Warning: Permanently added '[localhost]:39796' (ECDSA) to the list of known hosts. 2025/05/01 02:42:30 fuzzer started 2025/05/01 02:42:31 dialing manager at localhost:43767 syzkaller login: [ 98.235213] cgroup: Unknown subsys name 'net' [ 98.355334] cgroup: Unknown subsys name 'cpuset' [ 98.391163] cgroup: Unknown subsys name 'rlimit' 2025/05/01 02:42:48 syscalls: 2214 2025/05/01 02:42:48 code coverage: enabled 2025/05/01 02:42:48 comparison tracing: enabled 2025/05/01 02:42:48 extra coverage: enabled 2025/05/01 02:42:48 setuid sandbox: enabled 2025/05/01 02:42:48 namespace sandbox: enabled 2025/05/01 02:42:48 Android sandbox: enabled 2025/05/01 02:42:48 fault injection: enabled 2025/05/01 02:42:48 leak checking: enabled 2025/05/01 02:42:48 net packet injection: enabled 2025/05/01 02:42:48 net device setup: enabled 2025/05/01 02:42:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/01 02:42:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/01 02:42:48 USB emulation: enabled 2025/05/01 02:42:48 hci packet injection: enabled 2025/05/01 02:42:48 wifi device emulation: enabled 2025/05/01 02:42:48 802.15.4 emulation: enabled 2025/05/01 02:42:48 fetching corpus: 0, signal 0/0 (executing program) 2025/05/01 02:42:50 starting 8 fuzzer processes 02:42:50 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x81, 0xbec6, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x708, 0x5, 0x42}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x160, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9b2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x851}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6d8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4008080) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffda9c}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48807}, 0x4) getpeername$packet(r1, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000900)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x38}}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r5, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4) r6 = socket(0x7, 0x4, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x88, 0x0, 0x500, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20040004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'syztnl0\x00', r4, 0x10, 0x80, 0x9, 0xffff03c0, {{0x10, 0x4, 0x1, 0x2f, 0x40, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast2, @private=0xa010101, {[@rr={0x7, 0x1b, 0x31, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @lsrr={0x83, 0xf, 0x0, [@local, @multicast2, @dev={0xac, 0x14, 0x14, 0x13}]}]}}}}}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000d80)={@remote, r7}, 0x14) r8 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x9, 0x2000) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x78, 0x0, 0x408, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x5) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x144, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xabb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}]}]}, 0x144}, 0x1, 0x0, 0x0, 0xc000}, 0x48045) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x60, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe11d}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffff7f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000840}, 0x804) 02:42:50 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x100000) fallocate(r0, 0x0, 0x26, 0x1) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x1f46, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, {0xa, 0x4e24, 0x80000000, @remote, 0x6}, 0xfff, [0x2, 0x6e3c, 0x1, 0x7fffffff, 0x6, 0xcf2, 0x0, 0x7f]}, 0x5c) getpeername$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x90800, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0xa8}, {r1, 0x4102}, {r0, 0x4200}, {r0, 0x6086}], 0x4, &(0x7f0000000200), &(0x7f0000000240)={[0x7]}, 0x8) r2 = dup3(r1, r1, 0x80000) recvfrom$packet(r2, &(0x7f0000001a40)=""/152, 0x98, 0x1, &(0x7f0000001b00)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$vcs(0xffffffffffffff9c, &(0x7f0000001b40), 0x100, 0x0) r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000001b80)) fchdir(r2) write$P9_RWALK(r2, &(0x7f0000001bc0)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x3, 0x2}]}}, 0x16) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r0, {0x1f, 0x8}}, './file0\x00'}) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000001c40)={'\x00', 0xfffff000, 0x2, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'batadv_slave_0\x00'}) r5 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = dup3(r0, r1, 0x0) write$P9_RMKDIR(r6, &(0x7f0000001d00)={0x14, 0x49, 0x2, {0x10, 0x0, 0x5}}, 0x14) 02:42:50 executing program 2: getcwd(&(0x7f0000000000)=""/199, 0xc7) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) getcwd(&(0x7f0000000100)=""/24, 0x18) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000140)=0x8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x40004) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x7f, 0x1}, 0x7) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000300)={{}, 0x6, &(0x7f00000002c0)=[0x4, 0x4000, 0x4, 0x80000000, 0xffffffff, 0xffffffffffffff88], 0xfffffffffffffff8, 0x4, [0x1, 0x8, 0x6, 0x3]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x12200, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r1, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d323ed33ee"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "90e05fbee1ad978df1cb7e5da1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "78f23a4e7b"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "623dcaf30c"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "9012e600"}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000700)) write$P9_RWALK(r2, &(0x7f0000000740)={0x64, 0x6f, 0x1, {0x7, [{0x2, 0x1, 0x6}, {0x10, 0x3, 0x6}, {0x1, 0x3, 0x7}, {0x2, 0x2, 0x8}, {0x80, 0x1, 0x1}, {0x40, 0x0, 0x8}, {0x1, 0x4, 0x8}]}}, 0x64) fsetxattr(r2, &(0x7f00000007c0)=@known='user.syz\x00', &(0x7f0000000800)='nl80211\x00', 0x8, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x95d) getcwd(&(0x7f0000000840)=""/235, 0xeb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000940)={0x0}) r4 = syz_mount_image$nfs4(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x5, 0x0, &(0x7f0000000a40), 0x40008, &(0x7f0000000a80)={[{'}.'}], [{@obj_user={'obj_user', 0x3d, '-'}}, {@measure}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@audit}, {@obj_user={'obj_user', 0x3d, '/dev/full\x00'}}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000b00)={r3, 0x2, r4, 0x40}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, 0xc, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x20000010) 02:42:50 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r0, &(0x7f0000000080)=""/174, 0xae, 0x10000, &(0x7f0000000140)=@ll={0x11, 0x9, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x80) r1 = accept(r0, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000200)={0x3, 'bridge0\x00', {0x2}}) r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0xb2, 0x4040) setsockopt(r2, 0xffffffed, 0x1000, &(0x7f0000000280)="8c211a367d79e57df9641aa80e8fd21556413cf91af69f7540779c129fd75f4807dd75ca8e1ce47de33c145e3f4be5f413652cdf43c991a5f6ae53aba0d965bf7dd0c577333a06a613b80177b1a8b3446298bedd0b3cdf0c4e26afc9a6472e87fe3081548a573348d0a33b8a97dbbc8176abaf208e50a2e7df503111d33d525e695c8e16d82bd467f7f3891501cf297cc2", 0x91) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8085) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x18c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffff80, 0x1f}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "5554e8"}, @NL80211_ATTR_FILS_ERP_REALM={0xbc, 0xfa, "3179e9b58cd31b6cda75a046c14cff66eeac004e6a7e01333e6b03a252feb4171de5118d8a4f0b7a0b9c122ea63f0405afe7a90c8538840446158077c28610a452e830a759253b688943fbccee4aa96662e9b8fa6722d2382f4262b70fb41ddd49362cb8108424bcd8fe15a544363e87b223f593426d1fd9c06f801745730668ced823ad2789ae49c64c7735395bd1cf7edc425d6cf5be6b67b87ddbada274c8018b3bb8e07623b331cf8c447093c9af64c513ef4d9ed6b6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "061d421a23e315"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x3d, 0xfc, "dfb2f44854b18132f35b000629cba70865921475a13a7037ed404f4e95de8032e32b95e0864e16f1459c371651cbbadefd1137a7af7b41aded"}, @NL80211_ATTR_FILS_ERP_RRK={0x44, 0xfc, "2667a7757d7f16a5abbafb4d350b79e2ca9ac6b7f4455a9468c5d60827808f12e3536344fbcc9d1fea65634710a7266d71d9bb452c4ef0242aebb29cc44aa2e0"}]]}, 0x18c}, 0x1, 0x0, 0x0, 0x4008884}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r4, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000068c0), 0x28200, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000006900)='wg2\x00', 0x4) r6 = openat2(r5, &(0x7f0000006940)='./file0\x00', &(0x7f0000006980)={0x0, 0x1, 0x4}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000006a80)={&(0x7f00000069c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000006a40)={&(0x7f0000006a00)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000006ac0)='/sys/power/resume', 0x800, 0x88) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000006c80)={&(0x7f0000006b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006c40)={&(0x7f0000006b40)={0xd0, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xba1}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x867}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40015}, 0xc010) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000006d80)={&(0x7f0000006cc0)={0x10, 0x0, 0x0, 0x1df484460b688821}, 0xc, &(0x7f0000006d40)={&(0x7f0000006d00)={0x30, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x19c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf14a}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) renameat2(r7, &(0x7f0000006dc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000006e40)='./file0\x00', 0x0) [ 117.347715] audit: type=1400 audit(1746067370.513:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:42:50 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x121300, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8482, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000080)={0x1, 0x9}) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x101000, 0x10}, 0x18) statx(r2, &(0x7f0000000180)='./file0\x00', 0x4000, 0x0, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000002c0)={0x4, 0x5, 0x1, 'queue1\x00', 0x2}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000380)) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f00000003c0)=0x1, 0x4) fcntl$setstatus(r1, 0x4, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000400)=0x2, 0x4) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000440)='async\x00', 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000480)={0x15}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000940)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0xc, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048081}, 0x40) open_by_handle_at(r3, &(0x7f0000000cc0)=@raw={0xd0, 0x0, {"2940d0ecc632fac1d11c6cc42549b520df62b9fd8c50463e39dc4835918be608fa01bb26eb6f8c4bf115363e644fe17a5b1bb6b12a0cdbec11d4c16571ed3f803780fc20e6d5269866cd539830bc97ba87434ea691e8a15095de8bc29d4dd68cfeaa93f0112b2fae9c48f74dae64a636caece57903c9047fa2b949b0c61e74668a4fff27ca6bc57a6b7172aa49fd9e6e714bd063670b4d77d5088c5f7aef874fa22d04ad3103a96c4123e81ce10a5559c5a6433d1c701f5986754256296a7e31ba8255210bb3c4a1e4e6eff406"}}, 0x404040) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000dc0)={{0x7f, 0x45, 0x4c, 0x46, 0xe0, 0x0, 0x2, 0x6, 0x6f1, 0x3, 0x3, 0x80000000, 0x17f, 0x40, 0xd2, 0x2, 0x81, 0x38, 0x1, 0xffc1, 0x3f, 0x7}, [{0x0, 0x7ff, 0x0, 0x2, 0x9, 0x100000000, 0x5cebf903, 0x1b}], "027bb01d97ced19002d8b9e7fb03e225a87dc7fc3a1c437dec1824a9c02652d48981d03659e7e8e9dc0145810e710f36b19588573e1e2b88250739d0b24d05afa1f3863c54cd7565558bab27685989f9cf080899183d9d5fbfe77d4326cbd00e59dfb6f43f8c", ['\x00', '\x00', '\x00']}, 0x3de) 02:42:50 executing program 5: ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x13e1) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x464, 0x4, 0x70bd25, 0x25dfdbfc, "939e4ec6ca82d7bfe7f9834184929e13f5ab1000e5ce7d67b40a56ed973400e42add07ddea6d8c9323080ca348ff83547138cbf2c06be1d8b0af307a7f9aefd674547e783e7ac595", ["", "", ""]}, 0x58}}, 0x801) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x1, 0x7}}, './file0\x00'}) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$CDROMREADCOOKED(r1, 0x5315, &(0x7f0000000340)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r3) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000dc0)={0x0, 0x4, 0x6f7bc5ff, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000011c0)={r4, "1246ab3469f88dab5c6038f58959538f"}) writev(r2, &(0x7f0000002380)=[{&(0x7f00000021c0)="7aca19ebd80204bd6726193850dde98f78e816fd86aae0199ccd91a927f6f23d2bdc4688a3779643596e39d88086af1330802395faff0a4e22dce31ff7c293e302bbb4b7c2ec547a8e0a8b71f6f8433e9d03551ff3ef72f8f20c71d0679ef57128041642a41034c87b06baccd944cd67504f23a31a4ec46e47c9b467d2f9f6b6700dd6b21dc22711e9499b2f34947beb4ff7111d2790fb32e29f6c6832ba2b480809c6aacd991a173e2279fab070", 0xae}, {&(0x7f0000002280)="f79f5ddd989c73fd213756095a92f34c657048b8ee479c5c23196553a4bba27727fbf02a093cb233c90baca087edfba65a3c702a349aac934132e704350282f67146ed1eb042fecbc151151e31bf8891d9dadaa2276c88725ad3eeb384e35283791ae550a5f4999cb0524266d6045c", 0x6f}, {&(0x7f0000002300)="67735d0cb04b7231477d6f8a908bf2a7c960625f90c69bf3cc76937c5a233165f21262b315a40f73181fdcec71ebe0a5224455105c8732538af44a697c0a8fc3c100cc9f21296c8c0bbf3d134af0a04390073a3887cdf89413d449d144ad7a115e0bbd645f767b087878d8", 0x6b}], 0x3) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000023c0)={{r1}, "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"}) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000003580)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003540)={&(0x7f0000003400)={0x128, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x32}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8401}, 0x1) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x40500140}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044800}, 0x40) fcntl$setsig(r0, 0xa, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003700)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000036c0)="3219ac588409679b7bdd767011b1c54941835b9e7683545b1b1e14353a8595f405ebc405818e1666f0b33e7c2e8b3c5030bd5606cf7f8f2ddcde74470533da4b", 0x40, r3}, 0x68) bind$inet6(r1, &(0x7f0000003780)={0xa, 0x4e20, 0x3, @loopback, 0x9}, 0x1c) 02:42:50 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x7b}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3a79ca92acc85bfc2fc84d9f97c968dc394678c70e31eb99"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x8890}, 0xc0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a4, r0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x38}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1ff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xa4, 0xc5, "81718cff2a93e17a1cda2561bece4eb6e7377fab4722f22513e4a443697a3206f635fc45cdc11160030284aa582dc2da50243d60e046358b5bec2db54ebbc37e39c082b637fa6ae165882cde2c47f21fbcf2a6decdde47ff2591bf22cb5451a93c3503e887ca3c59ee262bb6ade474bdd9e4e2ba17352fddaefded0b1e5e1eed306d89022e1bf77b3c2ce2ba396fca8aa08febe8ef60f875171a5612e1c4acad"}, @NL80211_ATTR_VENDOR_DATA={0xc4, 0xc5, "f90ea7ff7feb40d5af290f7f8c2d589d7ab95eaba2589c81638028e088c55ffd2fd3e66b46b339e481aa3bc7f43e248d055c1629ec0d126ed8c6f9873726a3e2c56975037af8964717093baccfd019a12629907eaf2f41a96015372a993f6ce3d607986325567becade2580ca86550a54a0ace901105bfc68247b92ae6bffe7e99dd8febc33dbc22240721b0153282983d039fa1bcc709f0dde6aff63266b39ba65d2410bf4a4789358e11e689ddb367c3b780fd5194ba658d6ae7cb239278d9"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000480), 0xf31, 0x20000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x200}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffeff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x5c}}, 0x20044800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x80, 0x1020, 0x18, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x46228b09946be561, 0xfffff801, 0x6}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa8, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x54}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10000}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffeffff}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x338}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7b22ca98}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x592}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffc1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x62}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5a8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x401}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000040}, 0x44080) r7 = openat$cgroup_int(r2, &(0x7f0000000a00)='cpuset.mem_exclusive\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r7, {0x3f}}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000a80)={r8, 0x200, 0x2, 0xd2}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r2) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x1a4, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x9, 0x1e}}}}, [@NL80211_ATTR_VENDOR_DATA={0x32, 0xc5, "d85809162bd4aa84bd64a32d7ae4cbc8271c70bb238b79bd8c40d359d7bf69ba04a2a89663b5e67334c8ae82c001"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x69}, @NL80211_ATTR_VENDOR_DATA={0x77, 0xc5, "c560e5b9c99c310dd3fc57ade8d7476dc78e7d32d3992cfad2df2199991a6b1d59c1465b60e6d4244a23354d93f83523b6817c18e58cece14645e48f5caed8dc98941b3937c813230041c52019c453b79d3665264142d11975c106ccf9330221470e7c110aa7276df54c82f8ee45fd5819ab09"}, @NL80211_ATTR_VENDOR_DATA={0xb0, 0xc5, "33f6156749ee84b2aceac1b20950bfa5c12fc20cc997c659d4f87d782a263342f45bc851701f3104b11a2050d680fe6f6c600679450db1c1502974784f2f4f700a2929b52f5517e8a2eb1cf2e6f00ad11602faac8176bebc76b550a59ee18a136026fe8047fe5e292ead31a142bb20d41a2424ae0230959be1798a05af0aca65ef72d4a730456804a6ebc99d5f84c8aaa3648cfab300cc983a49330157285ca2263661135859ccb288bcb608"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xb32}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000d80)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x8080) 02:42:50 executing program 7: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4420000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0xa, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2d}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x80) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000100)={0x2, 0x3, 0x8}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x280800, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000580)={0x3, 0x0, 0x5, 0x15, 0x1b7, &(0x7f0000000180)}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/bus/container', 0x200080, 0xe8e10f3ec93dfe78) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000740)) ioctl$KDDELIO(r0, 0x4b35, 0x89) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f00000007c0)={0x2000000, 0x9c46, 0xffffffff, {0x10000, 0x200}, 0xffffffff, 0xfffffffe}) write$P9_RREADLINK(r2, &(0x7f0000000840)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x180) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000980)={0x9, 0x9, 0xee, 0x1, 0x4, 0x5}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x7}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r2) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r6, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x72}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0xc4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000c40)={0x3, 0x101, 0x3ff, 0x800, 0xbdb, 0x8}) [ 118.616201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.620957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.625160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.631588] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.635930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.674571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.683288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.685277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.700558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.709226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.868287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.881547] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.916704] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.920343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.965046] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.970186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.975442] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.993146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.017241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.019496] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.020738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.023097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.033831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.059177] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.079684] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.094440] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.101929] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.105788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.107924] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.110716] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.113098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.122328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.126025] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 119.142073] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.149922] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.152942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.165044] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.172715] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.212116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.221160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.688416] Bluetooth: hci0: command tx timeout [ 120.752023] Bluetooth: hci1: command tx timeout [ 121.136916] Bluetooth: hci2: command tx timeout [ 121.138393] Bluetooth: hci3: command tx timeout [ 121.264171] Bluetooth: hci6: command tx timeout [ 121.266047] Bluetooth: hci7: command tx timeout [ 121.267121] Bluetooth: hci4: command tx timeout [ 121.327930] Bluetooth: hci5: command tx timeout [ 122.736117] Bluetooth: hci0: command tx timeout [ 122.800002] Bluetooth: hci1: command tx timeout [ 123.184200] Bluetooth: hci2: command tx timeout [ 123.185154] Bluetooth: hci3: command tx timeout [ 123.312638] Bluetooth: hci7: command tx timeout [ 123.313668] Bluetooth: hci6: command tx timeout [ 123.313798] Bluetooth: hci4: command tx timeout [ 123.375850] Bluetooth: hci5: command tx timeout [ 124.783732] Bluetooth: hci0: command tx timeout [ 124.847818] Bluetooth: hci1: command tx timeout [ 125.231992] Bluetooth: hci3: command tx timeout [ 125.232195] Bluetooth: hci2: command tx timeout [ 125.362046] Bluetooth: hci7: command tx timeout [ 125.362077] Bluetooth: hci6: command tx timeout [ 125.362787] Bluetooth: hci4: command tx timeout [ 125.423721] Bluetooth: hci5: command tx timeout [ 126.832727] Bluetooth: hci0: command tx timeout [ 126.897728] Bluetooth: hci1: command tx timeout [ 127.279750] Bluetooth: hci2: command tx timeout [ 127.280237] Bluetooth: hci3: command tx timeout [ 127.407609] Bluetooth: hci7: command tx timeout [ 127.408070] Bluetooth: hci4: command tx timeout [ 127.408490] Bluetooth: hci6: command tx timeout [ 127.471587] Bluetooth: hci5: command tx timeout [ 181.310088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.314811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.321035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.327883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.332285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.375997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.379820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.386455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.400275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.404385] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.407963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.409587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.412481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.459433] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.473051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.474301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.490124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.498442] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.500027] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.501435] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.504010] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.505387] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.508085] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.518494] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.519613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.520945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.530667] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.535070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.536679] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.544293] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.548611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.552232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.566378] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.603283] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 181.609569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.611620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.615346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.617228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.622934] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.663339] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 183.408597] Bluetooth: hci0: command tx timeout [ 183.535721] Bluetooth: hci2: command tx timeout [ 183.536714] Bluetooth: hci1: command tx timeout [ 183.600108] Bluetooth: hci5: command tx timeout [ 183.600133] Bluetooth: hci6: command tx timeout [ 183.664614] Bluetooth: hci4: command tx timeout [ 183.664654] Bluetooth: hci3: command tx timeout [ 183.791687] Bluetooth: hci7: command tx timeout [ 185.457793] Bluetooth: hci0: command tx timeout [ 185.583762] Bluetooth: hci1: command tx timeout [ 185.584230] Bluetooth: hci2: command tx timeout [ 185.647680] Bluetooth: hci5: command tx timeout [ 185.647720] Bluetooth: hci6: command tx timeout [ 185.711662] Bluetooth: hci4: command tx timeout [ 185.712486] Bluetooth: hci3: command tx timeout [ 185.839642] Bluetooth: hci7: command tx timeout [ 187.505804] Bluetooth: hci0: command tx timeout [ 187.632989] Bluetooth: hci2: command tx timeout [ 187.633023] Bluetooth: hci1: command tx timeout [ 187.696575] Bluetooth: hci5: command tx timeout [ 187.696701] Bluetooth: hci6: command tx timeout [ 187.759702] Bluetooth: hci4: command tx timeout [ 187.760604] Bluetooth: hci3: command tx timeout [ 187.888263] Bluetooth: hci7: command tx timeout [ 189.552039] Bluetooth: hci0: command tx timeout [ 189.679741] Bluetooth: hci1: command tx timeout [ 189.680877] Bluetooth: hci2: command tx timeout [ 189.744826] Bluetooth: hci5: command tx timeout [ 189.744847] Bluetooth: hci6: command tx timeout [ 189.808021] Bluetooth: hci3: command tx timeout [ 189.808041] Bluetooth: hci4: command tx timeout [ 189.936401] Bluetooth: hci7: command tx timeout [ 241.791201] syz-executor.0 (2806) used greatest stack depth: 24440 bytes left [ 244.029358] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.032769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.035731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.044001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.049050] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.163744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.168214] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.171954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.182308] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.188370] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.235214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.250329] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.266654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.300076] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.313648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.369332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.385972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.403664] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.406800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.425833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.427847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.431210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.436950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.439197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.440394] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.616315] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.625332] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.633402] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.641648] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.644907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.654444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.676025] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.712322] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.713948] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.737448] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.747596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.788830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.801482] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.856905] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.900708] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.129587] Bluetooth: hci0: command tx timeout [ 246.255898] Bluetooth: hci1: command tx timeout [ 246.384952] Bluetooth: hci2: command tx timeout [ 246.512116] Bluetooth: hci3: command tx timeout [ 246.576606] Bluetooth: hci4: command tx timeout [ 246.832659] Bluetooth: hci5: command tx timeout [ 246.896626] Bluetooth: hci7: command tx timeout [ 247.023637] Bluetooth: hci6: command tx timeout [ 248.175689] Bluetooth: hci0: command tx timeout [ 248.304685] Bluetooth: hci1: command tx timeout [ 248.431666] Bluetooth: hci2: command tx timeout [ 248.560142] Bluetooth: hci3: command tx timeout [ 248.624171] Bluetooth: hci4: command tx timeout [ 248.879619] Bluetooth: hci5: command tx timeout [ 248.946953] Bluetooth: hci7: command tx timeout [ 249.071713] Bluetooth: hci6: command tx timeout [ 250.224625] Bluetooth: hci0: command tx timeout [ 250.353072] Bluetooth: hci1: command tx timeout [ 250.479631] Bluetooth: hci2: command tx timeout [ 250.608616] Bluetooth: hci3: command tx timeout [ 250.671600] Bluetooth: hci4: command tx timeout [ 250.927771] Bluetooth: hci5: command tx timeout [ 250.992001] Bluetooth: hci7: command tx timeout [ 251.120951] Bluetooth: hci6: command tx timeout [ 252.272903] Bluetooth: hci0: command tx timeout [ 252.400882] Bluetooth: hci1: command tx timeout [ 252.528570] Bluetooth: hci2: command tx timeout [ 252.656612] Bluetooth: hci3: command tx timeout [ 252.720614] Bluetooth: hci4: command tx timeout [ 252.976601] Bluetooth: hci5: command tx timeout [ 253.040585] Bluetooth: hci7: command tx timeout [ 253.168884] Bluetooth: hci6: command tx timeout [ 305.997426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.004196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.007884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.017441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.027443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.130126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.132845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.149147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.165078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.177130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.202832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.217057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.219973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.227125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.232049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.294279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.306314] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.325207] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.349789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.357585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.428488] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.439331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.442028] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.457662] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.479308] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.481469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.496077] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.501702] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.511305] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.520102] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.544435] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.547222] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.567063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.571389] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.590045] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.601716] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.621299] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.626050] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.641488] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.654151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.079670] Bluetooth: hci0: command tx timeout [ 308.207847] Bluetooth: hci1: command tx timeout [ 308.271640] Bluetooth: hci2: command tx timeout [ 308.464813] Bluetooth: hci3: command tx timeout [ 308.591731] Bluetooth: hci4: command tx timeout [ 308.655987] Bluetooth: hci5: command tx timeout [ 308.720629] Bluetooth: hci7: command tx timeout [ 308.783691] Bluetooth: hci6: command tx timeout [ 310.128970] Bluetooth: hci0: command tx timeout [ 310.255616] Bluetooth: hci1: command tx timeout [ 310.320961] Bluetooth: hci2: command tx timeout [ 310.513555] Bluetooth: hci3: command tx timeout [ 310.639588] Bluetooth: hci4: command tx timeout [ 310.705553] Bluetooth: hci5: command tx timeout [ 310.768554] Bluetooth: hci7: command tx timeout [ 310.834551] Bluetooth: hci6: command tx timeout [ 312.175986] Bluetooth: hci0: command tx timeout [ 312.303795] Bluetooth: hci1: command tx timeout [ 312.368604] Bluetooth: hci2: command tx timeout [ 312.559843] Bluetooth: hci3: command tx timeout [ 312.688390] Bluetooth: hci4: command tx timeout [ 312.751613] Bluetooth: hci5: command tx timeout [ 312.817861] Bluetooth: hci7: command tx timeout [ 312.880989] Bluetooth: hci6: command tx timeout [ 314.224537] Bluetooth: hci0: command tx timeout [ 314.353358] Bluetooth: hci1: command tx timeout [ 314.416700] Bluetooth: hci2: command tx timeout [ 314.608629] Bluetooth: hci3: command tx timeout [ 314.736003] Bluetooth: hci4: command tx timeout [ 314.800683] Bluetooth: hci5: command tx timeout [ 314.864659] Bluetooth: hci7: command tx timeout [ 314.928973] Bluetooth: hci6: command tx timeout [ 368.841182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.844155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.851073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.859852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.868177] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.904397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.912081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.914637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.921177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.935201] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.049725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.053982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.057151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.067150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.071658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.089156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.095058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.106121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.129820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.137657] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.140902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.157871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.175207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.237045] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 369.261726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.265086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.266855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.268381] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.270108] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 369.276577] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.279717] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.285147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 369.291020] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.306260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.322884] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 369.326674] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.329196] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.345472] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.356711] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 369.407067] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.927627] Bluetooth: hci0: command tx timeout [ 370.991769] Bluetooth: hci1: command tx timeout [ 371.183612] Bluetooth: hci2: command tx timeout [ 371.248559] Bluetooth: hci3: command tx timeout [ 371.376765] Bluetooth: hci4: command tx timeout [ 371.439644] Bluetooth: hci7: command tx timeout [ 371.440442] Bluetooth: hci5: command tx timeout [ 371.503873] Bluetooth: hci6: command tx timeout [ 372.975648] Bluetooth: hci0: command tx timeout [ 373.039856] Bluetooth: hci1: command tx timeout [ 373.231685] Bluetooth: hci2: command tx timeout [ 373.295623] Bluetooth: hci3: command tx timeout [ 373.423635] Bluetooth: hci4: command tx timeout [ 373.488498] Bluetooth: hci7: command tx timeout [ 373.489955] Bluetooth: hci5: command tx timeout [ 373.551841] Bluetooth: hci6: command tx timeout [ 375.023584] Bluetooth: hci0: command tx timeout [ 375.087608] Bluetooth: hci1: command tx timeout [ 375.280740] Bluetooth: hci2: command tx timeout [ 375.343961] Bluetooth: hci3: command tx timeout [ 375.472555] Bluetooth: hci4: command tx timeout [ 375.535726] Bluetooth: hci7: command tx timeout [ 375.536222] Bluetooth: hci5: command tx timeout [ 375.600066] Bluetooth: hci6: command tx timeout [ 377.071621] Bluetooth: hci0: command tx timeout [ 377.136729] Bluetooth: hci1: command tx timeout [ 377.327965] Bluetooth: hci2: command tx timeout [ 377.392747] Bluetooth: hci3: command tx timeout [ 377.519997] Bluetooth: hci4: command tx timeout [ 377.583687] Bluetooth: hci5: command tx timeout [ 377.585663] Bluetooth: hci7: command tx timeout [ 377.648339] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 02:47:59 Registers: info registers vcpu 0 RAX=00000000000002e0 RBX=00007f8d0cc81068 RCX=00007f8d0cc09738 RDX=0000000000000002 RSI=0000000000000002 RDI=00007f8d0cc39a4a RBP=00007ffd1ce18df0 RSP=00007ffd1ce18cf0 R8 =0000000000000000 R9 =00007f8d0cc1e618 R10=00007f8d0ccce8d0 R11=00007f8d0cf1c510 R12=0000000000000007 R13=000002e000000007 R14=00007f8d0cc1e618 R15=00007f8d0cf1c510 RIP=00007f8d0cf3673a RFL=00000212 [----A--] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8d0ca12540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d0ceec000 CR3=0000000027681000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=42494c4700342e332e325f4342494c47 XMM03=00000000000000000042494c4700342e XMM04=35322e325f4342494c4700332e325f43 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff818c023d RDX=ffff888018309bc0 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffea0001b3a6b4 RSP=ffff88802a88fb00 R8 =0000000000000001 R9 =fffff940003674d6 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=000000000000000a R14=0000000000000000 R15=ffff88802a88fd90 RIP=ffffffff818c023f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1190e01540 00000000 00000000 GS =0000 ffff8880e5747000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f119101459e CR3=0000000035250000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000