Warning: Permanently added '[localhost]:39040' (ECDSA) to the list of known hosts. 2025/06/23 21:59:09 fuzzer started 2025/06/23 21:59:10 dialing manager at localhost:37113 syzkaller login: [ 93.593657] cgroup: Unknown subsys name 'net' [ 93.720670] cgroup: Unknown subsys name 'cpuset' [ 93.763702] cgroup: Unknown subsys name 'rlimit' 2025/06/23 21:59:33 syscalls: 217 2025/06/23 21:59:33 code coverage: enabled 2025/06/23 21:59:33 comparison tracing: enabled 2025/06/23 21:59:33 extra coverage: enabled 2025/06/23 21:59:33 setuid sandbox: enabled 2025/06/23 21:59:33 namespace sandbox: enabled 2025/06/23 21:59:33 Android sandbox: enabled 2025/06/23 21:59:33 fault injection: enabled 2025/06/23 21:59:33 leak checking: enabled 2025/06/23 21:59:33 net packet injection: enabled 2025/06/23 21:59:33 net device setup: enabled 2025/06/23 21:59:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/23 21:59:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/23 21:59:33 USB emulation: enabled 2025/06/23 21:59:33 hci packet injection: enabled 2025/06/23 21:59:33 wifi device emulation: enabled 2025/06/23 21:59:33 802.15.4 emulation: enabled 2025/06/23 21:59:33 fetching corpus: 0, signal 0/0 (executing program) 2025/06/23 21:59:35 starting 8 fuzzer processes 21:59:35 executing program 0: r0 = getpgid(0x0) r1 = getpgid(r0) waitid(0x2, r1, &(0x7f0000000000), 0x4, &(0x7f0000000080)) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000140)={0x2, 0x8, 0x7f, 0x40, 0xf, "a8f1381a3489fd96f7324523e1919dbc16ef5e"}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)={0x2}) wait4(r0, &(0x7f00000001c0), 0x8, 0x0) waitid(0x0, r0, 0x0, 0x1, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x90002008}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000016c0)={0x9c, 0x0, &(0x7f00000015c0)=[@increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001380)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/53, 0x35, 0x2, 0x2f}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/4096, 0x1000, 0x2, 0x30}}, &(0x7f0000001400)={0x0, 0x28, 0x40}}, 0x1000}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001500)={@fd, @fda={0x66646185, 0x0, 0x2, 0x40}, @ptr={0x70742a85, 0x0, &(0x7f0000001440)=""/181, 0xb5, 0x0, 0x2d}}, &(0x7f0000001580)={0x0, 0x18, 0x38}}}], 0x37, 0x0, &(0x7f0000001680)="a8e87116cbb3a5595920d018838a5bf77d6e19cdb89a9bdd452cc3b147fec6020c94ca8b6e05d374c6898b4c8dbf2e6ef1ed2a352120b2"}) getrusage(0xffffffffffffffff, &(0x7f0000001700)) r3 = getpgid(r1) waitid(0x2, r3, 0x0, 0x1000000, &(0x7f00000017c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001c80)={0xac, 0x0, &(0x7f0000001ac0)=[@acquire_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001a00)={@flat=@handle={0x73682a85, 0xa, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000001880)=""/201, 0xc9, 0x1, 0x26}, @ptr={0x70742a85, 0x0, &(0x7f0000001980)=""/128, 0x80, 0x0, 0x24}}, &(0x7f0000001a80)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x81}, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x3}, @increfs_done, @acquire={0x40046305, 0x3}, @decrefs], 0xfe, 0x0, &(0x7f0000001b80)="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"}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) stat(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001d80)={{0x3, 0x0, 0xee01, r4, 0xee00, 0x102, 0x5}, 0x0, 0x0, 0x40000, 0x8, 0x4, 0x13e, 0x5, 0x1, 0x7f, 0xc0a7, r3, r3}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000005, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000001e80)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000001e00)=@l2tp6={0xa, 0x0, 0x3, @mcast1, 0x1, 0x2}, 0x0, 0x0, 0x1}, 0xd1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000001ec0)={0x17d5, 0x7, 0x76f1, 0x30ac, 0xf, "d0c53d4710d027cc6c26632c83de11d995a5ba"}) 21:59:35 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x103a01) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x164, &(0x7f0000000040)={0x0, 0xe8bc, 0x6, 0x3, 0x168}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x2007, @fd_index=0x8, 0x488000000000, &(0x7f0000000380)=[{&(0x7f0000000140)="83e93cfcfa92f2eb54015b32f6c360d587f2f1936dd4c3e637e6600a6f3cc4e8884786a9877067286c90e4f25d68848e2e88e172fea42962c57127e8d13f757efa68e56c8293223020ec1a233fa5d9ca60c0a24136fb5846d5360432c3685a917598e60d3a1d7dfe388741925e5b63887e9832a92627ac19b290c6ccd46834deb7c98f4e51165e6fd86f7c85111866cfded9011265f18ad27dd6fee7136f4dcb874b8f9e333daaaed7fb31c6cee78d74671f3e3eff565d52fd66d1605a3861", 0xbf}, {&(0x7f0000000200)="d34cf9fa4bfc86a71f98705d028bd9328b2a795ebeb4098ddc236d39957cf8be53beeb174f93f81ae7ed0142d69e9b497be03cb2db11bea556c1bd5637fac9791fc4f081c851a837bc49ed38875045cde7899cc675bc4d0cab168bd835250fc99da931fc0f1cfdb510bdd72bc8e18a9b1da99bb850587ede285a8c6d01db23bc0e150349defd375b68", 0x89}, {&(0x7f00000002c0)="5ca289994e1f860d30bcb4011e820cfdd781671ea3eb39f296d5557fc8b7bc5360d457a440551fecc919681d026225a7110a592989cde9eb2edc6e74627c3409688a75802473bafd59bf04b5763be62a8a2ebc5fe706cc92d4670d5f15938c3ad5e4d5b92e214a07ce9a28aa27370c928d60723368869c88ff31740c27b6d3bb98c7de2eccc3f8362f637571a7eff35c6b8b564102202cd17994f208f995ef6286d9252afe161b650ca8f008f11c411e6644d36ae48195ef867298ac75e2", 0xbe}], 0x3, 0xa, 0x1}, 0x401) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040018}, 0x20044800) ioctl$TIOCSIG(r0, 0x40045436, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x110, r1, 0x0) r5 = syz_io_uring_setup(0xacc, &(0x7f0000000540)={0x0, 0xccc, 0x1, 0x0, 0x1d3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000740)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x5aa4, 0x0, &(0x7f0000000640)="6ea9339e344a983fc13409844829518a4f5790b3b655fcc5969b596d8ec7fe37e0a3ae31686b81befe6241ee59ff2960ed5ae1116ac30d91f08ada7197a8afe19b35c2ae7350320f273447916826bfed7b92e2281103e30ece19d683cc736162bc63c7843887e98115df9414d3a79bcccc8559fca2509fd1500f8550b72fe7f2184d11fc427a73b43798e17bc9a1e5b3b8405c099249d91098fa2e2965c94e2c5cbc23efbd10e65509e26d2425cc622da47a74358272c679dc25102623b70d0688920fd0b5e0361b3316", 0x2, 0x0, 0x0, {0x2}}, 0x7f) r7 = syz_open_pts(r0, 0x80800) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x24) r8 = syz_io_uring_setup(0x3f67, &(0x7f0000000780)={0x0, 0xd513, 0x6, 0x1, 0x17e, 0x0, r5}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000800), &(0x7f0000000840)=0x0) r10 = inotify_init() syz_io_uring_submit(r4, r9, &(0x7f0000000880)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x5000}, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x2010, r8, 0x0) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x313600, 0x0) ioctl$KDSKBMODE(r11, 0x4b45, &(0x7f0000000900)=0x4) write$nbd(r11, &(0x7f0000000940)={0x67446698, 0x1, 0x2, 0x4, 0x1, "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"}, 0x1010) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001a00)={0x350, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0xfc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcsu\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-\xd1$%-[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf62}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#{]*[\x1b\xe0#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^Y*\xf04\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcsu\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x3a, 0x4, "fcd923ec5b5332ea0baf6a5234cfb7491dd34b28506ca3feca3c530f0ee971d09cc54651c56b54a73cb321576e63aa240f43ca80bcc5"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "2477fc061551ee5db3d9e7403a8e813cafc99567f5af549507bf3f3efd71e374043a76a0f0b43f437f7a33808a215abc32b6823a555c220a140ec9d009bd743b083e1f75151bf94f3471fd4d6e2a635e3671daea7c9b1a75757d02181ddd2809bb157047db999ba028818a9ac1f0c98907dbdda7c5b206df8437572c5958c4fe0c286df5971df0b195e5586a905abc41e7dc20f25234a539e7afff5c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "4a1179a36c205b4245c84efb433350457cb1214c15e34815146ec2091117ae3c13b47622b8f2e9e77849864c07ba52abcd152f186ccd28339d0bbcf0108639825413301f3296f87ae4aaf1632abff88ea8bb84c100ddf5b2c7170a2318566c56e7cbb97b5645b8c02949840c44f38da70560346125f00b50d6ba03e4224f0c11533bcffd9644de1237707f16b43326f054ae532f2bef38c5e29de169e7c9c93a57a6688ac4"}, @ETHTOOL_A_BITSET_MASK={0x54, 0x5, "31f10a6f231fb18f1fde3c9891c098bfdc0fd4c569d95311ece79128cce8edeed618c3f442b5f7a3136eed40b9e2886eb2a2b310058105961eb83e044adc6df287fde9e392fd74018a3217315d882700"}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000080) [ 118.504760] audit: type=1400 audit(1750715975.309:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:59:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000000)=@xdp={0x2c, 0x4, 0x0, 0x31}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000280)=0xfff) socketpair(0x1a, 0x800, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x1, 0x80, 0xa953bcc3, 0xffff, {{0x19, 0x4, 0x1, 0x3, 0x64, 0x65, 0x0, 0x40, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, {[@lsrr={0x83, 0xf, 0xfa, [@remote, @private=0xa010102, @empty]}, @generic={0x89, 0x11, "affaaee26ab2f4094358a56c2b57f7"}, @cipso={0x86, 0x2d, 0x0, [{0x2, 0x8, "593fd5ae2b12"}, {0x2, 0xa, "c707e738a67a230f"}, {0x1, 0x11, "9454753825e82255058c398504a714"}, {0x1, 0x4, "d86e"}]}]}}}}}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000400)=@srh={0x2f, 0x2, 0x4, 0x1, 0x1f, 0xaa1e5081a69cfa8e, 0x0, [@remote]}, 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x30}}, 0x40000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000680)=0xe8) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000780)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000880)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x4, 0x6, 0x5, 0x4, 0x24, @local, @dev={0xfe, 0x80, '\x00', 0x27}, 0x20, 0x1, 0x8000, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001100)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000980)={0x714, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r6}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa10c}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xde10}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x714}, 0x1, 0x0, 0x0, 0xd0}, 0x80) socketpair(0x1, 0x2, 0x7, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x64, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002580)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002540)={&(0x7f0000001bc0)={0x954, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9df1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd846}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5fa, 0xb8, 0x0, 0x5d5}, {0xfa3, 0x5, 0x3, 0x80000001}, {0x100, 0x6, 0x20, 0x9}, {0x0, 0x2, 0x5, 0x7}, {0x9, 0x7, 0x3f, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5360}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6d3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x929}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9f}}}]}}, {{0x8, 0x1, r7}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x68}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x954}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 21:59:35 executing program 3: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/56) geteuid() msgctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x180) msgrcv(r0, &(0x7f0000000040)={0x0, ""/9}, 0x11, 0x1, 0x1000) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/4096) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000001080)={@mcast1, 0x7}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000010c0)={0x8f, {{0xa, 0x4e24, 0xbb, @private2, 0xeb66d84f}}, {{0xa, 0x4e23, 0x1, @remote, 0x6}}}, 0x108) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001200)={@rand_addr, 0x0}, &(0x7f0000001240)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000001280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x45, r1}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000012c0)={@mcast1, 0x22, r1}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x80000000}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044010) r2 = msgget$private(0x0, 0x204) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000001400)=""/178) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000014c0)={{{@in=@multicast1, @in=@dev}}, {{@in=@multicast1}}}, &(0x7f00000015c0)=0xe8) socketpair(0x0, 0x5, 0x4, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001740)={'syztnl1\x00', &(0x7f00000016c0)={'ip6gre0\x00', r1, 0x29, 0x1f, 0xf9, 0x6, 0x29, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x20, 0x8, 0xbb}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001940)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f0000001780)={0x160, r4, 0xc00, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x100, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xceee6807558e8f55}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4021) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000019c0)={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfffffeff}, @ra={0x5, 0x2, 0x3f}, @enc_lim={0x4, 0x1, 0x1}]}, 0x18) 21:59:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1511c}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x8040) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x1, 0x3, 0xaaea, 0x0, 0x1, 0x40000000, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e23, 0xb7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, {0xa, 0x4e21, 0x6, @mcast1, 0x7}, 0x3, [0x3, 0xdc6, 0x0, 0x8, 0x1ff, 0x3ff, 0x9, 0x80000000]}, 0x5c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', r2, 0x29, 0x7, 0x4, 0x6, 0x40, @dev={0xfe, 0x80, '\x00', 0x43}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8, 0x6, 0x2}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x46, r4}) clock_gettime(0x1, &(0x7f00000004c0)) setsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f0000000500)=0x81, 0x4) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'sit0\x00', r1, 0x29, 0xff, 0x7, 0x20, 0x8, @remote, @mcast1, 0x8000, 0x80, 0x0, 0xffffff01}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000700)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000740)={@mcast2, 0x3e}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000780)={0x80000001}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}}, 0x2400c004) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7e}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x12c, 0x0, 0xa0c, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xea9bb4fad494ca00}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xaf6baccadcaecbdc}, 0x40000) 21:59:35 executing program 5: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x28e9d513) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)={0x29, 0x0, '\x00', [@pad1]}, 0x10) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x3) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=@routing={0x2f, 0x8, 0x1, 0x4e, 0x0, [@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, 0x48) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x4100, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)={0x3}) getsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f00000001c0)=""/18, &(0x7f0000000200)=0x12) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x8002) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000002c0)={0x7, 0x9c, 0x3}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@private1, @local, @remote, 0x8, 0x101, 0x3, 0x0, 0xfae, 0x4000000}) r3 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) shmdt(r3) ioctl$KDDISABIO(r1, 0x4b37) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000380)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x69}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000400)={0x1, 0x894c, 0x2, 0x7f0c, 0x4, "8671a5db9d1f20b73ff1202edc8701fc6d8f7c"}) 21:59:35 executing program 6: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x80000001) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) r0 = socket$inet6(0xa, 0x6, 0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x1000, @mcast1, 0xa69}, {0xa, 0x4e23, 0x9, @loopback, 0x10000}, 0x3, [0x3, 0x8, 0xffff, 0x5f65, 0x3, 0x80, 0x77, 0x7]}, 0x5c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@remote}, 0x14) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x7, @private0, 0x3}, {0xa, 0x4e24, 0x5, @empty, 0x5}, 0x0, [0x8, 0x15d, 0xfff, 0x1f, 0x8, 0x1, 0x4, 0x1]}, 0x5c) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x3f, 0xf055, {{0x35, 0x4, 0x0, 0x3, 0xd4, 0x64, 0x0, 0x2, 0x4, 0x0, @local, @remote, {[@lsrr={0x83, 0x13, 0x8a, [@dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0xdb, [@loopback, @broadcast, @private=0xa010101]}, @ssrr={0x89, 0x13, 0xe1, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback]}, @timestamp={0x44, 0x28, 0x2e, 0x0, 0x8, [0xffff, 0x8, 0x4, 0x7, 0x2, 0xd05, 0x3ff, 0xebb, 0x5]}, @cipso={0x86, 0x17, 0x0, [{0x7, 0x11, "e5e45ecad827a850e5a9dbe9dc83de"}]}, @generic={0x88, 0xc, "a8effdeba5ad50d95582"}, @timestamp_prespec={0x44, 0x14, 0xb9, 0x3, 0xc, [{@remote, 0x100}, {@local, 0x2}]}, @cipso={0x86, 0x24, 0x3, [{0x1, 0xb, "90d746dde8a117204c"}, {0x6, 0x3, 'n'}, {0x6, 0x10, "baf340bc9d9d2ed723f467f5a095"}]}, @rr={0x7, 0x7, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @multicast1}, @local, @empty, 0xfffffffb, 0x6, 0xf27, 0x400, 0x5, 0x5210020, r3}) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000380)={0xffff, 0x80, 0x9, 0x9, 0x20, 0x8}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000400)={{{@in, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) r5 = socket$inet6(0xa, 0x5, 0x81) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000540)={{0xa, 0x4e24, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd5}, {0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1000, [0x4b3, 0x100, 0x3dfe, 0x6, 0xfffffffc, 0x9, 0x2, 0x1]}, 0x5c) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_ttl={{0x14}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xa5, [@remote, @empty, @empty, @loopback, @private=0xa010102]}, @timestamp={0x44, 0x1c, 0xc0, 0x0, 0x2, [0x80000001, 0x5, 0x3, 0x1020, 0x200000, 0x8]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x354}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4000000}}], 0xd8}, 0x400c000) 21:59:35 executing program 7: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x8, 0x4, 0x3f, 0x6, 0x12, "e689dc4a1a90c7ef"}) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x93c0, 0x7, 0x2}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0xff) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x7c1001, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x9) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x600, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x43}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xa080) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000280)=0x1000, 0x4) ioctl$VT_WAITACTIVE(r0, 0x5607) fstat(r0, &(0x7f00000002c0)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000340)=0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000380)={0x6, 0xffff, 0x800}) r3 = syz_io_uring_setup(0x6828, &(0x7f00000003c0)={0x0, 0xe25c, 0x2, 0x0, 0x254}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)) accept4$inet6(r0, 0x0, &(0x7f00000006c0), 0x800) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x10800, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) [ 119.753872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.757520] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.761131] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.767291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.770688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.947340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.951645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.955040] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.966911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.969397] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.036227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.039521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.043507] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.051249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.057024] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.171551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.197604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.206307] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 120.211098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.212681] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 120.214150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.215074] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.219007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.226991] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.238027] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.242215] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.246278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.251259] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 120.252990] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.271589] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.275106] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 120.290248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.291249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.297647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.306805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.314761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.319964] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.323415] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 120.324905] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.341922] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.847988] Bluetooth: hci0: command tx timeout [ 122.040588] Bluetooth: hci1: command tx timeout [ 122.103572] Bluetooth: hci2: command tx timeout [ 122.360056] Bluetooth: hci4: command tx timeout [ 122.360760] Bluetooth: hci6: command tx timeout [ 122.424528] Bluetooth: hci7: command tx timeout [ 122.425106] Bluetooth: hci3: command tx timeout [ 122.426259] Bluetooth: hci5: command tx timeout [ 123.895577] Bluetooth: hci0: command tx timeout [ 124.087569] Bluetooth: hci1: command tx timeout [ 124.151636] Bluetooth: hci2: command tx timeout [ 124.407647] Bluetooth: hci4: command tx timeout [ 124.408123] Bluetooth: hci6: command tx timeout [ 124.471908] Bluetooth: hci5: command tx timeout [ 124.472347] Bluetooth: hci3: command tx timeout [ 124.473383] Bluetooth: hci7: command tx timeout [ 125.944339] Bluetooth: hci0: command tx timeout [ 126.136178] Bluetooth: hci1: command tx timeout [ 126.200556] Bluetooth: hci2: command tx timeout [ 126.455658] Bluetooth: hci6: command tx timeout [ 126.456116] Bluetooth: hci4: command tx timeout [ 126.520336] Bluetooth: hci5: command tx timeout [ 126.521022] Bluetooth: hci7: command tx timeout [ 126.521727] Bluetooth: hci3: command tx timeout [ 127.991743] Bluetooth: hci0: command tx timeout [ 128.186510] Bluetooth: hci1: command tx timeout [ 128.247735] Bluetooth: hci2: command tx timeout [ 128.503557] Bluetooth: hci4: command tx timeout [ 128.503603] Bluetooth: hci6: command tx timeout [ 128.569502] Bluetooth: hci5: command tx timeout [ 128.569525] Bluetooth: hci3: command tx timeout [ 128.569994] Bluetooth: hci7: command tx timeout [ 179.711427] syz-executor.0 (283) used greatest stack depth: 25072 bytes left [ 179.766631] syz-executor.2 (284) used greatest stack depth: 24672 bytes left [ 182.159120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.168992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.174864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.185334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.192544] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.301024] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.304917] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.313088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.319378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.329873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.415711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.422786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.431606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.437090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.440336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.446303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.448372] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.450147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.452788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.471004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.478111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.489232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.493004] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.495197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.500734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.501079] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.520024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.534333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.557268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.586676] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.590175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.593569] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.601881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.605414] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.624415] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.649843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 182.662178] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 182.675306] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 182.708088] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 182.736956] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 184.248884] Bluetooth: hci0: command tx timeout [ 184.377538] Bluetooth: hci1: command tx timeout [ 184.567575] Bluetooth: hci3: command tx timeout [ 184.631725] Bluetooth: hci2: command tx timeout [ 184.695785] Bluetooth: hci6: command tx timeout [ 184.695907] Bluetooth: hci4: command tx timeout [ 184.696341] Bluetooth: hci5: command tx timeout [ 185.079996] Bluetooth: hci7: command tx timeout [ 186.295814] Bluetooth: hci0: command tx timeout [ 186.425674] Bluetooth: hci1: command tx timeout [ 186.615582] Bluetooth: hci3: command tx timeout [ 186.679573] Bluetooth: hci2: command tx timeout [ 186.744533] Bluetooth: hci5: command tx timeout [ 186.744581] Bluetooth: hci4: command tx timeout [ 186.744938] Bluetooth: hci6: command tx timeout [ 187.129203] Bluetooth: hci7: command tx timeout [ 188.343734] Bluetooth: hci0: command tx timeout [ 188.471536] Bluetooth: hci1: command tx timeout [ 188.664731] Bluetooth: hci3: command tx timeout [ 188.727525] Bluetooth: hci2: command tx timeout [ 188.791563] Bluetooth: hci6: command tx timeout [ 188.792816] Bluetooth: hci4: command tx timeout [ 188.793034] Bluetooth: hci5: command tx timeout [ 189.177528] Bluetooth: hci7: command tx timeout [ 190.391658] Bluetooth: hci0: command tx timeout [ 190.519658] Bluetooth: hci1: command tx timeout [ 190.711812] Bluetooth: hci3: command tx timeout [ 190.775715] Bluetooth: hci2: command tx timeout [ 190.839900] Bluetooth: hci4: command tx timeout [ 190.839923] Bluetooth: hci6: command tx timeout [ 190.841370] Bluetooth: hci5: command tx timeout [ 191.223548] Bluetooth: hci7: command tx timeout [ 244.435060] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.444726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.449444] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.470171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.479402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.524791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.535962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.540637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.558073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.562989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.646571] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.650528] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.653119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.655390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.657361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.662792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.665996] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.670703] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.672406] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.676377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.772181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.777979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.783095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.789165] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.797732] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.806945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.809429] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.818601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.827003] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.829588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.831644] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.835384] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.850098] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.855138] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.872123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.873756] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.879959] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.886130] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.939247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.950002] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.519763] Bluetooth: hci0: command tx timeout [ 246.648809] Bluetooth: hci1: command tx timeout [ 246.776562] Bluetooth: hci3: command tx timeout [ 246.777834] Bluetooth: hci2: command tx timeout [ 246.904530] Bluetooth: hci4: command tx timeout [ 246.967945] Bluetooth: hci5: command tx timeout [ 246.968222] Bluetooth: hci6: command tx timeout [ 247.031616] Bluetooth: hci7: command tx timeout [ 248.567700] Bluetooth: hci0: command tx timeout [ 248.695763] Bluetooth: hci1: command tx timeout [ 248.823585] Bluetooth: hci3: command tx timeout [ 248.824762] Bluetooth: hci2: command tx timeout [ 248.952598] Bluetooth: hci4: command tx timeout [ 249.015604] Bluetooth: hci6: command tx timeout [ 249.016676] Bluetooth: hci5: command tx timeout [ 249.079964] Bluetooth: hci7: command tx timeout [ 250.615891] Bluetooth: hci0: command tx timeout [ 250.743566] Bluetooth: hci1: command tx timeout [ 250.871589] Bluetooth: hci2: command tx timeout [ 250.872077] Bluetooth: hci3: command tx timeout [ 250.999811] Bluetooth: hci4: command tx timeout [ 251.063716] Bluetooth: hci5: command tx timeout [ 251.064178] Bluetooth: hci6: command tx timeout [ 251.128213] Bluetooth: hci7: command tx timeout [ 252.663853] Bluetooth: hci0: command tx timeout [ 252.791829] Bluetooth: hci1: command tx timeout [ 252.919554] Bluetooth: hci3: command tx timeout [ 252.920016] Bluetooth: hci2: command tx timeout [ 253.048572] Bluetooth: hci4: command tx timeout [ 253.111932] Bluetooth: hci5: command tx timeout [ 253.112364] Bluetooth: hci6: command tx timeout [ 253.176491] Bluetooth: hci7: command tx timeout [ 306.636033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.644265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.647754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.659093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.662980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.891284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.894217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.896440] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.910333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.914099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.915404] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.918144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.922882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.954260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.958953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.959390] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.963755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.970886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.984019] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.992724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.031054] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.035987] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.040770] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.053731] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.053833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.060922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.069363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.076222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.107008] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.110232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.116412] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.149190] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.151332] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.176674] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.184242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.188245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.191436] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.202924] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.221899] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.229552] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.727568] Bluetooth: hci0: command tx timeout [ 309.047602] Bluetooth: hci1: command tx timeout [ 309.111582] Bluetooth: hci4: command tx timeout [ 309.112251] Bluetooth: hci2: command tx timeout [ 309.175733] Bluetooth: hci3: command tx timeout [ 309.176530] Bluetooth: hci5: command tx timeout [ 309.303580] Bluetooth: hci6: command tx timeout [ 309.304298] Bluetooth: hci7: command tx timeout [ 310.775694] Bluetooth: hci0: command tx timeout [ 311.095585] Bluetooth: hci1: command tx timeout [ 311.159981] Bluetooth: hci4: command tx timeout [ 311.160429] Bluetooth: hci2: command tx timeout [ 311.224746] Bluetooth: hci5: command tx timeout [ 311.225185] Bluetooth: hci3: command tx timeout [ 311.353612] Bluetooth: hci6: command tx timeout [ 311.354052] Bluetooth: hci7: command tx timeout [ 312.823564] Bluetooth: hci0: command tx timeout [ 313.144042] Bluetooth: hci1: command tx timeout [ 313.207694] Bluetooth: hci2: command tx timeout [ 313.208128] Bluetooth: hci4: command tx timeout [ 313.271779] Bluetooth: hci3: command tx timeout [ 313.272212] Bluetooth: hci5: command tx timeout [ 313.399992] Bluetooth: hci7: command tx timeout [ 313.400904] Bluetooth: hci6: command tx timeout [ 314.871870] Bluetooth: hci0: command tx timeout [ 315.191675] Bluetooth: hci1: command tx timeout [ 315.255576] Bluetooth: hci4: command tx timeout [ 315.256017] Bluetooth: hci2: command tx timeout [ 315.319610] Bluetooth: hci5: command tx timeout [ 315.320042] Bluetooth: hci3: command tx timeout [ 315.448168] Bluetooth: hci6: command tx timeout [ 315.448665] Bluetooth: hci7: command tx timeout [ 367.073910] syz-executor.3 (8360) used greatest stack depth: 24544 bytes left [ 368.906058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.910974] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.914000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.919883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.924035] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.040688] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.052820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.062865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.069780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.078053] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.303932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.309257] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.317109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.322808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.325385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.327578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.333804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.347984] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.354597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.365357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.381022] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.384112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.386640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.389096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.392075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.394011] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.396692] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.400996] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.405989] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.424078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.460034] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.468351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.469769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.482006] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.524802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.111240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 370.140925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 370.181937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 370.237946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 370.275867] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 371.000710] Bluetooth: hci0: command tx timeout [ 371.127588] Bluetooth: hci1: command tx timeout [ 371.448794] Bluetooth: hci3: command tx timeout [ 371.449844] Bluetooth: hci2: command tx timeout [ 371.575735] Bluetooth: hci5: command tx timeout [ 371.703540] Bluetooth: hci4: command tx timeout [ 371.703613] Bluetooth: hci6: command tx timeout [ 372.474579] Bluetooth: hci7: command tx timeout [ 373.049627] Bluetooth: hci0: command tx timeout [ 373.176535] Bluetooth: hci1: command tx timeout [ 373.495724] Bluetooth: hci3: command tx timeout [ 373.495766] Bluetooth: hci2: command tx timeout [ 373.624389] Bluetooth: hci5: command tx timeout [ 373.751805] Bluetooth: hci6: command tx timeout [ 373.752284] Bluetooth: hci4: command tx timeout [ 374.520526] Bluetooth: hci7: command tx timeout [ 375.096684] Bluetooth: hci0: command tx timeout [ 375.225498] Bluetooth: hci1: command tx timeout [ 375.543580] Bluetooth: hci2: command tx timeout [ 375.543623] Bluetooth: hci3: command tx timeout [ 375.671634] Bluetooth: hci5: command tx timeout [ 375.799563] Bluetooth: hci4: command tx timeout [ 375.800034] Bluetooth: hci6: command tx timeout [ 376.567743] Bluetooth: hci7: command tx timeout [ 377.143808] Bluetooth: hci0: command tx timeout [ 377.273212] Bluetooth: hci1: command tx timeout [ 377.591769] Bluetooth: hci2: command tx timeout [ 377.591800] Bluetooth: hci3: command tx timeout [ 377.720688] Bluetooth: hci5: command tx timeout [ 377.847768] Bluetooth: hci4: command tx timeout [ 377.847858] Bluetooth: hci6: command tx timeout [ 378.615677] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:04:38 Registers: info registers vcpu 0 RAX=000000001ac7260e RBX=ffff88800f709b80 RCX=00000000f5acb89f RDX=000000001ac7260e RSI=ffff88800f70a628 RDI=00000000c57798ad RBP=ffff88800f70a5d8 RSP=ffff88806ce088d0 R8 =0000000000000002 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88800f70a628 R13=b503ba001073dead R14=0000000000000000 R15=0000000000000002 RIP=ffffffff81519295 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fda6a29e8e0 CR3=000000003324c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=dfb8078e475e76a4 RDX=0000000000000000 RSI=000000008301a466 RDI=ffff88806cf31850 RBP=ffff88806cf08a58 RSP=ffff88806cf08990 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff88806cf08a48 R14=ffff88801a253700 R15=ffff88806cf08a00 RIP=ffffffff813546f7 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb42a5146f4 CR3=0000000013c59000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fb42a52347000007fb42a522f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000