Warning: Permanently added '[localhost]:42135' (ECDSA) to the list of known hosts. 2025/05/30 01:15:57 fuzzer started 2025/05/30 01:15:57 dialing manager at localhost:35489 syzkaller login: [ 99.524809] cgroup: Unknown subsys name 'net' [ 99.632209] cgroup: Unknown subsys name 'cpuset' [ 99.668459] cgroup: Unknown subsys name 'rlimit' 2025/05/30 01:16:18 syscalls: 2214 2025/05/30 01:16:18 code coverage: enabled 2025/05/30 01:16:18 comparison tracing: enabled 2025/05/30 01:16:18 extra coverage: enabled 2025/05/30 01:16:18 setuid sandbox: enabled 2025/05/30 01:16:18 namespace sandbox: enabled 2025/05/30 01:16:18 Android sandbox: enabled 2025/05/30 01:16:18 fault injection: enabled 2025/05/30 01:16:18 leak checking: enabled 2025/05/30 01:16:18 net packet injection: enabled 2025/05/30 01:16:18 net device setup: enabled 2025/05/30 01:16:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/30 01:16:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/30 01:16:18 USB emulation: enabled 2025/05/30 01:16:18 hci packet injection: enabled 2025/05/30 01:16:18 wifi device emulation: enabled 2025/05/30 01:16:18 802.15.4 emulation: enabled 2025/05/30 01:16:18 fetching corpus: 0, signal 0/0 (executing program) 2025/05/30 01:16:19 starting 8 fuzzer processes 01:16:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100, 0x9}}, './file0\x00'}) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x81) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe00404e0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000240)=0x7, &(0x7f0000000280)=0x1) fsync(r0) write$P9_RLINK(r0, &(0x7f00000002c0)={0x7, 0x47, 0x3}, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000400)={'broute\x00', 0x0, 0x4, 0x91, [0x6, 0x7, 0x2, 0x80, 0x0, 0x40], 0x1, &(0x7f0000000300)=[{}], &(0x7f0000000340)=""/145}, &(0x7f0000000480)=0x78) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x410000, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1dc, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0f1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd4ab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8be}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffaea}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcba}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b60000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x2400a000) r4 = open(&(0x7f0000000ac0)='./file0\x00', 0x101101, 0x24) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @multicast1}}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000c00)=0xe8) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000c40)={{0xa, 0x4e21, 0x7fffffff, @mcast1, 0x6}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x9, [0x5, 0x5, 0x0, 0x37, 0x0, 0x2, 0x9, 0xd2]}, 0x5c) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000cc0)) 01:16:19 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x80, 0x0, 0x7}}, 0x14) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/178) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb8, r3, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x800}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x143}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}]]}, 0xb8}}, 0x20000001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000600)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000640)={0x0, 'veth0_vlan\x00', {0x3}, 0x1}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x8c8080, 0x0) ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f00000006c0)={0x9, 0xa6f, 0x6, 0x267, 0x3, 0x80000000}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000700)) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000c00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)={0x428, 0x3f4, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x1, 0x24, [0x1f, 0xcfa2, 0x1, 0xfffff800, 0x0, 0x800, 0x40, 0x1ff, 0x1, 0x80, 0x80000001, 0x6, 0x231a, 0x4, 0x5, 0x5, 0x5, 0x2, 0x3, 0x1f, 0x3, 0x2f, 0x3ff, 0x1f, 0x342, 0xfffff800, 0xc2aa, 0x4, 0xfffffff9, 0x40, 0x4, 0x6, 0xffffffff, 0x8, 0x101, 0x3ff, 0x30, 0x7, 0x3, 0xffff, 0x0, 0x5, 0x100, 0x1, 0x7, 0x220, 0xec, 0x5, 0xfffffffc, 0x1, 0x0, 0x10001, 0xff, 0x4, 0x87, 0x20, 0x7, 0x101, 0x0, 0x8, 0x3, 0x4, 0x2, 0x8], [0x1, 0x8, 0x1, 0x2, 0xfffffff7, 0x31a, 0x2, 0x1f, 0x1f, 0x1000, 0x2, 0x8001, 0x7ff, 0x8d1, 0x3, 0xec3, 0x7, 0x3ff, 0x8, 0xa619, 0x2, 0x9ca472f6, 0x4000000, 0x4, 0x7, 0x3ff, 0x3, 0x35, 0x1ff, 0x982f, 0x8, 0xfffff434, 0x3f, 0x3dd, 0x7fffffff, 0x9, 0x2, 0x7f, 0x400, 0x100, 0x81, 0x3, 0x7fffffff, 0x3, 0x8000, 0x1, 0x9, 0x1f, 0x7f, 0x800, 0x9, 0x7, 0x1, 0x84, 0x6, 0x637, 0xa2ba0000, 0x80000000, 0x3, 0x9, 0x8, 0x3f, 0xfff, 0x401], [0xfffff000, 0xffffffff, 0x101, 0xfff, 0x27, 0x0, 0x101, 0x5, 0x8, 0x7, 0x4, 0x40, 0x8001, 0x1, 0x6, 0xffffffe1, 0xb6, 0x7f, 0xf9a, 0xd2900000, 0x9, 0x0, 0x4, 0x8001, 0x0, 0x6, 0x5, 0x2, 0x5, 0x9, 0x6, 0x8, 0x1ff, 0x3414, 0x8, 0xfffffff7, 0x2, 0x3aa, 0x7, 0x1a9, 0x9, 0x0, 0x5, 0x1, 0x9, 0x800, 0x3, 0x0, 0x4, 0x28, 0x4, 0xfffffffe, 0x9, 0xee, 0x7, 0x8, 0x81, 0x9, 0x1, 0xf76, 0x77, 0x5, 0x400, 0x8], [0xfffffffd, 0x6, 0x5, 0x8, 0x7, 0x3ff, 0xcf, 0xffff, 0x7fff, 0x2, 0x10000, 0x0, 0xfffffff7, 0x6e0, 0x2dae062a, 0x401, 0x5, 0x3, 0x6, 0x1f, 0x0, 0x1, 0x8, 0x81, 0x1, 0x4, 0x2, 0xdc95, 0xe054, 0x2, 0x6, 0x0, 0x7, 0x20, 0xb31, 0x4, 0x0, 0x7e1, 0x1, 0xfff, 0x80000000, 0xffff0000, 0x0, 0x4, 0x20, 0x100, 0x0, 0xffffffff, 0x2, 0x0, 0x101, 0x4, 0x7, 0x800, 0x3, 0x0, 0x4, 0x4, 0x4, 0x40, 0x8, 0x45c14a2c, 0x9, 0xdb], 0x5, ['./&)\x00']}, ["", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x44040}, 0x40804) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x445, 0x6, 0x20, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000010c0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x120, 0x0, 0x104, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x810}, 0x1) 01:16:19 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) r1 = gettid() r2 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x1, 0xee00, 0xee01, 0x0, 0x0, 0x2, 0x9}, 0x80000000, 0x5, 0x1, 0xe360, r1, r2, 0x5}) prctl$PR_SET_PTRACER(0x59616d61, r1) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x9, 0xf70a, 0x6, 0xf8, 0x4, 0x9, 0x6}, 0xc) sched_getattr(r2, &(0x7f0000000180)={0x38}, 0x38, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000001c0)='team_slave_0\x00') r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x4e4c2ee000ea44b2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x1d92) migrate_pages(r2, 0x7a, &(0x7f0000000240)=0x9, &(0x7f0000000280)=0x1) ioctl$KDADDIO(r4, 0x4b34, 0xe22c) r5 = openat(r3, &(0x7f00000002c0)='./file0\x00', 0x101880, 0x98) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) 01:16:19 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5c00) ioctl$TCSBRK(r1, 0x5409, 0x98) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x2f, 0x2, 0x0, 0x40, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, 0x18) r2 = accept4(r1, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000100)=0x80, 0x80000) sendfile(r1, r2, &(0x7f0000000140)=0xb40c, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r4 = accept$packet(r3, 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x1, 0x9, 0x100, 0x300, 0x7d68, 0x4}) syz_open_pts(r3, 0x800) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000280)=@lsa={0x0, 0x1}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x880, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x3f, 0x2, 0x7, 0x8526745bf03705b9, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8000, 0x1, 0x6, 0xfffffffe}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x7869, 0x7, 0x401, 0x3, {{0x27, 0x4, 0x2, 0x5, 0x9c, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010100, @empty, {[@noop, @end, @timestamp_prespec={0x44, 0xc, 0xf4, 0x3, 0x9, [{@empty, 0x4}]}, @ssrr={0x89, 0x1f, 0x4c, [@rand_addr=0x64010101, @multicast1, @broadcast, @private=0xa010102, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1f, 0x2c, [@multicast2, @loopback, @empty, @broadcast, @rand_addr=0x64010100, @multicast2, @local]}, @cipso={0x86, 0x3b, 0x2, [{0x1, 0x11, "5deb5f986389c3518846742d60f8c8"}, {0x6, 0xf, "a10f7d42320bf2d182a848eeb7"}, {0x2, 0x6, "7344ed80"}, {0x0, 0xf, "1b0661f8c1f991eed4d8274290"}]}, @noop]}}}}}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000640)=0xe8) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r10 = openat(r3, &(0x7f00000007c0)='./file0\x00', 0x28000, 0x23) fallocate(r10, 0x14, 0x77d7, 0x6) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000800)={0x80, 0x4}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000840)) [ 121.797183] audit: type=1400 audit(1748567779.973:7): avc: denied { execmem } for pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:16:19 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x68116f86431502d0, 0x5, 0x1, 0xffffff82, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, 0x1, 0x20, 0xfffffffc, 0x81}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000300)=@req={0x28, &(0x7f00000002c0)={'veth1_to_team\x00', @ifru_ivalue}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000340)=0x8, 0x4) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000380)=0x7fff, &(0x7f00000003c0)=0x4) r3 = socket$inet6(0xa, 0x4, 0x35dcf651) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='vxfs\x00', 0x20000, &(0x7f00000004c0)='wg1\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)={0x0, 0xfb, 0x101, 0x4, 0x1f, "6b9adbf15fdd7061374674fa55b5b5c9", "d6bd12119fa110f1d470fc84f56f9ab72f50a1980bc11c4d30c2e311129cd1c4244d93597fae45bfd276410e613821dceb538e12ea6c3ddf0d129af600381e4d5a2fbf9a450c12a3cbf2f06cb7ce277724ec2ef61dabbdc107064e7efeb6490abf11b516e6c8cea75553b5179e84659a0ca7f4b2c18b913e31a2b582a4476322b5045415bc3e865fcc2c7e58ba892c52fca392ecb185ab8b2303f5f6306352d4129bced922ca2207f8c16a6ee1d26784cfb56b49655b1ee020447b1703fcc4dcf7f5ace792a1bafc3bb1477a68a93cbc49a0fc29917d7bf3f6ec9db1733ce679a2c5d897cb0a9b2e17ed4672"}, 0x101, 0x3) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x400800, 0x0) getpeername$packet(r4, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) recvmsg$unix(r4, &(0x7f0000000e40)={&(0x7f0000000780), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/145, 0x91}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/237, 0xed}, {&(0x7f0000000a00)=""/204, 0xcc}, {&(0x7f0000000b00)=""/154, 0x9a}, {&(0x7f0000000bc0)=""/64, 0x40}, {&(0x7f0000000c00)=""/23, 0x17}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000cc0)=""/22, 0x16}], 0x9, &(0x7f0000000dc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x1) getpeername$packet(r6, &(0x7f0000000e80), &(0x7f0000000ec0)=0x14) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000f00)) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f40), 0x400880, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000fc0)='\'$-\x00') getpeername(r3, &(0x7f0000001000)=@pppol2tpv3, &(0x7f0000001080)=0x80) mknodat$loop(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0xc000, 0x1) 01:16:19 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x732dba7f}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xd}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40800}, 0x40) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000340)={0x1, 0x3, 0x1000, 0x97, &(0x7f0000000240)="76b15a05e45201ceb8eaaa769f51c6451042314f709d5458586f0c554363bf11e7c49d589ab600b3f7e771c581ab6795088f72e544b5714bbe57377531b8eb1deb6349549972efaab35b67ea98ad754f1943e38b4454bcacf09c0770114f9cfd8ed2261231a66a9bf260596dd0b78d8693fa0d84d39abf27e4b8299f2ce85afff2d1b70998ce73da11bbb2c3e518d16f38a6d09297e092", 0x29, 0x0, &(0x7f0000000300)="cd628e350bf6d99da7041e3315bd69937b2e006393746bf2ef3ed7a64acaa1b536e4414da0d0b2e17a"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000003c0)={{0x9, 0x1}, {0x22, 0xf7}, 0x6, 0x1, 0x80}) write$char_usb(r2, &(0x7f0000000440)="f5451a792f2582be98cf12f293e3f3668c17c1a7e1c04c6773751cb99e5891597243a53b178666495c21b7d3f26485c024c6dc623637e6538468cecfcf985d49882bb93a972fdc06f562b2fcae44ec49046fcb786ef4852b01c744725f6b5c0d003bbd7e4afa12968114b970dedbbb2116c4bff34e303ca7fd2dfab6783f41c44754cf55828f8c02816f27934b62d35a4b94384701bc31053b0bf59e8660649ad7a9aa90c16d3b77154bbb930a61e2348925035d6d64e95eb812d78281877cf726cdea3aece461c848a6104a62", 0xcd) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x800) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000ac0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000680)={0x3f0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x39633066, 0x4b}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0x12b, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x40, 0xe8}}, @peer_mgmt={0x75, 0x6, {0x0, 0x7, @void, @val=0x2f, @void}}, @challenge={0x10, 0x1, 0xc6}, @peer_mgmt={0x75, 0x8, {0x0, 0x80, @val=0x8, @val=0x3f, @void}}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0x2, 0x5b}}, @mic={0x8c, 0x10, {0xee2, "3cf93653fa6a", @short="447eed1d7adc5094"}}, @measure_req={0x26, 0xd1, {0x7, 0x2, 0x6, "53dd683676a5fa6e6962871cab5e671bae29f07e6a700e53affb33a50129c5e14a1b5164c06dbf62282a4b7cefd08092ed293d8eb7ef0feeab62bd6a1ee1e5aad64da7124f18ee01bd5c3edd5f60f7d32bf1bedc642de1669760dc45e2bb1b0c27589fcd97ecf42c4524ff9f2b60eb8d50fc987ff802d049a1f4c1e9d81df60c11c5b7c6d3d3d0017b4e08a515fb0c55cd751f5cd56ddeaba3c04aef058696895db2f194abda67757ea376bb4af757f20acf3d5a99b39c69142697481476bf54ee476daa981e8e7e26646121f2e0"}}, @mic={0x8c, 0x18, {0xd45, "03d3e93e14fa", @long="17a6089314116eea0bd86942fbed8584"}}]}, @NL80211_ATTR_IE={0xa3, 0x2a, [@link_id={0x65, 0x12, {@random="c1311fe92032", @device_a, @device_b}}, @ht={0x2d, 0x1a, {0x20, 0x3, 0x2, 0x0, {0xc2, 0x9, 0x0, 0x81, 0x0, 0x1, 0x1}, 0x8, 0x6, 0x5}}, @channel_switch={0x25, 0x3, {0x1, 0x7c, 0x80}}, @mesh_chsw={0x76, 0x6, {0x1, 0x5, 0x5, 0x1000}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0xa, {0x3, 0xb, 0x1, "5a5fc14800194c"}}, @random_vendor={0xdd, 0x4c, "441dd25a07bd6a80d20dfe7f12bd616196fb66fabedf557fe0e45bdd8bb9e5a57840ec42b9b8050591f22aa3226f98f5472776cae5782d5fa2e749dc6d0bdc8f9882e2ca87e9f4e885f6a230"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1f0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf2, 0x2, "d1b1072b7531f730f68bd4cd851d5d6c6ed8176ad7a51d3707d5491fa1e49c385746b12f39e9f55717cf089ba638cb70ea607fda665d2d09768c86f9cdfdccfccb70aacc9419fb4048f8511e44fbe4383c27e91e92bce70672ac2137a2f2a80aa3f117b898ca4cd5378beb1fef88994c560431a9004dd90c92e97393e83bff3675e11a4283d9e9efe4fa659b565868533bfa41ed4f483aa8d7ecc47ae4e2a2afb5392b8f2947370cd40c3ea5daf70cace51abc1d2c67e1fff6e54e0e979436c15bc41aa95d326ef5523eae203efb294861554032c5c2a077e9b2118572102ce06efedd05a5bd531630726b307440"}, @NL80211_FTM_RESP_ATTR_LCI={0xf2, 0x2, "497b043fe97fd193556b55b3cc0237fc8d9bf2af85b968fa5597a7309a7572511b7bb78eba533ec66231f7c4e2ec7b8e25219d752911a4877a3a9739a16b6d49774e5fb4ac051676453f5759ef11c4e0fc583e52a4d3c6bae0854876585f72aea07e580f3b0739de705ca2eccb503958089e9550486e99a6bcd90599f42174d477c6ab0e0657750c5243fe93175364f7b7de32a4cd9a8452b750b7e03dd9e9032a041f1fffaa3850f9103aeeac4a3c4682d77eed93bb944d303300c882f0e4d762222e2e5a513354c7ca774462e41081760b2a779521971369d29bae79162a4834e5fbb931fe169c1783e3738e1b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x40}, 0x4000044) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/pata_sch', 0x41c242, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xe4, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x27}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "fe26d59d25928d3a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "50844c8250e8a57d1d25446818"}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "68cf0369de"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ba467122dd"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xaeb16b941b31d8b0}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1b0759fb1e05f4ba5022b914d6"}, @NL80211_KEY_MODE={0x5}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}}, 0x20044000) r4 = socket(0x26, 0x4, 0x3f) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, 0x6, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000f40)={@empty, 0x5a}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000f80)={@id={0x2, 0x0, @c}}) sendmsg$nl_generic(r0, &(0x7f0000001340)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001000)={0x2d8, 0x42, 0x400, 0x70bd2a, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x73, 0x0, 0x0, @ipv4=@remote}, @generic="53288ee0ce2a7111945b8f59c9", @generic="8ef0fb3f8d6571da8c4ed5ac78524741644fa7cd11e0a94c0d6585e91301cebaf6feaf6edfb30071fe84ece81dbbda6d0a9b90dc8664a41092f04ef131f85c80bfb6b6c9f87ba04382945c1f8926eae1525da37c61647cb986f3034fc8adbd7e0b4a8103a54cb323046daa76ddacc4d18f45112b07a1ff8ff68260ed974236e0b9ec6ee70822a252d816dc2c8d61109a0eb04b", @nested={0x219, 0x8a, 0x0, 0x1, [@generic="3aea37abf01c879a2e90f7b5a8f7aa562653693471c6a58519d1791af4053e06993ffb719689", @typed={0xc, 0x71, 0x0, 0x0, @u64=0x6}, @generic="b391d4af569805aa00940ff132775726f690faf5339c17e54a06c7ac9fb2fd00631709a6e4b15c49f1e041a43de043e91dd7300bfd079ec6fecb889e984b8324391dc4f37dda103fd1c3ea52b4fa01cad7ed46c261957010d6fe57aa8ce5a8bbc1213e01be0cfdd0c730075710b746546b7e8819c699ee8ed1b131e3a13094a5633faae7538a3a37736e47bdca3c3b5e33667aea1917bca12d836da29f075b42beb6140d0d031666aa667d011e9a4cfdd1676393893341e5aad4f3e30a99d56ba0c8dfd849af2cd88e92e9a63556bcbca13e799c746262281e495e0f44ecc16a5cc5d6f42bde", @typed={0x8, 0x1f, 0x0, 0x0, @uid=0xee01}, @generic="ef0cb609bb810f9bd21cd40fefcebd31593a7859aa09943fd6c3b14a7e5c905b00e0f67bbe419f8e13ad377171a2d1329945db0d3567aa79a231f45195a80e239d8cbc62744c45017b28b6d09fc478bdcfebb8366b86e81923453bc6d1f0cf748c58984a5d3917ab020dfa9248dc6a8e1d33891f78b77598879fced81950f95511d58281c8dbaffbd851e40d2c7d7eccf1bf48130b21f439ec22399bcb9f871b3c599e738948c3b9508eece7d1b29fddf24c56a0795ac6ab9e32c9e87120013b420466c3abdeed2059958be5b3009b609dec5fabdd5700fce769fe34917f35310f4a0ab20f42afa58d424931e06d72a04d045cf710"]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x40800}, 0x800) read(0xffffffffffffffff, &(0x7f0000001380)=""/148, 0x94) r5 = syz_open_dev$vcsa(&(0x7f0000001440), 0x5, 0x20000) write$snapshot(r5, &(0x7f0000001480)="70b947c806f1fd7e15edd29743bba4e1c797f63a670a0c81924f392493973632572ee8099434157743a1ff1e87ce18c65d7d5b4c5a3566a01d1f17bdc87ade4170d185df65becff07153c911a035a9117793e2313bbde6871fdbcf7e", 0x5c) 01:16:20 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3000000, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xafb2f349613b1a23}], @NL80211_ATTR_MAC={0xa, 0x6, @random="bd4ba2ec4c16"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000088}, 0x400) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x1}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x3f}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x64}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x94b}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffaa}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xdae8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}]}, 0xc4}, 0x1, 0x0, 0x0, 0x81}, 0x4800) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r6, &(0x7f0000000480)='./file0\x00', 0x808a, 0x8000) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=""/4096) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f0000001ac0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a80)={&(0x7f0000001500)={0x550, 0x0, 0x804, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x57}}}}, [@NL80211_PMSR_ATTR_PEERS={0x140, 0x5, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xdf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8979}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x3f0, 0x5, 0x0, 0x1, [{0x17c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81e9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x195}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ba}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1bc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x30, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}]}, 0x550}, 0x1, 0x0, 0x0, 0x1}, 0x90) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001b00), 0x40000, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000001b40)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000001b80)=""/46, &(0x7f0000001bc0)=0x2e) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r7) sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, r10, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x48}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x141}]}, 0x34}}, 0x40000) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000001d40)={0xbc9, 0x20, 0x9, 0x100000001, 0x7fffffff, 0x9c}) 01:16:20 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x404002, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="0d1bb584371c4b4d39898fbf9f3a28209283c667d6048d9d361696498ea17756368b09a380eb899e30048d27115c27a0344c0aea63761ef7336bdf4251775272adf3dcee1cb6415a00361f963cff24a9944fb3e8227382861543b0e19cfde55c35346b07c9b728ff5494a53e6b8ed706f529fb5c8d07453bd5811c8dcfc151d6a7dc53116424dc42fa21bf5bcfb0ba93a76e6a92cbfefc545f2fd5aed6", 0x9d, 0x3ff, 0x0, 0x3, r0}, &(0x7f0000000140)) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "f5759c2177fed84e89fedca026575da80d86"}, 0x1d) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000200)) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000240)=[{r2, 0x401}], 0x1, 0x5) pwrite64(r2, &(0x7f0000000280)="f9ed105945900aedc478a2e5d16a4912f110fbd4e7e27986f496199e3ef2875511fa552b864b3f8b3c21e4611d", 0x2d, 0x6) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000002c0)="b023131b92684f7185eb5f6bfbf9a1c9bb586196cf5330f302d2163aac20ab363029d92a7b3ffa275d9e67fce5e3776cec00cae84b9d4f70d89115bb2681d42fdbf298ee650258159c3105e60fc944968ddbd1c122880df06c876000f27c5a7f663a09c52176b95103df3e60bd9a720f611a2d3b", 0x74) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000340)={0x20, 0xfffb}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) copy_file_range(0xffffffffffffffff, &(0x7f0000000380)=0x1000, r3, &(0x7f00000003c0)=0xff, 0x5, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) getpeername(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000480)=0x80) ftruncate(r4, 0x9) keyctl$setperm(0x5, 0x0, 0x12002005) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000500)) [ 123.136651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.138174] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.139671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.144097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.146960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.207312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.209608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.212108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.215428] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.219477] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.276195] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.278223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.279711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.283214] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.284919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.292462] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.303134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.311777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.316670] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.321390] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.329648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.330475] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.334188] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.335368] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.338195] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.341728] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.341908] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.345884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.349230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.353003] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 123.354167] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.360963] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.363985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.365273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.365859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.373469] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.375328] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.376933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.396067] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.412766] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.166138] Bluetooth: hci0: command tx timeout [ 125.293641] Bluetooth: hci1: command tx timeout [ 125.357662] Bluetooth: hci2: command tx timeout [ 125.421962] Bluetooth: hci6: command tx timeout [ 125.422996] Bluetooth: hci4: command tx timeout [ 125.423028] Bluetooth: hci7: command tx timeout [ 125.485640] Bluetooth: hci3: command tx timeout [ 125.550696] Bluetooth: hci5: command tx timeout [ 127.213910] Bluetooth: hci0: command tx timeout [ 127.341902] Bluetooth: hci1: command tx timeout [ 127.406730] Bluetooth: hci2: command tx timeout [ 127.469849] Bluetooth: hci6: command tx timeout [ 127.469968] Bluetooth: hci7: command tx timeout [ 127.470338] Bluetooth: hci4: command tx timeout [ 127.533716] Bluetooth: hci3: command tx timeout [ 127.597682] Bluetooth: hci5: command tx timeout [ 129.261614] Bluetooth: hci0: command tx timeout [ 129.389814] Bluetooth: hci1: command tx timeout [ 129.453621] Bluetooth: hci2: command tx timeout [ 129.518730] Bluetooth: hci4: command tx timeout [ 129.519288] Bluetooth: hci7: command tx timeout [ 129.519786] Bluetooth: hci6: command tx timeout [ 129.581669] Bluetooth: hci3: command tx timeout [ 129.647246] Bluetooth: hci5: command tx timeout [ 131.309803] Bluetooth: hci0: command tx timeout [ 131.437711] Bluetooth: hci1: command tx timeout [ 131.503563] Bluetooth: hci2: command tx timeout [ 131.565681] Bluetooth: hci6: command tx timeout [ 131.566252] Bluetooth: hci7: command tx timeout [ 131.566818] Bluetooth: hci4: command tx timeout [ 131.630644] Bluetooth: hci3: command tx timeout [ 131.694791] Bluetooth: hci5: command tx timeout [ 185.985436] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.991541] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.992435] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.995145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.996012] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.997978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.000777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.002455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.004455] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.005947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.047026] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.050238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.055544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.063860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.071757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.122103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.129358] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.134491] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.139214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.143667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.149169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.168795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.171331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.173505] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.176979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.235085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.257262] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 186.259474] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.260763] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.264134] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.265482] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 186.268767] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.271822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.277009] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.278818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 186.285892] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.295041] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 186.297133] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.302684] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.307679] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 188.077746] Bluetooth: hci1: command tx timeout [ 188.078331] Bluetooth: hci0: command tx timeout [ 188.205617] Bluetooth: hci2: command tx timeout [ 188.270260] Bluetooth: hci4: command tx timeout [ 188.271002] Bluetooth: hci3: command tx timeout [ 188.399608] Bluetooth: hci7: command tx timeout [ 188.400308] Bluetooth: hci5: command tx timeout [ 188.400867] Bluetooth: hci6: command tx timeout [ 190.125709] Bluetooth: hci1: command tx timeout [ 190.126194] Bluetooth: hci0: command tx timeout [ 190.253941] Bluetooth: hci2: command tx timeout [ 190.318447] Bluetooth: hci4: command tx timeout [ 190.318967] Bluetooth: hci3: command tx timeout [ 190.445657] Bluetooth: hci6: command tx timeout [ 190.446139] Bluetooth: hci5: command tx timeout [ 190.447420] Bluetooth: hci7: command tx timeout [ 192.174568] Bluetooth: hci1: command tx timeout [ 192.175102] Bluetooth: hci0: command tx timeout [ 192.301917] Bluetooth: hci2: command tx timeout [ 192.367565] Bluetooth: hci3: command tx timeout [ 192.368115] Bluetooth: hci4: command tx timeout [ 192.493759] Bluetooth: hci7: command tx timeout [ 192.494292] Bluetooth: hci5: command tx timeout [ 192.494853] Bluetooth: hci6: command tx timeout [ 194.221925] Bluetooth: hci0: command tx timeout [ 194.222388] Bluetooth: hci1: command tx timeout [ 194.350575] Bluetooth: hci2: command tx timeout [ 194.413926] Bluetooth: hci4: command tx timeout [ 194.414742] Bluetooth: hci3: command tx timeout [ 194.541654] Bluetooth: hci5: command tx timeout [ 194.542154] Bluetooth: hci6: command tx timeout [ 194.543124] Bluetooth: hci7: command tx timeout [ 248.325986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.327354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.328601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.331128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.334869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.510971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.515324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.519283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.527908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.537401] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.650964] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.653873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.657287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.664939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.671020] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.675916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.681569] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.685445] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.688434] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.691623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.694430] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.737348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.740284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.751990] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.752182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.758908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.761461] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.763572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.771379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.775231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.829708] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.846377] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.852656] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.854218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.857261] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.858484] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.882703] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.884914] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.901995] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.950187] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.351903] Bluetooth: hci0: command tx timeout [ 250.606693] Bluetooth: hci1: command tx timeout [ 250.733688] Bluetooth: hci2: command tx timeout [ 250.797935] Bluetooth: hci4: command tx timeout [ 250.925655] Bluetooth: hci5: command tx timeout [ 250.925725] Bluetooth: hci3: command tx timeout [ 251.055167] Bluetooth: hci7: command tx timeout [ 251.117670] Bluetooth: hci6: command tx timeout [ 252.398793] Bluetooth: hci0: command tx timeout [ 252.653754] Bluetooth: hci1: command tx timeout [ 252.782751] Bluetooth: hci2: command tx timeout [ 252.845998] Bluetooth: hci4: command tx timeout [ 252.973618] Bluetooth: hci3: command tx timeout [ 252.974778] Bluetooth: hci5: command tx timeout [ 253.101610] Bluetooth: hci7: command tx timeout [ 253.167706] Bluetooth: hci6: command tx timeout [ 254.445660] Bluetooth: hci0: command tx timeout [ 254.701653] Bluetooth: hci1: command tx timeout [ 254.829612] Bluetooth: hci2: command tx timeout [ 254.893906] Bluetooth: hci4: command tx timeout [ 255.021831] Bluetooth: hci5: command tx timeout [ 255.022258] Bluetooth: hci3: command tx timeout [ 255.149911] Bluetooth: hci7: command tx timeout [ 255.214176] Bluetooth: hci6: command tx timeout [ 256.494646] Bluetooth: hci0: command tx timeout [ 256.750358] Bluetooth: hci1: command tx timeout [ 256.878835] Bluetooth: hci2: command tx timeout [ 256.941638] Bluetooth: hci4: command tx timeout [ 257.070692] Bluetooth: hci3: command tx timeout [ 257.070718] Bluetooth: hci5: command tx timeout [ 257.198658] Bluetooth: hci7: command tx timeout [ 257.261604] Bluetooth: hci6: command tx timeout [ 311.234862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.236996] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.239708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.257854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.264715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.298199] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.303461] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.305231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.311295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.314709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.379441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.389620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.397323] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.414874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.421261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.443379] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.463129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.473894] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.477371] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.481908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.505151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.534127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.535731] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.590125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.594033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.595767] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.599367] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.600368] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.605120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.605258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.617261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.618830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.622332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.625056] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.627021] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.655055] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.764757] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.768760] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.789702] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.799425] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.325927] Bluetooth: hci0: command tx timeout [ 313.326978] Bluetooth: hci1: command tx timeout [ 313.453639] Bluetooth: hci2: command tx timeout [ 313.581823] Bluetooth: hci3: command tx timeout [ 313.645627] Bluetooth: hci4: command tx timeout [ 313.710971] Bluetooth: hci5: command tx timeout [ 313.774661] Bluetooth: hci6: command tx timeout [ 313.972059] Bluetooth: hci7: command tx timeout [ 315.373955] Bluetooth: hci1: command tx timeout [ 315.374675] Bluetooth: hci0: command tx timeout [ 315.502575] Bluetooth: hci2: command tx timeout [ 315.632616] Bluetooth: hci3: command tx timeout [ 315.693640] Bluetooth: hci4: command tx timeout [ 315.757829] Bluetooth: hci5: command tx timeout [ 315.821699] Bluetooth: hci6: command tx timeout [ 316.013646] Bluetooth: hci7: command tx timeout [ 317.421831] Bluetooth: hci1: command tx timeout [ 317.422608] Bluetooth: hci0: command tx timeout [ 317.550736] Bluetooth: hci2: command tx timeout [ 317.677767] Bluetooth: hci3: command tx timeout [ 317.741898] Bluetooth: hci4: command tx timeout [ 317.807213] Bluetooth: hci5: command tx timeout [ 317.872594] Bluetooth: hci6: command tx timeout [ 318.062889] Bluetooth: hci7: command tx timeout [ 319.470968] Bluetooth: hci0: command tx timeout [ 319.471635] Bluetooth: hci1: command tx timeout [ 319.597679] Bluetooth: hci2: command tx timeout [ 319.726023] Bluetooth: hci3: command tx timeout [ 319.789776] Bluetooth: hci4: command tx timeout [ 319.853662] Bluetooth: hci5: command tx timeout [ 319.917891] Bluetooth: hci6: command tx timeout [ 320.109779] Bluetooth: hci7: command tx timeout [ 373.708609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.711346] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.716145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.723169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.727751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.727884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.732950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.737994] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.783340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.792118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.939128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.965188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.967024] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.969393] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.972387] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.974849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.979927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.987942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.997890] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.998218] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.032062] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.034969] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.036773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.041306] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.043332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.045093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.050530] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.053437] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.055351] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.058007] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.085974] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.087355] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.089394] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.093868] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.097203] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 374.124877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.145941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.150795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.200910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.258468] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.790631] Bluetooth: hci1: command tx timeout [ 375.854624] Bluetooth: hci0: command tx timeout [ 376.110641] Bluetooth: hci7: command tx timeout [ 376.111420] Bluetooth: hci3: command tx timeout [ 376.174737] Bluetooth: hci4: command tx timeout [ 376.175343] Bluetooth: hci6: command tx timeout [ 376.176135] Bluetooth: hci2: command tx timeout [ 376.367695] Bluetooth: hci5: command tx timeout [ 377.838554] Bluetooth: hci1: command tx timeout [ 377.901611] Bluetooth: hci0: command tx timeout [ 378.158555] Bluetooth: hci7: command tx timeout [ 378.159060] Bluetooth: hci3: command tx timeout [ 378.222622] Bluetooth: hci2: command tx timeout [ 378.223105] Bluetooth: hci4: command tx timeout [ 378.223573] Bluetooth: hci6: command tx timeout [ 378.413972] Bluetooth: hci5: command tx timeout [ 379.885924] Bluetooth: hci1: command tx timeout [ 379.950707] Bluetooth: hci0: command tx timeout [ 380.206797] Bluetooth: hci3: command tx timeout [ 380.207301] Bluetooth: hci7: command tx timeout [ 380.269639] Bluetooth: hci6: command tx timeout [ 380.270124] Bluetooth: hci4: command tx timeout [ 380.270593] Bluetooth: hci2: command tx timeout [ 380.461587] Bluetooth: hci5: command tx timeout [ 381.934220] Bluetooth: hci1: command tx timeout [ 381.999585] Bluetooth: hci0: command tx timeout [ 382.253839] Bluetooth: hci7: command tx timeout [ 382.254331] Bluetooth: hci3: command tx timeout [ 382.317673] Bluetooth: hci6: command tx timeout [ 382.318138] Bluetooth: hci2: command tx timeout [ 382.318606] Bluetooth: hci4: command tx timeout [ 382.509812] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 01:21:26 Registers: info registers vcpu 0 RAX=0000000000000004 RBX=0000000000000000 RCX=ffffffff817badc6 RDX=0000000000000000 RSI=ffff88801576c158 RDI=ffff88801576b700 RBP=ffff88801576b700 RSP=ffff88806ce08e10 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff8641fb57 R11=0000000000000001 R12=0000000000000002 R13=ffff88801576c158 R14=ffffffff85c28bc0 R15=ffff88806ce37d52 RIP=ffffffff815189ef RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fc9025b080 CR3=000000000d1bf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888031777f58 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81353f52 RDI=0000000000000001 RBP=ffffffff85c1d1c0 RSP=ffff8880317771e0 R8 =0000000000000001 R9 =ffff8880317772d8 R10=000000000003b6bd R11=0000000000003db4 R12=ffffffff81353f52 R13=ffff8880317772e0 R14=ffff888014d7b700 R15=ffff888031777298 RIP=ffffffff8151ac47 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc848eaf78 CR3=000000002f732000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000