Warning: Permanently added '[localhost]:29438' (ECDSA) to the list of known hosts.
2025/06/07 06:45:53 fuzzer started
2025/06/07 06:45:53 dialing manager at localhost:40003
syzkaller login: [  108.474286] cgroup: Unknown subsys name 'net'
[  108.601122] cgroup: Unknown subsys name 'cpuset'
[  108.635466] cgroup: Unknown subsys name 'rlimit'
2025/06/07 06:46:15 syscalls: 200
2025/06/07 06:46:15 code coverage: enabled
2025/06/07 06:46:15 comparison tracing: enabled
2025/06/07 06:46:15 extra coverage: enabled
2025/06/07 06:46:15 setuid sandbox: enabled
2025/06/07 06:46:15 namespace sandbox: enabled
2025/06/07 06:46:15 Android sandbox: enabled
2025/06/07 06:46:15 fault injection: enabled
2025/06/07 06:46:15 leak checking: enabled
2025/06/07 06:46:15 net packet injection: enabled
2025/06/07 06:46:15 net device setup: enabled
2025/06/07 06:46:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/07 06:46:15 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/07 06:46:15 USB emulation: enabled
2025/06/07 06:46:15 hci packet injection: enabled
2025/06/07 06:46:15 wifi device emulation: enabled
2025/06/07 06:46:15 802.15.4 emulation: enabled
2025/06/07 06:46:15 fetching corpus: 0, signal 0/0 (executing program)
2025/06/07 06:46:16 starting 8 fuzzer processes
06:46:16 executing program 1:
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffe, 0xf0, 0x6, @scatter={0x6, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000040)=""/142, 0x8e}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/115, 0x73}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000200)=""/213, 0xd5}]}, &(0x7f0000000380)="baa1dbed31aea5f84853cb46faef6b5859d58a3d41e3a85556101f0dd0786b7dd7b23254943be273ff8cf8b9139910082ee6f8fece2b63d47cdb17bb73c616aa430ecdb1ab488ded5b1513ff82fb945a7f58108b4e3fbcf9c4e7638abe386884224a0751b739e8c00356e5a224b94b72994690ce1c2adf2e163320d052f3e12b887546f326942b9f20a3185184e8f8d63f1e4cbba97ff1eecc5ced0d323ff9a5af96fcfc23544ffae06ce4e9103e34b74f14b7e62beb46cde215e057e53c374ee0da514ef24acee8304ff9d47c61d4593078142777750b7a3e17a955876609d4b29d73c8537d927318a2916acbcd26d1", &(0x7f0000000480)=""/92, 0x5, 0x10003, 0x3, &(0x7f0000000500)})
r0 = syz_open_dev$sg(&(0x7f00000005c0), 0xb0, 0x2801)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000600))
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000640)={0x89, 0x1f, 0x800, "e6548a7e8a413c5635909dac91657d9d12c16b1998086d7f90f9cbf7a3eed1045b654a5082966bdbc90f5b2d47f09887b6697d7f24e01df564334c9f12ca3eae074d1a69b27d59a6a70b45663d01f02bb3ddfc91710aca6d8aebaa861b9e0690645a00ca78d225478424b6ea4f9d17cb2147077944002f6eda472df960cf4ba85ff179ece7e2a2ffff"})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001700), 0x40, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001740)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000700)="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", 0x1000, r1}, 0x68)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000017c0), 0x185840, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000001800)=0x6)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
write$cgroup_devices(r2, &(0x7f0000001840)={'b', ' *:* ', 'rwm\x00'}, 0xa)
ioctl$LOOP_SET_CAPACITY(r2, 0x4c07)
ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000001880)=0x1)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000018c0))
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000001900)={0x70, ""/112})
r3 = syz_open_dev$sg(&(0x7f0000001980), 0x40, 0x200800)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000019c0)={0xe0, ""/224})
ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0)

06:46:16 executing program 0:
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001180)={0x53, 0xfffffffffffffffd, 0x1000, 0xc4, @buffer={0x0, 0x72, &(0x7f0000000000)=""/114}, &(0x7f0000000080)="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", &(0x7f0000001080)=""/149, 0x9, 0x4, 0x3, &(0x7f0000001140)})
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000001200))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000012c0)={0x1c, 0x0, &(0x7f0000001240)=[@dead_binder_done, @request_death={0x400c630e, 0x2}], 0x1b, 0x0, &(0x7f0000001280)="d35023f3eca639a91b54323888efea460f34f4e7fc4e5eb80cb061"})
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001300), 0xf0, 0x40240)
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001340), 0xa67b, 0x940)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000001380))
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000013c0))
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000001400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001480)=""/235, 0xeb}, {&(0x7f0000001580)=""/63, 0x3f}], 0x2}}, {{&(0x7f0000001600)=@generic, 0x80, &(0x7f0000001900)=[{&(0x7f0000001680)=""/28, 0x1c}, {&(0x7f00000016c0)=""/71, 0x47}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000001840)=""/181, 0xb5}], 0x4, &(0x7f0000001940)=""/34, 0x22}, 0x401}, {{&(0x7f0000001980)=@alg, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)=""/142, 0x8e}, {&(0x7f0000001ac0)=""/69, 0x45}], 0x2, &(0x7f0000001b80)=""/61, 0x3d}, 0x8}, {{&(0x7f0000001bc0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001c40)=""/13, 0xd}], 0x1, &(0x7f0000001cc0)=""/137, 0x89}, 0x20}, {{&(0x7f0000001d80)=@hci, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/138, 0x8a}, {&(0x7f0000001ec0)}], 0x2, &(0x7f0000001f40)=""/87, 0x57}, 0x1}, {{&(0x7f0000001fc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002040)=""/85, 0x55}, {&(0x7f00000020c0)=""/22, 0x16}, {&(0x7f0000002100)=""/83, 0x53}, {&(0x7f0000002180)=""/245, 0xf5}, {&(0x7f0000002280)=""/15, 0xf}, {&(0x7f00000022c0)}], 0x6, &(0x7f0000002380)=""/143, 0x8f}}, {{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002700)=[{&(0x7f00000024c0)=""/50, 0x32}, {&(0x7f0000002500)=""/200, 0xc8}, {&(0x7f0000002600)=""/59, 0x3b}, {&(0x7f0000002640)=""/117, 0x75}, {&(0x7f00000026c0)=""/24, 0x18}], 0x5, &(0x7f0000002780)=""/171, 0xab}, 0x6}, {{&(0x7f0000002840)=@isdn, 0x80, &(0x7f0000003e00)=[{&(0x7f00000028c0)=""/132, 0x84}, {&(0x7f0000002980)=""/138, 0x8a}, {&(0x7f0000002a40)=""/215, 0xd7}, {&(0x7f0000002b40)=""/77, 0x4d}, {&(0x7f0000002bc0)=""/15, 0xf}, {&(0x7f0000002c00)=""/238, 0xee}, {&(0x7f0000002d00)=""/226, 0xe2}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x8}, 0x7fffffff}, {{&(0x7f0000003e80)=@tipc=@id, 0x80, &(0x7f0000004100)=[{&(0x7f0000003f00)=""/81, 0x51}, {&(0x7f0000003f80)=""/54, 0x36}, {&(0x7f0000003fc0)=""/159, 0x9f}, {&(0x7f0000004080)=""/47, 0x2f}, {&(0x7f00000040c0)=""/37, 0x25}], 0x5}, 0x2}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004180)=""/238, 0xee}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/253, 0xfd}, {&(0x7f0000005380)=""/62, 0x3e}, {&(0x7f00000053c0)=""/188, 0xbc}], 0x5, &(0x7f0000005500)=""/166, 0xa6}, 0x282}], 0xa, 0x2000, &(0x7f0000005840))
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0)
write$tcp_mem(r3, &(0x7f0000005880)={0x5517, 0x20, 0x9, 0x20, 0x6d}, 0x48)
syz_open_dev$sg(&(0x7f0000005900), 0x8, 0x50400)
r4 = syz_open_dev$sg(&(0x7f0000005940), 0x4, 0x200000)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)
socket$inet6_icmp(0xa, 0x2, 0x3a)

06:46:16 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = syz_open_pts(r0, 0x101)
r2 = socket$inet6(0xa, 0x3, 0x1ff)
getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000000), &(0x7f0000000040))
ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000080)={0x5, 0x1, 0x1, 0x9, 0x80000001})
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xff)
ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x72b)
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000100)={0x1000, ""/4096})
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
r4 = getpgid(0x0)
rt_sigqueueinfo(r4, 0x3b, &(0x7f0000001140)={0x25, 0xfff, 0x7fffffff})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001580)={0x0, 0xffffffffffffffff, 0x21, 0x3, @scatter={0x3, 0x0, &(0x7f0000001440)=[{&(0x7f00000011c0)=""/186, 0xba}, {&(0x7f0000001280)=""/193, 0xc1}, {&(0x7f0000001380)=""/190, 0xbe}]}, &(0x7f0000001480)="1e479df62971ec9618f5bde23c96f6d79220e2437158a1fe572447cc7d8140eef2", &(0x7f00000014c0)=""/74, 0x6, 0x10026, 0xffffffffffffffff, &(0x7f0000001540)})
ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000001600))
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001640))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001680)='cgroup.threads\x00', 0x2, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x2000001, 0x4000010, 0xffffffffffffffff, 0x8000000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000016c0), 0x10003, 0x0)
ioctl$TIOCGPTPEER(r5, 0x5441, 0x80)

06:46:16 executing program 3:
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)=0x9)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)=0x1)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_pts(r0, 0x400)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x240040, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x101)
r3 = clone3(&(0x7f0000001300)={0x40110000, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0, {0x25}, &(0x7f00000001c0)=""/4096, 0x1000, &(0x7f00000011c0)=""/202, &(0x7f00000012c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r2}}, 0x58)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000001380)={r4, 0x0, 0x1})
syz_open_dev$ttys(0xc, 0x2, 0x0)
r6 = clone3(&(0x7f00000025c0)={0x420c0000, &(0x7f00000013c0), &(0x7f0000001400), &(0x7f0000001440), {0x10}, &(0x7f0000001480)=""/242, 0xf2, &(0x7f0000001580)=""/4096, &(0x7f0000002580)=[r4, r3, r5, r5, r5, r5], 0x6}, 0x58)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000002640)={r6, 0x0, 0xb8})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002680)='./binderfs2/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000026c0)={0x73622a85, 0x1100, 0x1})
syz_io_uring_setup(0x47e6, &(0x7f0000002700)={0x0, 0xa3f7, 0x20, 0x0, 0xbd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002780), &(0x7f00000027c0))
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000002800))
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000002840))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002880), 0x48000, 0x0)

[  131.336773] audit: type=1400 audit(1749278776.772:7): avc:  denied  { execmem } for  pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
06:46:16 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x15)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000fef000/0xb000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x2000)=nil], &(0x7f0000000040)=[0x8, 0x6, 0xfffff000, 0x9], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x1000, ""/4096})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x20010, 0xffffffffffffffff, 0x8000000)
r0 = syz_open_pts(0xffffffffffffffff, 0x420001)
move_pages(0x0, 0x1, &(0x7f0000001100)=[&(0x7f0000ff2000/0x4000)=nil], 0x0, &(0x7f0000001140)=[0x0, 0x0, 0x0], 0x4)
sigaltstack(&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000001180))
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f00000011c0))
r1 = pidfd_open(0x0, 0x0)
r2 = pidfd_getfd(r1, r0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
process_mrelease(r1, 0x0)
syz_open_dev$sg(&(0x7f0000001240), 0x2, 0x80800)
r3 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, r3)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
process_mrelease(r2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001280), 0x4, 0x2)
ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f00000012c0))
ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380)

06:46:16 executing program 4:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x2, 0x3f, 0xd02000, 0x0, 0x5})
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
process_mrelease(r0, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'm\x00'}, 0x8)
process_mrelease(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)={0x3, 0x0, @b}, 0x48, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x40400, 0x0)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
pidfd_getfd(r2, r3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@local, 0x75})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x800448d3, &(0x7f0000000340)="5d0dcba00623be846acab156eddbe520bab1e7a482087d30463e56ff5be6d9d7f49240049cff5410b0d84752e4c6fce4f521aa841ee0ba54867f266df103ebafa36692216e01f98391017ebe68cf1cc6056c33a5639bf4458158446d02b779b4babd45712e0af097c67f0de274bc7a36d69616aa620e8c6c343ee9b493744373acb97e8d80c3fec8bf10c176811f942ffe1a9dfcfe1ddd856ede0ea454511f840437dc04e6061894ac0089e5cbbdf91abe8948a961b8b32950d27adb1c01864f9d10802f1f64")
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb, 0x5, "fc2b8147f611606c7baa203f0910054ae87ca76e42245703835d89e13eb6d41806fdaba3d2e468523900f87c60761e6a014fad417ff9a03eeac5c697ba539897", "7c064d141c94e71550b4370af7c187c358a769de344c4171e39e82b555f52480cb735d000efc9706ac3a24dd8c141d6b40f1386dced76681c9ab8b4390a65127", "c5f1e9646f0ad03eb74fb13a2d9878dd9b96c63dfd321ce34c02374745c8021b", [0x7, 0x2]})
waitid$P_PIDFD(0x3, r0, &(0x7f0000000540), 0x1000000, 0x0)
r6 = pidfd_open(0xffffffffffffffff, 0x0)
process_mrelease(r6, 0x0)

06:46:16 executing program 6:
recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/202, 0xca}], 0x1, &(0x7f00000001c0)=""/78, 0x4e}, 0xffffffff}, {{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001440)=[{&(0x7f00000002c0)=""/143, 0x8f}, {&(0x7f0000000380)=""/134, 0x86}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000001480)=""/134, 0x86}, 0x10001}, {{&(0x7f0000001540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/20, 0x14}, {&(0x7f0000001600)=""/250, 0xfa}, {&(0x7f0000001700)=""/160, 0xa0}], 0x3, &(0x7f0000001800)=""/236, 0xec}, 0x6}, {{&(0x7f0000001900)=@x25={0x9, @remote}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001980)=""/22, 0x16}, {&(0x7f00000019c0)=""/60, 0x3c}, {&(0x7f0000001a00)=""/215, 0xd7}, {&(0x7f0000001b00)=""/232, 0xe8}, {&(0x7f0000001c00)=""/228, 0xe4}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/94, 0x5e}, {&(0x7f0000002d80)=""/108, 0x6c}, {&(0x7f0000002e00)=""/196, 0xc4}], 0x9, &(0x7f0000002fc0)=""/247, 0xf7}}, {{&(0x7f00000030c0)=@in, 0x80, &(0x7f0000005700)=[{&(0x7f0000003140)=""/21, 0x15}, {&(0x7f0000003180)=""/117, 0x75}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/206, 0xce}, {&(0x7f0000005300)=""/132, 0x84}, {&(0x7f00000053c0)=""/149, 0x95}, {&(0x7f0000005480)=""/251, 0xfb}, {&(0x7f0000005580)=""/161, 0xa1}, {&(0x7f0000005640)=""/188, 0xbc}], 0xa, &(0x7f00000057c0)=""/149, 0x95}, 0x6}, {{&(0x7f0000005880)=@alg, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005900)=""/7, 0x7}, {&(0x7f0000005940)=""/90, 0x5a}, {&(0x7f00000059c0)=""/212, 0xd4}, {&(0x7f0000005ac0)=""/75, 0x4b}], 0x4, &(0x7f0000005b80)=""/210, 0xd2}, 0x9}], 0x6, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005e00), 0xb2402, 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000005e40)=0x33)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005e80), 0xc827ac2f586bc158, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000005ec0), 0x4800, 0x0)
process_mrelease(r2, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
recvmmsg(r1, &(0x7f0000006dc0)=[{{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f0000005f00)=""/242, 0xf2}, {&(0x7f0000006000)=""/6, 0x6}, {&(0x7f0000006040)=""/182, 0xb6}, {&(0x7f0000006100)=""/129, 0x81}, {&(0x7f00000061c0)=""/167, 0xa7}, {&(0x7f0000006280)=""/113, 0x71}, {&(0x7f0000006300)=""/234, 0xea}, {&(0x7f0000006400)=""/213, 0xd5}], 0x8, &(0x7f0000006580)=""/101, 0x65}, 0x9}, {{&(0x7f0000006600)=@caif=@rfm, 0x80, &(0x7f0000006780)=[{&(0x7f0000006680)=""/100, 0x64}, {&(0x7f0000006700)=""/69, 0x45}], 0x2, &(0x7f00000067c0)=""/234, 0xea}, 0x1e0}, {{&(0x7f00000068c0)=@hci, 0x80, &(0x7f0000006a80)=[{&(0x7f0000006940)=""/254, 0xfe}, {&(0x7f0000006a40)=""/45, 0x2d}], 0x2, &(0x7f0000006ac0)=""/216, 0xd8}, 0xf6c}, {{&(0x7f0000006bc0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000006c80)=[{&(0x7f0000006c40)=""/42, 0x2a}], 0x1, &(0x7f0000006cc0)=""/250, 0xfa}, 0x1}], 0x4, 0x12100, &(0x7f0000006ec0))
r3 = syz_open_dev$loop(&(0x7f0000006f00), 0x9, 0x185000)
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000006f40))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000007000)={0x73622a85, 0x101, 0x2})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000007040), 0x80000, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x817)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000007140), 0x49f0193bbb1c70a, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000007180)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000007080)="17f4b27fc8ac6dd27bec42ff82bc115cf4d3e61c7d23d5038129f502d83792d73954243e7722cb38c80f2efd99dc659796c72cc66fa47d6edd012751ed6df8ddd0b24be8c9f25518de2881b4a12c5f153cabe549d092a997fcc33d065b51cd6671b28836f3cf7ce2df8376b1bd51f211ea8ea3f7e1a1432864a3feea89a6de48024cabcb1fb9fe649914d7307d0aedf289d2b11f497248bfdd6e", 0x9a, r5}, 0x68)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
clone3(&(0x7f00000073c0)={0x41008800, &(0x7f0000007200), &(0x7f0000007240)=<r6=>0x0, &(0x7f0000007280), {0x2c}, &(0x7f00000072c0)=""/84, 0x54, &(0x7f0000007340)=""/53, &(0x7f0000007380), 0x0, {r0}}, 0x58)
process_vm_writev(r6, &(0x7f0000007580)=[{&(0x7f0000007440)=""/5, 0x5}, {&(0x7f0000007480)=""/221, 0xdd}], 0x2, &(0x7f0000008980)=[{&(0x7f00000075c0)=""/108, 0x6c}, {&(0x7f0000007640)=""/103, 0x67}, {&(0x7f00000076c0)=""/4096, 0x1000}, {&(0x7f00000086c0)=""/61, 0x3d}, {&(0x7f0000008700)=""/24, 0x18}, {&(0x7f0000008740)=""/58, 0x3a}, {&(0x7f0000008780)=""/26, 0x1a}, {&(0x7f00000087c0)=""/157, 0x9d}, {&(0x7f0000008880)=""/219, 0xdb}], 0x9, 0x0)

06:46:16 executing program 7:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
select(0x40, &(0x7f0000000000)={0x3aa4c1b6, 0x1, 0x5, 0x30da, 0x0, 0x1000, 0x9, 0x9}, &(0x7f0000000040)={0x7ff, 0x6a10, 0x8, 0x0, 0x7fff, 0x1, 0x5}, &(0x7f0000000080)={0x9, 0x200, 0x6, 0x100, 0x40, 0x9, 0x3, 0xa1c5}, &(0x7f0000000100)={r0, r1/1000+10000})
select(0x40, &(0x7f0000000140)={0x1000, 0x8, 0x5, 0x6, 0x903, 0x4, 0x4, 0x6}, &(0x7f0000000180)={0x3, 0x3, 0x7, 0x100000000, 0x200, 0x9, 0x9ffa, 0x2}, &(0x7f00000001c0)={0x7, 0x0, 0x40, 0x8000, 0xd90, 0x40, 0x1, 0x3f}, &(0x7f0000000200))
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x2)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvmmsg(r2, &(0x7f00000026c0)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/205, 0xcd}, {&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/10, 0xa}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/26, 0x1a}, {&(0x7f00000005c0)=""/131, 0x83}, {&(0x7f0000000680)=""/48, 0x30}], 0x8, &(0x7f0000000740)=""/54, 0x36}, 0xff}, {{&(0x7f0000000780)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/13, 0xd}, {&(0x7f00000008c0)=""/19, 0x13}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/248, 0xf8}, {&(0x7f0000000b00)=""/46, 0x2e}, {&(0x7f0000000b40)=""/243, 0xf3}, {&(0x7f0000000c40)=""/151, 0x97}, {&(0x7f0000000d00)=""/29, 0x1d}], 0x9, &(0x7f0000000e00)=""/242, 0xf2}, 0x7}, {{&(0x7f0000000f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000f80)=""/107, 0x6b}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/214, 0xd6}, {&(0x7f0000002100)=""/139, 0x8b}, {&(0x7f00000021c0)=""/13, 0xd}, {&(0x7f0000002200)=""/156, 0x9c}], 0x6, &(0x7f0000002340)=""/219, 0xdb}, 0x1000}, {{&(0x7f0000002440)=@tipc=@id, 0x80, &(0x7f0000002680)=[{&(0x7f00000024c0)=""/136, 0x88}, {&(0x7f0000002580)=""/102, 0x66}, {&(0x7f0000002600)=""/102, 0x66}], 0x3}, 0x2}], 0x4, 0x80000000, &(0x7f00000027c0))
recvmmsg(r3, &(0x7f0000003300)=[{{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002880)=""/61, 0x3d}, {&(0x7f00000028c0)=""/59, 0x3b}, {&(0x7f0000002900)=""/4, 0x4}, {&(0x7f0000002940)=""/109, 0x6d}, {&(0x7f00000029c0)=""/157, 0x9d}, {&(0x7f0000002a80)=""/26, 0x1a}], 0x6}, 0x8}, {{&(0x7f0000002b40)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002bc0)=""/251, 0xfb}], 0x1, &(0x7f0000002d00)=""/89, 0x59}, 0x5}, {{&(0x7f0000002d80)=@xdp={0x2c, 0x0, <r4=>0x0}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002e00)=""/18, 0x12}, {&(0x7f0000002e40)=""/72, 0x48}, {&(0x7f0000002ec0)=""/2, 0x2}, {&(0x7f0000002f00)=""/81, 0x51}, {&(0x7f0000002f80)=""/98, 0x62}, {&(0x7f0000003000)=""/200, 0xc8}, {&(0x7f0000003100)=""/177, 0xb1}], 0x7, &(0x7f0000003240)=""/163, 0xa3}, 0xffffffa0}], 0x3, 0x0, &(0x7f00000033c0)={0x77359400})
r5 = getpgid(0xffffffffffffffff)
process_vm_writev(r5, &(0x7f0000003440)=[{&(0x7f0000003400)=""/41, 0x29}], 0x1, &(0x7f0000003540)=[{&(0x7f0000003480)=""/140, 0x8c}], 0x1, 0x0)
clock_gettime(0x2, &(0x7f0000003580))
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvmmsg(r6, &(0x7f0000004c00)=[{{&(0x7f00000035c0)=@xdp, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003640)=""/115, 0x73}], 0x1}, 0xfffffff8}, {{&(0x7f0000003700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003780)=""/176, 0xb0}, {&(0x7f0000003840)=""/226, 0xe2}], 0x2}, 0x4}, {{&(0x7f0000003980)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/62, 0x3e}, {&(0x7f0000004a40)=""/129, 0x81}], 0x3, &(0x7f0000004b40)=""/177, 0xb1}, 0x5}], 0x3, 0x120, &(0x7f0000004cc0)={0x0, 0x989680})
recvmmsg(0xffffffffffffffff, &(0x7f0000008140)=[{{&(0x7f0000004d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000004d80)=""/74, 0x4a}, {&(0x7f0000004e00)=""/165, 0xa5}, {&(0x7f0000004ec0)=""/237, 0xed}, {&(0x7f0000004fc0)=""/244, 0xf4}, {&(0x7f00000050c0)=""/253, 0xfd}, {&(0x7f00000051c0)=""/99, 0x63}], 0x6, &(0x7f00000052c0)=""/115, 0x73}, 0x26df}, {{&(0x7f0000005340)=@alg, 0x80, &(0x7f00000068c0)=[{&(0x7f00000053c0)=""/10, 0xa}, {&(0x7f0000005400)}, {&(0x7f0000005440)=""/209, 0xd1}, {&(0x7f0000005540)=""/156, 0x9c}, {&(0x7f0000005600)=""/56, 0x38}, {&(0x7f0000005640)=""/135, 0x87}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/234, 0xea}, {&(0x7f0000006800)=""/140, 0x8c}], 0x9, &(0x7f0000006980)=""/7, 0x7}, 0xfff}, {{0x0, 0x0, &(0x7f0000006a40)=[{&(0x7f00000069c0)=""/85, 0x55}], 0x1, &(0x7f0000006a80)=""/169, 0xa9}}, {{&(0x7f0000006b40)=@generic, 0x80, &(0x7f0000006d80)=[{&(0x7f0000006bc0)=""/36, 0x24}, {&(0x7f0000006c00)=""/231, 0xe7}, {&(0x7f0000006d00)=""/110, 0x6e}], 0x3, &(0x7f0000006dc0)=""/40, 0x28}, 0x1f}, {{&(0x7f0000006e00)=@sco={0x1f, @none}, 0x80, &(0x7f0000008000)=[{&(0x7f0000006e80)=""/28, 0x1c}, {&(0x7f0000006ec0)=""/242, 0xf2}, {&(0x7f0000006fc0)=""/10, 0xa}, {&(0x7f0000007000)=""/4096, 0x1000}], 0x4, &(0x7f0000008040)=""/212, 0xd4}, 0x4}], 0x5, 0x40010021, 0x0)
r7 = clone3(&(0x7f0000009680)={0x80, &(0x7f00000093c0), &(0x7f0000009400), &(0x7f0000009440), {0x41}, &(0x7f0000009480)=""/145, 0x91, &(0x7f0000009540)=""/227, &(0x7f0000009640)=[r5, r5, r5, r5, r5, r5, r5, r5, r5, r5], 0xa}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000009700)=<r8=>0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000009780)='./cgroup/syz0\x00', 0x200002, 0x0)
clone3(&(0x7f00000097c0)={0x20100, &(0x7f0000008280), &(0x7f00000082c0), &(0x7f0000008300), {0x20}, &(0x7f0000008340)=""/4096, 0x1000, &(0x7f0000009340)=""/110, &(0x7f0000009740)=[r5, r5, r7, 0xffffffffffffffff, r5, r5, r5, r8, r5, r5], 0xa, {r9}}, 0x58)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000009880)={0x0, @nfc={0x27, 0x0, 0x1, 0x6}, @llc={0x1a, 0x320, 0xf8, 0x80, 0x20, 0x7}, @can={0x1d, r4}, 0x20, 0x0, 0x0, 0x0, 0x40, &(0x7f0000009840)='vlan0\x00', 0x100000000, 0x6, 0x4})
clock_gettime(0x0, &(0x7f00000099c0)={<r10=>0x0, <r11=>0x0})
select(0x40, &(0x7f0000009900)={0x1, 0x48, 0x4, 0x7ff, 0x7, 0x5, 0x100000000, 0x3f}, &(0x7f0000009940)={0x7, 0xffff, 0xff, 0x1ff, 0xaa1, 0x100000000, 0x0, 0x6}, &(0x7f0000009980)={0x8000, 0x5, 0x9cea, 0x1ff, 0x0, 0xfff, 0x100000000, 0x6}, &(0x7f0000009a00)={r10, r11/1000+10000})

[  132.827049] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  132.832495] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  132.836007] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  132.838467] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  132.844118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  132.846533] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  132.851166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.858922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  132.862028] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  132.865769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  132.870145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  132.875307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  132.877806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  132.881953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  132.884501] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  132.887268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  132.893554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  132.897558] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  132.901488] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  132.916086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  132.920929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  132.932289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  132.948469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  132.953347] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  132.957982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  132.972161] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  132.982426] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  132.987056] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  132.988013] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  132.993909] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  132.997225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  132.999424] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  133.001117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  133.004135] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  133.004238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  133.012666] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  133.018842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  133.063506] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  133.073718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  133.080755] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  134.959450] Bluetooth: hci2: command tx timeout
[  135.023688] Bluetooth: hci1: command tx timeout
[  135.023704] Bluetooth: hci3: command tx timeout
[  135.086916] Bluetooth: hci7: command tx timeout
[  135.087475] Bluetooth: hci6: command tx timeout
[  135.150708] Bluetooth: hci4: command tx timeout
[  135.151680] Bluetooth: hci5: command tx timeout
[  135.151697] Bluetooth: hci0: command tx timeout
[  137.007371] Bluetooth: hci2: command tx timeout
[  137.070975] Bluetooth: hci3: command tx timeout
[  137.073631] Bluetooth: hci1: command tx timeout
[  137.135325] Bluetooth: hci7: command tx timeout
[  137.136020] Bluetooth: hci6: command tx timeout
[  137.198670] Bluetooth: hci5: command tx timeout
[  137.198797] Bluetooth: hci4: command tx timeout
[  137.199741] Bluetooth: hci0: command tx timeout
[  139.054689] Bluetooth: hci2: command tx timeout
[  139.118685] Bluetooth: hci1: command tx timeout
[  139.119195] Bluetooth: hci3: command tx timeout
[  139.182879] Bluetooth: hci6: command tx timeout
[  139.183038] Bluetooth: hci7: command tx timeout
[  139.247160] Bluetooth: hci0: command tx timeout
[  139.248697] Bluetooth: hci4: command tx timeout
[  139.248706] Bluetooth: hci5: command tx timeout
[  141.102712] Bluetooth: hci2: command tx timeout
[  141.166693] Bluetooth: hci1: command tx timeout
[  141.167165] Bluetooth: hci3: command tx timeout
[  141.230731] Bluetooth: hci7: command tx timeout
[  141.232253] Bluetooth: hci6: command tx timeout
[  141.294822] Bluetooth: hci5: command tx timeout
[  141.295283] Bluetooth: hci4: command tx timeout
[  141.295950] Bluetooth: hci0: command tx timeout
[  192.638356] syz-executor.1 (290) used greatest stack depth: 24912 bytes left
[  192.855790] syz-executor.5 (293) used greatest stack depth: 24864 bytes left
[  195.461110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.466047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.470527] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.481292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  195.487770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  195.545329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  195.557127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  195.561517] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  195.575784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  195.581940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  195.670456] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  195.684105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  195.688945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  195.691074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  195.693944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  195.695154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  195.701762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  195.708187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  195.710299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  195.714123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  195.715187] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  195.716476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  195.743966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  195.751500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  195.788241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  195.792068] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  195.833782] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  195.835171] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  195.837571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  195.841549] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  195.871153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  195.880358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  195.886092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  195.886349] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  195.891887] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  195.901132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  195.910878] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  195.916940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  195.946444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  195.967244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  197.551652] Bluetooth: hci0: command tx timeout
[  197.679712] Bluetooth: hci1: command tx timeout
[  197.871016] Bluetooth: hci2: command tx timeout
[  197.871049] Bluetooth: hci4: command tx timeout
[  197.998711] Bluetooth: hci7: command tx timeout
[  197.998745] Bluetooth: hci5: command tx timeout
[  197.999532] Bluetooth: hci3: command tx timeout
[  198.062897] Bluetooth: hci6: command tx timeout
[  199.599637] Bluetooth: hci0: command tx timeout
[  199.727641] Bluetooth: hci1: command tx timeout
[  199.920672] Bluetooth: hci4: command tx timeout
[  199.920777] Bluetooth: hci2: command tx timeout
[  200.046772] Bluetooth: hci3: command tx timeout
[  200.047086] Bluetooth: hci5: command tx timeout
[  200.047261] Bluetooth: hci7: command tx timeout
[  200.111088] Bluetooth: hci6: command tx timeout
[  201.647792] Bluetooth: hci0: command tx timeout
[  201.776633] Bluetooth: hci1: command tx timeout
[  201.966821] Bluetooth: hci4: command tx timeout
[  201.967760] Bluetooth: hci2: command tx timeout
[  202.095069] Bluetooth: hci7: command tx timeout
[  202.095104] Bluetooth: hci5: command tx timeout
[  202.095153] Bluetooth: hci3: command tx timeout
[  202.158677] Bluetooth: hci6: command tx timeout
[  203.694711] Bluetooth: hci0: command tx timeout
[  203.822787] Bluetooth: hci1: command tx timeout
[  204.014906] Bluetooth: hci2: command tx timeout
[  204.015391] Bluetooth: hci4: command tx timeout
[  204.142712] Bluetooth: hci3: command tx timeout
[  204.143195] Bluetooth: hci7: command tx timeout
[  204.143947] Bluetooth: hci5: command tx timeout
[  204.207117] Bluetooth: hci6: command tx timeout
[  257.670450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  257.675457] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  257.682477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  257.698430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  257.706679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.859179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.863271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  257.868382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  257.875083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.881386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.883172] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  257.889177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.891219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  257.915114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.921715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  258.005532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  258.014902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  258.028202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  258.056373] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  258.065485] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  258.146328] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  258.172229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  258.175310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  258.188097] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  258.192239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  258.198423] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  258.204854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  258.206166] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  258.224076] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  258.225419] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  258.228524] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  258.230550] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  258.250450] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  258.265137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  258.271130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  258.280482] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  258.280493] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  258.311798] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  258.315877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  258.352166] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  259.759988] Bluetooth: hci0: command tx timeout
[  259.950817] Bluetooth: hci1: command tx timeout
[  260.014725] Bluetooth: hci2: command tx timeout
[  260.207982] Bluetooth: hci3: command tx timeout
[  260.335163] Bluetooth: hci7: command tx timeout
[  260.399222] Bluetooth: hci4: command tx timeout
[  260.462716] Bluetooth: hci6: command tx timeout
[  260.534685] Bluetooth: hci5: command tx timeout
[  261.806721] Bluetooth: hci0: command tx timeout
[  261.998695] Bluetooth: hci1: command tx timeout
[  262.062874] Bluetooth: hci2: command tx timeout
[  262.254768] Bluetooth: hci3: command tx timeout
[  262.382904] Bluetooth: hci7: command tx timeout
[  262.447075] Bluetooth: hci4: command tx timeout
[  262.510853] Bluetooth: hci6: command tx timeout
[  262.574832] Bluetooth: hci5: command tx timeout
[  263.854669] Bluetooth: hci0: command tx timeout
[  264.047734] Bluetooth: hci1: command tx timeout
[  264.111677] Bluetooth: hci2: command tx timeout
[  264.303203] Bluetooth: hci3: command tx timeout
[  264.430874] Bluetooth: hci7: command tx timeout
[  264.495864] Bluetooth: hci4: command tx timeout
[  264.559046] Bluetooth: hci6: command tx timeout
[  264.625248] Bluetooth: hci5: command tx timeout
[  265.902983] Bluetooth: hci0: command tx timeout
[  266.095157] Bluetooth: hci1: command tx timeout
[  266.158661] Bluetooth: hci2: command tx timeout
[  266.351049] Bluetooth: hci3: command tx timeout
[  266.478719] Bluetooth: hci7: command tx timeout
[  266.543623] Bluetooth: hci4: command tx timeout
[  266.607500] Bluetooth: hci6: command tx timeout
[  266.672095] Bluetooth: hci5: command tx timeout
[  320.390563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  320.397504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  320.400267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  320.410329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  320.420272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  320.583334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  320.587348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  320.590348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  320.599129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  320.603887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  320.670971] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.687319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  320.696558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  320.699381] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  320.700137] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  320.706216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  320.725791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  320.733057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  320.737121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  320.774310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  320.827054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  320.840468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  320.853106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  320.857178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  320.861070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  320.870253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  320.874237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  320.886134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  320.893639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  320.898399] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  321.148553] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  321.173984] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  321.186280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  321.216404] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  321.288270] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  321.304368] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  321.308297] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  321.332003] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  321.351223] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  321.357855] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  322.480651] Bluetooth: hci0: command tx timeout
[  322.670764] Bluetooth: hci1: command tx timeout
[  322.798844] Bluetooth: hci2: command tx timeout
[  322.862727] Bluetooth: hci3: command tx timeout
[  322.928838] Bluetooth: hci4: command tx timeout
[  323.120130] Bluetooth: hci5: command tx timeout
[  323.438677] Bluetooth: hci6: command tx timeout
[  323.502733] Bluetooth: hci7: command tx timeout
[  324.527544] Bluetooth: hci0: command tx timeout
[  324.718727] Bluetooth: hci1: command tx timeout
[  324.846998] Bluetooth: hci2: command tx timeout
[  324.911860] Bluetooth: hci3: command tx timeout
[  324.976631] Bluetooth: hci4: command tx timeout
[  325.166721] Bluetooth: hci5: command tx timeout
[  325.487064] Bluetooth: hci6: command tx timeout
[  325.551625] Bluetooth: hci7: command tx timeout
[  326.574928] Bluetooth: hci0: command tx timeout
[  326.766890] Bluetooth: hci1: command tx timeout
[  326.894706] Bluetooth: hci2: command tx timeout
[  326.959104] Bluetooth: hci3: command tx timeout
[  327.023128] Bluetooth: hci4: command tx timeout
[  327.215758] Bluetooth: hci5: command tx timeout
[  327.536707] Bluetooth: hci6: command tx timeout
[  327.599344] Bluetooth: hci7: command tx timeout
[  328.622828] Bluetooth: hci0: command tx timeout
[  328.815137] Bluetooth: hci1: command tx timeout
[  328.943041] Bluetooth: hci2: command tx timeout
[  329.008348] Bluetooth: hci3: command tx timeout
[  329.071413] Bluetooth: hci4: command tx timeout
[  329.263462] Bluetooth: hci5: command tx timeout
[  329.582784] Bluetooth: hci6: command tx timeout
[  329.648234] Bluetooth: hci7: command tx timeout
[  382.914828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  382.922104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  382.925722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  382.935961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  382.944944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  383.110264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  383.115950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  383.118201] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  383.125263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  383.131179] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.204123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  383.215799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  383.220049] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  383.230090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  383.237001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  383.311978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  383.317222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  383.325839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  383.331498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  383.334802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.427029] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  383.437101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  383.440545] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  383.442320] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  383.449032] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  383.449874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  383.451242] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  383.452518] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  383.453794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  383.455219] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  383.462857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  383.467224] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  383.468528] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  383.477146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  383.482711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  383.484218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  383.494433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.514795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  383.515065] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  383.535287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  385.006656] Bluetooth: hci0: command tx timeout
[  385.198709] Bluetooth: hci1: command tx timeout
[  385.262759] Bluetooth: hci2: command tx timeout
[  385.393648] Bluetooth: hci3: command tx timeout
[  385.582723] Bluetooth: hci4: command tx timeout
[  385.582803] Bluetooth: hci6: command tx timeout
[  385.647015] Bluetooth: hci5: command tx timeout
[  385.647060] Bluetooth: hci7: command tx timeout
[  387.056649] Bluetooth: hci0: command tx timeout
[  387.248781] Bluetooth: hci1: command tx timeout
[  387.310669] Bluetooth: hci2: command tx timeout
[  387.439651] Bluetooth: hci3: command tx timeout
[  387.630671] Bluetooth: hci6: command tx timeout
[  387.632134] Bluetooth: hci4: command tx timeout
[  387.694665] Bluetooth: hci7: command tx timeout
[  387.694765] Bluetooth: hci5: command tx timeout
[  389.104693] Bluetooth: hci0: command tx timeout
[  389.295275] Bluetooth: hci1: command tx timeout
[  389.359963] Bluetooth: hci2: command tx timeout
[  389.487910] Bluetooth: hci3: command tx timeout
[  389.679838] Bluetooth: hci4: command tx timeout
[  389.679972] Bluetooth: hci6: command tx timeout
[  389.743245] Bluetooth: hci5: command tx timeout
[  389.743991] Bluetooth: hci7: command tx timeout
[  391.151113] Bluetooth: hci0: command tx timeout
[  391.344616] Bluetooth: hci1: command tx timeout
[  391.406739] Bluetooth: hci2: command tx timeout
[  391.536658] Bluetooth: hci3: command tx timeout
[  391.726754] Bluetooth: hci4: command tx timeout
[  391.726783] Bluetooth: hci6: command tx timeout
[  391.791076] Bluetooth: hci7: command tx timeout
[  391.791333] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
06:51:21  Registers:
info registers vcpu 0
RAX=0000000000000005 RBX=ffff888015ea1b80 RCX=0000000000000000 RDX=0000000000000005
RSI=0000000000000000 RDI=ffffffff85c1cbc0 RBP=ffff888015ea25d8 RSP=ffff888033f067a8
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff888015ea2628 R13=0000000000000003 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81518ff8 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe6a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f122a50ee28 CR3=0000000032b86000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88802ac0fdb8 RCX=0000000000000001 RDX=ffff88802ac10001
RSI=ffff88802ac0fd90 RDI=ffff88806cf08a60 RBP=ffff88802ac08000 RSP=ffff88806cf089e0
R8 =0000000000000001 R9 =ffff88806cf08a90 R10=000000000003b6cd R11=00000000000278a8
R12=ffff88806cf08a01 R13=ffff88806cf08a98 R14=ffff88802ac0fd90 R15=ffff88806cf08a50
RIP=ffffffff813540ee RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb3025c2540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559962ccf4c8 CR3=000000002aed8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000