Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:45262' (ECDSA) to the list of known hosts. 2025/04/27 07:21:45 fuzzer started 2025/04/27 07:21:45 dialing manager at localhost:46629 syzkaller login: [ 94.361949] cgroup: Unknown subsys name 'net' [ 94.488493] cgroup: Unknown subsys name 'cpuset' [ 94.528553] cgroup: Unknown subsys name 'rlimit' 2025/04/27 07:22:02 syscalls: 2214 2025/04/27 07:22:02 code coverage: enabled 2025/04/27 07:22:02 comparison tracing: enabled 2025/04/27 07:22:02 extra coverage: enabled 2025/04/27 07:22:02 setuid sandbox: enabled 2025/04/27 07:22:02 namespace sandbox: enabled 2025/04/27 07:22:02 Android sandbox: enabled 2025/04/27 07:22:02 fault injection: enabled 2025/04/27 07:22:02 leak checking: enabled 2025/04/27 07:22:02 net packet injection: enabled 2025/04/27 07:22:02 net device setup: enabled 2025/04/27 07:22:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 07:22:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 07:22:02 USB emulation: enabled 2025/04/27 07:22:02 hci packet injection: enabled 2025/04/27 07:22:02 wifi device emulation: enabled 2025/04/27 07:22:02 802.15.4 emulation: enabled 2025/04/27 07:22:02 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 07:22:03 starting 8 fuzzer processes 07:22:03 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x218, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_DEVKEY={0x10c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffe}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}]}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3000000}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0xa4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x54eb5f69}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x1}, 0x24048000) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000005c0)=0x7fff, &(0x7f0000000600)=0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/image_size', 0x311080, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r3, 0x0, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x44000) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfe, "", ["", "", ""]}, 0x10}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x30000000) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000b00), &(0x7f0000000b40)=0x30) r4 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000c40)={'ip6_vti0\x00', &(0x7f0000000bc0)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x2, 0x3, 0xe, @mcast1, @loopback, 0x80, 0x7840, 0x74c5b346, 0x1f}}) getsockopt$inet6_mreq(r2, 0x29, 0x6, &(0x7f0000000d40)={@initdev, 0x0}, &(0x7f0000000d80)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e80)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000001140)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000ec0)={0x218, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40014}, 0x20000000) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000011c0)) 07:22:03 executing program 2: fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x3, 'caif0\x00', {0x9d36}, 0x1000}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x8000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000140)={0x1, 0x1, 0xfffffffffffffff8}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, 0x0, 0x508, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x8}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xcec}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x42001) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=0x1000) sendmsg$inet(r0, &(0x7f0000001840)={&(0x7f0000001380)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000013c0)="e3157bef5e519dbcb72b23618d614db4f8c980209eed0a59174bbb0776207d301c543d450f58587cc156e878ba2003e03cbcd52289ca5259a02f07606243a746c2e8ddfe417ab5e3d92a920dcb54d69aaf02634836f6a83f1af9820d54faeb86655c2ed8c3bb2464f4f13e992f02f2aee20638deef9f97ac0fc7651669ff33a9fb05294d1f24f34686c414937980b4d7fff4f8d70df5473f680ff5cb", 0x9c}, {&(0x7f0000001480)="eb9fb21c263680863daf1410d524c6821b9022492e49cc378e553bf65cf34e3f6c3c5b016027f1de86ef97ccd0a4447ba7bf6c5d4560f763762db581430c3759a0c7d3812d170784eb761c261c9c2c27c4544c2836de8e18ccef892063ab567b06e5ad35bcd9c2f9d477d096697e542e5d4426bcc79492fa7c68eea0fbdf7018005c040072fe0b0f83d6fe397b82a2b8af54043f83a04a85d395c509a00511832bf5bfc561f429f8a6614e2b453ad029c4a481688f14c1f60855ecff211c1e00f52b9eeef804ba6fef3dac00ebca2c97186bbafcabbdc9e75f02337880f34e1fbc47c6c15066", 0xe6}, {&(0x7f0000001580)="609ad0e08b834586fc480b5f454267b3c463cb0d3656c19e363c46ac8a7498a7a440048503842f73d2d81d67d7d4a7ebac51c2ba375928b3b28ab086e3046c158871e8d38aeaa57fd4387f2095c4635866b30f0af5843df67368d5798a6ae48bd47ab5284b6b5f029a436ed1ae343b13c70e7def39833b966fc5d04f550bfc531b1ae588f984625a967598ceb4ea33219fc85a3a17ab0385a00de2ba6c8b798b4f61c6ad58d643687fe8a10c775ec9a8915c79998634244ac26c2295e231ca956f25846142bb59aa576d0f2d892dc6", 0xcf}, {&(0x7f0000001680)="efdb1d116c0cd92071c7e0b17dae34784d8c8269d3f9bfacbe8de60f13863bf8b4770b485db36ca9ff0c041645a9b6ebab32a0f72e5b791de84a1ab9370afe67fb332332c9086eda464dd9fb2641dd567196620cf070a09a857ca233b3b3a0264d5880ef0b95cf00b0e123fc399bdceaebf2bd29070abaeb699f257ab17cdced8751d3be94a084fd859f45890aea", 0x8e}, {&(0x7f0000001740)="888ba95b3ceb6b40e26ed1aa4c9aca46eed53257ffb5b669a5513472eb28d8e3a1b5bb9fcbb8b8f3191b8c9a518e1176d8d639f19fb598d6bfc0927022b96b98fe7f9352c3f1fe", 0x47}], 0x5}, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000001880), r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r1, {0xfffffffd}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000001b40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001980)={0x14c, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x7fff}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x2dc0}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x8d}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x76}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x4040001) sync_file_range(r0, 0x3, 0x400, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) fremovexattr(r5, &(0x7f0000001b80)=@random={'btrfs.', '/dev/bsg\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000001c40)={'ip6_vti0\x00', &(0x7f0000001bc0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x1f, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x7800, 0x8, 0x1, 0x8000}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001d00)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000001e00)=0xe8) lsetxattr$system_posix_acl(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)='system.posix_acl_default\x00', &(0x7f0000001e40)={{}, {0x1, 0x6}, [{0x2, 0x7, r8}], {0x4, 0x1}, [{0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x3}, {0x20, 0x4}}, 0x3c, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002080)={0x1b0, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7069929a7579f73a}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x40) 07:22:03 executing program 1: rmdir(&(0x7f0000000000)='./file0\x00') mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)={0xb2, 0x29, 0x2, {0x7, [{{0x8, 0x1}, 0x80, 0x81, 0x7, './file0'}, {{0x1, 0x1, 0x1}, 0x1, 0x3, 0x7, './file1'}, {{0x20, 0x1, 0x8}, 0xfffffffffffffffb, 0x8d, 0x7, './file0'}, {{0x0, 0x1, 0x2}, 0x7f, 0x3, 0xd, './file0/file0'}, {{0x80, 0x0, 0x8}, 0x3870, 0x2, 0xd, './file0/file0'}]}}, 0xb2) lgetxattr(&(0x7f0000000200)='./file2\x00', &(0x7f0000000240)=@random={'security.', 'trusted.overlay.redirect\x00'}, &(0x7f0000000280)=""/43, 0x2b) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x101080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x7}}, './file2\x00'}) r3 = getuid() syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x400, 0x6, &(0x7f0000000740)=[{&(0x7f0000000400)="0dcd8d3a19ac550f6ec84360b464ce2361cce6bd4f97c72e27fba7c8ca81154a564fc73d506a8ed56a316d96e1b4ce6da194a098a154882c1c207bea470979793084c67f0018e0c6f6e56bc9895e3ae00f63a30a96c04eb925c363e9b080bed7730d153567c5baa52216562bf272cd46170786390f5684ebc950d1e60429d722", 0x80, 0xffff}, {&(0x7f0000000480)="c8de03dc10e954d74168357e05b29e460583795559f1b625ae8f4aba5a55989f0bb6cc53fdfb704ff90e33be6b703fd72c0672376fd43b9f13acf7c60998280c52c2617f26a75ce58a2ce07f5d0d6682ae6cd3c8282103f145604729de27639623d5d837218feca455dc34834e7faf3548ebc090c50610b61a77af82a357593d4c8161f00623f125e9f365b6d6f6bb3ec65d02f5ed34b9cecf", 0x99, 0x10000}, {&(0x7f0000000540)="287af98719c3da9c754097cc5bbbdc2d344de7d67a37ff78df081c5f2971e08905e497bde79da3e73f6d6d841ca9d19ebd2e88c6191816b1c136dceef05e4c1aa44c7bfe20e4828d645a9f4f67bc526500c5aa35a5a712cab46d54f5d7b049454bb19fd67bbd50f88060cef12e46d86e8134cad838e7bc70f57b485a72ed72826e352e50044f8e5b2f2a7bb6deba5cad056b64e1f6c3a7e688e43be0d9d2e749d0e227e2db41df59701fa4d44f922c62401a1c73c9a2061f1745bd0e45228ab34f430127c3dc57be4c71a1870d6d811560418c61902329ebfcf580ee49d87252caa847e8c12f3435aa5a72a52485132a922514b968250c", 0xf7, 0x9}, {&(0x7f0000000640)="ebe541667808529fb42bc20e3fa025c728d43bad4a6ebec8215386bf5e45ea50551365b3a2c1f7", 0x27}, {&(0x7f0000000680)="3a255bc83fe34318cbb52bde01ebc37cf2e4ed315321fdac28e6fed40159fd0b15ec0614e52661c655", 0x29, 0x7}, {&(0x7f00000006c0)="b9982ae946b49317d73947ab6c09f68111f82c338d552a1806ff83d0f9994194e713b1a2f8e06eaae89c8bc606b6ca027f36515c32eef306c31265c4c2f5e420d8f510889f7738abf9fd49e1f5df6827aa29a4cd4efab94ad357324360958a256d1871303e5003704a0a0b3c9e1df85c554aa603", 0x74, 0x20}], 0x210000, &(0x7f0000000800)={[{@uni_xlate}, {@nonumtail}, {@uni_xlateno}, {@fat=@quiet}, {@numtail}, {@rodir}], [{@subj_user={'subj_user', 0x3d, '+.]'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) setxattr$security_capability(&(0x7f00000008c0)='./file2/file0\x00', &(0x7f0000000900), &(0x7f0000000940)=@v1={0x1000000, [{0x80000000, 0xffff8000}]}, 0xc, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)=0xc) fchownat(r1, &(0x7f0000000980)='./file2/file0/file0\x00', r3, r4, 0x400) renameat(r1, &(0x7f0000000c00)='./file3\x00', r2, &(0x7f0000000c40)='./file0/file0\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x81}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0/file0\x00'}) r6 = signalfd(r5, &(0x7f0000000d00)={[0x245d26e4]}, 0x8) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x38, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x43}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000091) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x80, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, &(0x7f0000000e80)={0xa8, 0x9, 0x0, 0x2, 0x0, [0x4, 0x1000, 0x80000000, 0x35dbd26a]}) 07:22:03 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\x00'}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x7, 0x7, 0x4}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0xffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000240)={0x2, 'wg2\x00', {0x3a}, 0x7}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) ppoll(&(0x7f0000000300)=[{r7, 0x142}], 0x1, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xba]}, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r9, 0x30, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x61}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r9, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4884}, 0x0) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000600)) [ 112.407225] audit: type=1400 audit(1745738523.959:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:22:03 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r0, 0x101, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x336}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b1fc8f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x5000}, 0x4008044) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1b4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80bc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x831}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @remote, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @private0, 0x728f}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x200080c0}, 0x8014264dafa4ca79) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r1, 0xa0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x52}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x3}}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, 0x2, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xffffff80}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd408}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88d3}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x94, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008052}, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x9, 0x6, 0x0, 0x70e, 0x3}, 0x7) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r3, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x10001}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b40), 0xa100, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x10, 0x18, {0xff, @bearer=@l2={'ib', 0x3a, 'wg0\x00'}}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x800) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x290400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x90, r0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x71}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6e}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20000850) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000f40)={0x2, 0x4}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000001040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0xb582, 0xef0c, 0xaa7}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20044840}, 0xc891) 07:22:04 executing program 5: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}}, 0x20004000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x3e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048841}, 0x7b06a4a9bcab45bd) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x242000, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x1b}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9e}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20048004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r0, 0xd00, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x35}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1000, 0x7f}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000600)={0x8, 0x27, '\x00', [@ra={0x5, 0x2, 0x7fff}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0xf7, 0x4, "9e1455a1"}, @ra={0x5, 0x2, 0x52}, @calipso={0x7, 0x40, {0x0, 0xe, 0x80, 0x7ef, [0x101, 0x80, 0x4, 0x9, 0xfffffffffffffb53, 0x9, 0x12b9]}}, @enc_lim={0x4, 0x1, 0x81}, @generic={0x20, 0xce, "1aa4e9beebc4ac2e25f288c4a4a319875e49232b0dd6dac92b00e8d4b67ad3a064aefc69cfc9bad492023e4dcbea18efdf5dabe0536fa768354dc19f7af1c19b1ca5d237937db6f6ae3a55a04b2968ad125b232bbc63f5a9a332f29a9a0c86cde275d1e33a381cc74a8254f1098e879eee0c0460a52ab0ddb894d4e017afd3a530cc5e0c9d5419f15ead5a214137a6993ad06916427cd10b5a465e5e2025dde69b7aacdba5ea583401379a352c355052b2b515924debb192add1e646f7da3acf46ac4e3fa28ac84605fb2feed63b"}, @pad1]}, 0x140) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000740)) r4 = dup3(0xffffffffffffffff, r1, 0x80000) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d4}, 0x4008001) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000880)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000900), r2) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r6, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x7c, r0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000b80)=@generic={0x2, 0x9, 0x3}) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, 0x7, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x404a050}, 0x4008845) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x204, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x70, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "397a417da5decd21d3dc5f2108859cbb"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a2cea2df224425b50b691637e2572ed7b1cdc7979f4b3871e4d67e4805ba6b11"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b49ef47a3fc3c9760b2f5a6791d107be65fff1b34fabacb7d510060ab21aa77e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_SEC_KEY={0x14c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c23df66e97b99e18cf31aa754a73cead"}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6c89c37e627bb5aa3336edb855a810f6"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e4ad4635c7cd1540f4a01a0dbf45739e"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "42c332e99defb0162eb7901889743b150406de49d37adcea0965a9caac03c0c2"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x204}, 0x1, 0x0, 0x0, 0x80000}, 0x1) 07:22:04 executing program 6: ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0xf3e, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x10000003}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xccb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f00000004c0)="b19b1d4e79677ee850a0bec90a9c78ea0a5ff3fc1c97bd06a61e89c92a9693f86893e21b12ec7cfdf009ac7e2b4b76988f363faa29c457411eaaa96f1b60993a9ed5d6daa69c53b81572f7a11647b9") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0xd0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x4042800}, 0x40) r5 = timerfd_create(0x1, 0x80000) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000007c0)={{0xff, 0xa27}, 0x100, './file0\x00'}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000900), &(0x7f0000000940)={0x0, 0xfb, 0x7a, 0x1, 0xff, "b31f8ad0f323818b82ce018553e7b479", "b2ba2f1e5abd81a0176aedf7bf2998a1a455a346f0bd2be8d5a04fe76dd85322d0ca1dc989c248f61fd96bccd998e7d305548eea8eda64007bea0425edc5c74491e3a1d76b66a60515d4dcc00c9366d72ea20c406842c3c17d585215eecccc1e186ee832ea"}, 0x7a, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb8, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x4}, {0x1c, 0x6}, {0x3f, 0x6}, {0x6, 0x5}, {0x1f, 0x1}, {0x8, 0x4}, {0x9, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x2}, {0x3a, 0x7}, {0x6, 0x6}, {0x4, 0x5}, {0x7f, 0x1}, {0x2f, 0x5}], "ce26512868cd5f34"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x0, 0x5}], "bd99e695a192d436"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x1, 0x4}, {0x1f, 0x1}, {0x0, 0x2}, {0x1f, 0x4}, {0x40, 0x6}, {0x3f}, {0x0, 0x4}], "383c308e97d3d84e"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x0, 0x4}, {0x7f}, {0xff, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0xb5, 0x7}, {0xff, 0x4}, {0x0, 0x7}, {0x3, 0x7}, {0x5, 0x2}, {0x4}, {0x2a, 0x3}, {0x7, 0x6}, {0x9, 0x5}, {0xff, 0x3}, {0x9, 0x3}, {0x2, 0x1}, {0x4, 0x6}, {0x29, 0x2}, {0x0, 0x5}], "52bd0c3cee4fc930"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1, 0x6}, {0xc, 0x4}, {0x3, 0x6}, {0x7, 0x5}, {0xf9, 0x5}, {0x20}], "796756ccebb6021b"}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x90, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x81}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4d4d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x244}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf52}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x200}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8}]}, 0x90}}, 0x10) 07:22:04 executing program 7: close(0xffffffffffffffff) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) r0 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x7, 0x0) fadvise64(r0, 0x7fffffff, 0x0, 0x0) unshare(0x20000080) arch_prctl$ARCH_GET_CPUID(0x1011) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048015}, 0x20004044) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000002c0)) lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='trusted.overlay.nlink\x00', &(0x7f0000000380)=""/227, 0xe3) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r4 = gettid() pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x190, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = openat2(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x480, 0x0, 0x2}, 0x18) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000800)={{r6}, 0x10001, 0xffffffffffff0001, 0x6}) r8 = getpgid(r4) pidfd_open(r8, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x124, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9c16}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x90f6}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x124}, 0x1, 0x0, 0x0, 0x110}, 0x4000800) [ 113.860053] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.866581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.871556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.880787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.886096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.943348] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.961476] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.964329] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.973978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.983759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.987505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.992649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.994836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.000846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.015714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.021799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.036916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.041983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.061606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.070096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.084682] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.094647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.109886] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.116602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.123449] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.148339] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.152602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.156434] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.160839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.160958] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.162591] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.170807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.172832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.179722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.191692] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.202994] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.205975] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.216351] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.220252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.223428] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.939962] Bluetooth: hci0: command tx timeout [ 116.068327] Bluetooth: hci1: command tx timeout [ 116.131265] Bluetooth: hci2: command tx timeout [ 116.196165] Bluetooth: hci4: command tx timeout [ 116.259292] Bluetooth: hci3: command tx timeout [ 116.259333] Bluetooth: hci7: command tx timeout [ 116.323245] Bluetooth: hci5: command tx timeout [ 116.323272] Bluetooth: hci6: command tx timeout [ 117.987893] Bluetooth: hci0: command tx timeout [ 118.116345] Bluetooth: hci1: command tx timeout [ 118.179242] Bluetooth: hci2: command tx timeout [ 118.244241] Bluetooth: hci4: command tx timeout [ 118.309358] Bluetooth: hci3: command tx timeout [ 118.309509] Bluetooth: hci7: command tx timeout [ 118.371651] Bluetooth: hci5: command tx timeout [ 118.371687] Bluetooth: hci6: command tx timeout [ 120.035645] Bluetooth: hci0: command tx timeout [ 120.164965] Bluetooth: hci1: command tx timeout [ 120.227490] Bluetooth: hci2: command tx timeout [ 120.291817] Bluetooth: hci4: command tx timeout [ 120.357220] Bluetooth: hci7: command tx timeout [ 120.357550] Bluetooth: hci3: command tx timeout [ 120.419286] Bluetooth: hci5: command tx timeout [ 120.420236] Bluetooth: hci6: command tx timeout [ 122.083407] Bluetooth: hci0: command tx timeout [ 122.214434] Bluetooth: hci1: command tx timeout [ 122.277180] Bluetooth: hci2: command tx timeout [ 122.340634] Bluetooth: hci4: command tx timeout [ 122.403258] Bluetooth: hci3: command tx timeout [ 122.405250] Bluetooth: hci7: command tx timeout [ 122.467213] Bluetooth: hci6: command tx timeout [ 122.468769] Bluetooth: hci5: command tx timeout [ 177.036800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.039985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.042310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.048484] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.052596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.074517] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.080053] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.082288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.094332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.097633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.098711] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.113901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.115246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.127322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.129496] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.274489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.278576] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.287862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.295857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.308396] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.318338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.323578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.333362] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.346978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.359110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.365589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.367730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.372679] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.375919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.379273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.390497] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.425933] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.431330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.457084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.487794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.492521] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.505556] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.529106] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.595576] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.616634] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.172290] Bluetooth: hci2: command tx timeout [ 179.173647] Bluetooth: hci1: command tx timeout [ 179.174287] Bluetooth: hci0: command tx timeout [ 179.427436] Bluetooth: hci5: command tx timeout [ 179.427775] Bluetooth: hci3: command tx timeout [ 179.491709] Bluetooth: hci4: command tx timeout [ 179.619481] Bluetooth: hci6: command tx timeout [ 179.747242] Bluetooth: hci7: command tx timeout [ 181.219270] Bluetooth: hci1: command tx timeout [ 181.219309] Bluetooth: hci0: command tx timeout [ 181.219750] Bluetooth: hci2: command tx timeout [ 181.475670] Bluetooth: hci3: command tx timeout [ 181.476225] Bluetooth: hci5: command tx timeout [ 181.539250] Bluetooth: hci4: command tx timeout [ 181.668176] Bluetooth: hci6: command tx timeout [ 181.795237] Bluetooth: hci7: command tx timeout [ 183.267242] Bluetooth: hci2: command tx timeout [ 183.267753] Bluetooth: hci0: command tx timeout [ 183.267911] Bluetooth: hci1: command tx timeout [ 183.524208] Bluetooth: hci5: command tx timeout [ 183.524301] Bluetooth: hci3: command tx timeout [ 183.587348] Bluetooth: hci4: command tx timeout [ 183.716184] Bluetooth: hci6: command tx timeout [ 183.844782] Bluetooth: hci7: command tx timeout [ 185.317358] Bluetooth: hci2: command tx timeout [ 185.317852] Bluetooth: hci1: command tx timeout [ 185.318093] Bluetooth: hci0: command tx timeout [ 185.571245] Bluetooth: hci3: command tx timeout [ 185.571720] Bluetooth: hci5: command tx timeout [ 185.635365] Bluetooth: hci4: command tx timeout [ 185.763231] Bluetooth: hci6: command tx timeout [ 185.892412] Bluetooth: hci7: command tx timeout [ 239.284776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.289721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.293115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.297575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.301005] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.302699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.307751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.321015] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.332421] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.334114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.426746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.431051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.434471] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.435696] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.439795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.442512] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.446544] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.466676] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.475584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.487431] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.583705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.590541] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.595479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.632880] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.674898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.676811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.694744] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.696300] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.697163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.698627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.717601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.725294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.727525] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.733489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.736382] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.813574] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.824165] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.825599] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.838196] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.877444] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.379371] Bluetooth: hci1: command tx timeout [ 241.379409] Bluetooth: hci0: command tx timeout [ 241.507249] Bluetooth: hci3: command tx timeout [ 241.571224] Bluetooth: hci2: command tx timeout [ 241.827331] Bluetooth: hci5: command tx timeout [ 241.827615] Bluetooth: hci4: command tx timeout [ 242.019287] Bluetooth: hci6: command tx timeout [ 242.339268] Bluetooth: hci7: command tx timeout [ 243.427274] Bluetooth: hci1: command tx timeout [ 243.429166] Bluetooth: hci0: command tx timeout [ 243.555362] Bluetooth: hci3: command tx timeout [ 243.619246] Bluetooth: hci2: command tx timeout [ 243.875201] Bluetooth: hci4: command tx timeout [ 243.876247] Bluetooth: hci5: command tx timeout [ 244.067356] Bluetooth: hci6: command tx timeout [ 244.387392] Bluetooth: hci7: command tx timeout [ 245.475245] Bluetooth: hci0: command tx timeout [ 245.475733] Bluetooth: hci1: command tx timeout [ 245.603419] Bluetooth: hci3: command tx timeout [ 245.667187] Bluetooth: hci2: command tx timeout [ 245.923277] Bluetooth: hci5: command tx timeout [ 245.923302] Bluetooth: hci4: command tx timeout [ 246.115208] Bluetooth: hci6: command tx timeout [ 246.435358] Bluetooth: hci7: command tx timeout [ 247.523263] Bluetooth: hci1: command tx timeout [ 247.523315] Bluetooth: hci0: command tx timeout [ 247.651759] Bluetooth: hci3: command tx timeout [ 247.716384] Bluetooth: hci2: command tx timeout [ 247.971277] Bluetooth: hci4: command tx timeout [ 247.971719] Bluetooth: hci5: command tx timeout [ 248.164401] Bluetooth: hci6: command tx timeout [ 248.483210] Bluetooth: hci7: command tx timeout [ 299.372808] syz-executor.3 (5375) used greatest stack depth: 24592 bytes left [ 301.762559] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.766060] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.769484] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.781848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.785988] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.789954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.795618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.818017] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.828413] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.839191] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.841912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.844706] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.845682] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.852069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.855330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.898283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.905095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.909379] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.930407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.939029] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.016155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.028635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.034360] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.049536] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.057795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.119348] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.127843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.134114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.143523] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.147768] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.160019] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.196446] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.209362] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.220995] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.222673] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.243723] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.255107] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.261628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.287103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.311166] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.844448] Bluetooth: hci0: command tx timeout [ 303.908247] Bluetooth: hci1: command tx timeout [ 303.909022] Bluetooth: hci2: command tx timeout [ 304.036511] Bluetooth: hci3: command tx timeout [ 304.099209] Bluetooth: hci4: command tx timeout [ 304.291236] Bluetooth: hci5: command tx timeout [ 304.355219] Bluetooth: hci6: command tx timeout [ 304.420493] Bluetooth: hci7: command tx timeout [ 305.892258] Bluetooth: hci0: command tx timeout [ 305.956246] Bluetooth: hci1: command tx timeout [ 305.956342] Bluetooth: hci2: command tx timeout [ 306.084788] Bluetooth: hci3: command tx timeout [ 306.147420] Bluetooth: hci4: command tx timeout [ 306.341219] Bluetooth: hci5: command tx timeout [ 306.405666] Bluetooth: hci6: command tx timeout [ 306.468615] Bluetooth: hci7: command tx timeout [ 307.939329] Bluetooth: hci0: command tx timeout [ 308.003215] Bluetooth: hci2: command tx timeout [ 308.003230] Bluetooth: hci1: command tx timeout [ 308.131479] Bluetooth: hci3: command tx timeout [ 308.197187] Bluetooth: hci4: command tx timeout [ 308.387408] Bluetooth: hci5: command tx timeout [ 308.451285] Bluetooth: hci6: command tx timeout [ 308.515299] Bluetooth: hci7: command tx timeout [ 309.987455] Bluetooth: hci0: command tx timeout [ 310.051188] Bluetooth: hci1: command tx timeout [ 310.051633] Bluetooth: hci2: command tx timeout [ 310.179825] Bluetooth: hci3: command tx timeout [ 310.244369] Bluetooth: hci4: command tx timeout [ 310.436345] Bluetooth: hci5: command tx timeout [ 310.499217] Bluetooth: hci6: command tx timeout [ 310.563197] Bluetooth: hci7: command tx timeout [ 364.089779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.100594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.109829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.120078] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.126407] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.170335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.173315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.178663] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.186652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.192617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.340185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.349054] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.365014] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.367680] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.370959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.377325] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.384569] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.395398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.433379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.465813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.523263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.534550] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.537061] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.549442] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.555308] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.571058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.573658] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.579462] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.581095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.583379] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.634074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.639562] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.646705] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.660342] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.670731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.682712] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.701517] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.704010] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.721530] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.735016] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.181527] Bluetooth: hci0: command tx timeout [ 366.243818] Bluetooth: hci1: command tx timeout [ 366.500218] Bluetooth: hci3: command tx timeout [ 366.564252] Bluetooth: hci2: command tx timeout [ 366.691233] Bluetooth: hci5: command tx timeout [ 366.756384] Bluetooth: hci4: command tx timeout [ 366.819331] Bluetooth: hci7: command tx timeout [ 366.883558] Bluetooth: hci6: command tx timeout [ 368.227245] Bluetooth: hci0: command tx timeout [ 368.292667] Bluetooth: hci1: command tx timeout [ 368.548165] Bluetooth: hci3: command tx timeout [ 368.611473] Bluetooth: hci2: command tx timeout [ 368.739253] Bluetooth: hci5: command tx timeout [ 368.803272] Bluetooth: hci4: command tx timeout [ 368.868501] Bluetooth: hci7: command tx timeout [ 368.931769] Bluetooth: hci6: command tx timeout [ 370.276984] Bluetooth: hci0: command tx timeout [ 370.339216] Bluetooth: hci1: command tx timeout [ 370.595431] Bluetooth: hci3: command tx timeout [ 370.661173] Bluetooth: hci2: command tx timeout [ 370.787224] Bluetooth: hci5: command tx timeout [ 370.851232] Bluetooth: hci4: command tx timeout [ 370.915805] Bluetooth: hci7: command tx timeout [ 370.979181] Bluetooth: hci6: command tx timeout [ 372.323331] Bluetooth: hci0: command tx timeout [ 372.388417] Bluetooth: hci1: command tx timeout [ 372.644482] Bluetooth: hci3: command tx timeout [ 372.708484] Bluetooth: hci2: command tx timeout [ 372.835384] Bluetooth: hci5: command tx timeout [ 372.900232] Bluetooth: hci4: command tx timeout [ 372.964196] Bluetooth: hci7: command tx timeout [ 373.028450] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:27:14 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88801603fd90 RCX=ffffffff818cc1c2 RDX=1ffffd400003bcb0 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffea00001de580 RSP=ffff88801603fb80 R8 =0000000000000000 R9 =fffff9400003bcb0 R10=ffffea00001de587 R11=0000000000000000 R12=000000000000001c R13=0000000000000001 R14=ffff888015504700 R15=ffff88800bd05d60 RIP=ffffffff8172e634 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd692cff310 CR3=000000000b2ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000014c RBX=0000000000000080 RCX=0000000000000007 RDX=0000000000000007 RSI=ffff888033bd2618 RDI=ffff888033bd1bc0 RBP=ffff888033bd1bc0 RSP=ffff8880265bf860 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff8640ec17 R11=00000000ffffffff R12=0000000000000007 R13=ffff888033bd2618 R14=ffff888033bd2618 R15=ffff88800d89c250 RIP=ffffffff81515854 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2bea7c2540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc9c5fbfe0 CR3=000000002b022000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000