Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:11292' (ECDSA) to the list of known hosts. 2025/04/26 10:39:32 fuzzer started 2025/04/26 10:39:33 dialing manager at localhost:46629 syzkaller login: [ 94.103200] cgroup: Unknown subsys name 'net' [ 94.255137] cgroup: Unknown subsys name 'cpuset' [ 94.292667] cgroup: Unknown subsys name 'rlimit' 2025/04/26 10:39:49 syscalls: 204 2025/04/26 10:39:49 code coverage: enabled 2025/04/26 10:39:49 comparison tracing: enabled 2025/04/26 10:39:49 extra coverage: enabled 2025/04/26 10:39:49 setuid sandbox: enabled 2025/04/26 10:39:49 namespace sandbox: enabled 2025/04/26 10:39:49 Android sandbox: enabled 2025/04/26 10:39:49 fault injection: enabled 2025/04/26 10:39:49 leak checking: enabled 2025/04/26 10:39:49 net packet injection: enabled 2025/04/26 10:39:49 net device setup: enabled 2025/04/26 10:39:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/26 10:39:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/26 10:39:49 USB emulation: enabled 2025/04/26 10:39:49 hci packet injection: enabled 2025/04/26 10:39:49 wifi device emulation: enabled 2025/04/26 10:39:49 802.15.4 emulation: enabled 2025/04/26 10:39:49 fetching corpus: 0, signal 0/0 (executing program) 2025/04/26 10:39:51 starting 8 fuzzer processes 10:39:51 executing program 0: setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x7, 0xf7d}]}, 0xc, 0x2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100, 0x400, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_audit(0x10, 0x3, 0x9) connect(r1, &(0x7f0000000340)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) r2 = accept4(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000440)=0x80, 0x0) mount$9p_virtio(&(0x7f0000000480), &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x2001000, &(0x7f0000000540)={'trans=virtio,', {[{@access_user}, {@mmap}, {@cache_loose}, {@cache_none}, {@access_uid={'access', 0x3d, r0}}, {@access_any}, {@nodevmap}], [{@pcr={'pcr', 0x3d, 0x1e}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x64, 0x64, 0x62, 0x38, 0x31, 0x65, 0x1], 0x2d, [0x63, 0x36, 0x45, 0x61], 0x2d, [0x65, 0x32, 0x63, 0x35], 0x2d, [0x37, 0x65, 0x30, 0x34], 0x2d, [0x32, 0x39, 0x65, 0x36, 0x39, 0x30, 0x38, 0x65]}}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security.capability\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'trusted.overlay.origin\x00'}}, {@obj_type={'obj_type', 0x3d, '\'\x9c'}}]}}) statx(0xffffffffffffffff, &(0x7f0000000700)='./file1\x00', 0x0, 0x10, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0), &(0x7f0000000840)=@v3={0x3000000, [{0x6}, {0x100000}], r4}, 0x18, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), &(0x7f0000000900), 0x2, 0x0) r5 = syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file1\x00', 0xf904, 0x3, &(0x7f0000001a80)=[{&(0x7f00000009c0)="9bb28a8b21abcaf393f406ea404df5dac1b23abc46a5d9f0663492991ee585be03a3ad14447d", 0x26, 0x7ff}, {&(0x7f0000000a00)="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", 0x1000, 0x8f5}, {&(0x7f0000001a00)="adc1502dde0c98048015329049359aac869a95a0da288861daf61d62cf5edafb7c64097a87389882a63e0f98cf11d5974e524772b41631aaf9644085a9a73a17867cad14f4dda8942509e9239e839b1ac4400d5316f877ee09cb04901225c8f95843a4dc5e32db369be5d518843028f0d956", 0x72, 0x100000001}], 0x4000, &(0x7f0000001b00)={[{@map_off}, {@map_normal}, {@utf8}, {@hide}, {@unhide}, {@session={'session', 0x3d, 0x19}}, {@unhide}, {@mode}, {@mode={'mode', 0x3d, 0x1}}], [{@euid_gt={'euid>', r0}}, {@uid_eq={'uid', 0x3d, r4}}, {@obj_type={'obj_type', 0x3d, 'trusted.overlay.origin\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'trans=virtio,'}}, {@smackfshat={'smackfshat', 0x3d, '$:]\\{^\xef+&)'}}, {@measure}]}) mount_setattr(r5, &(0x7f0000001c40)='./file1\x00', 0x9900, &(0x7f0000001c80)={0x4, 0x80, 0xe0000}, 0x20) getpeername(r2, &(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000001d40)=0x80) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001d80)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) accept4(r3, &(0x7f0000001dc0)=@xdp, &(0x7f0000001e40)=0x80, 0x800) lsetxattr$trusted_overlay_opaque(&(0x7f0000001e80)='./file1\x00', &(0x7f0000001ec0), &(0x7f0000001f00), 0x2, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001f40)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001f80)) 10:39:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040}, 0x60004010) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0xc02, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x805) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xbd}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x3e9, 0x200, 0x70bd2d, 0x6, {0x1, 0x1, 0x2, 0x0, 0x5, 0x80000001, 0xffffffff, 0x1, 0x0, 0x8}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x48004}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x22802000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x3fa, 0x4, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x4000080) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x41}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40814}, 0x80) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = accept4(r1, &(0x7f0000000800)=@rc={0x1f, @none}, &(0x7f0000000880)=0x80, 0x1000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x12c, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfffb}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8001}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xd0}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x10, 0x3f6, 0x1, 0x70bd29, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}}, 0x840) 10:39:51 executing program 2: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=""/250, &(0x7f0000000200)=0xfa) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f8, 0x100, 0x70bd29, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24008010}, 0x4c001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x44091) lsetxattr$trusted_overlay_opaque(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x900, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x91) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$AUDIT_SET(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x3e9, 0x800, 0x70bd2b, 0x25dfdbfe, {0x40, 0x0, 0x2, 0xffffffffffffffff, 0x5, 0x0, 0xe7, 0x7fffffff, 0x0, 0x3f}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004004}, 0x2000d000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xcd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2ebe}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x24008001) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048055}, 0x44000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x20008000) [ 112.348198] audit: type=1400 audit(1745663991.673:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:39:51 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000084) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x244, 0xd, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x21c, 0x3, 0x0, 0x1, [{0x208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x3e, 0x1, "e28157b49277cc86b48b05011309ae65ca95cac7658c576f8e4bf45745010c188f7f62e56246a48b17cf8a929addaeb4fb4bd3561bc681a0f56c"}, @NFTA_DATA_VALUE={0x20, 0x1, "02f5f37a115cb30ab27a7eb5877b7b62225df7ece1912d489880d84f"}, @NFTA_DATA_VALUE={0x39, 0x1, "2677e4c7f996e492f23e7b2d58a9432b39209bea7d23e5177d47f1af09dafa8e9762bb774990e6b967cadabebab841ff27e3cd2feb"}, @NFTA_DATA_VALUE={0x1e, 0x1, "5ff43676b98a3c28cbbc326c14fbfe827e0c5a28166f4ed8ff05"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_DATA={0xe0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd9, 0x1, "2aab07302b04603b581137be31e89db2b1b5ec5dcd9170bbc9b6865229f7bfe93c5ab263fe2e35ee1ce6e7d6e32be9b24ef126e4881a2ac0849cd0f6ed28c57e1edf229e67252de8313295c89a5a428ac1b653c71bcd7504f364d0e6755e99eebd07d29284b8cb2ebd513296f3f662afbcfc8eb12ddd63eea335905960d9c742e5e465775805ae58dc035440f8a474be29a3be5ce87abcc1d7531dd90a64c3d868e859046c4c8d712a055de66b5f7a460f423ebc39a655fe49981ca71e51aa7f066246975f2077a892c2b8e7290c8019f6edca2d4e"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x4040) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x75}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000780)) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r1, &(0x7f00000007c0)=@caif=@rfm, &(0x7f0000000840)=0x80) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f0000000880)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000900), r0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x440}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4004000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r5, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2404c040}, 0x8801) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x104, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x2, 0x4}, {0x14}, {0x2, 0x1}, {0x5f, 0x5}, {0x8, 0x7}], "a4505aa7a76b6466"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x40}, {0xcc, 0x7}, {0x7, 0x3}, {0x1f, 0x5}, {0x25, 0x4}, {0x6, 0x1}, {0x80, 0x4}, {0x9, 0x7}, {0x28, 0x3}, {0x1f, 0x7}, {0x6, 0x3}, {0x9, 0x2}, {0x7f, 0x1}, {0xff, 0x1}, {0xfd, 0x6}], "112cd6474cb44a54"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x81, 0x1}, {0xa8, 0x7}, {0xb7, 0x1}, {0x1}, {0x7f, 0x1}, {0x5, 0x6}, {0x1, 0x6}, {0x40, 0x3}, {0x6, 0x6}, {0x0, 0x6}, {0x8, 0x2}, {0x6, 0x4}, {0x9, 0x6}, {0x0, 0x2}], "7b9a1c52e97b7318"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1, 0x7}, {0xfd, 0x1}, {0x3, 0x1}, {0x3, 0x7}, {0x40, 0x3}, {0x0, 0x2}, {0x8, 0x1}, {}, {0x14, 0x5}, {0xfb, 0x1}, {0x5, 0x4}, {0x28}], "27cb58fea16e42f6"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xfa}, {0x9, 0x6}, {0xcb, 0x6}, {0xc1, 0x4}, {0x0, 0x7}], "3f33f5352e146332"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x9, 0x6}, {0x1f}, {0x3f, 0x4}, {0xba, 0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x81, 0x4}, {0xff, 0x1}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x2}], "28fb6360e0bdb2d7"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x2, 0x5}, {0x6}, {0x4, 0x1}, {0x5c, 0x2}, {0x2}, {0x5, 0x4}, {0x20, 0x5}, {0x4}, {0x7, 0x3}, {0x2, 0x1}], "412bc064bc467e74"}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c800) write$tcp_congestion(r0, &(0x7f0000000f00)='cubic\x00', 0x6) 10:39:51 executing program 4: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/120) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000080)=""/164) r0 = semget$private(0x0, 0x4, 0x21) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000140)=""/4) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f0000000180)=""/150) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x100}, {0x0, 0x5}, {0x3, 0x0, 0x800}, {0x2, 0x4000, 0x800}, {0x0, 0x6, 0x800}, {0x2, 0x1, 0x800}], 0x6) semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000280)=""/54) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f00000002c0)=""/137) semctl$GETZCNT(0xffffffffffffffff, 0x2, 0xf, &(0x7f0000000380)=""/198) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000480)=""/45) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f00000004c0)=""/220) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000005c0)={{0x3, 0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0x2, 0x8c10}, 0x80000001, 0x21}) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000640)=[{0x1, 0x80, 0x800}, {0x1, 0x2, 0x800}, {0x1, 0x5, 0x1000}, {0x2, 0xf3, 0x1800}, {0x0, 0x6, 0x3000}, {0x4, 0x283f, 0x1000}, {0x4, 0x79, 0x1000}], 0x7, &(0x7f00000006c0)={r1, r2+10000000}) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000700)=""/1) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000740)) r3 = semget(0x3, 0x2, 0x80) semctl$IPC_INFO(r3, 0x2, 0x3, &(0x7f0000000780)=""/74) semget(0x0, 0x2, 0x0) 10:39:51 executing program 5: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v1={0x1000000, [{0x6, 0xc9e}]}, 0xc, 0x1) write$P9_RREADLINK(r0, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00') r1 = accept4(r0, &(0x7f0000000280)=@nl, &(0x7f0000000300)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044000}, 0x80) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xdaf1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) lgetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@random={'security.', 'security.capability\x00'}, &(0x7f0000000640)=""/180, 0xb4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) statx(r5, &(0x7f0000000740)='./file0\x00', 0x0, 0x2, &(0x7f0000000780)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000880)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) setxattr$trusted_overlay_redirect(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x8, 0x3) setxattr$trusted_overlay_redirect(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), &(0x7f0000000a00)='./file0/file0\x00', 0xe, 0x2) r6 = accept4(r4, 0x0, &(0x7f0000000a40), 0x80800) getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, &(0x7f0000000a80)=""/101, &(0x7f0000000b00)=0x65) lgetxattr(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=@random={'security.', ')/) (&^\x00'}, &(0x7f0000000bc0)=""/80, 0x50) 10:39:51 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@initdev, @dev, 0x0}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000800)={@empty, @private, 0x0}, &(0x7f0000000840)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f00000008c0)={0x92c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8000, 0x3, 0xfe, 0x7ff}, {0x1, 0x80, 0xe1, 0x8}, {0x500, 0x3, 0x3f, 0x40}, {0x6, 0x5, 0x40, 0x9}]}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4e2}}}]}}, {{0x8, 0x1, r3}, {0xd4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x2, 0x1, 0x1000}, {0x9, 0x0, 0x3f, 0x4}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd275}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x115a2e84}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0x4, 0x5, 0x600000}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x519}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x92c}, 0x1, 0x0, 0x0, 0x400c4}, 0x240080d4) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r12, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x48004}, 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0xcd6a07a51051004c}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r12, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x24008090) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r13, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x48, r14, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x5) r15 = accept4(r13, &(0x7f0000001680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001700)=0x80, 0x80800) sendmsg$TEAM_CMD_PORT_LIST_GET(r15, &(0x7f0000001c40)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001900)={0x2e8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffafb5}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7bc2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4d}}, {0x8}}}]}}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x8814}, 0x4) 10:39:51 executing program 7: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2400, 0x110) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xa00080, &(0x7f0000000140)={'trans=virtio,', {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@seclabel}, {@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}, {@seclabel}, {@measure}, {@appraise}, {@hash}, {@euid_gt={'euid>', 0xee01}}, {@seclabel}, {@seclabel}]}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x41ac81, 0x1) pipe2$9p(&(0x7f0000000240), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername(r0, &(0x7f0000000280)=@isdn, &(0x7f0000000300)=0x80) statfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/219) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050) semget$private(0x0, 0x2, 0x1b1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x10040, 0xa7) mkdirat(r1, &(0x7f0000000680)='./file0\x00', 0x4) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) lgetxattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=@random={'os2.', 'trusted.overlay.origin\x00'}, &(0x7f0000000880)=""/132, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) getpeername(r0, &(0x7f0000000980)=@nfc, &(0x7f0000000a00)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001140)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000000cc0)={0x424, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x401, 0x4, 0x1}, {0x7, 0x9, 0x3, 0x3}, {0xff, 0x0, 0x1, 0x2}, {0x2e, 0x0, 0x0, 0x1f}]}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x424}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 113.603524] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.609147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.614039] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.621863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.627920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.729527] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.739050] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.744849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.759179] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.787349] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.800277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.813195] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.841493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.854655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.859020] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.862839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.868770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.872349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.882077] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.902359] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.945504] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.963537] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.968746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.981013] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.994868] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.997165] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.002983] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.003057] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.012883] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.017269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.021693] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.022750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.023798] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.029529] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.035700] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.040450] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.049551] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.053418] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.058617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.070768] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.682296] Bluetooth: hci0: command tx timeout [ 115.873429] Bluetooth: hci1: command tx timeout [ 115.937661] Bluetooth: hci2: command tx timeout [ 116.002217] Bluetooth: hci3: command tx timeout [ 116.129337] Bluetooth: hci7: command tx timeout [ 116.193706] Bluetooth: hci6: command tx timeout [ 116.194691] Bluetooth: hci4: command tx timeout [ 116.195348] Bluetooth: hci5: command tx timeout [ 117.729847] Bluetooth: hci0: command tx timeout [ 117.922388] Bluetooth: hci1: command tx timeout [ 117.985160] Bluetooth: hci2: command tx timeout [ 118.049166] Bluetooth: hci3: command tx timeout [ 118.177728] Bluetooth: hci7: command tx timeout [ 118.241408] Bluetooth: hci4: command tx timeout [ 118.241915] Bluetooth: hci5: command tx timeout [ 118.242400] Bluetooth: hci6: command tx timeout [ 119.777277] Bluetooth: hci0: command tx timeout [ 119.969201] Bluetooth: hci1: command tx timeout [ 120.034361] Bluetooth: hci2: command tx timeout [ 120.097171] Bluetooth: hci3: command tx timeout [ 120.225407] Bluetooth: hci7: command tx timeout [ 120.289211] Bluetooth: hci6: command tx timeout [ 120.289658] Bluetooth: hci5: command tx timeout [ 120.290991] Bluetooth: hci4: command tx timeout [ 121.825178] Bluetooth: hci0: command tx timeout [ 122.017380] Bluetooth: hci1: command tx timeout [ 122.081293] Bluetooth: hci2: command tx timeout [ 122.145534] Bluetooth: hci3: command tx timeout [ 122.273195] Bluetooth: hci7: command tx timeout [ 122.338515] Bluetooth: hci4: command tx timeout [ 122.338996] Bluetooth: hci5: command tx timeout [ 122.339925] Bluetooth: hci6: command tx timeout [ 176.363479] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.366378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.367691] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.379444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.385351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.502364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.505531] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.506874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.511851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.513727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.520226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.533807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.548564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.568865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.587986] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.590387] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.595046] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.604308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.604562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.605879] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.609562] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.613287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.613379] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.615776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.618230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.619938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.624334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.624755] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.639426] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.649938] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.658641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.661267] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.663008] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.670807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.683287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.694946] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.730514] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.742570] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.757407] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.763168] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.466196] Bluetooth: hci0: command tx timeout [ 178.595212] Bluetooth: hci2: command tx timeout [ 178.721301] Bluetooth: hci3: command tx timeout [ 178.721981] Bluetooth: hci6: command tx timeout [ 178.722190] Bluetooth: hci1: command tx timeout [ 178.787810] Bluetooth: hci5: command tx timeout [ 178.789226] Bluetooth: hci4: command tx timeout [ 178.849561] Bluetooth: hci7: command tx timeout [ 180.513203] Bluetooth: hci0: command tx timeout [ 180.641249] Bluetooth: hci2: command tx timeout [ 180.769394] Bluetooth: hci6: command tx timeout [ 180.769879] Bluetooth: hci3: command tx timeout [ 180.770429] Bluetooth: hci1: command tx timeout [ 180.836148] Bluetooth: hci5: command tx timeout [ 180.836607] Bluetooth: hci4: command tx timeout [ 180.898279] Bluetooth: hci7: command tx timeout [ 182.561391] Bluetooth: hci0: command tx timeout [ 182.690207] Bluetooth: hci2: command tx timeout [ 182.817215] Bluetooth: hci3: command tx timeout [ 182.817698] Bluetooth: hci1: command tx timeout [ 182.818867] Bluetooth: hci6: command tx timeout [ 182.882355] Bluetooth: hci4: command tx timeout [ 182.882845] Bluetooth: hci5: command tx timeout [ 182.945385] Bluetooth: hci7: command tx timeout [ 184.609261] Bluetooth: hci0: command tx timeout [ 184.738230] Bluetooth: hci2: command tx timeout [ 184.865461] Bluetooth: hci3: command tx timeout [ 184.866499] Bluetooth: hci1: command tx timeout [ 184.866928] Bluetooth: hci6: command tx timeout [ 184.930232] Bluetooth: hci5: command tx timeout [ 184.930700] Bluetooth: hci4: command tx timeout [ 184.994123] Bluetooth: hci7: command tx timeout [ 238.572720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.578792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.581606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.587975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.595671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.656041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.674572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.677333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.679648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.685494] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.689576] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.695861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.699643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.700770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.721646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.876996] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.877686] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.883802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.914848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.918054] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.920655] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.924569] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.929846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.932782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.934031] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.935531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.937712] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.966058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.987438] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.991990] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.993868] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.001751] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.003851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.014510] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.027404] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.031996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.038291] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.059151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.063587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.082894] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.673284] Bluetooth: hci0: command tx timeout [ 240.803388] Bluetooth: hci2: command tx timeout [ 240.803417] Bluetooth: hci1: command tx timeout [ 241.058190] Bluetooth: hci3: command tx timeout [ 241.058221] Bluetooth: hci4: command tx timeout [ 241.122196] Bluetooth: hci5: command tx timeout [ 241.122383] Bluetooth: hci7: command tx timeout [ 241.123069] Bluetooth: hci6: command tx timeout [ 242.722172] Bluetooth: hci0: command tx timeout [ 242.849315] Bluetooth: hci2: command tx timeout [ 242.849810] Bluetooth: hci1: command tx timeout [ 243.105228] Bluetooth: hci4: command tx timeout [ 243.105734] Bluetooth: hci3: command tx timeout [ 243.170135] Bluetooth: hci6: command tx timeout [ 243.170618] Bluetooth: hci7: command tx timeout [ 243.171053] Bluetooth: hci5: command tx timeout [ 244.770124] Bluetooth: hci0: command tx timeout [ 244.897239] Bluetooth: hci1: command tx timeout [ 244.897751] Bluetooth: hci2: command tx timeout [ 245.153291] Bluetooth: hci3: command tx timeout [ 245.153797] Bluetooth: hci4: command tx timeout [ 245.217577] Bluetooth: hci7: command tx timeout [ 245.218061] Bluetooth: hci5: command tx timeout [ 245.218354] Bluetooth: hci6: command tx timeout [ 246.817199] Bluetooth: hci0: command tx timeout [ 246.945180] Bluetooth: hci1: command tx timeout [ 246.945684] Bluetooth: hci2: command tx timeout [ 247.201740] Bluetooth: hci4: command tx timeout [ 247.202513] Bluetooth: hci3: command tx timeout [ 247.265381] Bluetooth: hci6: command tx timeout [ 247.265871] Bluetooth: hci5: command tx timeout [ 247.266130] Bluetooth: hci7: command tx timeout [ 298.905136] syz-executor.7 (5424) used greatest stack depth: 24400 bytes left [ 301.178801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.186857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.190724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.198373] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.206739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.322373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.325999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.329665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.337799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.354781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.378971] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.382916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.385632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.390718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.392228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.397347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.401264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.405460] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.411866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.415945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.622718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.626690] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.636424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.647928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.661814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.689297] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.698646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.707578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.710138] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.711309] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.712361] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.720043] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.720638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.725594] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.748487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.779357] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.814619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.838532] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.844677] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.874764] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.265264] Bluetooth: hci0: command tx timeout [ 303.457304] Bluetooth: hci1: command tx timeout [ 303.521208] Bluetooth: hci3: command tx timeout [ 303.521855] Bluetooth: hci2: command tx timeout [ 303.841601] Bluetooth: hci4: command tx timeout [ 303.842791] Bluetooth: hci5: command tx timeout [ 304.033498] Bluetooth: hci6: command tx timeout [ 304.034432] Bluetooth: hci7: command tx timeout [ 305.313591] Bluetooth: hci0: command tx timeout [ 305.505752] Bluetooth: hci1: command tx timeout [ 305.571143] Bluetooth: hci3: command tx timeout [ 305.571594] Bluetooth: hci2: command tx timeout [ 305.889705] Bluetooth: hci5: command tx timeout [ 305.890234] Bluetooth: hci4: command tx timeout [ 306.081219] Bluetooth: hci6: command tx timeout [ 306.081690] Bluetooth: hci7: command tx timeout [ 307.361159] Bluetooth: hci0: command tx timeout [ 307.553605] Bluetooth: hci1: command tx timeout [ 307.617372] Bluetooth: hci2: command tx timeout [ 307.617829] Bluetooth: hci3: command tx timeout [ 307.937699] Bluetooth: hci4: command tx timeout [ 307.938833] Bluetooth: hci5: command tx timeout [ 308.129184] Bluetooth: hci7: command tx timeout [ 308.129650] Bluetooth: hci6: command tx timeout [ 309.409187] Bluetooth: hci0: command tx timeout [ 309.601166] Bluetooth: hci1: command tx timeout [ 309.665210] Bluetooth: hci2: command tx timeout [ 309.665683] Bluetooth: hci3: command tx timeout [ 309.985403] Bluetooth: hci5: command tx timeout [ 309.985893] Bluetooth: hci4: command tx timeout [ 310.177439] Bluetooth: hci6: command tx timeout [ 310.177910] Bluetooth: hci7: command tx timeout [ 363.514940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.520373] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.525174] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.533855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.542686] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.706648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.710775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.713671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.721863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.727759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.766608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.769796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.777672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.786803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.793608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.915568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.930702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.960194] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.975070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.986588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.994202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.996703] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.006138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.010840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.040719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.090443] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.100984] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.115011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.128642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.168956] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.173477] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.178045] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.190198] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.200674] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.227294] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.234370] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.273160] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.291364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.293561] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.308818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.602257] Bluetooth: hci0: command tx timeout [ 365.793392] Bluetooth: hci1: command tx timeout [ 365.858215] Bluetooth: hci2: command tx timeout [ 366.113670] Bluetooth: hci4: command tx timeout [ 366.177321] Bluetooth: hci3: command tx timeout [ 366.241215] Bluetooth: hci5: command tx timeout [ 366.369171] Bluetooth: hci7: command tx timeout [ 366.433256] Bluetooth: hci6: command tx timeout [ 367.651173] Bluetooth: hci0: command tx timeout [ 367.842248] Bluetooth: hci1: command tx timeout [ 367.906238] Bluetooth: hci2: command tx timeout [ 368.161767] Bluetooth: hci4: command tx timeout [ 368.225188] Bluetooth: hci3: command tx timeout [ 368.293144] Bluetooth: hci5: command tx timeout [ 368.417555] Bluetooth: hci7: command tx timeout [ 368.482281] Bluetooth: hci6: command tx timeout [ 369.697194] Bluetooth: hci0: command tx timeout [ 369.890110] Bluetooth: hci1: command tx timeout [ 369.954447] Bluetooth: hci2: command tx timeout [ 370.210168] Bluetooth: hci4: command tx timeout [ 370.273202] Bluetooth: hci3: command tx timeout [ 370.337394] Bluetooth: hci5: command tx timeout [ 370.467193] Bluetooth: hci7: command tx timeout [ 370.529610] Bluetooth: hci6: command tx timeout [ 371.746288] Bluetooth: hci0: command tx timeout [ 371.937147] Bluetooth: hci1: command tx timeout [ 372.002410] Bluetooth: hci2: command tx timeout [ 372.258229] Bluetooth: hci4: command tx timeout [ 372.322450] Bluetooth: hci3: command tx timeout [ 372.387107] Bluetooth: hci5: command tx timeout [ 372.514429] Bluetooth: hci7: command tx timeout [ 372.577357] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 10:45:01 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff818bb9bc RDX=ffff888023315340 RSI=0000000000000145 RDI=ffff88802f1bfc48 RBP=ffff88802f1bfc48 RSP=ffff88802f1bfac0 R8 =0000000000000002 R9 =0000000000000001 R10=0000000000000003 R11=0000000000000000 R12=0000000000000145 R13=0000000000000145 R14=0000000000000003 R15=ffff88802f1bfd90 RIP=ffffffff84ac6880 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ffa88901540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffa88a61270 CR3=000000002b314000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffff11001ac8e84 RBX=0000006242b75ac5 RCX=ffff88806cf28200 RDX=ffff888035635340 RSI=ffffffff81615b32 RDI=ffff88800d647420 RBP=ffff88800d647400 RSP=ffff88806cf08e28 R8 =0000000000000000 R9 =fffffbfff0c81d82 R10=0000000000000004 R11=ffff88806cf37018 R12=ffff88806cf28080 R13=ffff88806cf28200 R14=1839f95605c25b68 R15=dffffc0000000000 RIP=ffffffff81615b42 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff05c4506f4 CR3=0000000009ed4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000000000 XMM02=0000000000ff00000000000000000000 XMM03=00ff0000000000000000ff0000000000 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000