Warning: Permanently added '[localhost]:49602' (ECDSA) to the list of known hosts. 2025/06/20 04:22:43 fuzzer started 2025/06/20 04:22:44 dialing manager at localhost:40967 syzkaller login: [ 85.164900] cgroup: Unknown subsys name 'net' [ 85.307112] cgroup: Unknown subsys name 'cpuset' [ 85.346217] cgroup: Unknown subsys name 'rlimit' 2025/06/20 04:22:59 syscalls: 207 2025/06/20 04:22:59 code coverage: enabled 2025/06/20 04:22:59 comparison tracing: enabled 2025/06/20 04:22:59 extra coverage: enabled 2025/06/20 04:22:59 setuid sandbox: enabled 2025/06/20 04:22:59 namespace sandbox: enabled 2025/06/20 04:22:59 Android sandbox: enabled 2025/06/20 04:22:59 fault injection: enabled 2025/06/20 04:22:59 leak checking: enabled 2025/06/20 04:22:59 net packet injection: enabled 2025/06/20 04:22:59 net device setup: enabled 2025/06/20 04:22:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/20 04:22:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/20 04:22:59 USB emulation: enabled 2025/06/20 04:22:59 hci packet injection: enabled 2025/06/20 04:22:59 wifi device emulation: enabled 2025/06/20 04:22:59 802.15.4 emulation: enabled 2025/06/20 04:22:59 fetching corpus: 0, signal 0/0 (executing program) 2025/06/20 04:23:00 starting 8 fuzzer processes 04:23:00 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) eventfd(0xfffffa28) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x5116, 0xfff, 0x7fff, 0x15ced645, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x210, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r2, &(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f00000003c0)=0x80) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) socketpair(0x2b, 0x1, 0x5, &(0x7f0000005740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000005840)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005800)={&(0x7f00000057c0)={0x3c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x400c0c1) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000058c0), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000005980)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005940)={&(0x7f0000005900)={0x1c, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x34044005) socketpair(0x22, 0x80000, 0x8, &(0x7f00000059c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000005ac0)={&(0x7f0000005a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a40)={0x38, 0x0, 0x8, 0x70bd2c, 0x7fff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0xc0c0) r8 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r8, &(0x7f00000067c0)=[{{&(0x7f0000005b00)=@llc, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005b80)=""/144, 0x90}], 0x1, &(0x7f0000005c80)=""/13, 0xd}, 0xffffffff}, {{&(0x7f0000005cc0)=@nfc, 0x80, &(0x7f0000006280)=[{&(0x7f0000005d40)=""/60, 0x3c}, {&(0x7f0000005d80)=""/190, 0xbe}, {&(0x7f0000005e40)=""/63, 0x3f}, {&(0x7f0000005e80)=""/227, 0xe3}, {&(0x7f0000005f80)=""/84, 0x54}, {&(0x7f0000006000)=""/96, 0x60}, {&(0x7f0000006080)=""/30, 0x1e}, {&(0x7f00000060c0)=""/240, 0xf0}, {&(0x7f00000061c0)=""/176, 0xb0}], 0x9, &(0x7f0000006340)=""/223, 0xdf}, 0xad}, {{&(0x7f0000006440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000066c0)=[{&(0x7f00000064c0)=""/61, 0x3d}, {&(0x7f0000006500)=""/189, 0xbd}, {&(0x7f00000065c0)=""/238, 0xee}], 0x3, &(0x7f0000006700)=""/137, 0x89}, 0x7}], 0x3, 0x10002, &(0x7f0000006880)={0x77359400}) socketpair(0x9, 0x1, 0x5, &(0x7f00000068c0)) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000006a00)={&(0x7f0000006940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000069c0)={&(0x7f0000006980)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x80) 04:23:00 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '(,\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40004) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000011) syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x30}, 0x4800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000800}, 0x20040000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x94, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x94}}, 0x40811) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x30}}, 0x80) r5 = syz_open_dev$vcsn(&(0x7f00000009c0), 0x5c1, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000a40)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000ac0)=""/101, 0x65}, {&(0x7f0000000b40)=""/241, 0xf1}, {&(0x7f0000000c40)=""/68, 0x44}, {&(0x7f0000000cc0)=""/212, 0xd4}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000001e40)=""/149, 0x95}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/61, 0x3d}], 0x2, &(0x7f0000002f80)=""/64, 0x40}, 0x2}], 0x2, 0x1a000, &(0x7f0000003040)={0x77359400}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000031c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003180)={&(0x7f0000003080)={0x100, r2, 0x100, 0x3e8, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x89}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x39}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0xc014) syz_genetlink_get_family_id$nbd(&(0x7f0000003340), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x44, 0x0, 0x801, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xac13}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c040}, 0x8800) 04:23:00 executing program 3: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffef5d, 0x88040) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) write$cgroup_int(r0, &(0x7f0000000040)=0x101, 0x12) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x88000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000840)={0x134, 0x0, &(0x7f0000000640)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x5, 0x1, 0x3f}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/198, 0xc6, 0x1, 0xf}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/107, 0x6b, 0x0, 0x1e}, @fda={0x66646185, 0x7, 0x1, 0x15}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000440)={0x0, 0x28, 0x48}}, 0x1000}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/19, 0x13, 0x2, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/134, 0x86, 0x0, 0x3f}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}}, @free_buffer], 0x99, 0x0, &(0x7f0000000780)="9af9620b9bbe1b96d93efddc211cfe4e5ae5b5d8d16e06ce69e1aece9e476a11c27aa31e7cf3424d4f505870b265d5b15cd7e42a51fb186395434780243f8dcfdc0fb8cf3b9edb151f18aa96489ccc5d4e265be329d467077146c3400c70f963c777b1cbcd7dda25fa99b8060de304b48c63a21ce3defca39b8d77ab503ad8ce7954ea02d971b10ba32807c0e82a30d8eb7f0ff6159dbd4e72"}) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_open_dev$vcsn(&(0x7f0000000880), 0x4, 0x298200) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000008c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000900)=0x100, 0x4) mount$9p_fd(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x1, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1e6}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vcsu#\x00'}}]}}) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000a40), 0xf0a00, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000a80)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000c80)={{0x0, 0x5, 0x800, 0x800, 0x3f, 0x9, 0x3f, 0x6e2a41f8, 0xffff, 0x0, 0x800, 0x3, 0x8, 0x7ff, 0x9}}) socketpair(0x29, 0x80001, 0x1, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000001d00), r1) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, r6, 0x800, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000001e00), &(0x7f0000001e40)=0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001f40)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 04:23:00 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x6, 0x4, 0x100, 0x8001, 0x8, 0x191a, 0x7fffffff, 0x0, 0x9, 0x6, 0xffffffff80000000, 0x80000000, 0x7fff, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000000c0)={{r0, 0x80, 0x8, 0x4, 0xb02, 0x9b0, 0x9, 0xfff, 0x2, 0xfffffc00, 0x0, 0x3, 0x75, 0x10001, 0x1f}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000001140), 0xffffffffffff0001, 0x20381) r3 = syz_open_dev$vcsu(&(0x7f0000001180), 0xe9d, 0x103000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0xb0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7e8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) openat$random(0xffffffffffffff9c, &(0x7f0000001300), 0x101040, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001380), r3) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x80, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20046890}, 0x8040) r5 = syz_open_dev$vcsn(&(0x7f00000014c0), 0x7f, 0x202) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001540), r2) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf612}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40801) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r7, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f00000017c0), r3) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001900)) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x804) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001c40)) [ 101.234794] audit: type=1400 audit(1750393380.591:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:23:00 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1f}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xf3dc7d8de912485b}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x60000880) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x20, 0xba, 0x1, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x20, 0x7800, 0x7fff, 0x4c6}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xcc, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf3}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x50395eda}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000005) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '+:\x1d\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x44085) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x240400c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x2400c083) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x88040000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040810}, 0x20040010) recvmmsg(r1, &(0x7f00000052c0)=[{{&(0x7f0000000b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000b80)=""/197, 0xc5}, {&(0x7f0000000c80)=""/4, 0x4}, {&(0x7f0000000cc0)=""/229, 0xe5}], 0x3, &(0x7f0000000e00)=""/18, 0x12}, 0x2}, {{&(0x7f0000000e40)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/58, 0x3a}, {0xffffffffffffffff}], 0x2, &(0x7f0000000f40)=""/77, 0x4d}, 0x81}, {{&(0x7f0000000fc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/64, 0x40}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000020c0)=""/196, 0xc4}, {&(0x7f00000021c0)=""/137, 0x89}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/201, 0xc9}, {&(0x7f0000003380)=""/184, 0xb8}, {&(0x7f0000003440)=""/74, 0x4a}], 0x6, &(0x7f0000003540)=""/114, 0x72}, 0x1}, {{&(0x7f00000035c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003640)=""/116, 0x74}, {&(0x7f00000036c0)=""/110, 0x6e}, {&(0x7f0000003740)=""/151, 0x97}, {&(0x7f0000003800)=""/22, 0x16}, {&(0x7f0000003840)=""/55, 0x37}, {&(0x7f0000003880)=""/11, 0xb}, {&(0x7f00000038c0)=""/56, 0x38}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/236, 0xec}], 0x9, &(0x7f0000004ac0)}, 0x1ff}, {{&(0x7f0000004b00)=@qipcrtr, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004b80)=""/96, 0x60}, {&(0x7f0000004c00)=""/186, 0xba}, {&(0x7f0000004cc0)=""/111, 0x6f}, {&(0x7f0000004d40)=""/133, 0x85}, {&(0x7f0000004e00)=""/146, 0x92}, {&(0x7f0000004ec0)=""/118, 0x76}, {&(0x7f0000004f40)=""/199, 0xc7}, {&(0x7f0000005040)=""/167, 0xa7}, {&(0x7f0000005100)=""/152, 0x98}], 0x9, &(0x7f0000005280)=""/53, 0x35}}], 0x6, 0x10020, &(0x7f0000005440)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000055c0)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005580)={&(0x7f00000054c0)={0x88, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x800) socketpair(0x3, 0x5, 0xffff8000, &(0x7f0000005600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(r8, &(0x7f0000005700)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000056c0)={&(0x7f0000005680)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24008840) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000005980)={&(0x7f0000005740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005940)={&(0x7f0000005880)={0x84, r0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r8}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x2c04c080}, 0x1000c024) 04:23:00 executing program 5: ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) r0 = syz_io_uring_complete(0x0) ioctl$CDROMSTART(r0, 0x5308) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfff) r1 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x101) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000080)=0x2) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x2a, 0x40) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x608c01, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) read$snapshot(r2, &(0x7f00000002c0)=""/168, 0xa8) r6 = accept4$bt_l2cap(r1, &(0x7f0000000380), &(0x7f00000003c0)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x6) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) 04:23:00 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x80) ioctl$CDROMSTART(r0, 0x5308) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x400) ioctl$CDROMGETSPINDOWN(r1, 0x531d, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x169041) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000180)) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) syz_open_dev$loop(&(0x7f00000001c0), 0xac7, 0x200001) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$CDROMGETSPINDOWN(r5, 0x531d, &(0x7f0000000240)) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000280)={{0x0, 0xbd0, 0x2, 0x200, 0xfff, 0x7, 0x3, 0xfff, 0x8000, 0x4, 0x5, 0x4, 0xff, 0x8001}}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000001280), &(0x7f00000012c0)=0x6) ioctl$CDROMSTART(r4, 0x5308) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000001400)={"ab9e17ac7c8726a92f920d81", &(0x7f0000001300)="326c09c99b4f3a5b06b8d06e1703e24dc61eee92a5b6f0de851368b5dfc2598a4bcd21667e7d36611dbfae3d7f7e0b366c37769c929764172d216b489a2b166b590c418e659eadc3", 0x48, 0x0, &(0x7f0000001380)={0x7, 0x1, 0x4, 0xe, 0x0, 0x0, 0x0, "d380e660", 0x4, "a1dbe3da", 0x9, 0x0, 0xd4, "f234ca", "61dcd047ed732debee3d48ad7ce7c00db54655669ee876780f6ed5d149be3f829e4f9112993b85d09d0f24eecc8f"}, 0x0, 0x401, 0xffffffff, &(0x7f00000013c0)}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x12, 0x9, 0x8, "bfab507d63dcf47d5e20165ace221a71646d0dd2f0278d5337f61ce2ab7faf97771e986699e5162496da118bc7c5926e5384100fb348ee8d2be34e303a7d2bd4", "0a9822bc51351a4425c32596c178258078dd6b5ac15d795101d4d77503ce007953aeb5d1dac7c6586248d54e29a8561e8a95fb6380d1c00fd6f912c9412117e9", "6ae2fcb67092686e7446fe959aa5c7d11ac740bd088f78d2c33cd0224d6f37f9", [0x9, 0x8]}) 04:23:01 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x248a40, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xc4) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x4e3b9b16, 0x101400) openat$cgroup_int(r1, &(0x7f0000000140)='cpu.idle\x00', 0x2, 0x0) ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f0000000240)={"3b4ddc8e2f75520a1be771c2", &(0x7f0000000180)="4cc8a1efc4900aae8314eaaf4d69560fe6be5eef9336ed613ca88b88dbc79c5d202bac5412c7ec8eef903fc5ecc2d23c2a9f", 0x32, 0x40, &(0x7f00000001c0)={0x7, 0x0, 0x8, 0xc, 0x0, 0x0, 0x0, "c8b04f5f", 0x3f, "d93bdf81", 0x1f, 0x3f, 0x6, "bbab54", "51b5dc0b9db7e6e28d73acf4baccf28c2b4b9daa22ed0eb66c90d55fe05053e0aa3ad5bd640a081501e6aef8dcd1"}, 0x2, 0x9, 0x2, &(0x7f0000000200)}) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0xff) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000005, 0x10010, r1, 0x0) setresgid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x810}, 0x4000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = syz_io_uring_complete(r2) r5 = openat$cgroup_freezer_state(r4, &(0x7f00000004c0), 0x2, 0x0) openat$cgroup_type(r4, &(0x7f0000000500), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000540)={{0x0, 0x401, 0xfffffffffffffff7, 0x0, 0x4, 0x9d81, 0x861, 0x3, 0x7, 0x5, 0x0, 0xfffffffffffffffb, 0x5, 0x5, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001540)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf, "14b00d5bf74b8a"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002540)={{0x0, 0x93, 0x4, 0x2e, 0x4, 0x0, 0x10001, 0x800, 0x5, 0xda, 0x0, 0x9, 0x5, 0x1, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000003540)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000006c200)={0x7, [{r6, r7}, {r8}, {r9}], 0x8, "d6b893f0281257"}) [ 102.579500] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.583491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.587258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.603310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.615805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.704316] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.708169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.712211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.730733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.741358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.843700] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.851103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.854722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.870876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.880765] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.912905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.919055] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.921985] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.926372] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.942970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.956074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.975321] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.982241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.985081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 102.993163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.995051] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 103.002863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.004952] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 103.007557] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 103.008047] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 103.014934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 103.024096] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 103.028085] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 103.033695] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 103.039490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 103.045008] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 103.058171] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 103.081079] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 103.159417] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 103.175261] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 104.655771] Bluetooth: hci0: command tx timeout [ 104.781875] Bluetooth: hci1: command tx timeout [ 104.973999] Bluetooth: hci2: command tx timeout [ 105.101900] Bluetooth: hci6: command tx timeout [ 105.102676] Bluetooth: hci3: command tx timeout [ 105.165753] Bluetooth: hci5: command tx timeout [ 105.166496] Bluetooth: hci4: command tx timeout [ 105.293616] Bluetooth: hci7: command tx timeout [ 106.701958] Bluetooth: hci0: command tx timeout [ 106.831578] Bluetooth: hci1: command tx timeout [ 107.021781] Bluetooth: hci2: command tx timeout [ 107.149632] Bluetooth: hci3: command tx timeout [ 107.149822] Bluetooth: hci6: command tx timeout [ 107.213650] Bluetooth: hci4: command tx timeout [ 107.213790] Bluetooth: hci5: command tx timeout [ 107.342193] Bluetooth: hci7: command tx timeout [ 108.750922] Bluetooth: hci0: command tx timeout [ 108.878607] Bluetooth: hci1: command tx timeout [ 109.069804] Bluetooth: hci2: command tx timeout [ 109.198021] Bluetooth: hci6: command tx timeout [ 109.198088] Bluetooth: hci3: command tx timeout [ 109.262417] Bluetooth: hci4: command tx timeout [ 109.262974] Bluetooth: hci5: command tx timeout [ 109.389630] Bluetooth: hci7: command tx timeout [ 110.800584] Bluetooth: hci0: command tx timeout [ 110.929607] Bluetooth: hci1: command tx timeout [ 111.118639] Bluetooth: hci2: command tx timeout [ 111.245674] Bluetooth: hci6: command tx timeout [ 111.245745] Bluetooth: hci3: command tx timeout [ 111.310226] Bluetooth: hci5: command tx timeout [ 111.310735] Bluetooth: hci4: command tx timeout [ 111.437759] Bluetooth: hci7: command tx timeout [ 165.363086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.368472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.372291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.388862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.394170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.401621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.405061] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.406708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.408986] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.422232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.439864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.443491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.445020] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.445106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.448810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.453049] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.455847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.460993] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.501812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.505653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.510921] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.513231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.515327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.517460] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.519695] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.528966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.544849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 165.548271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.553284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.554737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 165.556644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.557983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 165.559387] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.588142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 165.606149] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 165.708096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 165.714434] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 165.752061] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 165.777976] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 165.802926] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.502126] Bluetooth: hci1: command tx timeout [ 167.503189] Bluetooth: hci0: command tx timeout [ 167.629729] Bluetooth: hci6: command tx timeout [ 167.630799] Bluetooth: hci5: command tx timeout [ 167.631572] Bluetooth: hci3: command tx timeout [ 167.632299] Bluetooth: hci2: command tx timeout [ 167.633079] Bluetooth: hci4: command tx timeout [ 167.886020] Bluetooth: hci7: command tx timeout [ 169.550162] Bluetooth: hci0: command tx timeout [ 169.552708] Bluetooth: hci1: command tx timeout [ 169.677744] Bluetooth: hci6: command tx timeout [ 169.678321] Bluetooth: hci2: command tx timeout [ 169.679231] Bluetooth: hci4: command tx timeout [ 169.679911] Bluetooth: hci3: command tx timeout [ 169.680426] Bluetooth: hci5: command tx timeout [ 169.934293] Bluetooth: hci7: command tx timeout [ 171.597657] Bluetooth: hci0: command tx timeout [ 171.598143] Bluetooth: hci1: command tx timeout [ 171.725965] Bluetooth: hci2: command tx timeout [ 171.726456] Bluetooth: hci4: command tx timeout [ 171.727391] Bluetooth: hci5: command tx timeout [ 171.727873] Bluetooth: hci3: command tx timeout [ 171.728284] Bluetooth: hci6: command tx timeout [ 171.981730] Bluetooth: hci7: command tx timeout [ 173.645627] Bluetooth: hci1: command tx timeout [ 173.646216] Bluetooth: hci0: command tx timeout [ 173.773751] Bluetooth: hci6: command tx timeout [ 173.774346] Bluetooth: hci3: command tx timeout [ 173.774931] Bluetooth: hci5: command tx timeout [ 173.775445] Bluetooth: hci4: command tx timeout [ 173.776025] Bluetooth: hci2: command tx timeout [ 174.030052] Bluetooth: hci7: command tx timeout [ 227.875212] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.879419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.880416] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.885945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.886899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.888158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.893491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.896228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.897205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.908163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.990182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.998704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.000818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.008358] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.013790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.015668] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.021201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.039352] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.046606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.054251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.157350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.165205] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.170842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.172875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.183219] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.185306] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.186756] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.187963] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.190602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.192308] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.204325] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.206148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.210725] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.228208] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.236359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.471496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.482409] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 228.537120] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 228.567839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 228.632675] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.965848] Bluetooth: hci1: command tx timeout [ 229.965878] Bluetooth: hci0: command tx timeout [ 230.094937] Bluetooth: hci2: command tx timeout [ 230.158713] Bluetooth: hci3: command tx timeout [ 230.221833] Bluetooth: hci6: command tx timeout [ 230.285614] Bluetooth: hci5: command tx timeout [ 230.541609] Bluetooth: hci4: command tx timeout [ 230.733951] Bluetooth: hci7: command tx timeout [ 232.014583] Bluetooth: hci0: command tx timeout [ 232.014618] Bluetooth: hci1: command tx timeout [ 232.141865] Bluetooth: hci2: command tx timeout [ 232.206178] Bluetooth: hci3: command tx timeout [ 232.269607] Bluetooth: hci6: command tx timeout [ 232.334750] Bluetooth: hci5: command tx timeout [ 232.589617] Bluetooth: hci4: command tx timeout [ 232.781765] Bluetooth: hci7: command tx timeout [ 234.062892] Bluetooth: hci1: command tx timeout [ 234.062923] Bluetooth: hci0: command tx timeout [ 234.191563] Bluetooth: hci2: command tx timeout [ 234.255588] Bluetooth: hci3: command tx timeout [ 234.317618] Bluetooth: hci6: command tx timeout [ 234.381863] Bluetooth: hci5: command tx timeout [ 234.637946] Bluetooth: hci4: command tx timeout [ 234.829635] Bluetooth: hci7: command tx timeout [ 236.110561] Bluetooth: hci0: command tx timeout [ 236.110598] Bluetooth: hci1: command tx timeout [ 236.237631] Bluetooth: hci2: command tx timeout [ 236.301613] Bluetooth: hci3: command tx timeout [ 236.368591] Bluetooth: hci6: command tx timeout [ 236.429623] Bluetooth: hci5: command tx timeout [ 236.685590] Bluetooth: hci4: command tx timeout [ 236.877593] Bluetooth: hci7: command tx timeout [ 290.403940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.408082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.411389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.418249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.424245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.531462] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.539007] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.541434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.554917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.561064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.755035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.761233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.764963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.775348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.782174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.877151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.898747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.905776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.947148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.964805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.970172] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.973074] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.978470] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.980604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.992309] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.995255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.018193] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.051979] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.060433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.067133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.345073] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 291.351336] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 291.413385] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 291.440839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 291.483277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 291.493932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 291.519110] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 291.537218] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 291.642863] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 291.676080] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 292.493721] Bluetooth: hci0: command tx timeout [ 292.685667] Bluetooth: hci1: command tx timeout [ 292.813633] Bluetooth: hci2: command tx timeout [ 293.070237] Bluetooth: hci3: command tx timeout [ 293.133757] Bluetooth: hci4: command tx timeout [ 293.709806] Bluetooth: hci5: command tx timeout [ 293.711100] Bluetooth: hci6: command tx timeout [ 293.837797] Bluetooth: hci7: command tx timeout [ 294.542568] Bluetooth: hci0: command tx timeout [ 294.734988] Bluetooth: hci1: command tx timeout [ 294.861598] Bluetooth: hci2: command tx timeout [ 295.119290] Bluetooth: hci3: command tx timeout [ 295.181635] Bluetooth: hci4: command tx timeout [ 295.758581] Bluetooth: hci5: command tx timeout [ 295.759148] Bluetooth: hci6: command tx timeout [ 295.885608] Bluetooth: hci7: command tx timeout [ 296.589613] Bluetooth: hci0: command tx timeout [ 296.782784] Bluetooth: hci1: command tx timeout [ 296.910547] Bluetooth: hci2: command tx timeout [ 297.167258] Bluetooth: hci3: command tx timeout [ 297.231660] Bluetooth: hci4: command tx timeout [ 297.806965] Bluetooth: hci5: command tx timeout [ 297.807449] Bluetooth: hci6: command tx timeout [ 297.933588] Bluetooth: hci7: command tx timeout [ 298.637684] Bluetooth: hci0: command tx timeout [ 298.829707] Bluetooth: hci1: command tx timeout [ 298.957695] Bluetooth: hci2: command tx timeout [ 299.214683] Bluetooth: hci3: command tx timeout [ 299.278997] Bluetooth: hci4: command tx timeout [ 299.853824] Bluetooth: hci6: command tx timeout [ 299.854766] Bluetooth: hci5: command tx timeout [ 299.982395] Bluetooth: hci7: command tx timeout [ 352.740610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.747167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.750252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.760329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.768417] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.879783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.883891] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.907103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.922212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.926719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.024994] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.037652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.058176] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.100047] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.122329] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.126355] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.138353] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.142398] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.158071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.182804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.190438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.193325] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.213491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.276807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.279633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.289691] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.295331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.297322] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.301180] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 353.313901] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 353.323282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 353.326605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.342945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.363798] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 353.367078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.371535] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.375460] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 353.417905] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.441833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 353.450041] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 354.829781] Bluetooth: hci0: command tx timeout [ 354.957699] Bluetooth: hci1: command tx timeout [ 355.213894] Bluetooth: hci4: command tx timeout [ 355.277628] Bluetooth: hci2: command tx timeout [ 355.406669] Bluetooth: hci3: command tx timeout [ 355.469957] Bluetooth: hci5: command tx timeout [ 355.533843] Bluetooth: hci6: command tx timeout [ 355.597642] Bluetooth: hci7: command tx timeout [ 356.878292] Bluetooth: hci0: command tx timeout [ 357.005599] Bluetooth: hci1: command tx timeout [ 357.261764] Bluetooth: hci4: command tx timeout [ 357.326539] Bluetooth: hci2: command tx timeout [ 357.453579] Bluetooth: hci3: command tx timeout [ 357.517619] Bluetooth: hci5: command tx timeout [ 357.581582] Bluetooth: hci6: command tx timeout [ 357.645785] Bluetooth: hci7: command tx timeout [ 358.925587] Bluetooth: hci0: command tx timeout [ 359.053784] Bluetooth: hci1: command tx timeout [ 359.309591] Bluetooth: hci4: command tx timeout [ 359.373580] Bluetooth: hci2: command tx timeout [ 359.501575] Bluetooth: hci3: command tx timeout [ 359.565930] Bluetooth: hci5: command tx timeout [ 359.630618] Bluetooth: hci6: command tx timeout [ 359.693706] Bluetooth: hci7: command tx timeout [ 360.973897] Bluetooth: hci0: command tx timeout [ 361.101812] Bluetooth: hci1: command tx timeout [ 361.357752] Bluetooth: hci4: command tx timeout [ 361.421777] Bluetooth: hci2: command tx timeout [ 361.549622] Bluetooth: hci3: command tx timeout [ 361.614573] Bluetooth: hci5: command tx timeout [ 361.677895] Bluetooth: hci6: command tx timeout [ 361.741568] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:28:02 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff819c4195 RDX=ffff888027b83700 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff8880191e7878 R8 =0000000000000000 R9 =fffff9400003a546 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=00007f35afced000 R14=ffff8880191e7ce0 R15=ffff8880191e79e0 RIP=ffffffff81738736 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557c2209e080 CR3=000000002a81e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff8190bfb2 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffea00001b6a40 RBP=ffffea00001b6a40 RSP=ffff88802fa87828 R8 =0000000000000000 R9 =ffffea00001b6a47 R10=ffffea00001b6a47 R11=0000000000000001 R12=0000000006da9025 R13=00007f1dbd0ae000 R14=ffff88802fa87ce0 R15=0000000000000000 RIP=ffffffff81aefcf9 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1dbd4186f4 CR3=00000000366be000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f1dbd42747000007f1dbd426f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000