Warning: Permanently added '[localhost]:35401' (ECDSA) to the list of known hosts. 2025/05/23 04:42:31 fuzzer started 2025/05/23 04:42:31 dialing manager at localhost:41873 syzkaller login: [ 101.905450] cgroup: Unknown subsys name 'net' [ 102.067904] cgroup: Unknown subsys name 'cpuset' [ 102.115806] cgroup: Unknown subsys name 'rlimit' 2025/05/23 04:42:56 syscalls: 2214 2025/05/23 04:42:56 code coverage: enabled 2025/05/23 04:42:56 comparison tracing: enabled 2025/05/23 04:42:56 extra coverage: enabled 2025/05/23 04:42:56 setuid sandbox: enabled 2025/05/23 04:42:56 namespace sandbox: enabled 2025/05/23 04:42:56 Android sandbox: enabled 2025/05/23 04:42:56 fault injection: enabled 2025/05/23 04:42:56 leak checking: enabled 2025/05/23 04:42:56 net packet injection: enabled 2025/05/23 04:42:56 net device setup: enabled 2025/05/23 04:42:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/23 04:42:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/23 04:42:56 USB emulation: enabled 2025/05/23 04:42:56 hci packet injection: enabled 2025/05/23 04:42:56 wifi device emulation: enabled 2025/05/23 04:42:56 802.15.4 emulation: enabled 2025/05/23 04:42:56 fetching corpus: 0, signal 0/0 (executing program) 2025/05/23 04:42:58 starting 8 fuzzer processes 04:42:58 executing program 0: r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000400)={0x20}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000440)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) write$P9_RREADLINK(r2, &(0x7f0000000600)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r3 = openat2(r2, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x18002, 0x1c0, 0x4}, 0x18) r4 = openat(r2, &(0x7f0000000880)='./file0\x00', 0x80, 0xa4) io_submit(0x0, 0x5, &(0x7f0000000ac0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000006c0)="8f12cb216df49f533536c086876f8837612aad4f06ec0be21e859fdbf8013813f6e85efb16b73eb5f9462b58307192f2aafd23f9d3383bc135b5f2aa726ff10bb829a3989bb809ccfb56f9b88c5f0aa8679d18cd8acfa0085436d57196424a7557199e0456b4b96be442edb76eb6d940e6397f1b1111b86c093a6ea28efeae76be51087439266a120fb00bb5fd22c088ff2d00dca30afbed33e7008a8328d0a78a0b6d8132d8de8f6f945d10734c", 0xae, 0xfffffffffffffff7, 0x0, 0x2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7, 0x1ff, r0, &(0x7f00000007c0)="431f8a204c000659bd1592fe6b48023d2cdf263118f154f0b6585075a79f09dec62aec8817178d0b3100dc5287e5e1601f306b4c0e369cb53cf1e2fbec770c054e549625a688e92a01745a13732bbf4e0b111e822e7fed229b9015cbeb905b9b19997eb5daa52ae27ce1b41b577cace7501e37c4e461a50ecbb90e1df8ab64508382050d9b44612255ea279f4ae4c5abfe85f9e44006d4d961977600da43d57ea6f0608762ff4dab7d4977e762e640c8b5f9b2ab", 0xb4, 0x2, 0x0, 0x1, r4}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x800, r2, &(0x7f0000000900)="8b3b59bbd53ad94404b2fc415b0ac630ccc12318fe88782eff076f08405a9df155313f5c0e4a88516e81b5dbd0d6ba15c2cb74928cbc9820f35081", 0x3b, 0x1, 0x0, 0x6, r2}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0xc, 0x3, r0, &(0x7f0000000980)="6aa7522e2509bfb6c0729810ccd9731928e3043f0fbfc225a2492b7fe4a145858c2b3b3ca06c321217d8bdb156c2a9205e60d16c343435e624928f0dc0e444b6fb9fb63cd6b6b9e648e55d1604e93242bd12ba17b25ba7a4afce781b060fe273174b2d55cbaf656368795f64531b2763", 0x70, 0x8, 0x0, 0x2, r2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000000a40)="9fd05ab93cef1dc9975225f28b3eaf132406621b25f182321b001945758556813f", 0x21, 0x401, 0x0, 0x6, r2}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, 0xfffffffffffffffc, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000b00)={0x0, @aes128, 0x0, @desc2}) utime(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x8, 0xadf4}) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000bc0)) write$P9_RRENAME(r2, &(0x7f0000000c00)={0x7, 0x15, 0x1}, 0x7) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000c40), 0x200000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000d40)={0xff, 0x5, 0x1}) 04:42:58 executing program 2: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x2, 0x7fffffff, 0x9, 0x400, 0xfffffffb, 0x8001}) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000040)=""/52) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x92b2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'trusted.overlay.opaque\x00'}, {0x20, '$\x05'}], 0xa, "9942410b79b64c53a090c41794e095e424245b7f3eb6742444abb0d0c04cb30bb2cc6f"}, 0x49) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000180)={0x6, 0x6, 0x4}) fstatfs(0xffffffffffffffff, &(0x7f00000001c0)=""/167) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xa307) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.log\x00', 0x80, 0x140) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"f90af8a232c79f6f291c2db7e4cc6f59", 0x0, 0x0, {0x1ff, 0x3}, {0x7, 0x1}, 0x7fff, [0x256, 0x8, 0x1, 0x800, 0x1, 0xd1, 0x1, 0x100, 0x0, 0x400, 0x6, 0x9, 0x1, 0x1000, 0x7fff, 0x9]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000004c0)={{r0}, r2, 0xa, @inherit={0x90, &(0x7f0000000400)={0x0, 0x9, 0x5, 0x40, {0x10, 0x3b7, 0x1, 0x2, 0x80000000}, [0x8001, 0x7fffffff, 0x101, 0x5, 0x8, 0x7, 0x8, 0x80000000, 0xffff]}}, @subvolid=0x2}) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x34, 0x1, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001680)={&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001640)=""/20, 0x14}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000016c0), 0x111000, 0x0) close_range(r4, r3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001700)={0x0, 0x1, 0x7c72, 0x7}) fstatfs(r1, &(0x7f0000001740)=""/215) 04:42:58 executing program 1: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {}, [{}], {0x4, 0x2}, [{0x8, 0x1, 0xee01}], {0x10, 0x1}, {0x20, 0x2}}, 0x34, 0x1) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "e5618a37cb1d09d45a0da2393213ad2f5bfc1f50"}, 0x15, 0x1) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10, 0x800) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f00000001c0)) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000400)={0x0, 0x4, @status={[0x3, 0x8001, 0x0, 0xffffffff, 0x5, 0x7f]}, [0x4, 0x5, 0x200000000, 0x8001, 0x7c208, 0x20, 0x1, 0x4, 0x0, 0x1, 0x318, 0x6, 0x7, 0x3, 0x1000, 0x100, 0x1, 0x5, 0x7, 0x742e, 0xfffffffeffffffff, 0x7ff, 0x3, 0x4, 0x7f, 0x0, 0x6, 0x9, 0x2, 0x2, 0x4, 0x40, 0x31, 0xa4d7, 0x9256, 0x4, 0x80000001, 0x3, 0x8000, 0x0, 0x10000000000, 0x2, 0x200, 0x8001, 0x8, 0x3000000000000000, 0x4, 0x6, 0x7, 0x7, 0x1, 0x6, 0x9, 0xb25, 0x4, 0x7, 0x8, 0x2, 0x0, 0x9, 0x5, 0xffffffffffff681d, 0x6, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r1, @in_args={0x1}}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x2, 0x9, 0x401, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40451}, 0x885) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000f80)={@broadcast, @multicast1, 0x0}, &(0x7f0000000fc0)=0xc) r5 = openat2(r3, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x603, 0x157, 0x4}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000011c0)={'gre0\x00', &(0x7f0000001100)={'erspan0\x00', r4, 0x7, 0x8, 0xfffffff7, 0x8, {{0x1b, 0x4, 0x2, 0x2a, 0x6c, 0x66, 0x0, 0x1, 0x0, 0x0, @rand_addr=0x64010102, @loopback, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @lsrr={0x83, 0x23, 0xf7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @multicast2, @loopback, @loopback, @private=0xa010100, @rand_addr=0x64010102, @local]}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x13, 0x7, [@private=0xa010102, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x94, 0x12, "d67c9edbc0821e71e4a4b4f9c128a3b9"}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f00000012c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x44080) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000001300)) r8 = fcntl$dupfd(r3, 0x406, r3) r9 = syz_genetlink_get_family_id$batadv(0xfffffffffffffffd, r7) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x34, r9, 0x202, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xad}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x400c000) 04:42:58 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x138, 0xa, 0x8, 0x3, 0x70bd27, 0x25dfdbfe, {0x2c29e5f5729e0833, 0x0, 0x1}, [@nested={0x123, 0x3c, 0x0, 0x1, [@generic="bb5ad13dd5953bb14a93060afa8c7cbb5963a62d0e618b4cff7ef747a5b775be225b19637a076f4952dcca556a639d77c3e4565b895b05af37ef12c40299dc3759c7335cfe5aa88f48b00779cc433081b6398ce72fa8b2b739b79bfa9d2f8d1973b63815934671585d19a21b55e2cf873050ce3b8a3060f17afaad99f2da4cc5c3959b8a089927a0d44094064d961facc7600ada2e8427b3f6519e732ecc884fcc196b94f64b274eea84a2ece3a2102a1a67ad88037a406eb876d8f985d6c3d3a044fc3def7b697dacff39a2b2efc8b687d02ac9db", @typed={0x8, 0x60, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x4, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="9ce3560ac6b49d68af7b63af3544a95d7adf272e125b5696eff9331cb7a174dd467db83790f963bbff56f33c15b13aa646296dcd2bd3f086b8b0"]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x20004806) pwrite64(0xffffffffffffffff, &(0x7f0000000340)="0804632057c3459acd27c2e08cf0e7c734809716a96b1e04b119cd426e982cafe8a5285d5e448067411e2370c872449905b5e60de2a69cf62e23ffe0c9", 0x3d, 0x4) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2c8, 0x0, 0x770aa3c3cade715, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff93b5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x430b315c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0xa82, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x11, @private0, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33402161}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x32}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5ce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x70000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x60c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff97}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x84a1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe42e}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4081}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x2000, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x128, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x35}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80000000, 0x7, 0x936, 0x397]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x70000000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x184}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff5979}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8100000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ac}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3f4e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffff80}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000004}, 0x801) r3 = dup(r1) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5804}, 0x2040800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r1) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044000}, 0x800) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='wchan\x00') ioctl$CDROMSTART(r6, 0x5308) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000c80), 0x800, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x9c, 0x0, 0x30, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8001}, 0x24000824) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r8, 0x200, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4e61a7fb15c1e075}, 0x40) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000fc0)=""/78) [ 128.816898] audit: type=1400 audit(1747975378.944:7): avc: denied { execmem } for pid=278 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:42:58 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x0, 0x63}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x104400) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r3, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x8000, 0x8000) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000380)={0x0, 0x0, "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", "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"}) r6 = openat(r4, &(0x7f0000001440)='./file0\x00', 0x200002, 0x104) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @private, @loopback}, &(0x7f00000014c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'syztnl2\x00', r7, 0x29, 0x7f, 0x2, 0x7, 0x30, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x40, 0x0, 0x4}}) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f00000015c0)={0x6, 0x1, 0x4, 0x2, 0x3, [{0x2, 0xabd2, 0x4, '\x00', 0x1000}, {0x1, 0x1, 0x101, '\x00', 0x800}, {0x3f, 0x8, 0xffffffffffffff66, '\x00', 0x60c}]}) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000016c0)=""/20, &(0x7f0000001700)=0x14) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000001740)) r8 = socket(0x8, 0x4, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000001780)=0x10, 0x4) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f00000017c0)={0xfb, {{0xa, 0x4e24, 0x400, @mcast2, 0x1ff}}, {{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff8}}}, 0x108) 04:42:58 executing program 4: ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x8) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x9, 0x400) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000000c0)=r1, 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x440800, 0x0) fchownat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0xee01, 0x400) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xc084) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x80000) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$evdev(r4, &(0x7f0000000380)=[{{0x0, 0xea60}, 0x12, 0xc3, 0x44}, {{r5, r6/1000+60000}, 0x0, 0xff01, 0x380}, {{0x77359400}, 0x11, 0x1ff, 0xffff}], 0x48) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file0\x00'}) ioctl$KDSKBLED(r7, 0x4b65, 0xe6) r8 = epoll_create1(0x80000) ftruncate(r8, 0xacc4) r9 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x135280, 0x0) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000000480)) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000500)={0x350, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd8ea}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0xfc, 0x3, "ea36b15aaaad366f5fcf93b7073491a5f71f0cf898166a1ef589bf0b560809c8cefff94df58af0f6b9cad44321bbffb4c1d59c2cb2bd88350de3e19be7a5bf38b9c5ed176807ab69b4a5006d543fa5c56fefdef1d876f74745bf99308bf87adbf00d1cebbcbd52e63cb432e4368e7c352c3c1552162c3a1970b3fc2f26ad4eec15903587f179cccc08bbfa6126d19bb810fb0755635fc685cd149cc6ca1adba2344c8f234c052802755a648d715bb9c4aa4dce5193ae07767c9c6b6b254761b85f6cf48dd737126d68334374817d74aafcaae0ff4171a483bf87cba08242ed7188f2f6206421ed1c463588556852327bc63ce646a17a16d5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2ebc145d0321f600d609303f88adcffcdde1c886567ae76dc1b019d813593f"}}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64f96599}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0de}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f75}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29bf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5890}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x350}}, 0x24004000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xe0, r10, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1db8, 0xe}}}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x30}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x95}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffe1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) 04:42:58 executing program 6: ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'security.', '!)\x00'}, &(0x7f0000000080)='++.\x00', 0x4, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/173, 0xad, 0x0, &(0x7f0000000180)=""/206, 0xce}, &(0x7f00000002c0)=0x40) close(r0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000300)) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @l2tp={0x2, 0x0, @multicast1, 0x3}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, @qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)='veth0_macvtap\x00', 0xba4, 0x8, 0x8}) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001880)=[{&(0x7f00000004c0)=""/17, 0x11}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/84, 0x54}, {&(0x7f0000001680)=""/24, 0x18}, {&(0x7f00000016c0)=""/204, 0xcc}, {&(0x7f00000017c0)=""/187, 0xbb}], 0x7}, 0x10000) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x30, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6f9}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x200}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000850) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000001a40)={0x1f, 0x5800, @none}, 0xe) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000001a80)=0x4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000d1}, 0x4004010) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001f00), 0x200, 0x0) r3 = syz_io_uring_complete(0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000020c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0xc0103200}, 0xc, &(0x7f0000002080)={&(0x7f0000001f80)={0x100, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000011}, 0x20040011) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000002100)) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x48, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "1bcc71aabb5d3ee801205421"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = geteuid() fchown(0xffffffffffffffff, r4, 0x0) 04:42:59 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40a301, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x29, 0x7, 0x5, 0x1, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x700, 0x20, 0x9, 0x30}}) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/145, 0x91, 0x40012140, 0x0, 0x0) fadvise64(r2, 0x7fff, 0xf0, 0x3) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x44005) r3 = syz_io_uring_complete(0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x2, [{}, {}]}, 0x48) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000440)="d54481959026737f00e6dd6f74714c65bb72460dc79f48cacbcfef3ee623bcb669b680ca470dc9857247f8ded3f5a3894a9f94aa662db94569e91a46504fdcbf76fc42ad1fdd2ab5538004223d7dbc1cdb478f3b1c3f6f611c36dad66f44085b2f903ac8da64f0bb41e51c6ad4b7fda810044bc8f2ec1a4f8d5455a1a5fc5f64ce599e337e38097bba899aa60979d707a68384153a5cb1ac5dd297cbfd9d07872ad5f83e2e6333f23165c5ab7bd8e5f83df320a174b2e632ce8c194b366870b21bc4e9727b616cce5ff8b672d66e912b5d9e135ed97ad18af46bf174eb86fa6499db9d8901e1b8b71dd8", 0xea}, {&(0x7f0000000540)="a3a6b2b0d35a3bfee909c6ecb20a29a62f6f6ccc938e1cc5545cf84a441b4d0e30030f74", 0x24}], 0x2, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x140c0) recvfrom$inet6(r2, &(0x7f0000000640)=""/22, 0x16, 0x40000005, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xc0010, r3, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x42}}, './file0\x00'}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000700)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r6, &(0x7f00000006c0)={0x2000}, r3, 0x1, 0x0, 0x0, {0x0, r7}}, 0x101) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0xa08c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f00000007c0)=r9, 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffff01}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10) [ 130.241045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.247430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.249657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.254818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.260427] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.301211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.305491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.307823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.316586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.319763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.326865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.340695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.344399] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.365845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.371310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.405272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.409729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.412413] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.424774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.434860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.440333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.446319] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.489709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.492244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.494613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.503616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.509802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 130.527926] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 130.531593] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.540070] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 130.544255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.546223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.561482] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.562817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.576474] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.607511] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 130.627424] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 130.649416] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 130.658304] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.706615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 132.313867] Bluetooth: hci0: command tx timeout [ 132.377104] Bluetooth: hci1: command tx timeout [ 132.441093] Bluetooth: hci2: command tx timeout [ 132.505397] Bluetooth: hci3: command tx timeout [ 132.697125] Bluetooth: hci5: command tx timeout [ 132.697160] Bluetooth: hci4: command tx timeout [ 132.698077] Bluetooth: hci6: command tx timeout [ 132.761103] Bluetooth: hci7: command tx timeout [ 134.361073] Bluetooth: hci0: command tx timeout [ 134.425067] Bluetooth: hci1: command tx timeout [ 134.490088] Bluetooth: hci2: command tx timeout [ 134.555070] Bluetooth: hci3: command tx timeout [ 134.745097] Bluetooth: hci6: command tx timeout [ 134.746732] Bluetooth: hci4: command tx timeout [ 134.747205] Bluetooth: hci5: command tx timeout [ 134.809060] Bluetooth: hci7: command tx timeout [ 136.409276] Bluetooth: hci0: command tx timeout [ 136.473706] Bluetooth: hci1: command tx timeout [ 136.537083] Bluetooth: hci2: command tx timeout [ 136.601152] Bluetooth: hci3: command tx timeout [ 136.793095] Bluetooth: hci5: command tx timeout [ 136.793588] Bluetooth: hci6: command tx timeout [ 136.794549] Bluetooth: hci4: command tx timeout [ 136.857192] Bluetooth: hci7: command tx timeout [ 138.457042] Bluetooth: hci0: command tx timeout [ 138.521296] Bluetooth: hci1: command tx timeout [ 138.585114] Bluetooth: hci2: command tx timeout [ 138.649259] Bluetooth: hci3: command tx timeout [ 138.841149] Bluetooth: hci5: command tx timeout [ 138.841225] Bluetooth: hci4: command tx timeout [ 138.841621] Bluetooth: hci6: command tx timeout [ 138.905309] Bluetooth: hci7: command tx timeout [ 190.213012] syz-executor.0 (291) used greatest stack depth: 24800 bytes left [ 193.005213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.011566] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.017547] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.029103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.036556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.086094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.091698] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.093854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.103893] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.112618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.152737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.156537] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.162150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.174303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.181161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.296413] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.302491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.313282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.314414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.322535] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.327463] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.331228] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.338508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.343283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.355483] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.360565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.362421] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.370308] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.374197] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.379717] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.384488] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.388518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.393035] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.394683] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.407287] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.414130] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.421544] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.443160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.492279] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.523781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 195.098245] Bluetooth: hci0: command tx timeout [ 195.161340] Bluetooth: hci1: command tx timeout [ 195.225105] Bluetooth: hci2: command tx timeout [ 195.482055] Bluetooth: hci5: command tx timeout [ 195.482845] Bluetooth: hci4: command tx timeout [ 195.545107] Bluetooth: hci3: command tx timeout [ 195.545760] Bluetooth: hci6: command tx timeout [ 195.609247] Bluetooth: hci7: command tx timeout [ 197.146238] Bluetooth: hci0: command tx timeout [ 197.210059] Bluetooth: hci1: command tx timeout [ 197.273466] Bluetooth: hci2: command tx timeout [ 197.529082] Bluetooth: hci4: command tx timeout [ 197.529570] Bluetooth: hci5: command tx timeout [ 197.593654] Bluetooth: hci6: command tx timeout [ 197.594717] Bluetooth: hci3: command tx timeout [ 197.657280] Bluetooth: hci7: command tx timeout [ 199.196154] Bluetooth: hci0: command tx timeout [ 199.258101] Bluetooth: hci1: command tx timeout [ 199.322051] Bluetooth: hci2: command tx timeout [ 199.578469] Bluetooth: hci5: command tx timeout [ 199.579569] Bluetooth: hci4: command tx timeout [ 199.642346] Bluetooth: hci3: command tx timeout [ 199.642820] Bluetooth: hci6: command tx timeout [ 199.706392] Bluetooth: hci7: command tx timeout [ 201.242136] Bluetooth: hci0: command tx timeout [ 201.306301] Bluetooth: hci1: command tx timeout [ 201.369032] Bluetooth: hci2: command tx timeout [ 201.625246] Bluetooth: hci4: command tx timeout [ 201.625753] Bluetooth: hci5: command tx timeout [ 201.690056] Bluetooth: hci3: command tx timeout [ 201.690548] Bluetooth: hci6: command tx timeout [ 201.754368] Bluetooth: hci7: command tx timeout [ 255.403380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.405674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.410893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.421644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.425360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.655747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.658790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.663403] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.669701] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.682672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.730707] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.735415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.740317] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.746780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.751730] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.889714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.895512] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.902659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.906272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.911317] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.916446] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.926486] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.935554] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.937221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.940771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.958314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.969918] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.979913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.993469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.000545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.055457] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.110568] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.116443] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.118566] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.130793] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.136431] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.151838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.194865] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 256.211428] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.280261] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.499054] Bluetooth: hci0: command tx timeout [ 257.753720] Bluetooth: hci1: command tx timeout [ 257.817605] Bluetooth: hci2: command tx timeout [ 258.073108] Bluetooth: hci5: command tx timeout [ 258.137100] Bluetooth: hci3: command tx timeout [ 258.201227] Bluetooth: hci4: command tx timeout [ 258.265119] Bluetooth: hci6: command tx timeout [ 258.393202] Bluetooth: hci7: command tx timeout [ 259.545162] Bluetooth: hci0: command tx timeout [ 259.801171] Bluetooth: hci1: command tx timeout [ 259.867057] Bluetooth: hci2: command tx timeout [ 260.121320] Bluetooth: hci5: command tx timeout [ 260.185153] Bluetooth: hci3: command tx timeout [ 260.249697] Bluetooth: hci4: command tx timeout [ 260.313104] Bluetooth: hci6: command tx timeout [ 260.441183] Bluetooth: hci7: command tx timeout [ 261.594057] Bluetooth: hci0: command tx timeout [ 261.849832] Bluetooth: hci1: command tx timeout [ 261.915263] Bluetooth: hci2: command tx timeout [ 262.169464] Bluetooth: hci5: command tx timeout [ 262.234088] Bluetooth: hci3: command tx timeout [ 262.297178] Bluetooth: hci4: command tx timeout [ 262.362037] Bluetooth: hci6: command tx timeout [ 262.489014] Bluetooth: hci7: command tx timeout [ 263.641039] Bluetooth: hci0: command tx timeout [ 263.898050] Bluetooth: hci1: command tx timeout [ 263.963038] Bluetooth: hci2: command tx timeout [ 264.218046] Bluetooth: hci5: command tx timeout [ 264.284173] Bluetooth: hci3: command tx timeout [ 264.345324] Bluetooth: hci4: command tx timeout [ 264.411043] Bluetooth: hci6: command tx timeout [ 264.537204] Bluetooth: hci7: command tx timeout [ 317.931082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.936127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.939237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.948924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.955623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.065117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.069868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.073930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.082235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.088158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.202929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.212412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.221532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.234480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.249755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.301829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.304357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.308559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.328789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.332942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.383216] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.396743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.412523] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.430359] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.434424] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.487856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.504453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.512471] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.541590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.557504] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.627720] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.628067] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.635620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.638388] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.640816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.643199] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.650890] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.653191] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.667928] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.670065] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 320.026046] Bluetooth: hci0: command tx timeout [ 320.153068] Bluetooth: hci1: command tx timeout [ 320.345468] Bluetooth: hci2: command tx timeout [ 320.473045] Bluetooth: hci3: command tx timeout [ 320.537047] Bluetooth: hci4: command tx timeout [ 320.729070] Bluetooth: hci5: command tx timeout [ 320.793057] Bluetooth: hci7: command tx timeout [ 320.793631] Bluetooth: hci6: command tx timeout [ 322.074014] Bluetooth: hci0: command tx timeout [ 322.201070] Bluetooth: hci1: command tx timeout [ 322.393034] Bluetooth: hci2: command tx timeout [ 322.521173] Bluetooth: hci3: command tx timeout [ 322.585079] Bluetooth: hci4: command tx timeout [ 322.777569] Bluetooth: hci5: command tx timeout [ 322.841743] Bluetooth: hci6: command tx timeout [ 322.843671] Bluetooth: hci7: command tx timeout [ 324.121452] Bluetooth: hci0: command tx timeout [ 324.249028] Bluetooth: hci1: command tx timeout [ 324.442083] Bluetooth: hci2: command tx timeout [ 324.569994] Bluetooth: hci3: command tx timeout [ 324.633253] Bluetooth: hci4: command tx timeout [ 324.825476] Bluetooth: hci5: command tx timeout [ 324.889111] Bluetooth: hci7: command tx timeout [ 324.889560] Bluetooth: hci6: command tx timeout [ 326.171029] Bluetooth: hci0: command tx timeout [ 326.297042] Bluetooth: hci1: command tx timeout [ 326.489033] Bluetooth: hci2: command tx timeout [ 326.617133] Bluetooth: hci3: command tx timeout [ 326.681220] Bluetooth: hci4: command tx timeout [ 326.873180] Bluetooth: hci5: command tx timeout [ 326.939026] Bluetooth: hci6: command tx timeout [ 326.939489] Bluetooth: hci7: command tx timeout [ 380.464491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.467872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.480186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.495451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.502442] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.502999] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.513598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.519302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.531183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.542193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.725862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.740438] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.749925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.764185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.780853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.799887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.809073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.811573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.813926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.820447] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.824711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.857163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.867602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.916205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.934370] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.936522] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.949346] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.956525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.958385] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 380.962659] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.969801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.977372] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 380.983067] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.021762] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.029353] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.036103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.074336] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.074396] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.077093] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.108839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.618001] Bluetooth: hci0: command tx timeout [ 382.618736] Bluetooth: hci1: command tx timeout [ 382.874176] Bluetooth: hci3: command tx timeout [ 382.874903] Bluetooth: hci2: command tx timeout [ 383.065056] Bluetooth: hci4: command tx timeout [ 383.257126] Bluetooth: hci7: command tx timeout [ 383.257846] Bluetooth: hci6: command tx timeout [ 383.321072] Bluetooth: hci5: command tx timeout [ 384.665998] Bluetooth: hci1: command tx timeout [ 384.666590] Bluetooth: hci0: command tx timeout [ 384.921197] Bluetooth: hci3: command tx timeout [ 384.921686] Bluetooth: hci2: command tx timeout [ 385.113322] Bluetooth: hci4: command tx timeout [ 385.305156] Bluetooth: hci7: command tx timeout [ 385.305656] Bluetooth: hci6: command tx timeout [ 385.369081] Bluetooth: hci5: command tx timeout [ 386.713206] Bluetooth: hci0: command tx timeout [ 386.713707] Bluetooth: hci1: command tx timeout [ 386.969351] Bluetooth: hci2: command tx timeout [ 386.969850] Bluetooth: hci3: command tx timeout [ 387.161103] Bluetooth: hci4: command tx timeout [ 387.353989] Bluetooth: hci6: command tx timeout [ 387.354463] Bluetooth: hci7: command tx timeout [ 387.417716] Bluetooth: hci5: command tx timeout [ 388.761327] Bluetooth: hci1: command tx timeout [ 388.762683] Bluetooth: hci0: command tx timeout [ 389.018057] Bluetooth: hci2: command tx timeout [ 389.018566] Bluetooth: hci3: command tx timeout [ 389.211193] Bluetooth: hci4: command tx timeout [ 389.401140] Bluetooth: hci7: command tx timeout [ 389.401616] Bluetooth: hci6: command tx timeout [ 389.465227] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 04:48:00 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=ffff8880368c9b80 RCX=0000000000000000 RDX=ffffed1001240c9f RSI=0000000000000000 RDI=ffff8880368c9b94 RBP=ffff8880092064e8 RSP=ffff8880276373b8 R8 =0000000000000000 R9 =ffffed1001240c9e R10=ffff8880092064f7 R11=0000000000000001 R12=ffff8880092064f0 R13=dffffc0000000000 R14=ffffed1002d41a50 R15=ffff888016a0d280 RIP=ffffffff8150e06c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5634000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f457d87a1f0 CR3=000000003783b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffffffff0c9cd2d RBX=ffffffff864e6968 RCX=ffffffff81aeb5a3 RDX=0000000000000000 RSI=ffffffff86868186 RDI=ffffffff864e693c RBP=ffffffff864e695c RSP=ffff8880276bf1d0 R8 =ffffffff86868186 R9 =0000000000000000 R10=000000000003b3bd R11=0000000000024a7b R12=ffffffff864e6974 R13=ffffffff864e693c R14=ffffffff864e6958 R15=dffffc0000000000 RIP=ffffffff8135323f RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5734000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f86a55e4260 CR3=0000000014efa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000