Warning: Permanently added '[localhost]:33889' (ECDSA) to the list of known hosts.
2025/06/10 02:30:34 fuzzer started
2025/06/10 02:30:34 dialing manager at localhost:40003
syzkaller login: [  101.101101] cgroup: Unknown subsys name 'net'
[  101.243759] cgroup: Unknown subsys name 'cpuset'
[  101.293084] cgroup: Unknown subsys name 'rlimit'
2025/06/10 02:30:51 syscalls: 2214
2025/06/10 02:30:51 code coverage: enabled
2025/06/10 02:30:51 comparison tracing: enabled
2025/06/10 02:30:51 extra coverage: enabled
2025/06/10 02:30:51 setuid sandbox: enabled
2025/06/10 02:30:51 namespace sandbox: enabled
2025/06/10 02:30:51 Android sandbox: enabled
2025/06/10 02:30:51 fault injection: enabled
2025/06/10 02:30:51 leak checking: enabled
2025/06/10 02:30:51 net packet injection: enabled
2025/06/10 02:30:51 net device setup: enabled
2025/06/10 02:30:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/10 02:30:51 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/10 02:30:51 USB emulation: enabled
2025/06/10 02:30:51 hci packet injection: enabled
2025/06/10 02:30:51 wifi device emulation: enabled
2025/06/10 02:30:51 802.15.4 emulation: enabled
2025/06/10 02:30:51 fetching corpus: 0, signal 0/0 (executing program)
2025/06/10 02:30:53 starting 8 fuzzer processes
02:30:53 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x410400)
socket$netlink(0x10, 0x3, 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x400, 0x40d02)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0xef, @private2, 0x4}, {0xa, 0x4e20, 0x50ad, @local, 0xffffffff}, 0x5, [0xffff8000, 0x833, 0x0, 0x1ff, 0x81, 0x6, 0x3f, 0x3f]}, 0x5c)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x6a}}, './file0\x00'})
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xc0102, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000240)=0x9)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000280))
ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000002c0))
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000300)={0x30, {{0xa, 0x4e20, 0x89b, @private2, 0xfffffff9}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1f}}, {{0xa, 0x4e24, 0x5, @remote, 0x5}}, {{0xa, 0x4e23, 0x0, @mcast1, 0x1f}}]}, 0x210)
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000540)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14)
r6 = fsmount(r3, 0x1, 0x8)
ioctl$TIOCGICOUNT(r6, 0x545d, 0x0)
r7 = openat$incfs(r2, &(0x7f0000000580)='.log\x00', 0x4001, 0x20)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000680)={'veth0_virt_wifi\x00', &(0x7f00000005c0)=@ethtool_rx_ntuple={0x35, {0x3, @usr_ip4_spec={@rand_addr=0x64010101, @private=0xa010102, 0x1000, 0x20, 0x1, 0x8}, @tcp_ip4_spec={@remote, @loopback, 0x4e23, 0x4e24, 0x5}, 0x377, 0x0, 0x12, 0x4000, 0xffffffffffffffff}}})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r8=>r1, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r8, {r3}}, './file0\x00'})

02:30:53 executing program 1:
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x78}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c090}, 0x800)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x110, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x200}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7c}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x8}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6}, {0x5, 0x12, 0x1}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r0 = syz_open_dev$loop(&(0x7f0000000340), 0xffffffffffffffff, 0x101000)
ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x9, 0x2, 0x2, 0x7, 0x3, 0x80}, 0x20)
write$P9_RMKNOD(r0, &(0x7f00000003c0)={0x14, 0x13, 0x1, {0x4, 0x3, 0x3}}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg1\x00', <r1=>0x0})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@local, r1}, 0x14)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x1b, 0x2}, 0x7)
syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x600, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', r3, 0x4, 0x5, 0x40, 0x3ff, 0x44, @local, @loopback, 0x1, 0x20, 0xffff, 0x10001}})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000c00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000800)={0x3bc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa92d, 0x8}}}}, [@NL80211_ATTR_IE={0x12f, 0x2a, [@preq={0x82, 0x62, @ext={{0x0, 0x1, 0x1}, 0x1f, 0x81, 0x2c1, @device_b, 0x9, @device_a, 0x5c, 0x8, 0x6, [{{}, @device_a, 0x4}, {{0x1}, @device_a, 0x1f}, {{}, @device_b, 0x7c1}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1}, @device_a, 0x9}]}}, @measure_req={0x26, 0xc1, {0x0, 0x2, 0x85, "9a3a1107796ac692b5fee9a94297197f2e808947e330b2a8dca572b1ed84ffb125d120dfedab9ed5f0343253ce582acb889bb50001e4669f7ff57563a2db4036af55116e85f33ae5d56c47c0894f599abbcb58a017976a98864041ff372241a700bba90cee33b41edeff276ad04b75823358c4761fbed6f62c3ed0fb5240a2d5f26831c341b719eced60e9481d3e2034f99abed84db5ad0edca1f30f1432d7421ca6dfe9cea7ea4eeae3162e851c6e6bb1334deaacd71a4c7ee0b7a95422"}}, @ibss={0x6, 0x2, 0xc7}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xa8, 0x2a, [@measure_req={0x26, 0xa2, {0x7, 0x8, 0x4, "4e2b2eff3ca443c92f304b98028de136738338de8201eace7eb61dfd3c2462828eae8a6ef7509caf7ae5e94d01cce47b9bb9a7a62c27d6bbe18d7319178e6f3708a4fd8bc20cf0e9d759245efaea6ebbdb4aae0a7521ff51b009673cfaf0b2950040a088545c35234fbcc1ebb47ffafd9622fc4b8c7c0ac3d96a86e6586aa4bfe06ce9d94c9866100283a6d264ba43286cdf25cd6112454024b5c12e2f12e8"}}]}, @NL80211_ATTR_IE={0x164, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x8, 0x10}}, @mesh_chsw={0x76, 0x6, {0x81, 0x7, 0x2e, 0x3}}, @gcr_ga={0xbd, 0x6, @broadcast}, @measure_req={0x26, 0x7a, {0x59, 0x4f, 0x7, "f26cdd5f464b805354e54ee78ba81028a868743dc1c8a72ff50240a9351d82d63b50cff2fc75d3b796a03ca4b4ac6934a951bd695b9ae4345bd25a07ad427f66923434933147f93a479f8ad5aee116a25ec484e1efab331118be990cf1e825a1dd63085ecb42e8ca8895bd843895c6b3e97c2ec60e22a8"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x8, 0x2, @device_b, 0x1, "", 0x1, 0x7, @device_a, 0x7}}, @random={0x7, 0x74, "1ca6c4fa39a9d3cf8f7e507dfa88b3008deafab8264923832890a5e9a0c49b54cc46c019821c2950cbfe3f7d8d26fed6340f633692e74dc3e3d891e14815bf87e87fbc7a073d9afd771f764c17118ffa6c0ee8bea2917723ff90e45b4dbed9f03beca770503b24b201c7570f8f01cee0795bc371"}, @sec_chan_ofs={0x3e, 0x1}, @supported_rates={0x1, 0x5, [{0x36, 0x1}, {0x6c}, {0x4a, 0x1}, {0xc}, {0xa, 0x1}]}, @random_vendor={0xdd, 0x22, "ab1fdc7ea91a4c7b42646c5e806065f32c49f806c7c4b91f06c6445021e0cdcb7588"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7f, 0xb9, 0x8}}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x4}, 0x8, 0x80, @device_a, 0x5, 0x1, 0x10001}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x805}, 0x8800)
ioctl$CDROMSETSPINDOWN(r2, 0x531e, &(0x7f0000000c40))
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/bus/platform', 0x200280, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x181a011}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x180, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xcc, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x260}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe966}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3ff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8e}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_REG_RULES={0x84, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x180}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r2)
sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x4c, r6, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x5f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0xc040)

02:30:53 executing program 2:
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000000))
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000000c0)={{}, 0x0, 0x4, @inherit={0x68, &(0x7f0000000040)={0x0, 0x4, 0x8, 0x8, {0x10, 0x4, 0x7, 0x5, 0x4}, [0x6bebf3d2, 0xffffffff, 0x9, 0x7fff]}}, @subvolid=0x1})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000010c0), &(0x7f0000001100)={'L+', 0x1ff}, 0x16, 0x2)
ioctl$FITHAW(0xffffffffffffffff, 0xc0045878)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001140))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001180)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000011c0)={0x0, <r2=>0x0})
write$P9_RGETLOCK(r1, &(0x7f0000001240)={0x20, 0x37, 0x2, {0x2, 0x8, 0x5, r2, 0x2, 'L+'}}, 0x20)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000001280))
r3 = signalfd(r0, &(0x7f00000012c0)={[0x3cdca5d]}, 0x8)
r4 = openat(r1, &(0x7f0000001300)='./file0\x00', 0x2690123b525225af, 0x80)
r5 = syz_open_dev$mouse(&(0x7f0000001340), 0xff, 0x1)
r6 = syz_open_dev$loop(&(0x7f0000001380), 0x6, 0x40040)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000001400)={0x8, 0x0, &(0x7f00000013c0)=[r4, r5, r6, r1]}, 0x4)
r7 = dup3(r6, 0xffffffffffffffff, 0x0)
openat$incfs(r7, &(0x7f0000001440)='.log\x00', 0x220040, 0x1)
setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000001480)=0x40, 0x4)
connect$unix(0xffffffffffffffff, &(0x7f0000001500)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

02:30:53 executing program 3:
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0xee00, 0xffffffffffffffff}, 0xc)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x302, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x13}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xf60fcf62d3bfe2b0}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000)
ioctl$int_out(0xffffffffffffffff, 0x5466, &(0x7f0000000180))
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000001c0)={0x8, 0x1})
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x210801}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x80)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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")
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sysvipc/shm\x00', 0x0, 0x0)
r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @empty}, &(0x7f0000000480)=0x10, 0x180000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r2=>r1, {0xbc3}}, './file0\x00'})
r3 = dup2(r2, r0)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000500))
r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x9, 0x28000)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000580)={0x0, 0x1, 0x6}, 0x10)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x420100, 0x0)
ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000600))
sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040010}, 0x8051)
r6 = openat$incfs(r4, &(0x7f0000000780)='.log\x00', 0x228800, 0x0)
ioctl$CDROMSUBCHNL(r6, 0x530b, &(0x7f00000007c0)={0x0, 0x6, 0x5, 0xe, 0x7, 0x0, @lba=0x221f, @msf={0x7, 0x39, 0x2}})
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000840))

[  119.881602] audit: type=1400 audit(1749522653.659:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:30:53 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000040)=0xc)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @local}})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0, 0x6, 0x3, 0x0, {0x0, 0x0, r0}}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x40}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3f}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x80)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000002c0))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'})
r4 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
r5 = pidfd_getfd(r3, r3, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x2340, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000400)={0x3dc, 0xd, 0xa, 0x201, 0x0, 0x0, {0xd, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3c0, 0x3, 0x0, 0x1, [{0x3bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x268, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "e7c84ab64538ddd660"}, @NFTA_DATA_VALUE={0x88, 0x1, "2cde9b55d5e2c7e95bafdcfdafb267b23dbfd1a00aa664cc22284fdf734a4ee9aab65d4ecaec3364805eef6475c78eabb5bdba3e44dbf4d52ed34018115a2bceaf8d1e3adb1b0a325abb0d976ebce0fefcfc4fb386de50cbe62c9553202b3778f05eb8b4a3942a25e3842fbf41d0ce954c51df85ef7e5d566d9236e8123271231181a530"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "b4d395d5c8a56be64ba08ce96535c7f20165a2fcd74e4a9285fc510d6dc0776c14c41549854c1b1484d3a8426b6e0b874383d0dd865b976e4354e9632ea7f3c4efac544b0b8e1c5aaaf82ae560a3ecde35b411100321113ce086efebf6c49988387a78eabef57d39b4c3be37f90f387213016caa0a4a39f56da30af8f4ecdf481c1d2e1030a836d577d904ba19a67ca9eb55c5d0c5257ce746076b9b86899853f2036f28812cd799d5796787674fe20e77f62c25a556b474711ac821fd4bd79c14fbad6ff1d0375d83f568c1d1b8fb1f613130bbae432fc15c7fb4b6f0e40ff682da1867"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY_END={0x90, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xffff}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4008000}, 0x840)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x10200, 0x0)
ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f00000008c0)={r1, 0x0, 0x9})
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9c1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x11)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x96}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x78}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000)

02:30:53 executing program 5:
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0x7fff, 0x4)
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9a, 0x40480)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x1, {{0x2, 0x4e22, @broadcast}}}, 0x88)
kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x3, r0, r0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000200))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffe1b2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x1)
pipe2(&(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
vmsplice(r4, &(0x7f0000001700)=[{&(0x7f00000003c0)="7e3c8b05bb147d1772f2036fdf16533f0800fb547ade5d8470e92065a3f3fd864b49a307f14a7c578f8c9d0a9acf8efa59924d61426ed10b6badeff5da47be191629d080650e877f8ba9125ba2f01f8f17cb2c32d66c27a3cc892bd31ed78bf0dbafc150f9c0be02b62cb95425a6bf003c45d7c403dd4a69c63c71c9d5ee117bef1df05af1e321e5a4686b2e83b2c60ee16170cf34f5c43131", 0x99}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="c8f8f416fe9faf6912cb5ae9f5125ed43b5ea0acbd1ab17bec812a0e676bc53f4936bc2d0ab8209f96d1ba4f58530bc505502b89bf391cbbe3a9b720547e81dcbce229b02003bedf633c0b51a1769ee68d31ce488a391bd0", 0x58}, {&(0x7f0000001500)="e3e68105d1be262792a01f6d0d34f092251e1d5e22c53acad17510b977f0c0acce5a6e506ff6be66c91d9a68b8a4e286bd41610d92c7bace9c5aa5cddaba46590442ff8e743c4a03d80d91c3dfd1fe90722974760e743175dde317afa072016a6d24a4075296a7356a0ff81df34fe63234a38973f7ee7087c606f43e1a281a87d08fc529883d9eaa53a3d17617f9783f0db32fa8b1646705d17c33e1a37ee06dfd1168b3719ffef655ccf22dc8c0e4180d1a3b3ed3e2f2a2008b2399e17a8928b860505f3e5526d22dd130b3920f8d7df4b3b47005b401b3c155fe294089cf53099027c3edfee7bf40c2e1945b3327bafd6d06b004b76cb81dde50", 0xfb}, {&(0x7f0000001600)="4af6a279107230", 0x7}, {&(0x7f0000001640)="6d69a3815f965223cc666d17725db344eb3f3e12a197e7b71f32bafac1505ae72d1fd467e7501820730bb8b5a05d66f970dbbde0f258a348e38a059167633ccd3f", 0x41}, {&(0x7f00000016c0)="20adfeb7569edacf123f2ea366cd6aea5acf45fff8fedc0cf8440df62d7b6b675f41e9", 0x23}], 0x7, 0x4)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000)
write$binfmt_elf64(r0, &(0x7f0000001980)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xfe, 0x80, 0x5, 0x6, 0x3, 0x3, 0x20, 0x45, 0x40, 0x33f, 0x8, 0x1000, 0x38, 0x1, 0xfffc, 0xffff, 0x8}, [{0x7, 0x3, 0x56f6, 0x3ff, 0xbc3d, 0x3, 0x6, 0x4}], "db0cf766eff20934901708f3ed4ba3755bc08f382f9834a73ef8b8f9e7a2a0939e3e3a0803afb08112609bb1481ce2908baf99b1fcd00e069d8f600ecf4e009faba5ee9b3f389b9fe66e6f9a601d52684adf64022168873d568fbef3ca416c9eac0fda566e34c0cc1a943c14163ad46093612f3aac2dfb5fb4143fa83160625cdb364dcda16778c55cc736352b7ee6d1bca688fb98c3714a05a67aa3914cde3ca4f56a9872a38e25066ef9cd59b002da9feefbfadb411a8475480af01609427d53", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa39)
r5 = accept4$inet(r0, &(0x7f00000023c0)={0x2, 0x0, @multicast2}, &(0x7f0000002400)=0x10, 0x80800)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000002440)={0x0, 0x80000001, [0xb85, 0xfffffffffffffffd, 0x4a50, 0x1, 0x200, 0x2]})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002480)={0x7, 'vlan1\x00', {0x101}})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000024c0)={{0x1, 0x1, 0x18, <r6=>r5}, './file0/file0\x00'})
ioctl$CDROMREADTOCENTRY(r6, 0x5306, &(0x7f0000002500)={0x20, 0x7, 0xa, 0x1, @msf={0x8, 0x68}, 0x1})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000002540)={0x4, {0xc, 0x3f3, 0x4, 0x0, 0xcd5b}})

02:30:53 executing program 6:
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x8}, 0x8)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'xfrm0\x00'})
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='xfrm0\x00', 0x0, 0xffffffffffffffff)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4)
r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xee7, 0x8040)
getsockname$netlink(r0, &(0x7f0000000140), &(0x7f0000000180)=0xc)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000001c0)=0x5a10, 0x4)
r1 = fspick(r0, &(0x7f0000000200)='./file0\x00', 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000240)={0x0, 0x8, 0x5, 0x1})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000100}, 0x4000041)
recvmsg$unix(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000980)=""/8, 0x8}, {&(0x7f00000009c0)=""/157, 0x9d}, {&(0x7f0000000a80)=""/84, 0x54}, {&(0x7f0000000b00)=""/203, 0xcb}, {&(0x7f0000000c00)=""/122, 0x7a}, {&(0x7f0000000c80)=""/154, 0x9a}, {&(0x7f0000000d40)=""/151, 0x97}], 0x7, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x832]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000001040)=0x3ff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001080)={{0x1, 0x1, 0x18, <r6=>r5, {0x8}}, './file0\x00'})
ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f00000010c0)={0x336f, 0x4})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001100)={{0x1, 0x1, 0x18, <r7=>r4, {0x7f}}, './file0\x00'})
sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40014)

02:30:53 executing program 7:
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x100, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x88d0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x800, 0x17}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8008000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x400, 0x780, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x840)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r3, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r3, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040804}, 0x80081)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048014}, 0x5)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000804)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040840}, 0x800)
r5 = creat(&(0x7f0000000ac0)='./file0\x00', 0x100)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, r3, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x180}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd94}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20020800)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff)
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r6, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x5}]}, 0x28}}, 0x0)
write$binfmt_script(r5, &(0x7f0000000d80)={'#! ', './file0', [{0x20, '%*-)'}, {}, {0x20, '['}, {0x20, '('}, {0x20, '802.15.4 MAC\x00'}], 0xa, "ac6bcd3c84f611008cdd5d3bfee28c2273b44a53448209ef42d716fc3858e36ff9e029429528cc1811975970be5d0a72ea676200ba4bd3517848c2775d223b19202157469b079263b50b114d4193d8259602b9bf60a16bc76ec5947cd0f7abf5dd274bc6b7"}, 0x88)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000f00), 0xc, &(0x7f0000002300)={&(0x7f0000002180)={0x164, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x164}, 0x1, 0x0, 0x0, 0xc001}, 0x8000)

[  121.263328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  121.270185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  121.276513] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  121.288811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  121.293960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  121.340888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.343524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.345736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.357732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.362681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.399511] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.404775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  121.408443] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  121.411019] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.418154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  121.419570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.427941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  121.431309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.438699] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  121.451751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.512659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.526019] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.530713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.569509] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  121.576570] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  121.578415] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  121.580637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.585795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  121.593194] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  121.595538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  121.599874] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  121.620890] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  121.625733] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  121.631936] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  121.664548] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  121.665090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  121.678502] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  121.684981] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  121.692972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  121.725963] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  123.345648] Bluetooth: hci0: command tx timeout
[  123.471356] Bluetooth: hci1: command tx timeout
[  123.471395] Bluetooth: hci3: command tx timeout
[  123.535561] Bluetooth: hci2: command tx timeout
[  123.663565] Bluetooth: hci4: command tx timeout
[  123.792332] Bluetooth: hci5: command tx timeout
[  123.792927] Bluetooth: hci6: command tx timeout
[  123.793300] Bluetooth: hci7: command tx timeout
[  125.391625] Bluetooth: hci0: command tx timeout
[  125.519578] Bluetooth: hci1: command tx timeout
[  125.519885] Bluetooth: hci3: command tx timeout
[  125.583407] Bluetooth: hci2: command tx timeout
[  125.712400] Bluetooth: hci4: command tx timeout
[  125.839785] Bluetooth: hci7: command tx timeout
[  125.840486] Bluetooth: hci6: command tx timeout
[  125.840542] Bluetooth: hci5: command tx timeout
[  127.439773] Bluetooth: hci0: command tx timeout
[  127.567659] Bluetooth: hci1: command tx timeout
[  127.567801] Bluetooth: hci3: command tx timeout
[  127.631655] Bluetooth: hci2: command tx timeout
[  127.760367] Bluetooth: hci4: command tx timeout
[  127.887389] Bluetooth: hci5: command tx timeout
[  127.887482] Bluetooth: hci7: command tx timeout
[  127.887830] Bluetooth: hci6: command tx timeout
[  129.487350] Bluetooth: hci0: command tx timeout
[  129.615428] Bluetooth: hci1: command tx timeout
[  129.615893] Bluetooth: hci3: command tx timeout
[  129.679387] Bluetooth: hci2: command tx timeout
[  129.807313] Bluetooth: hci4: command tx timeout
[  129.935529] Bluetooth: hci6: command tx timeout
[  129.935976] Bluetooth: hci7: command tx timeout
[  129.937406] Bluetooth: hci5: command tx timeout
[  183.754175] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  183.759070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  183.761558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  183.767135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  183.771013] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  183.901910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  183.905327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  183.912620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  183.923978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  183.934858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  183.984399] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  183.995779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  183.998806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  184.004650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  184.008669] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  184.026701] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  184.030037] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  184.030999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  184.037769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  184.050758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  184.060842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  184.062098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  184.065044] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  184.066784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  184.075909] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  184.078614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  184.087849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  184.091844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  184.099720] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  184.104004] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  184.105162] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  184.108005] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  184.120141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  184.128687] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  184.131948] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  184.135789] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  184.144542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  184.147549] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  184.158759] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  184.175562] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  185.808763] Bluetooth: hci0: command tx timeout
[  186.002462] Bluetooth: hci1: command tx timeout
[  186.127350] Bluetooth: hci3: command tx timeout
[  186.191326] Bluetooth: hci4: command tx timeout
[  186.256421] Bluetooth: hci6: command tx timeout
[  186.257154] Bluetooth: hci2: command tx timeout
[  186.321343] Bluetooth: hci7: command tx timeout
[  186.383327] Bluetooth: hci5: command tx timeout
[  187.856015] Bluetooth: hci0: command tx timeout
[  188.049367] Bluetooth: hci1: command tx timeout
[  188.177415] Bluetooth: hci3: command tx timeout
[  188.239378] Bluetooth: hci4: command tx timeout
[  188.304570] Bluetooth: hci6: command tx timeout
[  188.305073] Bluetooth: hci2: command tx timeout
[  188.367390] Bluetooth: hci7: command tx timeout
[  188.432052] Bluetooth: hci5: command tx timeout
[  189.904349] Bluetooth: hci0: command tx timeout
[  190.097458] Bluetooth: hci1: command tx timeout
[  190.223592] Bluetooth: hci3: command tx timeout
[  190.288491] Bluetooth: hci4: command tx timeout
[  190.351859] Bluetooth: hci6: command tx timeout
[  190.352728] Bluetooth: hci2: command tx timeout
[  190.415842] Bluetooth: hci7: command tx timeout
[  190.479704] Bluetooth: hci5: command tx timeout
[  191.954585] Bluetooth: hci0: command tx timeout
[  192.144337] Bluetooth: hci1: command tx timeout
[  192.271471] Bluetooth: hci3: command tx timeout
[  192.335322] Bluetooth: hci4: command tx timeout
[  192.399337] Bluetooth: hci2: command tx timeout
[  192.399803] Bluetooth: hci6: command tx timeout
[  192.463329] Bluetooth: hci7: command tx timeout
[  192.528697] Bluetooth: hci5: command tx timeout
[  246.251013] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.258452] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.264149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  246.267333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  246.268651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  246.269505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.275650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  246.283503] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  246.283603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.291772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.378527] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.392620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  246.395625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.400094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  246.400676] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.405564] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  246.415359] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  246.424486] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  246.428725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.430727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  246.434192] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  246.437740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.441569] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  246.444983] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  246.449223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  246.449701] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  246.460458] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  246.465692] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  246.467554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  246.498686] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  246.510547] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  246.516803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  246.545042] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  246.551048] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  246.565618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.570822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  246.585296] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  246.594529] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  246.632045] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  246.639786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  248.335421] Bluetooth: hci0: command tx timeout
[  248.335544] Bluetooth: hci1: command tx timeout
[  248.528124] Bluetooth: hci2: command tx timeout
[  248.591846] Bluetooth: hci3: command tx timeout
[  248.591893] Bluetooth: hci4: command tx timeout
[  248.592185] Bluetooth: hci5: command tx timeout
[  248.911604] Bluetooth: hci7: command tx timeout
[  248.911699] Bluetooth: hci6: command tx timeout
[  250.383548] Bluetooth: hci1: command tx timeout
[  250.384730] Bluetooth: hci0: command tx timeout
[  250.575599] Bluetooth: hci2: command tx timeout
[  250.639401] Bluetooth: hci3: command tx timeout
[  250.639451] Bluetooth: hci5: command tx timeout
[  250.639893] Bluetooth: hci4: command tx timeout
[  250.960076] Bluetooth: hci7: command tx timeout
[  250.960610] Bluetooth: hci6: command tx timeout
[  252.431337] Bluetooth: hci0: command tx timeout
[  252.431844] Bluetooth: hci1: command tx timeout
[  252.623316] Bluetooth: hci2: command tx timeout
[  252.688514] Bluetooth: hci5: command tx timeout
[  252.689005] Bluetooth: hci3: command tx timeout
[  252.690402] Bluetooth: hci4: command tx timeout
[  253.007413] Bluetooth: hci6: command tx timeout
[  253.007927] Bluetooth: hci7: command tx timeout
[  254.479366] Bluetooth: hci1: command tx timeout
[  254.479882] Bluetooth: hci0: command tx timeout
[  254.671756] Bluetooth: hci2: command tx timeout
[  254.735385] Bluetooth: hci5: command tx timeout
[  254.735888] Bluetooth: hci3: command tx timeout
[  254.736671] Bluetooth: hci4: command tx timeout
[  255.055720] Bluetooth: hci7: command tx timeout
[  255.056197] Bluetooth: hci6: command tx timeout
[  308.645216] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  308.652444] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  308.656536] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  308.669593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  308.680824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  308.789943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  308.793600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  308.799868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  308.808992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  308.812678] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  309.043538] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  309.053849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  309.057597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  309.060821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  309.067857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  309.074893] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  309.077342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  309.081732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  309.087369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  309.098512] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  309.194749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  309.197891] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  309.201049] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  309.212165] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  309.223428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  309.225095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  309.237567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.248012] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  309.254611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  309.264540] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.275042] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  309.295191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  309.303707] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.310546] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.334893] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.356440] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  309.386545] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  309.403970] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  309.494555] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  309.518741] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  310.735587] Bluetooth: hci0: command tx timeout
[  310.863414] Bluetooth: hci1: command tx timeout
[  311.183389] Bluetooth: hci3: command tx timeout
[  311.183495] Bluetooth: hci2: command tx timeout
[  311.375329] Bluetooth: hci4: command tx timeout
[  311.439324] Bluetooth: hci5: command tx timeout
[  311.631527] Bluetooth: hci7: command tx timeout
[  311.759407] Bluetooth: hci6: command tx timeout
[  312.783333] Bluetooth: hci0: command tx timeout
[  312.911316] Bluetooth: hci1: command tx timeout
[  313.232332] Bluetooth: hci3: command tx timeout
[  313.232835] Bluetooth: hci2: command tx timeout
[  313.425281] Bluetooth: hci4: command tx timeout
[  313.487494] Bluetooth: hci5: command tx timeout
[  313.679330] Bluetooth: hci7: command tx timeout
[  313.807848] Bluetooth: hci6: command tx timeout
[  314.831303] Bluetooth: hci0: command tx timeout
[  314.960279] Bluetooth: hci1: command tx timeout
[  315.279472] Bluetooth: hci2: command tx timeout
[  315.280564] Bluetooth: hci3: command tx timeout
[  315.471515] Bluetooth: hci4: command tx timeout
[  315.535321] Bluetooth: hci5: command tx timeout
[  315.727473] Bluetooth: hci7: command tx timeout
[  315.855448] Bluetooth: hci6: command tx timeout
[  316.879368] Bluetooth: hci0: command tx timeout
[  317.007698] Bluetooth: hci1: command tx timeout
[  317.327345] Bluetooth: hci3: command tx timeout
[  317.327391] Bluetooth: hci2: command tx timeout
[  317.519641] Bluetooth: hci4: command tx timeout
[  317.583308] Bluetooth: hci5: command tx timeout
[  317.775860] Bluetooth: hci7: command tx timeout
[  317.903402] Bluetooth: hci6: command tx timeout
[  370.980912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  370.984033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  370.989192] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  370.995955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  371.003850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  371.291767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  371.295794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  371.307024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  371.320965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  371.329151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  371.388340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  371.410027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  371.413338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  371.447269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.457993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  371.463811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.481797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  371.496631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.513576] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.538981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  371.587023] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  371.617781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  371.629965] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  371.674893] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  371.676475] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  371.694935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  371.696929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  371.715642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  371.724079] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  371.756892] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.778615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  371.809731] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  371.811927] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  371.817055] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  371.821145] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.834601] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.838378] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.842086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.852419] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  371.875884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  373.071346] Bluetooth: hci0: command tx timeout
[  373.391503] Bluetooth: hci1: command tx timeout
[  373.583567] Bluetooth: hci3: command tx timeout
[  373.647457] Bluetooth: hci2: command tx timeout
[  373.775372] Bluetooth: hci4: command tx timeout
[  373.903352] Bluetooth: hci7: command tx timeout
[  373.903595] Bluetooth: hci5: command tx timeout
[  374.095456] Bluetooth: hci6: command tx timeout
[  375.119437] Bluetooth: hci0: command tx timeout
[  375.439625] Bluetooth: hci1: command tx timeout
[  375.633261] Bluetooth: hci3: command tx timeout
[  375.696352] Bluetooth: hci2: command tx timeout
[  375.825705] Bluetooth: hci4: command tx timeout
[  375.951575] Bluetooth: hci5: command tx timeout
[  375.951787] Bluetooth: hci7: command tx timeout
[  376.143362] Bluetooth: hci6: command tx timeout
[  377.167360] Bluetooth: hci0: command tx timeout
[  377.488429] Bluetooth: hci1: command tx timeout
[  377.679347] Bluetooth: hci3: command tx timeout
[  377.743732] Bluetooth: hci2: command tx timeout
[  377.871561] Bluetooth: hci4: command tx timeout
[  377.999332] Bluetooth: hci7: command tx timeout
[  377.999376] Bluetooth: hci5: command tx timeout
[  378.192396] Bluetooth: hci6: command tx timeout
[  379.216680] Bluetooth: hci0: command tx timeout
[  379.537311] Bluetooth: hci1: command tx timeout
[  379.727358] Bluetooth: hci3: command tx timeout
[  379.791508] Bluetooth: hci2: command tx timeout
[  379.919294] Bluetooth: hci4: command tx timeout
[  380.047509] Bluetooth: hci5: command tx timeout
[  380.048007] Bluetooth: hci7: command tx timeout
[  380.239669] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
02:36:02  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff81353e1d RDI=fffffbfff0b83978 RBP=ffffffff85c1cbc0 RSP=ffff88802e9cf2d8
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6cd R11=000000000002339c
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88802e9cf3c0
RIP=ffffffff8151b1d2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f13afd496f4 CR3=00000000378ca000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000008 RBX=ffffea000026df00 RCX=ffff88802ede7224 RDX=0000000000000002
RSI=ffff88806cf3bb50 RDI=ffff88803154dd28 RBP=ffff88802ede7330 RSP=ffff88802ede7290
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff888008c4a948 R13=ffff888008c4b780 R14=ffffea0000351240 R15=ffff888008c4a900
RIP=ffffffff81a7a24f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd430d5f260 CR3=000000002c8a2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000