Warning: Permanently added '[localhost]:59373' (ECDSA) to the list of known hosts. 2025/05/29 04:29:16 fuzzer started 2025/05/29 04:29:16 dialing manager at localhost:36815 syzkaller login: [ 93.921842] cgroup: Unknown subsys name 'net' [ 94.068180] cgroup: Unknown subsys name 'cpuset' [ 94.117623] cgroup: Unknown subsys name 'rlimit' 2025/05/29 04:29:31 syscalls: 203 2025/05/29 04:29:31 code coverage: enabled 2025/05/29 04:29:31 comparison tracing: enabled 2025/05/29 04:29:31 extra coverage: enabled 2025/05/29 04:29:31 setuid sandbox: enabled 2025/05/29 04:29:31 namespace sandbox: enabled 2025/05/29 04:29:31 Android sandbox: enabled 2025/05/29 04:29:31 fault injection: enabled 2025/05/29 04:29:31 leak checking: enabled 2025/05/29 04:29:31 net packet injection: enabled 2025/05/29 04:29:31 net device setup: enabled 2025/05/29 04:29:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/29 04:29:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/29 04:29:31 USB emulation: enabled 2025/05/29 04:29:31 hci packet injection: enabled 2025/05/29 04:29:31 wifi device emulation: enabled 2025/05/29 04:29:31 802.15.4 emulation: enabled 2025/05/29 04:29:31 fetching corpus: 0, signal 0/0 (executing program) 2025/05/29 04:29:32 starting 8 fuzzer processes 04:29:32 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000000)=[@dead_binder_done, @acquire, @enter_looper, @release={0x40046306, 0x2}, @acquire_done={0x40106309, 0x2}], 0x15, 0x0, &(0x7f0000000040)="ca083c483121c0b9935c0d814dfbf7e14df5af888a"}) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x2, 0x2) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3119) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000100)={0x2, 0xffffffff, 0x7}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000180)={0xcd, "e8d98ce9f92791371fe5fda302145258ff58aff5c13db120e3322e68a1dfad6e6bd86b81c34410f7f83d9da9200c70b76cd80af7f69af9a5cc8b23097849e5735da5ac34e5593f0722e8531713d25286d9d247c624e71cb5f8fefe794f69184228f8b431ffe2a418033f4c915c717c54fdebada089c7e8e33da0b9df374810c6ad07f003b1150bf8cf3c33d813cecf8b0056d6ed5c677fc1fb0bbdb9b49e5719929a97c0ebdee91c4ad00af2493f8d2f59de76257b9df82b09d1c92fc48bc7871b2c2c0e8dafba3f1abb041301"}) r1 = socket$inet(0x2, 0x4, 0x80000001) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x2f4e81c4480755ef}) socket$inet(0x2, 0x80000, 0x8) r2 = socket(0x2, 0x80000, 0x5) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x60000}, 0x44) r4 = accept$unix(r1, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e) r5 = syz_io_uring_setup(0x580b, &(0x7f0000000580)={0x0, 0x4, 0x22, 0x3, 0x26c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000680)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x74d9, 0x0, 0x4}, 0xff) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3ff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x48, 0x0, &(0x7f00000006c0)=[@register_looper, @acquire_done={0x40106309, 0x3}, @clear_death={0x400c630f, 0x2}, @free_buffer, @clear_death={0x400c630f, 0x1}, @register_looper], 0x45, 0x0, &(0x7f0000000740)="999d7303be2cfff6a2f532122b66064a7a2d3f9bcc8d558971bc64a6934f48f56bdd398b26e1a6c14fa38102f347997bd91d13d66fc0706071915c3f417dc438f0cdc8de99"}) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000d, 0x100010, r5, 0x8000000) syz_io_uring_setup(0x36b1, &(0x7f0000000800)={0x0, 0x6a09, 0x2, 0x3, 0x331, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000880), &(0x7f00000008c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000c40)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/142, 0x8e}, {&(0x7f00000009c0)=""/84, 0x54}, {&(0x7f0000000a40)=""/39, 0x27}, {&(0x7f0000000a80)=""/92, 0x5c}], 0x4, &(0x7f0000000b40)=""/147, 0x93}, 0x0, 0x10062, 0x1, {0x2}}, 0x3) 04:29:32 executing program 1: r0 = syz_io_uring_complete(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x198, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3b}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20044000}, 0x4004800) r3 = syz_io_uring_setup(0xf4a, &(0x7f0000000380)={0x0, 0x597, 0x20, 0x3, 0x3a, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4000, @fd=r1, 0xfffffffffffffffc, 0xad2e, 0x1, 0x1, 0x1, {0x1}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5fae}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20004041}, 0x20004011) r6 = io_uring_setup(0x29a9, &(0x7f0000000700)={0x0, 0x94b0, 0x1, 0x2, 0x104, 0x0, r3}) r7 = socket(0x25, 0x80000, 0x5) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r0) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r8, 0x200, 0x2, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x60) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r6, 0x8000000) socketpair(0x11, 0x4, 0x2, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r10) sendmsg$IPVS_CMD_SET_DEST(r9, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x98, r11, 0x302, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc1572ba28250ff40}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 04:29:32 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x28, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x40080) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xaa}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000440)={0x2, 0x3, 0x4}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040004) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x42400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r1, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3ff, 0x51}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008004}, 0x4801) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd0, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xde8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40c4}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r2) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x8c, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x844}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r7, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x1) 04:29:32 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) r1 = request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='syz', 0xfffffffffffffffa) keyctl$negate(0xd, r1, 0x7, 0xfffffffffffffffc) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3441, 0x0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) r3 = syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="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", 0x1000, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f00000013c0)={'fscrypt:', @auto=[0x33, 0x32, 0x35, 0x33, 0x36, 0x32, 0x38, 0x62, 0x0, 0x35, 0x38, 0x61, 0x32, 0x36, 0x37, 0x62]}, &(0x7f0000001400)={0x0, "8fcffb069aef4207eb202735a32030876b8cc2d4ebda114c0a334a131fbd4c497c55a9faeede4d0081fcfa0801cf208dcfb9dea811391363eee4d2b6724727a0", 0x38}, 0x48, r5) r6 = add_key$user(&(0x7f0000001500), 0xfffffffffffffffc, &(0x7f0000001540)="696ecb01cc012e751a529ab2137d3b335e635377067bdbcf3afb7897a233f3d6669972a4cea130f8b24cc80c44df3cf6ab55c46f610d3b518bee7cda6cb0857a04beda549e4aa6f37cd051c927bc7846e36f0f135669a071935d072ef046e546784f8a0b0b037691ce2e36a7f88cdf2cfd7ed35a5d42aa5580c7c8b34c2484cb05f181a7cbb24adacb97db34341a83e5d3c1b3c1841a180fb30d429af3f130c0bd42cbb2d014be7df7b8d76b9d54f0f8687fbe324fef97d9", 0xb8, 0xfffffffffffffffd) r7 = request_key(&(0x7f0000001600)='cifs.idmap\x00', &(0x7f0000001640)={'syz', 0x1}, &(0x7f0000001680)=')\'}&^\x00', r2) keyctl$dh_compute(0x17, &(0x7f00000016c0)={r6, r4, r7}, &(0x7f0000001700)=""/62, 0x3e, &(0x7f0000001780)={&(0x7f0000001740)={'sha384-ssse3\x00'}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000017c0)='./binderfs/binder1\x00', 0x402, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001800)='./binderfs/custom0\x00', 0x6, 0x0) r9 = gettid() ioctl$BINDER_FREEZE(r8, 0x400c620e, &(0x7f0000001840)={r9, 0x0, 0x3b2e}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001b40)={0x5c, 0x0, &(0x7f0000001a00)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001940)={@fd, @fd, @fd}, &(0x7f00000019c0)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x1}, @enter_looper], 0xae, 0x0, &(0x7f0000001a80)="985c186f9878e57eb7c1d2dec5db612fd6e78e61559d501d66473ca24e7dd3cea2e0b5332a3a5a10d566d02284a12276fbbb9c4aa252f1be0e56ff785f2cc404d14b924e601640db907f33bb88ad22250754631dc36001294425ec8dc7f74096bbe26f375a47b7f71ced7887e22233fafef277f27e7f9016dc73d11dd332e06c7a79d3a13350301ba5b4f07567fd319c76ba8696cab0bbedb7674ec049a53b4f9534b7de5a62f8448047a300e2a5"}) [ 109.638762] audit: type=1400 audit(1748492972.783:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:29:32 executing program 4: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x88, 0x1, 0x4}, 0x20}}, 0x18) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x1e65, &(0x7f0000000040)={0x0, 0x977d, 0x0, 0x0, 0x323}, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x44) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x7ff, 0xa251, 0x66, 0x16200]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xea}]}, 0x30}}, 0x2000001d) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8100}, 0x1}, 0xffffff81) r4 = syz_io_uring_complete(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000e, 0x40010, r4, 0x8000000) write$P9_RLOPEN(r4, &(0x7f0000000340)={0x18, 0xd, 0x1, {{0x2, 0x2, 0x4}, 0x5}}, 0x18) accept$packet(r4, 0x0, &(0x7f0000000380)) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}}, 0x20040004) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0xb, 0x5, 0x7) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r4) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x4c}}, 0x10) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc991}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x10) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc222}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc014) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) 04:29:32 executing program 5: sched_rr_get_interval(0x0, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x3f) r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "f8dd06b637642056e47997d01feb8a3c73445fb19cec4ae2c8e24965dff7f50268bb34eb6731f602cb8afa64f63c5bdc4d2a9b9ff051049c5616ec6c314d2949", 0x2e}, 0x48, 0xfffffffffffffffe) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e3f}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket(0x22, 0x1, 0x2) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x408c0}, 0x4040) keyctl$link(0x8, r0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff800}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000000) r4 = syz_io_uring_complete(0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r3) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xc9449da3fb2c8b81}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x25}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x35}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x8}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xd1}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x1b}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xce}, @NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10800014}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x94, r7, 0x800, 0x1, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x81) 04:29:32 executing program 6: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044004}, 0xc001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x24}}, 0x8814) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x3ed, 0x200, 0x70bd29, 0x25dfdbfe, "cd17f20255238dbdff092b668570d96996ab3ff05621249ca5a02d9dcbf9c486044e6a44bf0bd8055ce4c2a337697d9ebb1565f58b3cf6269536d54228ac53426f5c3a773c563dcea18fdd", [""]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in, @in=@initdev}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) r3 = syz_open_dev$hiddev(&(0x7f0000000640), 0xffff800000000000, 0x300) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000680)={0x3, 0x3, 0x7f}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x11) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r6, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c805) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0x0, 0x71726b94624e0950, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6a}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x6}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x60000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x800) 04:29:32 executing program 7: ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x79, "0ebd48fbba4eb214ef1aff48af4500ab1f92b1cadea9065792b9b62282bd1e9a091036f169bfa74ed0e273cc789fe1a192caa935ca4d007aaeacaa91c34fa03b6a83b1220d21db18fed87bfd3f28750243e91e4b46710bf7cc2078340001a5dcc66b9735d32c4b42f0ec05fffec51dcd429720606dd38894f8"}) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/254, 0xfe) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0x7800, 0xe85, 0x80000001, {{0x6, 0x4, 0x2, 0xf, 0x18, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x30}, {[@noop]}}}}}) r0 = syz_open_dev$hiddev(&(0x7f0000000200), 0x2, 0x80800) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000240)={0xaf, "3303bd3f54603e7cf70894861503b768aa75b46af0e706fa9963fd15ee83ae6082c2942499450e0d30b5a1517e41a316a6a02645634847dd8e8e7189080043bd3a977808a7103804e34a32c364d5a981928515507e2f34e68c3510f579a1ffc91bf343d1de67e570dd90ad1e563e5790e4d916c0345f5d5f2277573fed635b7730771d3e60b953124802fcae9899e6d39031797ca65c18d76c1e0fb8a50f1a18446f79f1045e963e3f3c3a83746b33"}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xec}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x832}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40844) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x68}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x1) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f00000006c0)) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xd8, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffc0}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x16}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x40000) openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0), 0x351282, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000a40)) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000ac0), r3) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x18, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60080}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wlan1\x00'}) [ 110.966572] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.971144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.975293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.982620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.988485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.995569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.003389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.009617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.018147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.034431] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.059231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.063326] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.077578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.087572] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.091740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.100714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.102762] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.108254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.111505] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.114564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.170143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.175402] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.187389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.194338] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.208438] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.212379] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.216001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.218937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.221787] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.230607] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.237707] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.250101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.255654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.258652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.267425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.269836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.276085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.291694] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.302406] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.308840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.100244] Bluetooth: hci0: command tx timeout [ 113.100252] Bluetooth: hci1: command tx timeout [ 113.162060] Bluetooth: hci2: command tx timeout [ 113.162220] Bluetooth: hci3: command tx timeout [ 113.290511] Bluetooth: hci7: command tx timeout [ 113.355041] Bluetooth: hci6: command tx timeout [ 113.355108] Bluetooth: hci5: command tx timeout [ 113.418081] Bluetooth: hci4: command tx timeout [ 115.147975] Bluetooth: hci0: command tx timeout [ 115.148483] Bluetooth: hci1: command tx timeout [ 115.210096] Bluetooth: hci3: command tx timeout [ 115.210544] Bluetooth: hci2: command tx timeout [ 115.337969] Bluetooth: hci7: command tx timeout [ 115.401970] Bluetooth: hci6: command tx timeout [ 115.402970] Bluetooth: hci5: command tx timeout [ 115.467964] Bluetooth: hci4: command tx timeout [ 117.194358] Bluetooth: hci1: command tx timeout [ 117.194870] Bluetooth: hci0: command tx timeout [ 117.257997] Bluetooth: hci2: command tx timeout [ 117.258484] Bluetooth: hci3: command tx timeout [ 117.386036] Bluetooth: hci7: command tx timeout [ 117.450185] Bluetooth: hci5: command tx timeout [ 117.450675] Bluetooth: hci6: command tx timeout [ 117.513992] Bluetooth: hci4: command tx timeout [ 119.242256] Bluetooth: hci0: command tx timeout [ 119.242765] Bluetooth: hci1: command tx timeout [ 119.306170] Bluetooth: hci3: command tx timeout [ 119.306669] Bluetooth: hci2: command tx timeout [ 119.434016] Bluetooth: hci7: command tx timeout [ 119.498009] Bluetooth: hci6: command tx timeout [ 119.498510] Bluetooth: hci5: command tx timeout [ 119.562297] Bluetooth: hci4: command tx timeout [ 173.926804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.931325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.933766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.935948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.940131] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.943444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.947008] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.949878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.952391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.956459] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.982626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.998424] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.017741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.019845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.022144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.028577] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.030509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.034549] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.038291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.040984] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.041832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.044051] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.047185] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.049042] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.050358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.057206] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.059798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.060874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.063335] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.064592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.069246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.070281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.070607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.071022] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.098433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.179383] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.193336] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.230318] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.258547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.276501] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.009993] Bluetooth: hci0: command tx timeout [ 176.074202] Bluetooth: hci1: command tx timeout [ 176.138075] Bluetooth: hci4: command tx timeout [ 176.205373] Bluetooth: hci3: command tx timeout [ 176.266023] Bluetooth: hci6: command tx timeout [ 176.330041] Bluetooth: hci5: command tx timeout [ 176.330098] Bluetooth: hci2: command tx timeout [ 176.459095] Bluetooth: hci7: command tx timeout [ 178.059131] Bluetooth: hci0: command tx timeout [ 178.123103] Bluetooth: hci1: command tx timeout [ 178.187014] Bluetooth: hci4: command tx timeout [ 178.251601] Bluetooth: hci3: command tx timeout [ 178.315297] Bluetooth: hci6: command tx timeout [ 178.378997] Bluetooth: hci2: command tx timeout [ 178.380084] Bluetooth: hci5: command tx timeout [ 178.506965] Bluetooth: hci7: command tx timeout [ 180.106985] Bluetooth: hci0: command tx timeout [ 180.170094] Bluetooth: hci1: command tx timeout [ 180.234182] Bluetooth: hci4: command tx timeout [ 180.298344] Bluetooth: hci3: command tx timeout [ 180.362007] Bluetooth: hci6: command tx timeout [ 180.426088] Bluetooth: hci5: command tx timeout [ 180.426972] Bluetooth: hci2: command tx timeout [ 180.554058] Bluetooth: hci7: command tx timeout [ 182.153999] Bluetooth: hci0: command tx timeout [ 182.218125] Bluetooth: hci1: command tx timeout [ 182.282071] Bluetooth: hci4: command tx timeout [ 182.346179] Bluetooth: hci3: command tx timeout [ 182.410125] Bluetooth: hci6: command tx timeout [ 182.474019] Bluetooth: hci5: command tx timeout [ 182.474524] Bluetooth: hci2: command tx timeout [ 182.602005] Bluetooth: hci7: command tx timeout [ 236.502814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.507233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.510202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.517837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.525192] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.615780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.619183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.623834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.634549] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.640842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.645205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.649605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.649848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.652295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.652791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.656430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.661728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.663695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.676764] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.679784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.720087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.748328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.750963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.768214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.791186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.797263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.800674] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.803678] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.809050] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.814552] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.876608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.889178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.900748] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.911997] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.914063] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.918842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.920217] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.933844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.934845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.941207] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.602416] Bluetooth: hci0: command tx timeout [ 238.732569] Bluetooth: hci3: command tx timeout [ 238.734030] Bluetooth: hci1: command tx timeout [ 238.734534] Bluetooth: hci2: command tx timeout [ 238.857987] Bluetooth: hci4: command tx timeout [ 238.923346] Bluetooth: hci5: command tx timeout [ 238.987278] Bluetooth: hci6: command tx timeout [ 239.050948] Bluetooth: hci7: command tx timeout [ 240.649977] Bluetooth: hci0: command tx timeout [ 240.779170] Bluetooth: hci2: command tx timeout [ 240.779614] Bluetooth: hci1: command tx timeout [ 240.780265] Bluetooth: hci3: command tx timeout [ 240.906128] Bluetooth: hci4: command tx timeout [ 240.971140] Bluetooth: hci5: command tx timeout [ 241.035252] Bluetooth: hci6: command tx timeout [ 241.099844] Bluetooth: hci7: command tx timeout [ 242.697961] Bluetooth: hci0: command tx timeout [ 242.828933] Bluetooth: hci3: command tx timeout [ 242.829396] Bluetooth: hci1: command tx timeout [ 242.829812] Bluetooth: hci2: command tx timeout [ 242.953954] Bluetooth: hci4: command tx timeout [ 243.019323] Bluetooth: hci5: command tx timeout [ 243.083214] Bluetooth: hci6: command tx timeout [ 243.145969] Bluetooth: hci7: command tx timeout [ 244.745950] Bluetooth: hci0: command tx timeout [ 244.874045] Bluetooth: hci2: command tx timeout [ 244.874515] Bluetooth: hci1: command tx timeout [ 244.875400] Bluetooth: hci3: command tx timeout [ 245.003950] Bluetooth: hci4: command tx timeout [ 245.066036] Bluetooth: hci5: command tx timeout [ 245.130986] Bluetooth: hci6: command tx timeout [ 245.194130] Bluetooth: hci7: command tx timeout [ 299.044339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.051420] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.059668] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.073186] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.079555] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.086297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.093844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.100873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.119680] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.131416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.160266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.163356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.166094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.184307] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.186774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.193556] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.195776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.198319] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.223456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.237354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.500265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.514605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.527246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.535815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.538836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.551546] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.556594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.559105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.564273] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.564656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.572116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.574258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.590401] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.591734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.594567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.599391] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.630772] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.678419] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.684345] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.696211] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.131262] Bluetooth: hci1: command tx timeout [ 301.196959] Bluetooth: hci0: command tx timeout [ 301.258307] Bluetooth: hci3: command tx timeout [ 301.322162] Bluetooth: hci2: command tx timeout [ 301.706941] Bluetooth: hci4: command tx timeout [ 301.834347] Bluetooth: hci5: command tx timeout [ 301.834379] Bluetooth: hci6: command tx timeout [ 301.835308] Bluetooth: hci7: command tx timeout [ 303.179015] Bluetooth: hci1: command tx timeout [ 303.243927] Bluetooth: hci0: command tx timeout [ 303.307238] Bluetooth: hci3: command tx timeout [ 303.369962] Bluetooth: hci2: command tx timeout [ 303.754996] Bluetooth: hci4: command tx timeout [ 303.882226] Bluetooth: hci6: command tx timeout [ 303.882259] Bluetooth: hci5: command tx timeout [ 303.883179] Bluetooth: hci7: command tx timeout [ 305.227415] Bluetooth: hci1: command tx timeout [ 305.291163] Bluetooth: hci0: command tx timeout [ 305.355914] Bluetooth: hci3: command tx timeout [ 305.417966] Bluetooth: hci2: command tx timeout [ 305.804278] Bluetooth: hci4: command tx timeout [ 305.930211] Bluetooth: hci7: command tx timeout [ 305.930568] Bluetooth: hci5: command tx timeout [ 305.930761] Bluetooth: hci6: command tx timeout [ 307.275931] Bluetooth: hci1: command tx timeout [ 307.337978] Bluetooth: hci0: command tx timeout [ 307.402143] Bluetooth: hci3: command tx timeout [ 307.466950] Bluetooth: hci2: command tx timeout [ 307.851075] Bluetooth: hci4: command tx timeout [ 307.978330] Bluetooth: hci5: command tx timeout [ 307.978830] Bluetooth: hci6: command tx timeout [ 307.979381] Bluetooth: hci7: command tx timeout [ 361.574147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.578949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.582746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.593552] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.601337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.897301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.904724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.908505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.920364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.933318] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.984424] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.991500] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.998490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.010513] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.025055] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.028126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.031115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.036859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.044675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.052418] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.054467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.057474] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.063469] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.068493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.076501] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.086144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.101697] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.106934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.113426] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.117565] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.123400] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.128588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.160592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.196174] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.208013] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.605580] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.633243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.640715] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.699057] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.726081] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.658979] Bluetooth: hci0: command tx timeout [ 363.979960] Bluetooth: hci1: command tx timeout [ 364.106029] Bluetooth: hci3: command tx timeout [ 364.234179] Bluetooth: hci6: command tx timeout [ 364.234210] Bluetooth: hci2: command tx timeout [ 364.299923] Bluetooth: hci4: command tx timeout [ 364.362009] Bluetooth: hci5: command tx timeout [ 364.810196] Bluetooth: hci7: command tx timeout [ 365.707031] Bluetooth: hci0: command tx timeout [ 366.026406] Bluetooth: hci1: command tx timeout [ 366.154149] Bluetooth: hci3: command tx timeout [ 366.282990] Bluetooth: hci2: command tx timeout [ 366.283484] Bluetooth: hci6: command tx timeout [ 366.346304] Bluetooth: hci4: command tx timeout [ 366.410017] Bluetooth: hci5: command tx timeout [ 366.857995] Bluetooth: hci7: command tx timeout [ 367.754221] Bluetooth: hci0: command tx timeout [ 368.074083] Bluetooth: hci1: command tx timeout [ 368.202401] Bluetooth: hci3: command tx timeout [ 368.329967] Bluetooth: hci6: command tx timeout [ 368.330470] Bluetooth: hci2: command tx timeout [ 368.395128] Bluetooth: hci4: command tx timeout [ 368.459157] Bluetooth: hci5: command tx timeout [ 368.908254] Bluetooth: hci7: command tx timeout [ 369.804164] Bluetooth: hci0: command tx timeout [ 370.123116] Bluetooth: hci1: command tx timeout [ 370.251123] Bluetooth: hci3: command tx timeout [ 370.378213] Bluetooth: hci2: command tx timeout [ 370.378672] Bluetooth: hci6: command tx timeout [ 370.441966] Bluetooth: hci4: command tx timeout [ 370.506395] Bluetooth: hci5: command tx timeout [ 370.955919] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:34:35 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000003 RSI=00000000ffffffff RDI=ffffffff85c1d1c0 RBP=00007f49558a7000 RSP=ffff888034ae7c68 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88800c533dc0 R13=0000000000000002 R14=ffff8880169aa0a0 R15=00007f49558aefff RIP=ffffffff84b3f89a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f49558a7894 CR3=0000000030f0f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000005 RBX=ffff88802efc3700 RCX=0000000000000000 RDX=0000000000000005 RSI=0000000000000000 RDI=ffffffff85c1d1c0 RBP=ffff88802efc4158 RSP=ffff88802aff7100 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff88802efc4180 R13=0000000000000003 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81518e48 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f43c6005260 CR3=0000000033274000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000