f40)=""/188, 0xbc}], 0x5, &(0x7f0000004480)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/58, 0x3a}, {&(0x7f00000030c0)=""/151, 0x97}, {&(0x7f0000003180)}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/41, 0x29}, {&(0x7f0000004200)=""/198, 0xc6}, {&(0x7f0000004300)=""/127, 0x7f}, {&(0x7f0000004380)=""/233, 0xe9}], 0x9, 0x0)
ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000045c0)={&(0x7f0000004540)=""/79, 0x4f})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0xcc54)

05:13:06 executing program 6:
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000854}, 0x94)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40001)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x145a00, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4008440)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000380)={0xff, 0x2d, "94f167d77b67e65fa8fff0ae19bacc4c9cb8ab71206615f0d077055f27753c475bf99216532a6ab5013722f587"})
read$char_usb(r0, &(0x7f00000003c0)=""/4096, 0x1000)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x4)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000001540), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001580)={<r2=>0xffffffffffffffff})
r3 = openat$incfs(r0, &(0x7f00000015c0)='.pending_reads\x00', 0x202, 0x100)
r4 = openat$incfs(r0, &(0x7f0000001600)='.pending_reads\x00', 0x2a0000, 0x2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001640), 0x517601, 0x0)
r6 = socket(0x27, 0x800, 0x3)
r7 = openat$incfs(r0, &(0x7f0000001680)='.log\x00', 0x404000, 0x88)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x60, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}}, 0x21)
r8 = syz_open_dev$rtc(&(0x7f00000017c0), 0x1, 0x0)
ioctl$RTC_ALM_SET(r8, 0x40247007, &(0x7f0000001800)={0x6, 0x34, 0x14, 0x5, 0x3, 0x8, 0x1, 0x32, 0xffffffffffffffff})
epoll_wait(0xffffffffffffffff, &(0x7f0000001840)=[{}, {}, {}, {}, {}, {}], 0x6, 0x80000000)
r9 = socket(0x1, 0x6, 0xfff)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10400004}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x70, 0x0, 0x310, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x40041}, 0x40000)

[  112.818356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.823144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.826907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.834062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.839657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.896524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.901285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.903951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.911226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.913661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.917178] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.922856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.926227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.928141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.935777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.942559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.946243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.955751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.958556] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.967611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.993877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.999528] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  113.002308] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  113.008239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  113.011283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  113.013267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  113.019924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  113.039263] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  113.043933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  113.062234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  113.073833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  113.075169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  113.084237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  113.088944] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  113.090118] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  113.100706] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  113.106408] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  113.108391] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  113.141011] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  113.156930] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.903282] Bluetooth: hci0: command tx timeout
[  115.031328] Bluetooth: hci2: command tx timeout
[  115.031395] Bluetooth: hci1: command tx timeout
[  115.094727] Bluetooth: hci3: command tx timeout
[  115.095595] Bluetooth: hci5: command tx timeout
[  115.158719] Bluetooth: hci4: command tx timeout
[  115.223197] Bluetooth: hci7: command tx timeout
[  115.224313] Bluetooth: hci6: command tx timeout
[  116.953743] Bluetooth: hci0: command tx timeout
[  117.078801] Bluetooth: hci2: command tx timeout
[  117.079531] Bluetooth: hci1: command tx timeout
[  117.142604] Bluetooth: hci3: command tx timeout
[  117.142676] Bluetooth: hci5: command tx timeout
[  117.206525] Bluetooth: hci4: command tx timeout
[  117.270934] Bluetooth: hci7: command tx timeout
[  117.271381] Bluetooth: hci6: command tx timeout
[  118.999586] Bluetooth: hci0: command tx timeout
[  119.129565] Bluetooth: hci1: command tx timeout
[  119.129604] Bluetooth: hci2: command tx timeout
[  119.191576] Bluetooth: hci5: command tx timeout
[  119.192063] Bluetooth: hci3: command tx timeout
[  119.255487] Bluetooth: hci4: command tx timeout
[  119.318540] Bluetooth: hci6: command tx timeout
[  119.319525] Bluetooth: hci7: command tx timeout
[  121.046848] Bluetooth: hci0: command tx timeout
[  121.174576] Bluetooth: hci2: command tx timeout
[  121.175185] Bluetooth: hci1: command tx timeout
[  121.238794] Bluetooth: hci3: command tx timeout
[  121.239306] Bluetooth: hci5: command tx timeout
[  121.302870] Bluetooth: hci4: command tx timeout
[  121.367054] Bluetooth: hci6: command tx timeout
[  121.367601] Bluetooth: hci7: command tx timeout
[  173.856584] syz-executor.0 (285) used greatest stack depth: 23800 bytes left
[  176.101144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.104038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.107914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.114268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.120535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.182503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.193246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.197077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.205075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.217514] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.256311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.259861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.264111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.271902] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.274716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.386568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.418726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.426716] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.441835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.448939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  176.608876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.611218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.613199] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.619828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  176.623999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  176.644914] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  176.647392] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  176.652254] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  176.653160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  176.657156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  176.660198] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  176.661274] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  176.666011] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  176.667301] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  176.671048] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.695779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  176.706756] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  176.734332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.740227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.747383] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  178.198582] Bluetooth: hci0: command tx timeout
[  178.262616] Bluetooth: hci1: command tx timeout
[  178.326716] Bluetooth: hci2: command tx timeout
[  178.585014] Bluetooth: hci3: command tx timeout
[  178.710528] Bluetooth: hci4: command tx timeout
[  178.774593] Bluetooth: hci7: command tx timeout
[  178.774664] Bluetooth: hci6: command tx timeout
[  178.838598] Bluetooth: hci5: command tx timeout
[  180.246828] Bluetooth: hci0: command tx timeout
[  180.310650] Bluetooth: hci1: command tx timeout
[  180.376312] Bluetooth: hci2: command tx timeout
[  180.632475] Bluetooth: hci3: command tx timeout
[  180.758988] Bluetooth: hci4: command tx timeout
[  180.822779] Bluetooth: hci7: command tx timeout
[  180.823529] Bluetooth: hci6: command tx timeout
[  180.888108] Bluetooth: hci5: command tx timeout
[  182.294722] Bluetooth: hci0: command tx timeout
[  182.360664] Bluetooth: hci1: command tx timeout
[  182.422648] Bluetooth: hci2: command tx timeout
[  182.679798] Bluetooth: hci3: command tx timeout
[  182.806530] Bluetooth: hci4: command tx timeout
[  182.870811] Bluetooth: hci7: command tx timeout
[  182.871559] Bluetooth: hci6: command tx timeout
[  182.934538] Bluetooth: hci5: command tx timeout
[  184.342753] Bluetooth: hci0: command tx timeout
[  184.408443] Bluetooth: hci1: command tx timeout
[  184.471602] Bluetooth: hci2: command tx timeout
[  184.726716] Bluetooth: hci3: command tx timeout
[  184.855670] Bluetooth: hci4: command tx timeout
[  184.919733] Bluetooth: hci6: command tx timeout
[  184.920182] Bluetooth: hci7: command tx timeout
[  184.983507] Bluetooth: hci5: command tx timeout
[  238.515818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  238.520066] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.522022] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.524139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.526258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  238.530536] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.532929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  238.537243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.551039] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  238.561602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.643406] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.651989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.675322] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.690216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.692681] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  238.694862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.709570] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  238.741626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  238.748792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.751279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.755880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  238.760379] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  238.763368] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  238.769595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  238.787048] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  238.822692] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  238.829271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.830777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.855844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.868789] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.881721] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.887949] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.895324] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.895528] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  238.904700] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.911315] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.914158] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.917143] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  238.928872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.931350] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  240.598523] Bluetooth: hci0: command tx timeout
[  240.599565] Bluetooth: hci1: command tx timeout
[  240.790510] Bluetooth: hci3: command tx timeout
[  240.854830] Bluetooth: hci4: command tx timeout
[  240.854869] Bluetooth: hci2: command tx timeout
[  240.982538] Bluetooth: hci5: command tx timeout
[  240.983463] Bluetooth: hci7: command tx timeout
[  241.046509] Bluetooth: hci6: command tx timeout
[  242.648468] Bluetooth: hci1: command tx timeout
[  242.648525] Bluetooth: hci0: command tx timeout
[  242.838655] Bluetooth: hci3: command tx timeout
[  242.904641] Bluetooth: hci4: command tx timeout
[  242.904665] Bluetooth: hci2: command tx timeout
[  243.031547] Bluetooth: hci5: command tx timeout
[  243.031991] Bluetooth: hci7: command tx timeout
[  243.095810] Bluetooth: hci6: command tx timeout
[  244.694532] Bluetooth: hci1: command tx timeout
[  244.695005] Bluetooth: hci0: command tx timeout
[  244.886615] Bluetooth: hci3: command tx timeout
[  244.950671] Bluetooth: hci4: command tx timeout
[  244.951682] Bluetooth: hci2: command tx timeout
[  245.080487] Bluetooth: hci7: command tx timeout
[  245.080576] Bluetooth: hci5: command tx timeout
[  245.143042] Bluetooth: hci6: command tx timeout
[  246.742682] Bluetooth: hci0: command tx timeout
[  246.742713] Bluetooth: hci1: command tx timeout
[  246.934860] Bluetooth: hci3: command tx timeout
[  246.998717] Bluetooth: hci2: command tx timeout
[  246.999182] Bluetooth: hci4: command tx timeout
[  247.126544] Bluetooth: hci7: command tx timeout
[  247.126998] Bluetooth: hci5: command tx timeout
[  247.190500] Bluetooth: hci6: command tx timeout
[  300.780665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.785666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.788154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.798075] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.805361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.910055] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.919384] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.923702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.935092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.940141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.053130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.063061] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.066107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.082931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.098988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.138520] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.167732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.170597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.220691] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.241552] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.496337] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.505057] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  301.520577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.538160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.540554] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  301.554019] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.564960] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.576316] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.577674] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  301.594932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  301.598827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.606994] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.621805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.630607] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  301.658846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.679050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.705918] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  301.708101] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  301.724797] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  301.868176] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  302.871676] Bluetooth: hci0: command tx timeout
[  302.998849] Bluetooth: hci1: command tx timeout
[  303.254837] Bluetooth: hci2: command tx timeout
[  303.319699] Bluetooth: hci3: command tx timeout
[  303.702514] Bluetooth: hci6: command tx timeout
[  303.894556] Bluetooth: hci4: command tx timeout
[  303.896203] Bluetooth: hci5: command tx timeout
[  304.022536] Bluetooth: hci7: command tx timeout
[  304.918766] Bluetooth: hci0: command tx timeout
[  305.046621] Bluetooth: hci1: command tx timeout
[  305.302983] Bluetooth: hci2: command tx timeout
[  305.366708] Bluetooth: hci3: command tx timeout
[  305.750529] Bluetooth: hci6: command tx timeout
[  305.944453] Bluetooth: hci4: command tx timeout
[  305.944922] Bluetooth: hci5: command tx timeout
[  306.071517] Bluetooth: hci7: command tx timeout
[  306.967753] Bluetooth: hci0: command tx timeout
[  307.095722] Bluetooth: hci1: command tx timeout
[  307.352267] Bluetooth: hci2: command tx timeout
[  307.415609] Bluetooth: hci3: command tx timeout
[  307.799506] Bluetooth: hci6: command tx timeout
[  307.991951] Bluetooth: hci5: command tx timeout
[  307.992399] Bluetooth: hci4: command tx timeout
[  308.119479] Bluetooth: hci7: command tx timeout
[  309.015489] Bluetooth: hci0: command tx timeout
[  309.143512] Bluetooth: hci1: command tx timeout
[  309.400645] Bluetooth: hci2: command tx timeout
[  309.463480] Bluetooth: hci3: command tx timeout
[  309.847657] Bluetooth: hci6: command tx timeout
[  310.039970] Bluetooth: hci4: command tx timeout
[  310.040678] Bluetooth: hci5: command tx timeout
[  310.167921] Bluetooth: hci7: command tx timeout
[  363.240601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.246031] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  363.249741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  363.260134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  363.272086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.502093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.505924] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.508323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.519235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.523950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  363.581186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  363.596781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.600479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.603172] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.606237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.614861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.618739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  363.621270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.626765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.629659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.644033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.649065] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.651796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.656835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.659374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.685167] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.693095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.745025] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.778398] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.799786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.812184] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.815958] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.821943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  363.829011] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  363.835686] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  363.873680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  363.889749] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  363.948277] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  363.979776] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  364.013777] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  365.335546] Bluetooth: hci0: command tx timeout
[  365.590492] Bluetooth: hci1: command tx timeout
[  365.719613] Bluetooth: hci2: command tx timeout
[  365.974548] Bluetooth: hci4: command tx timeout
[  366.102963] Bluetooth: hci6: command tx timeout
[  366.103975] Bluetooth: hci5: command tx timeout
[  366.104018] Bluetooth: hci3: command tx timeout
[  366.295651] Bluetooth: hci7: command tx timeout
[  367.384470] Bluetooth: hci0: command tx timeout
[  367.639483] Bluetooth: hci1: command tx timeout
[  367.767492] Bluetooth: hci2: command tx timeout
[  368.023772] Bluetooth: hci4: command tx timeout
[  368.150560] Bluetooth: hci6: command tx timeout
[  368.150686] Bluetooth: hci3: command tx timeout
[  368.151047] Bluetooth: hci5: command tx timeout
[  368.344352] Bluetooth: hci7: command tx timeout
[  369.430481] Bluetooth: hci0: command tx timeout
[  369.686596] Bluetooth: hci1: command tx timeout
[  369.814564] Bluetooth: hci2: command tx timeout
[  370.071495] Bluetooth: hci4: command tx timeout
[  370.198905] Bluetooth: hci3: command tx timeout
[  370.199171] Bluetooth: hci5: command tx timeout
[  370.199380] Bluetooth: hci6: command tx timeout
[  370.390500] Bluetooth: hci7: command tx timeout
[  371.478773] Bluetooth: hci0: command tx timeout
[  371.734829] Bluetooth: hci1: command tx timeout
[  371.862500] Bluetooth: hci2: command tx timeout
[  372.118500] Bluetooth: hci4: command tx timeout
[  372.246568] Bluetooth: hci5: command tx timeout
[  372.246592] Bluetooth: hci6: command tx timeout
[  372.247052] Bluetooth: hci3: command tx timeout
[  372.438486] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
05:18:06  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88806ce08ac8 RCX=ffff88806ce08954 RDX=1ffff1100d9c115a
RSI=ffffffff84ae0240 RDI=ffff88806ce08ad0 RBP=0000000000000009 RSP=ffff88806ce089e0
R8 =ffffffff867b605e R9 =ffff88806ce08a40 R10=000000000003b0c2 R11=0000000000008673
R12=ffff88806ce08ac8 R13=0000000000000000 R14=ffff888033460000 R15=ffff88800d75eac0
RIP=ffffffff8160030f RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f21c3d19260 CR3=0000000026ae8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffffffff85c73520 RCX=ffffffff81737195 RDX=1ffffffff0b8e6b9
RSI=ffffffff8173708d RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88806cf08a08
R8 =0000000000000002 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000003
R12=00007f9cc08de699 R13=0000000000000000 R14=ffffffff85c735c8 R15=ffff88800e067a68
RIP=ffffffff817370a9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe568963000 CR3=000000000bdb2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff
XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69
XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000