Warning: Permanently added '[localhost]:56664' (ECDSA) to the list of known hosts.
2025/06/08 09:01:43 fuzzer started
2025/06/08 09:01:43 dialing manager at localhost:40003
syzkaller login: [   99.226323] cgroup: Unknown subsys name 'net'
[   99.381381] cgroup: Unknown subsys name 'cpuset'
[   99.438890] cgroup: Unknown subsys name 'rlimit'
2025/06/08 09:02:01 syscalls: 218
2025/06/08 09:02:01 code coverage: enabled
2025/06/08 09:02:01 comparison tracing: enabled
2025/06/08 09:02:01 extra coverage: enabled
2025/06/08 09:02:01 setuid sandbox: enabled
2025/06/08 09:02:01 namespace sandbox: enabled
2025/06/08 09:02:01 Android sandbox: enabled
2025/06/08 09:02:01 fault injection: enabled
2025/06/08 09:02:01 leak checking: enabled
2025/06/08 09:02:01 net packet injection: enabled
2025/06/08 09:02:01 net device setup: enabled
2025/06/08 09:02:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/08 09:02:01 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/08 09:02:01 USB emulation: enabled
2025/06/08 09:02:01 hci packet injection: enabled
2025/06/08 09:02:01 wifi device emulation: enabled
2025/06/08 09:02:01 802.15.4 emulation: enabled
2025/06/08 09:02:01 fetching corpus: 0, signal 0/0 (executing program)
2025/06/08 09:02:02 starting 8 fuzzer processes
09:02:02 executing program 0:
socketpair(0x1, 0x5, 0x65, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = pidfd_getfd(r2, r0, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'bond_slave_0\x00'})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0)
pidfd_send_signal(r4, 0x31, &(0x7f00000000c0)={0x13, 0x5}, 0x0)
r5 = socket(0x2, 0x6, 0x5783)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x0)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001680), 0x80100, 0x0)
setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000016c0)=@ccm_128={{0x304}, "33d504cf20e41595", "37ea83d94a49241919baf168a0499931", "049da415", "0c330204b921df5d"}, 0x28)
r8 = accept(r1, &(0x7f0000002cc0)=@nl=@proc, &(0x7f0000002d40)=0x80)
setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000002d80)=@gcm_128={{0x303}, "f3b51e0f850401c9", "cba9bd468bcdb4587bbde057f5fffd96", "270175e2", "bc65cbb7bc8c4143"}, 0x28)
syz_genetlink_get_family_id$tipc(&(0x7f0000002dc0), r3)
ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000002e00)=""/4096)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, 0xfffffffffffffffc)
syz_open_dev$vcsn(&(0x7f0000003e00), 0x5, 0x54b800)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000003e40), 0x4)
ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000003e80))

09:02:02 executing program 1:
keyctl$session_to_parent(0x12)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
modify_ldt$write2(0x11, &(0x7f0000000040)={0x3, 0x20001000, 0x400, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10)
set_thread_area(&(0x7f0000000080)={0x10001, 0x100000, 0xffffffffffffffff})
recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f0000000240)=""/72, 0x48}], 0x2, &(0x7f0000000300)=""/82, 0x52}, 0x3)
setsockopt(r0, 0x1, 0xfffffffb, &(0x7f00000003c0)="0412e01d10735453138be6a0423137ece21ed0d87442131034b48d0267101d5292f4e69cfc40217852cdb85c0654e6fcc3de0d749ced77d0f5c74d3c628a1b17af3435e7ccf4d8226405e413007171f7d7efb72387f382c60066db25977ad123db89818281815e0e1819ebede0e3dcf9c09255b5cca393a4141c19e964822f2259d749ea9c757b1d53b2709b9e338c069bf980fe9d6bfdc81e8206d240cbb5c06ea73a19b01578c9c85c046877", 0xad)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "de988186f6467c34", "a1a6c3da96711a458cd12f2c6e22fc0d", "ffb828de", "720d7d55ac43a05a"}, 0x28)
r2 = socket(0x1a, 0x4, 0x5)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x9, @private2}}, 0x0, 0x0, 0x31, 0x0, "483b0398162bc6dda64900cce798910ed51d0266d93eb75a46c1cb340f15fb5df5869588e3faa476a67fa6e249a572ffc8b1446d4e4a1c7cbe05bdf0d85e868f95939a00fb1e2f0cd16fff883ee5dc6e"}, 0xd8)
r3 = syz_io_uring_setup(0x76a1, &(0x7f00000005c0)={0x0, 0xa65d, 0x1, 0x1, 0x26a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000640)=<r4=>0x0, &(0x7f0000000680))
syz_io_uring_submit(r4, 0x0, &(0x7f0000000800)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000006c0), &(0x7f00000007c0)='./file0\x00', 0x4, 0x4000, 0x1}, 0x200)
recvmmsg(r2, &(0x7f0000003600)=[{{&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/252, 0xfc}], 0x2, &(0x7f0000001a00)=""/151, 0x97}, 0x8}, {{&(0x7f0000001ac0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001b40)=""/24, 0x18}, {&(0x7f0000001b80)=""/103, 0x67}, {&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000001c80)=""/137, 0x89}, {&(0x7f0000001d40)=""/5, 0x5}, {&(0x7f0000001d80)=""/31, 0x1f}, {&(0x7f0000001dc0)=""/83, 0x53}], 0x7}, 0xffffff80}, {{&(0x7f0000001ec0)=@can, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f40)=""/91, 0x5b}, {&(0x7f0000001fc0)=""/229, 0xe5}], 0x2, &(0x7f0000002100)=""/118, 0x76}, 0x7}, {{&(0x7f0000002180)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002200)=""/221, 0xdd}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/136, 0x88}], 0x3, &(0x7f0000003400)=""/83, 0x53}, 0x800}, {{&(0x7f0000003480)=@ethernet={0x0, @random}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003500)=""/147, 0x93}], 0x1}, 0x1}], 0x5, 0x2, &(0x7f0000003740))
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000003780), &(0x7f00000037c0)=0x14)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003800)={0x0, 'caif0\x00', {}, 0x3})
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r3, 0x10000000)
openat$tun(0xffffffffffffff9c, &(0x7f0000003840), 0x44003, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000004380))
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000043c0), 0x4)

09:02:02 executing program 2:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0xfff, 0x0, 0x9, 0x7, 0x40, 0x2})
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x1, 0x1ff, 0x4, 0x7, 0xc0, 0x31c})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDDELIO(r3, 0x4b35, 0x81)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x9, 0x3f, 0x7, 0x80, 0xffff, 0xfff})
ioctl$TIOCEXCL(r2, 0x540c)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x3bf8a78, 0x8, 0x8, 0x7, 0x800}, 0x14)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000140))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x0, @fd=r2, 0x4, 0x0, 0x0, 0x10, 0x1, {0x1}}, 0xb3)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f00000001c0))
ioctl$TIOCNOTTY(r5, 0x5422)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="3ecbb231593152989a659dcc7df33623f49db95705705026fa4494b32bf7ac024a7f21da59df0dc62c8be9823c83a008bda2ce409e78f8327ed0729c4aa356335482f914fe918a5893a12db93d3a799353151c5bee1216f2dacadd", 0x5b)

[  117.284682] audit: type=1400 audit(1749373322.281:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:02:02 executing program 3:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x24}}, 0x8000)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000015)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00')
r3 = accept(0xffffffffffffffff, &(0x7f0000000300)=@alg, &(0x7f0000000380)=0x80)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044014)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40801)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r3)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xb1044}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r5, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24008001)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0xfffffcf8, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan4\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044051}, 0x4000)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)

09:02:02 executing program 4:
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x79f7, 0x40040)
ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000040))
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x2, 0x2, 0x1, 0x7, 0x0, 0x7a75})
r2 = pidfd_getfd(r1, r0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000000c0)={0x2, 0x3, 0x9, 0xff, 0x8000, 0x5})
ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000100)={{0x3, 0x2, 0x7fffffff, 0x7ff, 0x401, 0x1}, 0x0, [0xffff8001, 0x2, 0x1, 0xf47, 0x6, 0x9, 0x4, 0x20, 0x3352, 0x6, 0x6, 0x7, 0x64a, 0x7, 0x3, 0x883, 0x31, 0x2, 0x2ae5, 0x1, 0x1, 0xff, 0x200, 0x0, 0xfc7d, 0x8, 0x1f, 0x1000, 0x97f4, 0x400, 0x751, 0x9, 0x8, 0x4, 0x3, 0x6, 0x1000, 0x99, 0x1, 0x2, 0x1400000, 0x0, 0x2, 0x2, 0x4, 0x2, 0xfff, 0x9, 0x3, 0xfffffffe, 0x7, 0x3ff, 0x4, 0xc11, 0x101, 0x101, 0x1, 0x0, 0xce5, 0x3ff, 0xff, 0x10000, 0x7000000, 0x7, 0x8, 0x6, 0x7, 0xb, 0x6, 0x80000000, 0x8000, 0x2, 0x2, 0x8, 0xfffffff9, 0x8001, 0x3, 0x604f, 0x20, 0x800, 0x10000, 0x2, 0x1, 0x6, 0xffffffff, 0x7, 0x1, 0x800, 0x4, 0x6a, 0x0, 0x808, 0x579c, 0x7, 0xf47f, 0x0, 0xfff, 0x1, 0x5bf1, 0x4, 0x7fff, 0x0, 0x3, 0x1, 0x80000000, 0x3, 0x20, 0x0, 0x7fffffff, 0x9, 0x0, 0xfffffffd, 0x1, 0x401, 0x3, 0x1000, 0x1, 0x2319fcdd, 0xff, 0x7f, 0x2, 0x40, 0x5, 0x5, 0x8, 0x1, 0x5, 0x3, 0x8, 0x9, 0x10001, 0x66bf, 0x9, 0x4, 0x8, 0x8, 0xd4c, 0x0, 0x7, 0x3f, 0x4905a8e7, 0x2, 0xe3af, 0xc6, 0x81, 0x7f, 0x1, 0x7ff, 0x7, 0x4, 0x3, 0x4, 0x78, 0x116e, 0x1, 0x5a2, 0x5, 0x5, 0x9, 0xffffffbc, 0x0, 0x10001, 0x101, 0x3, 0x200, 0x3, 0x2, 0xac, 0xd77c, 0x6, 0x4, 0xe, 0x4, 0x3, 0x80000001, 0xf6, 0x3, 0x2a00000, 0x9, 0x9, 0x7, 0x1, 0x0, 0x8, 0xe0, 0x6, 0x7, 0x10001, 0xfff, 0x8, 0x0, 0x0, 0xffffffa6, 0xceb3, 0x7ff, 0x101, 0xca, 0x800, 0x9, 0x4, 0x7fffffff, 0x295c0615, 0x4, 0x786a, 0x5, 0x7, 0x1, 0x2, 0x4, 0xffff0001, 0x4, 0x1, 0x81, 0x1, 0x1, 0xff, 0x4, 0x88, 0x81, 0xfffffffb, 0x9f9, 0x1ff, 0x0, 0x6, 0x8001, 0x6, 0x7fff, 0xfffffe01, 0x1, 0x8, 0x5, 0xc7a, 0x1, 0x2, 0x3, 0x1000, 0x1ff, 0xfffffff9, 0xffffff00, 0x7, 0x5, 0x8, 0x101, 0x4, 0x7, 0x6, 0x29ddf71f, 0x0, 0x8e9, 0x5, 0x65a0, 0x9, 0x7, 0xd92, 0x9, 0x2, 0x0, 0x7, 0xfffffbff, 0x620, 0x2888, 0x17, 0x5, 0x6d4a, 0x1ff, 0x7, 0x7f, 0xe4, 0x4, 0xdd, 0x81, 0x4, 0x6, 0x5, 0x9, 0x10000, 0x9, 0x6, 0x8, 0xffffffff, 0x8, 0x4, 0x1, 0x1f, 0x3, 0x5c1d, 0x7, 0x3, 0x51f, 0xfffffffb, 0x5, 0xe, 0x5, 0x400, 0x80000000, 0x7fff, 0x800, 0x9, 0x7f, 0x8, 0x2, 0x4, 0x4, 0x6, 0x5, 0x401, 0x4, 0x7fffffff, 0x7, 0x3, 0x3f, 0x1, 0x2, 0x401, 0x4, 0xff, 0x60000, 0x2, 0x1, 0x94bd, 0xdde9, 0x400, 0x5, 0xc40, 0x0, 0x1, 0xffffff07, 0x28000000, 0x0, 0x1, 0x9, 0x9, 0x401, 0x0, 0x0, 0x3, 0x6, 0xfffffc00, 0x0, 0x3, 0xfffffe01, 0x5, 0x7f, 0x400, 0x401, 0xd995, 0xffffffff, 0x1000, 0x4, 0x8, 0x0, 0x7ff, 0x1000, 0xfd78, 0x9, 0x7e1, 0x81, 0x9, 0x9, 0x0, 0xe451, 0x6, 0x0, 0x180, 0x6, 0x6, 0x4, 0x401, 0xffffbc6e, 0x53c, 0x0, 0x6e43, 0x1, 0x9, 0x4, 0x3f, 0x6, 0x10001, 0x0, 0x1f, 0x800, 0x3f, 0x6, 0x3, 0x7, 0x401, 0xfffffaa3, 0x5, 0xdf, 0x7ff, 0x6, 0x2ca, 0x8d8c, 0x6, 0x5, 0x4, 0x8, 0x8e8, 0x7, 0x4, 0x8, 0x3, 0x3, 0x7, 0x3, 0x7, 0x7, 0x7ff, 0x4, 0x4, 0x69ae, 0x8001, 0xfffffff9, 0x80000000, 0x401, 0x5, 0xd08c, 0x45f, 0x0, 0x10001, 0x9, 0x8, 0x8, 0x10001, 0x8000, 0x400, 0x2, 0x3f, 0x4, 0x5, 0x80000001, 0x9, 0x10001, 0x9, 0x957, 0x0, 0x1, 0x1, 0x1, 0x8f31, 0x8, 0x24, 0x1, 0x10000, 0x8, 0xfff, 0x401, 0x1, 0x0, 0x800080, 0xd5a, 0x5ed0, 0xffffff81, 0x0, 0x1000, 0x5000, 0x8, 0x8, 0x100, 0x5, 0x1, 0xff, 0x1c, 0x0, 0x8, 0x8, 0x5, 0x10001, 0x8, 0x2, 0x9, 0x4, 0x1, 0x6, 0x10000, 0xff, 0x3, 0x77e, 0xfffffffd, 0x0, 0x0, 0x6ac00000, 0x7f6d, 0x4, 0x7f, 0x1, 0x1, 0x3ff, 0x5, 0x4, 0xdd, 0x8, 0x6, 0x6, 0x3, 0xe, 0x8, 0xbc7, 0x6, 0xa8fa, 0x3, 0x0, 0xae, 0x8, 0x3, 0x6, 0x0, 0x4, 0x100, 0x7ff, 0x40, 0x4, 0xffffff81, 0x5, 0x1, 0x10000, 0x101, 0x6, 0x5131, 0x7fff, 0x1, 0x0, 0x81, 0x2, 0x7f, 0x5267, 0x80000001, 0x0, 0x2, 0x8000, 0x800, 0x6, 0x1ff, 0x1, 0x10001, 0x3, 0x8000, 0x6, 0x7fff, 0xdd, 0x6, 0x7, 0x88f, 0x8, 0xff4, 0x2, 0x7, 0x9283, 0x7, 0x1, 0x2, 0x3, 0xffffffff, 0x65e4, 0x3, 0x1, 0x81, 0x7fffffff, 0x5f4, 0x97, 0x3, 0x1, 0x33, 0x15, 0x0, 0x5, 0x29a, 0x1000, 0x7fffffff, 0x8, 0x0, 0xe8b, 0x5, 0x401, 0x8, 0xb6, 0x8, 0xf67c, 0x80000000, 0x40, 0x3, 0x1000, 0x400, 0x3, 0x9, 0x8, 0x8001, 0x7, 0x6, 0x1, 0x5, 0x4, 0x8, 0x8, 0x101, 0x8, 0x80000001, 0x81, 0xffffc95e, 0x0, 0x4, 0x3f, 0x4, 0x0, 0x1, 0x0, 0x8, 0x8001, 0x1f, 0x3, 0x2, 0x8, 0xfffffffa, 0x80000001, 0xce0a, 0x1, 0x7, 0x8, 0x5, 0x8, 0x0, 0x7ff, 0x20, 0x0, 0x5, 0xff, 0x8, 0xff5, 0x9, 0x800, 0x2, 0x0, 0x5, 0x8, 0xbffb, 0x3f, 0x4, 0x7f20, 0xba8, 0x80000001, 0x1, 0x3, 0x2, 0x9, 0x8, 0x80000001, 0x6, 0x91b4, 0x5, 0x533, 0x7f, 0x3, 0x3, 0x4, 0x0, 0x800, 0x5, 0xf34, 0xc116, 0x2, 0x1, 0x0, 0x401, 0x400, 0x9, 0x3, 0x8, 0x9d, 0x1, 0xe671f4a1, 0x4, 0x9, 0x9b9, 0x80000001, 0x34eb, 0x3, 0x2, 0x2, 0x80, 0x200, 0x5, 0xacea, 0x8, 0x0, 0x2, 0x2, 0x5, 0x1, 0x3, 0x7, 0x5, 0x2, 0xf69, 0x927d, 0x1, 0x40, 0x80000000, 0x3f, 0x0, 0x100, 0x8001, 0x10001, 0x7, 0x3, 0x27, 0x30000, 0x3, 0x1, 0x6, 0x291, 0x81, 0x80000000, 0x4, 0x5, 0x3, 0x7fffffff, 0xd370, 0x4, 0x7f, 0x652, 0xffffffff, 0x5, 0x3, 0x995, 0x3, 0x62, 0x40, 0xc01a, 0x1, 0xfffff801, 0x53, 0x7, 0x4, 0x3, 0xae7c, 0x0, 0x19a1, 0xfff, 0x6, 0x4, 0x7, 0x1273b444, 0x20, 0x1f, 0x0, 0x7ff, 0x101, 0x8, 0x9, 0x1, 0x4, 0x7e, 0x0, 0x8, 0x7f, 0x2bbad412, 0x1000, 0x5, 0x9, 0x2, 0x4, 0x6, 0x90000000, 0x8000, 0x8, 0x71ecdc6c, 0x1, 0x3, 0x806c, 0xe1f, 0x5, 0x3, 0x7f, 0x7, 0x1ff, 0x800, 0x3b3, 0x455, 0x7fffffff, 0x3, 0x3, 0xffff4384, 0x6, 0x80000001, 0x4, 0x2, 0x10ad, 0x100, 0x7fff, 0xff, 0x5, 0x57, 0xe9b3, 0x9, 0x9, 0x1, 0x3, 0xffff, 0xed29, 0x3f, 0x4, 0x6, 0xa8c, 0xffff, 0x2, 0x400, 0x6af0, 0x4, 0x0, 0xffff, 0x1f, 0x1, 0x6ffe, 0x80000001, 0x9, 0x1, 0xcfc4, 0xffffffff, 0x629, 0x0, 0x100, 0x1, 0x2, 0x1, 0x3, 0x7, 0x10000, 0x5, 0x2, 0xfffffff8, 0x800, 0x8, 0x10001, 0xa8e, 0x4, 0x6, 0x3, 0x10000, 0x7, 0x0, 0x20, 0x3a6, 0x401, 0x8, 0x4, 0x5, 0x5, 0x4, 0x5, 0x8, 0x8000, 0x3, 0x2044, 0x80000000, 0x8, 0x2426, 0x10000, 0xffff0000, 0x7, 0x1ff, 0x3, 0x3f, 0xffffffff, 0x754, 0x1f, 0x37dd, 0x7fff, 0xfffffe00, 0x23dc, 0x80, 0x3, 0x800, 0x1, 0x7, 0x6, 0x3, 0xb8eb, 0x8, 0x4, 0x8, 0x0, 0x8, 0xa402, 0x4, 0x4, 0x3f, 0x564, 0x0, 0x2, 0x2, 0x3f, 0x1800, 0xfffffffc, 0x6e0000, 0x9, 0x58, 0x52b4ba8b, 0x7, 0x3, 0xfea, 0x9, 0x49551cc2, 0xfffff32f, 0x6, 0xaf7a, 0x80, 0x100, 0x10001, 0x7fffffff, 0xfffffffa, 0x800, 0x2, 0xf0f, 0x2b7, 0x7, 0x3, 0x0, 0x7fffffff, 0x8001, 0x1ff, 0xf8, 0x92c, 0x1fe0, 0xcac, 0x5, 0x8, 0x6, 0x6, 0x76f, 0x72, 0x3, 0xfffffffe, 0x3, 0x400, 0x8000, 0x4d6e, 0x40, 0x3, 0x100, 0x4f, 0x3, 0x5, 0xa1fc, 0x93, 0x80, 0x106b5c00, 0x1, 0x0, 0x3, 0x3ff, 0x5, 0xc0000, 0x0, 0xe62, 0x8001, 0x101, 0x1ff, 0x400, 0x1000, 0x8, 0x7ff, 0x3, 0xffffffff, 0x1000, 0x7, 0x8a9b, 0xffffff7f, 0x0, 0xe7b8, 0x9, 0x5, 0x1f, 0x1, 0x10000, 0x1, 0x5, 0x93, 0x8, 0x5, 0x14, 0x1, 0x2c1, 0x5, 0xffffffff, 0x10000, 0x0, 0x6, 0x2, 0x7, 0x9, 0x27764088, 0x4, 0x200, 0x10001, 0x5, 0x0, 0x2, 0x0, 0x800, 0x3, 0x7ff, 0x8664, 0x7f, 0x7ff, 0xfffffffa, 0x4, 0x7fffffff, 0x1, 0x80, 0x1, 0x200, 0x9026, 0xe7, 0x81, 0x2, 0x2, 0x7311, 0xf, 0x81, 0xfffffffd, 0x9, 0x9646, 0x2, 0x401]})
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000001140)=0x1)
ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000001180)={0x2, 0x103, 0x1000, 0x4, 0xb1e, 0x9})
r3 = syz_open_dev$hiddev(&(0x7f00000011c0), 0x966f, 0x20180)
ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000001200))
ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000001240)={0x1, 0x2, 0x7, 0x4, 0xbf09, 0x101})
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000001280)=0x3)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000012c0))
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0)
ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000001300)={{0x1, 0x200, 0xa4, 0x8001, 0x9, 0x3f}, 0x3a2, [0xf65, 0x6, 0x101, 0x3f, 0x6, 0xcd5, 0xffffffff, 0x9e, 0x4, 0x800, 0x200, 0x4, 0x1, 0x6, 0x3f, 0x10000, 0x6, 0x8, 0x1, 0x5, 0x7, 0x8, 0x6, 0xd3c, 0x1, 0xee, 0x3ff, 0x1f, 0xe36, 0x80000000, 0x8, 0x0, 0x50a, 0x9, 0x4, 0x0, 0x80000000, 0x1, 0x3, 0x2, 0xffffffff, 0x4c1, 0xffff, 0x3, 0x2, 0x1, 0x7f, 0x3, 0xffff, 0xb02, 0x3, 0x10000, 0xffffffff, 0x4, 0x8001, 0x401, 0x6, 0x22, 0xc11, 0x5, 0x461, 0x9, 0x7, 0x7fff, 0x0, 0x1ff, 0x9, 0x0, 0x80, 0xa000000, 0x800, 0x2, 0x824, 0x20, 0x7, 0x7, 0x1f, 0x1, 0x76a5, 0x400, 0x6, 0xfffff1d0, 0x6, 0x1, 0xfffffff8, 0x3, 0x4, 0x7ff, 0xffff81bc, 0x7f, 0xa7, 0x7260, 0xfff, 0xfffffff8, 0x8000, 0xef, 0x7, 0x0, 0x9, 0x7ff, 0x1, 0x1, 0x800, 0x800, 0x7fffffff, 0x7f, 0x8, 0x9, 0x400, 0x6605, 0x400000, 0x67ee, 0xbb0b, 0x2, 0x9, 0xb29, 0xffffffff, 0x0, 0x4, 0x1, 0x8, 0x3, 0xd6e5, 0x5, 0x1, 0xb20, 0x7fffffff, 0x0, 0x162e, 0x9e2, 0x3, 0x9, 0x3d, 0x80000001, 0x8, 0x10001, 0x9, 0x9f32, 0x2, 0x6, 0x200, 0xff, 0x3ff, 0x7, 0x6, 0x8, 0x8b, 0x3, 0x30, 0xfff, 0x3, 0x1, 0x0, 0x343f, 0x1, 0x3f, 0x4, 0x44, 0x7f, 0x4, 0x8001, 0x6, 0x1, 0xfffffff9, 0x3b45, 0x5, 0xdcd, 0x3, 0xa1a, 0x9, 0x24, 0x4, 0x4, 0x1ff, 0x9, 0x9, 0x3f, 0x7, 0x4, 0x3, 0x9, 0x5, 0x59fd, 0xfffeffff, 0x5, 0xffffffa5, 0x4, 0x8, 0x4, 0x9, 0x7f, 0x0, 0x0, 0xfffffc01, 0x4, 0xc57a, 0x8000, 0x0, 0x8000, 0xd4c, 0x7, 0x0, 0x2, 0x12b8, 0x6, 0x419, 0x83f, 0x6, 0x6ba, 0x3f, 0x8, 0x9, 0xc1d9, 0x3, 0xb4, 0x0, 0x7, 0x9, 0x9, 0x9, 0x10001, 0x1, 0x7, 0xfffffffe, 0x0, 0x21da67c4, 0x0, 0x7d, 0x2, 0x400, 0x7f, 0xffff, 0x642523fe, 0x7ff, 0x2ed, 0x9, 0x7, 0x3, 0x9, 0xfff, 0x0, 0x1, 0x4, 0x9, 0x9, 0x6, 0x6, 0x87, 0x7, 0x2, 0x1, 0x3, 0x3, 0x2, 0x0, 0x5, 0x8, 0x0, 0x5, 0x10001, 0xcf7, 0x5, 0x200, 0x2b2d0614, 0x3f, 0xff, 0x7, 0x4, 0x7, 0x10000, 0x7, 0x8, 0xd9, 0xff, 0x2, 0x40, 0x9, 0x0, 0x2400000, 0x8, 0x5, 0x9, 0x0, 0xfffffff9, 0x6, 0x7f, 0x587, 0x1, 0x4, 0x8, 0x2, 0x4, 0x0, 0x100, 0x5, 0x6, 0x8, 0x9, 0x0, 0x2, 0x80000001, 0x1, 0x3, 0xffffb6d0, 0x0, 0x3, 0x0, 0x400, 0x1, 0x9, 0x33, 0x2, 0x80000001, 0x1, 0x1, 0x1000, 0x404, 0x8001, 0x8, 0x7f, 0x2, 0x0, 0x3f, 0x9, 0x0, 0x401, 0x8, 0x7, 0x594, 0x10001, 0x9, 0x7fff, 0x6, 0x101, 0x9, 0x9, 0x9, 0x2, 0x7, 0x20, 0x1, 0x5, 0x7f, 0x7f, 0x4, 0x1, 0x0, 0x3, 0x10, 0x261f, 0x1, 0x800, 0xffffffff, 0x9, 0x1, 0xffff, 0x10000, 0x81, 0x10000, 0x800, 0x2, 0xffffff80, 0x9, 0x1, 0x5, 0x5, 0xed2, 0x6, 0x0, 0x2, 0x80000001, 0x1f, 0x7, 0x200, 0x0, 0xffffffff, 0x2c8, 0x9, 0x2db, 0x4, 0x6, 0x8, 0x3, 0x4, 0x80, 0x1000, 0x1d1, 0x8, 0xbf, 0x8, 0x9, 0x9, 0x95, 0xf2b, 0x4, 0x5, 0x7, 0x0, 0x7f, 0x3, 0x6, 0x3, 0x8001, 0x5, 0x800, 0x0, 0x800, 0x40, 0x6, 0x77, 0x8d, 0x1, 0x6, 0x77d74d4b, 0x3, 0xfff, 0x6, 0x9f, 0x401, 0x6, 0x0, 0x6, 0x8, 0x8, 0x7, 0x3, 0x7, 0x5, 0x5, 0x4, 0x0, 0x9, 0x8, 0x800, 0x6, 0x1, 0x25, 0x6, 0x6, 0x5, 0x3ff, 0x7, 0x9, 0x1, 0x4, 0x8, 0x7, 0x0, 0xfff, 0x82, 0xff, 0x3, 0x4, 0x9, 0x100, 0x1, 0x1, 0x101, 0x7fff, 0x6, 0x5, 0x7f, 0xfffffff9, 0x3d4070b5, 0x800, 0x6, 0x7, 0x6, 0x2, 0x0, 0x1, 0x80, 0x6, 0x2, 0x9, 0x2, 0xfffffff8, 0x1000, 0x6, 0x947, 0x3, 0x4, 0x3bc, 0xfff, 0xfffff000, 0x200, 0x1d, 0x596, 0x0, 0x1f, 0x3, 0x80000000, 0x5, 0x1, 0x8, 0x3, 0x53ea, 0x35, 0x1, 0x40, 0x3, 0x8c9, 0x4, 0x2, 0x0, 0x400, 0x7fffffff, 0x80000001, 0xe15, 0x4, 0xc87b, 0x1, 0x366a, 0x400, 0x1, 0x4, 0x4, 0x200, 0xfffffffd, 0x8, 0x80000001, 0x8, 0x0, 0x8, 0xffff60fb, 0x0, 0x7, 0x67, 0x1000, 0x7, 0x80000001, 0x6, 0x100, 0x3f, 0xffff, 0x4, 0xab, 0x559e, 0x1f, 0x1000, 0x9, 0x5, 0x1, 0x8, 0x10001, 0x79bc, 0x8, 0x2, 0xb8dc, 0x2, 0x9, 0x5, 0xc9f, 0x20, 0x1, 0x8, 0x6, 0x400, 0x0, 0x100, 0x4, 0x5a, 0x3fc0000, 0x8, 0x3f, 0x3, 0x3ff, 0xfffff000, 0x9, 0x3, 0x3c3, 0x8ce, 0x2, 0x2, 0x10000, 0x2, 0x7fffffff, 0x8, 0x4, 0x6, 0x575e120, 0x1ff, 0x4, 0x20, 0x1fa95822, 0x1, 0x2, 0x0, 0x9, 0x9, 0x80000000, 0x0, 0xfffffffb, 0x40, 0x40, 0x1, 0x238, 0x1, 0x3, 0x3f, 0x40, 0x400, 0x9, 0x1, 0xfff, 0xffff0000, 0x101, 0xfffffffc, 0x10, 0x8, 0xffff, 0x5, 0x4, 0x8, 0x40, 0xfffffffd, 0x2, 0xb053, 0x80, 0x1, 0x5, 0x5, 0x7f, 0x7, 0x2, 0x3, 0x99, 0x7fffffff, 0x6, 0x81, 0x3f, 0x81, 0xffff, 0x5, 0x9, 0x6b932545, 0x8, 0x4, 0x771c, 0x20, 0x2, 0x2, 0xff, 0x800, 0x1ff, 0x6, 0x200, 0x400, 0x7, 0x425, 0x7, 0x7fffffff, 0x3, 0x401, 0x800, 0x0, 0xffffffff, 0x81, 0x800, 0x10001, 0x100, 0x8a, 0x8, 0x3f, 0x6, 0x6, 0x9, 0x3f, 0x4, 0x7, 0x3, 0x6, 0x7d, 0x7a3, 0x7ff, 0x7, 0x10001, 0x1, 0x7, 0x8, 0x8, 0x1323, 0x5, 0x80000001, 0x80000001, 0x5261, 0x5, 0x0, 0xff15, 0x100, 0xffffffc1, 0x4, 0x0, 0x8001, 0x5, 0xb57, 0x3ff, 0x6, 0xbf2, 0x5, 0x9, 0x2, 0x1000, 0x1, 0xcb6, 0x6, 0x2, 0x8, 0x9, 0xf91e, 0x7, 0x7, 0x3, 0x2, 0xb3, 0x7, 0xffffffff, 0xff, 0x0, 0x1, 0x3, 0x40000, 0x0, 0x81, 0x9, 0x0, 0x4, 0x1, 0x1ff, 0x7, 0x20, 0x0, 0x4, 0x2fc, 0x8, 0x54d, 0x400, 0x9, 0x9a, 0x7ff, 0x7, 0x7, 0x1, 0xf1c, 0x1, 0x1, 0xcc6, 0xffffffc1, 0x1, 0x3, 0x5, 0x8, 0x9f5b, 0x1, 0x80000001, 0xfff, 0x6, 0x7, 0x42d7, 0x3, 0x3187, 0x80000000, 0x8, 0x1, 0x2, 0x8, 0x800, 0x3, 0x7, 0x40, 0x0, 0x1, 0x8, 0x2, 0x30, 0x9, 0x3ff, 0x5, 0x514100, 0x20, 0x1, 0x5, 0x9, 0x1, 0x1, 0xa1, 0x1d74, 0xcd3, 0x800, 0xa77c, 0x1ff, 0x9, 0x5, 0x5, 0x9, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x5, 0x0, 0x22b, 0x1, 0xa2, 0x3d10, 0x3, 0x400, 0x302c, 0x1, 0x0, 0x6, 0x3ff, 0x8, 0x0, 0x2, 0x7db, 0x80000001, 0x1000, 0x6c, 0x400, 0x8, 0x58, 0x9, 0x7, 0x10001, 0x1ff, 0x1000, 0x4, 0x1, 0x5, 0x2, 0x4, 0x1ff, 0x8, 0x3, 0x6, 0x20, 0x9, 0x5, 0x1, 0x6, 0x7ff, 0x10001, 0x9f47, 0x59, 0x20000, 0x80, 0xa79b, 0x8001, 0x3, 0xf493, 0xfffffffc, 0x10000, 0x3, 0x80000000, 0x7ff, 0x5, 0x5, 0xf712, 0x6, 0x1000, 0x8, 0x2, 0x1000, 0x3, 0x10001, 0x9, 0x7fff, 0xfffffffb, 0x8, 0x6, 0x55, 0x1, 0x3ff, 0x3b, 0x5, 0x4, 0x1, 0x1000, 0x7, 0x5, 0x3, 0x80000000, 0x9, 0xa31, 0x7fffffff, 0x800, 0x7c52, 0x1, 0x55f, 0x0, 0x3, 0xfff, 0x9b3ab5e5, 0xfffffff7, 0x1000, 0x0, 0x0, 0x3, 0x200, 0x1, 0x0, 0x1, 0x8, 0x4, 0x2, 0x1, 0x7fff, 0x97, 0x8, 0x4, 0x0, 0x80, 0x0, 0x4, 0xffff0001, 0x9, 0x4a14, 0x400, 0x472, 0x0, 0x80, 0x0, 0xe724, 0x5, 0xba2, 0x9, 0x80, 0x4, 0x4, 0x6, 0x93, 0x8000, 0x800, 0x0, 0x400, 0x10001, 0x4, 0x20, 0x5b, 0xbdc, 0x78e9322f, 0x0, 0x3, 0xffffffc0, 0x3, 0x8, 0x3, 0x3, 0x8000, 0x9, 0x800, 0x0, 0x8, 0x81, 0x1, 0x3, 0x401, 0x401, 0x9, 0x5, 0xe47d, 0xfff, 0x8e, 0x81, 0x80000001, 0x9, 0x6, 0x1, 0x7fff, 0x81, 0x412, 0x6, 0x2, 0x400, 0x7ff, 0x200, 0x2, 0x61ac, 0x3, 0x5, 0x80, 0x1, 0x7f, 0x80, 0xfffffffb, 0xff, 0x6, 0xffffffff, 0x4, 0x6, 0x101, 0x6749faea, 0x4, 0x800, 0x9, 0x0, 0x7, 0x2, 0x1ff, 0xffff, 0xf3, 0x400, 0x9, 0x7, 0x5, 0x99b, 0x10000, 0x3ff, 0x8, 0xed, 0x5, 0x80000000, 0x2, 0x4, 0x3ec, 0x2, 0x1000, 0x2, 0x16, 0x8000, 0xfffff627, 0x2]})
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002340), 0x48200, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000002380)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0xfffff800, 0x2, 0x1, {0x0, 0x0, r4}}, 0x9)

09:02:02 executing program 5:
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)=0x5)
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x101000)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4010)
ioctl$KDDELIO(r0, 0x4b35, 0x1000)
ioctl$TIOCNOTTY(r0, 0x5422)
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000180)={0x3, 0x200, 0x6})
ioctl$KDDELIO(r0, 0x4b35, 0x3f)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000001c0)={0x91, "3d36b84e07d9c76706b4d728b81867d4b26e8b68545455c4c82d63f91a495a51ef847b7b9eae1889224cb17bf2679b4905138caaf54c44f244c8bbfb808de2e72d93d88d17ab4445d9cff94da7f792c32bf51929c1deb7f827876980a01844a98c231a7181f4418cb887724fc54b4efb0f9581beb29caf17c0c9ba39fd270a505aed8b4f1441f669c21083fc7b3f11fdea07f33b8b793105e961cb0df5b3f09968bb16817bacf19708592cc517897d00658306442121a2762cb6e73aa40d929e5027a17dfe1e4fabe8eefaccdd68d39292b440d8a43480184b99460b66366f94267b8b0d687615e4e6cad5227cbe93fe3d99eac5e093602f7cd2b99199b9d3a0327fa8979e5175c7bdc685f0b784ff8ccee2e6cd7e54c18b035e37ffa85c748de986945b906e024e56d85557d3ad318476bab65a21b66783a6378db49dcf428ccf34c678e9df374f64d5efc78a657807732a12869612a9d56f3ac0a49958c5241053e87f85561c2df13bd0fc7e9f8dfa9f7c586dde3629981df84e06b94ef7ed69165adfd13bff6a965a2e112ff0c5c818a6b08f695e7c3ecb80cec796bb96b1ff3932833b6d82b4ff0e05eb2c5b3bb5137056f65164c2becea1c548405836f297d1a192bd440ff9741d2e4a08a84c5b610276d0595442f22ddbf592e3ce71c73ef9da6775a85c13773be3b913bad12ff10164922ea014915bac48961b4f67fb"})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000440)={0x4, "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"})
ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000680))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCNOTTY(r2, 0x5422)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000003dc0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000003c80)=""/53, 0x35, 0x0, &(0x7f0000003cc0)=""/205, 0xcd}, &(0x7f0000003e00)=0x40)
syz_open_pts(r0, 0xa03)

09:02:02 executing program 6:
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0xffff, 0x4)
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
process_madvise(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)="1bc312233d300bca2a4ba90b5fe5ae22cb154332eaca787bcdbac8497b868dedeefe6b5e5e3991c712838f2925c22d0c4a5944dafb5c9f0669cfe98c78127e3e1970692504b1e987aca9892832f453925147859345f3ab89be8f816e53a30cdafbc9f2d002ef00edb677cd2510485cdab51a2f009f72bf4849fe7eca11837fbe1afc1995cdd27ccc5400d61fa56d0090719a3b86410fabb9", 0x98}, {&(0x7f0000000180)="82bf5f21b0d3e2fe375d225dc5ab007caf02897a437063759ed6daf9b8deca8afe6f7bf6cf313740998c7538f768181a06004133cbbdf5", 0x37}, {&(0x7f00000001c0)="aecc9042319f63c2ba1ebe295ae47172935b030a56dba46521e5ecbd43dd76d2fa6e9df1cc41df48d8afd80fcb9a08094da720e427e156a277252be0f22f066adb1f154cc85e164f58f40b7fcf2a88ac3bb7823f2f5787f325698ec4796608dc74f3102050844f12762d4215a249f30196765edf0f81335fe9428bdc06a2bc3f20b97abff83034b0347b151ba0ec13792f89b5476f38d2ce60a2b3fa1b59554fb1108f727115eb1c850e400cab21b57d82046797f415adac3249de80a013547f2ba689e61c71a22d3ff6e45237d065e4316f164cdec8e362e3459458", 0xdc}, {&(0x7f00000002c0)="de3ba93c342dec7529", 0x9}, {&(0x7f0000000300)}, {&(0x7f0000000340)="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", 0xfe}, {&(0x7f0000000440)="f9de295fb30153fdbe85d2d37059a69e8e04d795ee7214a2864c7222baca651e9e06a874df7823c95f82efe034ddf14aa378c21e1ca29478fb9cf0d6f0484d03146da18a83a5783fe6e8334c4bdd5409ecc74d63613cb5e256e2fd5e957720011cc039f33425cee90e2a7b1f7ed68e70fe34e75b2b7bbc38dfaf2db56a8e1d94e7a71a4aad515cc277273a55f3d83f2f428b2e813b531597349b81d80d3525e87e3a41efa6c41b2a38cb2c62507ef694bb0b6037ac257f52e80e6ad7", 0xbc}, {&(0x7f0000000500)="80129574ea86c796acd9c2ea120a186e562d82f199729851adb1db8ba7fbe34387b3887b677cb8b4e07701b64e69f1a60639bfe3734b64a4f5d91296ede817ec4445e245019dde9f1b7c2823b85db7a00e6d096e9bd1c9ed6f83ccc6de7e910f2420936b6f8a031fc1d4cf2bf2c3ce1fe44a45908f90511b5109556742180442d57c138e0efde585f75c413149c5a9522b3ebda9d5b8701ba237033e5df24af9989839b840aef23e82955ea0ae2ee644abdd3b9fdbf7581751487dc41d8a876a5b78a5a2526de5173779e2bc77ca10802d6fc72a4213e9aecbb2540fa10b26eb0dc4c722e038ae", 0xe7}], 0x8, 0xd, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000680), &(0x7f00000006c0)=0x14)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240400c5}, 0x48)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000800)={0x6, 0x4, 0xffff0000, 0x400, 0x7}, 0x14)
r3 = accept4(r0, &(0x7f0000000840)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f00000008c0)=0x80, 0x80000)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000900)=[@timestamp, @timestamp, @sack_perm, @window={0x3, 0x9e9}, @timestamp, @sack_perm], 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x7)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r2)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "3b57bad3557154ce", "32b84d5c29c0ed2988a29fcd91dab09e9a3cffa595ff35c665be1996a217153f", "5828d8d8", "ebc29411eaadae22"}, 0x38)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000a00)={0x1, 0x0, 0x101, 0x14c3, 0x82}, 0x14)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10408808}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000b40)=@gcm_128={{0x303}, "95fafa432899794f", "40d06f6c2bcc3b7b76fc3d514d226148", "faba5405", "1243525244e60a1e"}, 0x28)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r5)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80)

09:02:02 executing program 7:
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x4b, 0x0, "0f0aa9d59b5fa683a39d9b5776a451d9612a07ff890ecade4c369595910f4ed17a98cd6cfaf78ce70cf18f3fadb46684e6bb817192265a7139c1b3e7cde1051dd7f89162dc82a912b678366f61182fc5"}, 0xd8)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x5, 0x4, 0xbd5e, 0x20, 0xfffff800}, 0x14)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0))
accept(r0, &(0x7f0000000240)=@ll={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x80)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004804}, 0x40)
r2 = socket(0x1e, 0x3, 0x401)
accept4(r2, 0x0, &(0x7f0000000640), 0x800)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000000680)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x3}, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x800)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000800)=0x8, 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000840)=@qipcrtr, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000008c0)=""/128, 0x80}, {&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/192, 0xc0}], 0x4, &(0x7f0000001b00)=""/141, 0x8d}, 0x10040)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001c00), &(0x7f0000001c40)=0x14)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001c80), 0x81, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000001cc0)='vegas\x00', 0x6)

[  118.635266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.638168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.639269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.647447] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.649728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.767343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.769301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.770687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.774749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.777312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.787666] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.789318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.791063] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.795973] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.797952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.812876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  118.830791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  118.831908] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  118.857950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  118.860286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  118.884524] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  118.889870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  118.894207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  118.908149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  118.911637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  118.961023] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  118.965029] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  118.966867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  118.980290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  118.988913] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.023743] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.040048] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  119.044159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  119.049090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.055242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  119.061016] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  119.066675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.070864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  119.111980] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.116696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  120.726892] Bluetooth: hci0: command tx timeout
[  120.854848] Bluetooth: hci1: command tx timeout
[  120.855477] Bluetooth: hci2: command tx timeout
[  120.919012] Bluetooth: hci3: command tx timeout
[  120.982667] Bluetooth: hci4: command tx timeout
[  121.046640] Bluetooth: hci5: command tx timeout
[  121.111842] Bluetooth: hci7: command tx timeout
[  121.239679] Bluetooth: hci6: command tx timeout
[  122.776620] Bluetooth: hci0: command tx timeout
[  122.903831] Bluetooth: hci2: command tx timeout
[  122.904319] Bluetooth: hci1: command tx timeout
[  122.966601] Bluetooth: hci3: command tx timeout
[  123.030605] Bluetooth: hci4: command tx timeout
[  123.095646] Bluetooth: hci5: command tx timeout
[  123.159781] Bluetooth: hci7: command tx timeout
[  123.287894] Bluetooth: hci6: command tx timeout
[  124.823820] Bluetooth: hci0: command tx timeout
[  124.951585] Bluetooth: hci1: command tx timeout
[  124.952075] Bluetooth: hci2: command tx timeout
[  125.015709] Bluetooth: hci3: command tx timeout
[  125.078905] Bluetooth: hci4: command tx timeout
[  125.143624] Bluetooth: hci5: command tx timeout
[  125.206816] Bluetooth: hci7: command tx timeout
[  125.335786] Bluetooth: hci6: command tx timeout
[  126.870628] Bluetooth: hci0: command tx timeout
[  126.998632] Bluetooth: hci2: command tx timeout
[  126.999122] Bluetooth: hci1: command tx timeout
[  127.064923] Bluetooth: hci3: command tx timeout
[  127.126853] Bluetooth: hci4: command tx timeout
[  127.190629] Bluetooth: hci5: command tx timeout
[  127.255603] Bluetooth: hci7: command tx timeout
[  127.383654] Bluetooth: hci6: command tx timeout
[  178.472022] syz-executor.1 (282) used greatest stack depth: 24640 bytes left
[  178.570087] syz-executor.2 (287) used greatest stack depth: 24544 bytes left
[  181.043953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.048266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.052075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.058010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.064127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.167680] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.170682] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.172846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.187212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.191558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  181.192475] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.195382] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  181.200032] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  181.230210] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  181.239393] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  181.269131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  181.277091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  181.291383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.296464] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  181.304121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.305227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.307882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  181.308938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.315466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  181.318349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  181.321456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  181.331085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  181.355066] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  181.357633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.361727] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  181.369022] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  181.380756] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  181.381244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  181.433490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  181.435980] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  181.450880] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  181.487715] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  181.495111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  181.503685] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  181.532166] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  183.128186] Bluetooth: hci0: command tx timeout
[  183.255817] Bluetooth: hci1: command tx timeout
[  183.318894] Bluetooth: hci2: command tx timeout
[  183.382622] Bluetooth: hci3: command tx timeout
[  183.447681] Bluetooth: hci5: command tx timeout
[  183.510763] Bluetooth: hci4: command tx timeout
[  183.574629] Bluetooth: hci7: command tx timeout
[  183.638997] Bluetooth: hci6: command tx timeout
[  185.174745] Bluetooth: hci0: command tx timeout
[  185.302646] Bluetooth: hci1: command tx timeout
[  185.368562] Bluetooth: hci2: command tx timeout
[  185.430872] Bluetooth: hci3: command tx timeout
[  185.494820] Bluetooth: hci5: command tx timeout
[  185.558708] Bluetooth: hci4: command tx timeout
[  185.622598] Bluetooth: hci7: command tx timeout
[  185.686616] Bluetooth: hci6: command tx timeout
[  187.222655] Bluetooth: hci0: command tx timeout
[  187.350626] Bluetooth: hci1: command tx timeout
[  187.414855] Bluetooth: hci2: command tx timeout
[  187.478805] Bluetooth: hci3: command tx timeout
[  187.542740] Bluetooth: hci5: command tx timeout
[  187.606829] Bluetooth: hci4: command tx timeout
[  187.670615] Bluetooth: hci7: command tx timeout
[  187.735587] Bluetooth: hci6: command tx timeout
[  189.270639] Bluetooth: hci0: command tx timeout
[  189.398626] Bluetooth: hci1: command tx timeout
[  189.462853] Bluetooth: hci2: command tx timeout
[  189.526838] Bluetooth: hci3: command tx timeout
[  189.590936] Bluetooth: hci5: command tx timeout
[  189.656621] Bluetooth: hci4: command tx timeout
[  189.718613] Bluetooth: hci7: command tx timeout
[  189.782656] Bluetooth: hci6: command tx timeout
[  243.632295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  243.644815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  243.648765] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  243.657890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  243.665280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  243.772025] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  243.787699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  243.790791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  243.799032] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  243.804720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  243.837912] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  243.846238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  243.848374] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  243.855689] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  243.859140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  243.977201] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.025251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.041043] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.090108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.096665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.111807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.114180] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  244.119160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  244.121605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  244.133789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  244.139831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.144046] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  244.190884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.220763] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  244.228329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  244.229617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.235088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.252150] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  244.254384] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  244.259858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  244.264442] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  244.340798] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  244.341015] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  244.352066] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  244.358177] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  245.719735] Bluetooth: hci0: command tx timeout
[  245.848758] Bluetooth: hci1: command tx timeout
[  245.975908] Bluetooth: hci2: command tx timeout
[  246.295627] Bluetooth: hci3: command tx timeout
[  246.358828] Bluetooth: hci5: command tx timeout
[  246.359765] Bluetooth: hci4: command tx timeout
[  246.423620] Bluetooth: hci6: command tx timeout
[  246.486675] Bluetooth: hci7: command tx timeout
[  247.767616] Bluetooth: hci0: command tx timeout
[  247.895672] Bluetooth: hci1: command tx timeout
[  248.023642] Bluetooth: hci2: command tx timeout
[  248.343099] Bluetooth: hci3: command tx timeout
[  248.407687] Bluetooth: hci5: command tx timeout
[  248.408152] Bluetooth: hci4: command tx timeout
[  248.472092] Bluetooth: hci6: command tx timeout
[  248.537656] Bluetooth: hci7: command tx timeout
[  249.815841] Bluetooth: hci0: command tx timeout
[  249.943869] Bluetooth: hci1: command tx timeout
[  250.071592] Bluetooth: hci2: command tx timeout
[  250.391794] Bluetooth: hci3: command tx timeout
[  250.455734] Bluetooth: hci4: command tx timeout
[  250.456209] Bluetooth: hci5: command tx timeout
[  250.518637] Bluetooth: hci6: command tx timeout
[  250.583614] Bluetooth: hci7: command tx timeout
[  251.862662] Bluetooth: hci0: command tx timeout
[  251.991782] Bluetooth: hci1: command tx timeout
[  252.118662] Bluetooth: hci2: command tx timeout
[  252.438598] Bluetooth: hci3: command tx timeout
[  252.502797] Bluetooth: hci4: command tx timeout
[  252.503288] Bluetooth: hci5: command tx timeout
[  252.567441] Bluetooth: hci6: command tx timeout
[  252.631250] Bluetooth: hci7: command tx timeout
[  304.069386] syz-executor.7 (5419) used greatest stack depth: 24288 bytes left
[  305.958447] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  305.970028] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  305.973273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  305.981830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  305.993527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.114656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  306.125229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  306.130295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  306.153435] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  306.164090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.360163] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  306.367397] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  306.370764] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  306.383007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  306.389083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  306.494303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  306.497805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  306.506132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  306.525090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  306.533990] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  306.540690] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  306.567499] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  306.597236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  306.598741] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  306.665500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  306.672497] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  306.674885] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  306.678062] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  306.682130] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  306.688463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  306.688468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  306.694502] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  306.697384] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  306.718166] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  306.734251] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  306.737049] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  306.753841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  306.775335] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  306.786642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  306.789769] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.054651] Bluetooth: hci0: command tx timeout
[  308.246612] Bluetooth: hci1: command tx timeout
[  308.438620] Bluetooth: hci2: command tx timeout
[  308.631191] Bluetooth: hci3: command tx timeout
[  308.758911] Bluetooth: hci4: command tx timeout
[  308.823125] Bluetooth: hci5: command tx timeout
[  308.886982] Bluetooth: hci7: command tx timeout
[  308.950730] Bluetooth: hci6: command tx timeout
[  310.102792] Bluetooth: hci0: command tx timeout
[  310.295920] Bluetooth: hci1: command tx timeout
[  310.486663] Bluetooth: hci2: command tx timeout
[  310.678623] Bluetooth: hci3: command tx timeout
[  310.807931] Bluetooth: hci4: command tx timeout
[  310.873873] Bluetooth: hci5: command tx timeout
[  310.935682] Bluetooth: hci7: command tx timeout
[  310.999359] Bluetooth: hci6: command tx timeout
[  312.151182] Bluetooth: hci0: command tx timeout
[  312.342653] Bluetooth: hci1: command tx timeout
[  312.534922] Bluetooth: hci2: command tx timeout
[  312.726736] Bluetooth: hci3: command tx timeout
[  312.854686] Bluetooth: hci4: command tx timeout
[  312.919284] Bluetooth: hci5: command tx timeout
[  312.984220] Bluetooth: hci7: command tx timeout
[  313.047709] Bluetooth: hci6: command tx timeout
[  314.198744] Bluetooth: hci0: command tx timeout
[  314.391766] Bluetooth: hci1: command tx timeout
[  314.582608] Bluetooth: hci2: command tx timeout
[  314.774755] Bluetooth: hci3: command tx timeout
[  314.902864] Bluetooth: hci4: command tx timeout
[  314.966606] Bluetooth: hci5: command tx timeout
[  315.031634] Bluetooth: hci7: command tx timeout
[  315.094657] Bluetooth: hci6: command tx timeout
[  369.461054] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.464742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.468672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.482812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  369.487006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.489254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.492087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.495802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.510161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.518194] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.804134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.807760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.823281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.825130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.830588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.833501] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.849039] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.858486] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.862021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.867227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.914840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  369.918650] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  369.920937] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  369.927963] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  369.929418] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  369.930878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  369.939316] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  369.951098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  369.991358] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  370.032648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  370.160511] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  370.178445] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  370.201845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  370.233018] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  370.255027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  370.490915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  370.495362] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  370.497730] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  370.565994] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  370.606094] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.544727] Bluetooth: hci0: command tx timeout
[  371.545708] Bluetooth: hci1: command tx timeout
[  371.926819] Bluetooth: hci3: command tx timeout
[  371.991757] Bluetooth: hci2: command tx timeout
[  372.248597] Bluetooth: hci6: command tx timeout
[  372.249196] Bluetooth: hci4: command tx timeout
[  372.374722] Bluetooth: hci5: command tx timeout
[  372.694631] Bluetooth: hci7: command tx timeout
[  373.590694] Bluetooth: hci0: command tx timeout
[  373.591144] Bluetooth: hci1: command tx timeout
[  373.974885] Bluetooth: hci3: command tx timeout
[  374.038603] Bluetooth: hci2: command tx timeout
[  374.295583] Bluetooth: hci4: command tx timeout
[  374.296036] Bluetooth: hci6: command tx timeout
[  374.422657] Bluetooth: hci5: command tx timeout
[  374.743933] Bluetooth: hci7: command tx timeout
[  375.638622] Bluetooth: hci0: command tx timeout
[  375.639096] Bluetooth: hci1: command tx timeout
[  376.022848] Bluetooth: hci3: command tx timeout
[  376.088066] Bluetooth: hci2: command tx timeout
[  376.342647] Bluetooth: hci6: command tx timeout
[  376.343134] Bluetooth: hci4: command tx timeout
[  376.471580] Bluetooth: hci5: command tx timeout
[  376.790645] Bluetooth: hci7: command tx timeout
[  377.686738] Bluetooth: hci1: command tx timeout
[  377.687235] Bluetooth: hci0: command tx timeout
[  378.070617] Bluetooth: hci3: command tx timeout
[  378.134616] Bluetooth: hci2: command tx timeout
[  378.391007] Bluetooth: hci4: command tx timeout
[  378.391510] Bluetooth: hci6: command tx timeout
[  378.518644] Bluetooth: hci5: command tx timeout
[  378.838607] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
09:07:12  Registers:
info registers vcpu 0
RAX=ffffffff812d9782 RBX=0000000000000002 RCX=0000000000000002 RDX=ffff88806ce08a01
RSI=ffff88806ce08a70 RDI=ffff88806ce08a70 RBP=ffff88806ce08ad0 RSP=ffff88806ce089b8
R8 =ffffffff867c1c5a R9 =ffff88806ce08ab8 R10=000000000003b6cd R11=0000000000006bd3
R12=ffff88806ce08ad8 R13=ffff88806ce08ac0 R14=ffff88806ce08a78 R15=ffff88806ce08a78
RIP=ffffffff8135490d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e4ecd16080 CR3=0000000030b99000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff87a55508 RBX=ffff88801a131b80 RCX=0000000000000000 RDX=0000000000000001
RSI=0000000000000000 RDI=ffffffff85c1cbc0 RBP=ffff88801a1325d8 RSP=ffff88802d7f6d08
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff88801a132628 R13=0000000000000003 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8151902d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe6b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f070a9444a1 CR3=0000000032cc4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000