Warning: Permanently added '[localhost]:57045' (ECDSA) to the list of known hosts. 2025/04/27 13:58:21 fuzzer started 2025/04/27 13:58:21 dialing manager at localhost:46629 syzkaller login: [ 94.062163] cgroup: Unknown subsys name 'net' [ 94.234411] cgroup: Unknown subsys name 'cpuset' [ 94.277352] cgroup: Unknown subsys name 'rlimit' 2025/04/27 13:58:36 syscalls: 205 2025/04/27 13:58:36 code coverage: enabled 2025/04/27 13:58:36 comparison tracing: enabled 2025/04/27 13:58:36 extra coverage: enabled 2025/04/27 13:58:36 setuid sandbox: enabled 2025/04/27 13:58:36 namespace sandbox: enabled 2025/04/27 13:58:36 Android sandbox: enabled 2025/04/27 13:58:36 fault injection: enabled 2025/04/27 13:58:36 leak checking: enabled 2025/04/27 13:58:36 net packet injection: enabled 2025/04/27 13:58:36 net device setup: enabled 2025/04/27 13:58:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 13:58:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 13:58:36 USB emulation: enabled 2025/04/27 13:58:36 hci packet injection: enabled 2025/04/27 13:58:36 wifi device emulation: enabled 2025/04/27 13:58:36 802.15.4 emulation: enabled 2025/04/27 13:58:36 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 13:58:38 starting 8 fuzzer processes 13:58:38 executing program 0: sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x89d6}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '@#:*^],)*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':}+'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/]/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x48, 0x5, "23474815ea237cce8186b687b38dd9af3b202aa526a02dc4ade28318577c66a81524e6f444ac7cd5b0285c7bead43f8974fc2b76a9a1149557b4228cc68372104d2d7462"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x810}, 0xc000) socketpair(0x6, 0x4, 0x4, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r1) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@nfc, &(0x7f00000002c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000440)=@ethernet, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/150, 0x96}], 0x1, &(0x7f00000005c0)}, 0x40000100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x4000, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, 0x0, 0x1020, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x4008010) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x80, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000000}, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000d80)={&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/229, 0xe5, 0x1, &(0x7f0000000d00)=""/98, 0x62}, &(0x7f0000000dc0)=0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x8000) 13:58:38 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008d4}, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000240)=0xe8) r3 = socket$inet6(0xa, 0x80000, 0x5) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000280)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r2}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r2, 0x2f, 0xd8, 0x1, 0x0, 0x35, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7, 0x8, 0x7f}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040055}, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r2, 0x25, 0x1, 0x1, 0x7f, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x8000, 0x3, 0x8001}}) keyctl$dh_compute(0x17, &(0x7f0000000640), &(0x7f0000000680)=""/40, 0x28, &(0x7f0000000740)={&(0x7f00000006c0)={'wp256\x00'}, &(0x7f0000000700)="35761d17a86f5e85bf2a9bc5fd2427ff73c27fe4f3cfd2250e8945cf58e81478c95bcd5649253bf810c9cd2a5704b0f6c6b72f5be2cc80a773514f910a41b5", 0x3f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6tnl0\x00', r7, 0x4, 0x34, 0x6, 0x10001, 0x47, @private0, @local, 0x7, 0x40, 0x0, 0x6be4}}) r9 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, r9, 0xfffffffffffffffb) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000008c0)={0x1, 0x2, 0x81}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940), 0x10000, 0x0) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb2e}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000014}, 0x20000050) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000023c0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002040)={0x310, 0x0, 0x802, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8, 0x1, r2}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1ff, 0x7, 0x3, 0x1}, {0x8, 0x6, 0x1f, 0x8}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x4000034}, 0x4008001) 13:58:38 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0x10000, 0x100, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x65, 0x0, 0x3f, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x11}, {[@timestamp_addr={0x44, 0x2c, 0x9b, 0x1, 0x3, [{@rand_addr=0x64010100, 0x10000}, {@broadcast, 0x6}, {@remote, 0x2}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}]}, @timestamp_prespec={0x44, 0x3c, 0xb6, 0x3, 0x9, [{@rand_addr=0x64010101, 0x6}, {@local, 0xffff}, {@empty, 0x1000}, {@remote, 0xb1}, {@loopback, 0x40}, {@multicast2, 0x40}, {@broadcast, 0x9}]}, @noop, @timestamp={0x44, 0x2c, 0x73, 0x0, 0x8, [0x3, 0x1, 0x1f, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0xffff, 0x4]}]}}}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000380)=0xe8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x11) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000880)={&(0x7f0000000700), 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x94, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xfc}, {0xc, 0x90, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x8000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000019c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000009c0)="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", 0x1000}, 0x68) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a80), r3) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4051) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001bc0), r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x30, r7, 0x210, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044044}, 0x880) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001d80)={&(0x7f0000001cc0), 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x30, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffe00}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5b}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x11) syz_genetlink_get_family_id$batadv(&(0x7f0000001f00), r6) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x2c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x1) [ 110.226450] audit: type=1400 audit(1745762318.211:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:58:38 executing program 3: sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x1f}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044880}, 0x20000814) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8600, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x81) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20028800}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r1) accept$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a40)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000b40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd41}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x2004c802) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40001) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x10, r1, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000f00)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x108}, 0x1}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000010c0)={'ip6_vti0\x00', &(0x7f0000001040)={'ip6gre0\x00', 0x0, 0x2f, 0xcc, 0x6, 0x3da694dd, 0x9, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x20, 0x200, 0xf6}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) 13:58:38 executing program 4: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x32}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x50) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) pipe(&(0x7f0000000300)) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xab, 0x3a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x28000000}, 0x80) r4 = syz_open_dev$hiddev(&(0x7f0000000440), 0x7, 0x2000) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f0000000480)) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f00000004c0)=0x3) r5 = accept(r3, &(0x7f0000000500), &(0x7f0000000580)=0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0xc7, 0x6, 0x0, @mcast2, @local, 0x80, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'sit0\x00', r6, 0x4, 0x81, 0x1, 0x60a5, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1, 0x1, 0x80000001, 0x6}}) socketpair(0x28, 0xa, 0x8, &(0x7f0000000840)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r7) socketpair(0x1d, 0x2, 0x4, &(0x7f0000005240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000005500)={&(0x7f0000005280), 0xc, &(0x7f00000054c0)={&(0x7f0000005340)={0x15c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4) 13:58:38 executing program 5: msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000000)=""/10) r0 = msgget(0x0, 0x400) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000040)=""/161) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000100)=""/169) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x8000) r2 = msgget(0x3, 0x200) msgctl$MSG_INFO(r2, 0xc, &(0x7f00000002c0)=""/244) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) msgsnd(r0, &(0x7f0000000400)={0x1, "4d40b530ed8f2ea7ccbe0acec262eba8580a815ceff4462d670815c1efe4b1b4c0d99cec6e82819da19efda66faa35734eba983896f9dde58e86b72177be60f1281b8989e6ae03cb348f7718f55c1e0796610c01c1448569f6dc762ce81ebae6e2193464ccf75ded938928e1e5fdf64413d6fd0f95a2c63fc88d1f91e543dcfd97df580d644a01fb24df8303ac44185203"}, 0x99, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80), 0x101001, 0x0) accept$packet(r4, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d00)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:hugetlbfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x35}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4041}, 0x4) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000094) msgsnd(r0, &(0x7f0000001140)={0x0, "0c154719e209b0acb83b5dd9bfa59f4961379c857beceb09343cd8425c35a663750fbc97685290c6b74a5284692d1f2c38be390120cb102b065714bd2c493174d06d2272680d9183687cfc40acb4eb87d31c72a5411b3fa905d722d532fb43f5f9eedc1b8c20968052ff2cdb0a2b5ed7a68bbbf9ce1551ad433c03d49fb8b6d8821d5323933f772c01711ebc1e767fbece48cc5cb3078d7eb4a6189b2c"}, 0xa5, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000001200)=""/184) 13:58:38 executing program 6: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) keyctl$search(0xa, 0x0, &(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, 0xfffffffffffffffc) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x7, &(0x7f0000ffc000/0x3000)=nil, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/139, 0x8b, 0x0, &(0x7f00000001c0)=""/226, 0xe2}, &(0x7f0000000300)=0x40) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x80010, 0xffffffffffffffff, 0x8000000) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) socketpair(0x26, 0x5, 0x847, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x6, 0x6, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x68, 0x0, 0x28, 0x4, 0x0, @remote, @empty}}}}) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="15632cdade9cb05f8ebb103314d74c8b8b619b61b36dfa3b2811304519547c6665f488d721c067668e1571a094", 0x2d, r1) keyctl$clear(0x7, r2) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, r1) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, r3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x6) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, r3) 13:58:38 executing program 7: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/109, 0x6d) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000080)=@nl=@proc, &(0x7f0000000100)=0x80) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000140)={0x3, 0xfffffdfd, 0x7fffffff, 0x6, 0x5, 0xc2eb, 0x4, 0x4, 0x401, 0x1ff, 0x1ff, 0x0, 0x7fffffff, 0x7ff}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000180)={0x2, 0x302, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "ca7f4111b0d26d98cb4df6a4cfa4cba5f45b8db7b19d3e593fea5a83c5aa8b507e8c6c7e06c7f6ebd959e8e437b87718099d20535437fb0d0cd74f5bb6996dd8", 0x25}, 0x48, 0xfffffffffffffff9) socket$inet6(0xa, 0x6, 0x80000000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000004) keyctl$KEYCTL_MOVE(0x1e, r2, r2, 0x0, 0x8734c69964b0278b) r3 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r2, &(0x7f0000000400)='blacklist\x00', &(0x7f0000000440)={'syz', 0x3}, r3) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000500)={0x1, 0x100, 0xf2000000, 0x5, 0x9, 0xa6}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x3, 0x80000) ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f0000000580)) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 111.619955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.626188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.631172] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.646264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.654185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.722393] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.726156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.728882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.736898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.754883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.756943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.758963] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.761667] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.764179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.767258] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.770776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.772222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.774888] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.777137] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.797716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.799609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.804931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.807236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.812604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.816119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.818987] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.823404] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.833759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.833955] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.836062] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.839326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.843774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.848933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.856671] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.875230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.877245] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.886062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.886238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.896236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.926673] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.696162] Bluetooth: hci0: command tx timeout [ 113.951612] Bluetooth: hci5: command tx timeout [ 113.952455] Bluetooth: hci1: command tx timeout [ 114.014784] Bluetooth: hci6: command tx timeout [ 114.015793] Bluetooth: hci2: command tx timeout [ 114.016378] Bluetooth: hci4: command tx timeout [ 114.080022] Bluetooth: hci7: command tx timeout [ 114.080035] Bluetooth: hci3: command tx timeout [ 115.743586] Bluetooth: hci0: command tx timeout [ 116.000225] Bluetooth: hci5: command tx timeout [ 116.000256] Bluetooth: hci1: command tx timeout [ 116.064592] Bluetooth: hci6: command tx timeout [ 116.064794] Bluetooth: hci4: command tx timeout [ 116.065061] Bluetooth: hci2: command tx timeout [ 116.126923] Bluetooth: hci7: command tx timeout [ 116.127979] Bluetooth: hci3: command tx timeout [ 117.790703] Bluetooth: hci0: command tx timeout [ 118.046799] Bluetooth: hci1: command tx timeout [ 118.047133] Bluetooth: hci5: command tx timeout [ 118.112592] Bluetooth: hci4: command tx timeout [ 118.113098] Bluetooth: hci6: command tx timeout [ 118.113612] Bluetooth: hci2: command tx timeout [ 118.175610] Bluetooth: hci3: command tx timeout [ 118.175621] Bluetooth: hci7: command tx timeout [ 119.839727] Bluetooth: hci0: command tx timeout [ 120.095395] Bluetooth: hci5: command tx timeout [ 120.096580] Bluetooth: hci1: command tx timeout [ 120.158944] Bluetooth: hci6: command tx timeout [ 120.159641] Bluetooth: hci2: command tx timeout [ 120.159983] Bluetooth: hci4: command tx timeout [ 120.222816] Bluetooth: hci3: command tx timeout [ 120.224603] Bluetooth: hci7: command tx timeout [ 171.626319] syz-executor.2 (288) used greatest stack depth: 24872 bytes left [ 173.936498] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.940350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.943493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.950324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.955304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.063398] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.066879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.070745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.081828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.085487] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.133082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.137604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.139714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.145948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.150210] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.212108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.219214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.228291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.239831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.242282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.244670] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.249377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.261793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.263968] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.281756] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.290170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.293002] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.302038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.302111] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.304135] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.306185] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.309092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.310128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.313982] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.316604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.320915] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.323306] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.339766] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.367981] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.384540] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.030674] Bluetooth: hci0: command tx timeout [ 176.159634] Bluetooth: hci1: command tx timeout [ 176.222641] Bluetooth: hci3: command tx timeout [ 176.414854] Bluetooth: hci4: command tx timeout [ 176.415565] Bluetooth: hci5: command tx timeout [ 176.416144] Bluetooth: hci2: command tx timeout [ 176.478702] Bluetooth: hci6: command tx timeout [ 176.479572] Bluetooth: hci7: command tx timeout [ 178.078597] Bluetooth: hci0: command tx timeout [ 178.207888] Bluetooth: hci1: command tx timeout [ 178.270835] Bluetooth: hci3: command tx timeout [ 178.462804] Bluetooth: hci2: command tx timeout [ 178.462844] Bluetooth: hci5: command tx timeout [ 178.463280] Bluetooth: hci4: command tx timeout [ 178.526666] Bluetooth: hci7: command tx timeout [ 178.527828] Bluetooth: hci6: command tx timeout [ 180.127152] Bluetooth: hci0: command tx timeout [ 180.254629] Bluetooth: hci1: command tx timeout [ 180.318628] Bluetooth: hci3: command tx timeout [ 180.510729] Bluetooth: hci4: command tx timeout [ 180.513565] Bluetooth: hci5: command tx timeout [ 180.513665] Bluetooth: hci2: command tx timeout [ 180.574695] Bluetooth: hci6: command tx timeout [ 180.574854] Bluetooth: hci7: command tx timeout [ 182.174804] Bluetooth: hci0: command tx timeout [ 182.303068] Bluetooth: hci1: command tx timeout [ 182.366798] Bluetooth: hci3: command tx timeout [ 182.559610] Bluetooth: hci5: command tx timeout [ 182.559988] Bluetooth: hci4: command tx timeout [ 182.560455] Bluetooth: hci2: command tx timeout [ 182.623627] Bluetooth: hci6: command tx timeout [ 182.623907] Bluetooth: hci7: command tx timeout [ 236.088910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.094199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.096624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.103280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.107439] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.137417] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.139873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.141947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.147853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.151998] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.219613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.226292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.236135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.251007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.260106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.306066] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.308983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.315018] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.320057] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.344238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.375992] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.381683] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.404029] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.420786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.433151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.549923] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.564628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.570321] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.574812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.578324] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.579625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.665151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.675476] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.688501] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.727924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.729369] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.730665] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.746773] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.775691] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.781378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.177565] Bluetooth: hci0: command tx timeout [ 238.238768] Bluetooth: hci1: command tx timeout [ 238.303587] Bluetooth: hci2: command tx timeout [ 238.431604] Bluetooth: hci3: command tx timeout [ 238.495765] Bluetooth: hci4: command tx timeout [ 238.814758] Bluetooth: hci6: command tx timeout [ 238.878631] Bluetooth: hci7: command tx timeout [ 238.879275] Bluetooth: hci5: command tx timeout [ 240.223283] Bluetooth: hci0: command tx timeout [ 240.286847] Bluetooth: hci1: command tx timeout [ 240.350569] Bluetooth: hci2: command tx timeout [ 240.480223] Bluetooth: hci3: command tx timeout [ 240.543550] Bluetooth: hci4: command tx timeout [ 240.862837] Bluetooth: hci6: command tx timeout [ 240.928559] Bluetooth: hci7: command tx timeout [ 240.929008] Bluetooth: hci5: command tx timeout [ 242.270600] Bluetooth: hci0: command tx timeout [ 242.334631] Bluetooth: hci1: command tx timeout [ 242.400686] Bluetooth: hci2: command tx timeout [ 242.526665] Bluetooth: hci3: command tx timeout [ 242.591568] Bluetooth: hci4: command tx timeout [ 242.911749] Bluetooth: hci6: command tx timeout [ 242.974843] Bluetooth: hci5: command tx timeout [ 242.975738] Bluetooth: hci7: command tx timeout [ 244.318675] Bluetooth: hci0: command tx timeout [ 244.382622] Bluetooth: hci1: command tx timeout [ 244.447245] Bluetooth: hci2: command tx timeout [ 244.574674] Bluetooth: hci3: command tx timeout [ 244.638681] Bluetooth: hci4: command tx timeout [ 244.958932] Bluetooth: hci6: command tx timeout [ 245.022655] Bluetooth: hci7: command tx timeout [ 245.023113] Bluetooth: hci5: command tx timeout [ 298.289136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.297241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.300634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.307339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.313865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.422463] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.427230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.431966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.439710] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.447951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.503336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.511819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.513929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.522135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.539785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.610595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.618694] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.642985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.648393] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.658140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.782249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.788067] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.800434] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.835415] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.849018] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.081440] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.088022] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.092031] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.140817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.180240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.205429] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.227533] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.231992] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.256689] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.270703] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.287930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.294683] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.395462] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.451645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.509128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.382663] Bluetooth: hci0: command tx timeout [ 300.511585] Bluetooth: hci1: command tx timeout [ 300.575483] Bluetooth: hci2: command tx timeout [ 300.702638] Bluetooth: hci3: command tx timeout [ 300.895557] Bluetooth: hci4: command tx timeout [ 301.600764] Bluetooth: hci6: command tx timeout [ 301.601694] Bluetooth: hci5: command tx timeout [ 301.791558] Bluetooth: hci7: command tx timeout [ 302.430634] Bluetooth: hci0: command tx timeout [ 302.558592] Bluetooth: hci1: command tx timeout [ 302.622747] Bluetooth: hci2: command tx timeout [ 302.750794] Bluetooth: hci3: command tx timeout [ 302.943356] Bluetooth: hci4: command tx timeout [ 303.648545] Bluetooth: hci5: command tx timeout [ 303.649075] Bluetooth: hci6: command tx timeout [ 303.838700] Bluetooth: hci7: command tx timeout [ 304.480589] Bluetooth: hci0: command tx timeout [ 304.606584] Bluetooth: hci1: command tx timeout [ 304.670579] Bluetooth: hci2: command tx timeout [ 304.798590] Bluetooth: hci3: command tx timeout [ 304.990802] Bluetooth: hci4: command tx timeout [ 305.694630] Bluetooth: hci6: command tx timeout [ 305.695156] Bluetooth: hci5: command tx timeout [ 305.886584] Bluetooth: hci7: command tx timeout [ 306.526837] Bluetooth: hci0: command tx timeout [ 306.654600] Bluetooth: hci1: command tx timeout [ 306.719549] Bluetooth: hci2: command tx timeout [ 306.846682] Bluetooth: hci3: command tx timeout [ 307.039831] Bluetooth: hci4: command tx timeout [ 307.742988] Bluetooth: hci5: command tx timeout [ 307.743440] Bluetooth: hci6: command tx timeout [ 307.934578] Bluetooth: hci7: command tx timeout [ 360.825462] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.828987] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.832838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.848015] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.856591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.015929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.030049] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.035018] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.052994] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.060035] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.220657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.228050] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.231134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.253819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.268256] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.320421] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.347089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.348134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.355896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.358679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.362244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.362993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.367066] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.375793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.378072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.391411] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.397429] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.399441] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.416792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.418829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.493642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.497372] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.498353] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.506335] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.516738] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.530970] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.539174] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.543116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.654245] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.661989] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.912021] Bluetooth: hci0: command tx timeout [ 363.103785] Bluetooth: hci1: command tx timeout [ 363.358646] Bluetooth: hci2: command tx timeout [ 363.486645] Bluetooth: hci4: command tx timeout [ 363.486707] Bluetooth: hci3: command tx timeout [ 363.550903] Bluetooth: hci5: command tx timeout [ 363.679233] Bluetooth: hci6: command tx timeout [ 363.743649] Bluetooth: hci7: command tx timeout [ 364.958700] Bluetooth: hci0: command tx timeout [ 365.150654] Bluetooth: hci1: command tx timeout [ 365.406744] Bluetooth: hci2: command tx timeout [ 365.534905] Bluetooth: hci4: command tx timeout [ 365.534951] Bluetooth: hci3: command tx timeout [ 365.598774] Bluetooth: hci5: command tx timeout [ 365.726630] Bluetooth: hci6: command tx timeout [ 365.791812] Bluetooth: hci7: command tx timeout [ 367.008642] Bluetooth: hci0: command tx timeout [ 367.198721] Bluetooth: hci1: command tx timeout [ 367.454990] Bluetooth: hci2: command tx timeout [ 367.582870] Bluetooth: hci3: command tx timeout [ 367.583085] Bluetooth: hci4: command tx timeout [ 367.646746] Bluetooth: hci5: command tx timeout [ 367.774729] Bluetooth: hci6: command tx timeout [ 367.838797] Bluetooth: hci7: command tx timeout [ 369.054900] Bluetooth: hci0: command tx timeout [ 369.248562] Bluetooth: hci1: command tx timeout [ 369.502842] Bluetooth: hci2: command tx timeout [ 369.630769] Bluetooth: hci3: command tx timeout [ 369.632171] Bluetooth: hci4: command tx timeout [ 369.694956] Bluetooth: hci5: command tx timeout [ 369.825547] Bluetooth: hci6: command tx timeout [ 369.887753] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 14:03:40 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffff88800960f81c RDX=0000000000000002 RSI=ffffffff85c1bac0 RDI=ffff8880095fa640 RBP=ffffffff85c1bac0 RSP=ffff88800960f7e0 R8 =ffffffff8685f31e R9 =ffff88800960f908 R10=000000000003b0c2 R11=000000000002498b R12=ffff8880095fa640 R13=ffff88800960f81c R14=0000000000000002 R15=0000000000000002 RIP=ffffffff815114dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f24ebe8a1f0 CR3=0000000026faa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000ffffffff RBX=0000000000000000 RCX=bde53094b5b1327e RDX=00000000db688f6a RSI=000000000b6dc639 RDI=00000000e6d655a3 RBP=ffffffff85c1bac0 RSP=ffff88806cf08968 R8 =0000000000000002 R9 =0000000000000001 R10=0000000000000000 R11=0000000000012abc R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff815185b3 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f819aabc028 CR3=0000000024854000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000