Warning: Permanently added '[localhost]:5268' (ECDSA) to the list of known hosts. 2025/06/26 23:37:10 fuzzer started 2025/06/26 23:37:10 dialing manager at localhost:45637 syzkaller login: [ 102.578254] cgroup: Unknown subsys name 'net' [ 102.718349] cgroup: Unknown subsys name 'cpuset' [ 102.785451] cgroup: Unknown subsys name 'rlimit' 2025/06/26 23:37:35 syscalls: 202 2025/06/26 23:37:35 code coverage: enabled 2025/06/26 23:37:35 comparison tracing: enabled 2025/06/26 23:37:35 extra coverage: enabled 2025/06/26 23:37:35 setuid sandbox: enabled 2025/06/26 23:37:35 namespace sandbox: enabled 2025/06/26 23:37:35 Android sandbox: enabled 2025/06/26 23:37:35 fault injection: enabled 2025/06/26 23:37:35 leak checking: enabled 2025/06/26 23:37:35 net packet injection: enabled 2025/06/26 23:37:35 net device setup: enabled 2025/06/26 23:37:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/26 23:37:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/26 23:37:35 USB emulation: enabled 2025/06/26 23:37:35 hci packet injection: enabled 2025/06/26 23:37:35 wifi device emulation: enabled 2025/06/26 23:37:35 802.15.4 emulation: enabled 2025/06/26 23:37:35 fetching corpus: 0, signal 0/0 (executing program) 2025/06/26 23:37:37 starting 8 fuzzer processes 23:37:37 executing program 0: name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0xffffffffffff2b0f, 0x2, 0x4, 0x80000000, 0x7, 0x4}}, &(0x7f0000000080), 0x1400) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x280000, 0x0) faccessat(r0, &(0x7f0000000100)='./file0\x00', 0x50) gettid() ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x210001, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x20080, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}, {@posixacl}, {@aname={'aname', 0x3d, '\xb5&/(/(+'}}, {@cachetag={'cachetag', 0x3d, '/dev/sr0\x00'}}, {@access_client}, {@debug={'debug', 0x3d, 0x1}}], [{@fowner_gt={'fowner>', 0xee00}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}) mknodat$null(r0, &(0x7f00000003c0)='./file0\x00', 0x4, 0x103) fchmodat(r0, &(0x7f0000000400)='./file0\x00', 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000440)) mkdirat(r1, &(0x7f0000000480)='./file0\x00', 0x21) fchownat(r2, &(0x7f00000004c0)='./file0\x00', 0x0, 0xee01, 0x100) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000500)='.pending_reads\x00', 0x2, 0xbe) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x98, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x7c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x64, 0xd, 0x0, 0x1, [{0x5e, 0x0, "aed768f1164d8d35446a8c264f016c96ee4d3d5cfadde7e99a31fcf3a9ad2239e4265f14eeba5e17bd1b54a63ac91c4c419a251b03c22b1ea24e7c0bf90df56e0465cec39494f0a432f3ad050b1621866d91a56395a3111f5834"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xbb}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xb0}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r4, 0x720, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1f, 0xa}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = getuid() statx(r0, &(0x7f0000000840)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000800)='./file0\x00', r5, r6, 0x400) 23:37:37 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x140}, 0x1, 0x0, 0x0, 0x48000}, 0x85) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x4200, 0x0) write$eventfd(r1, &(0x7f0000000280)=0x1, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000002c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000340)={0x2, 0x100, 0x7, 0x6, 0x2}) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000380)) r3 = syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0xd86, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000440)="b470651654daf62db18f5865623d3a9debf42f822031bb51a16f38a938ade47f4708b86c686268f4ed0839f93d8cf8dc1ac95cf7862acda6d213a46848cfc774a20feaf00067c95d99cb96353280ae1c28e1bdfaec4606a636ee6d66e7071cff24bef507b3607d536802755219c1956d43701d9dc5642df48976dbcff64c22", 0x7f, 0x1}], 0x20c008, &(0x7f0000000500)={[{@unhide}, {@check_strict}, {@check_relaxed}, {@unhide}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/null\x00'}}]}) r4 = openat$incfs(r3, &(0x7f0000000580)='.log\x00', 0x24480, 0x190) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x24100, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000680)={0x6, 0x4}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x4a8400, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000700), 0x4, 0x187883) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r5, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x6d, 0x1a}}}}, ["", "", "", "", ""]}, 0x20}}, 0x40000) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) openat$incfs(r9, &(0x7f0000000880)='.pending_reads\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xbb0b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x8080) 23:37:37 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x3, 0x2}) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x9, 0x5, &(0x7f0000001400)=[{&(0x7f00000000c0)="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", 0xff, 0x8}, {&(0x7f00000001c0)="8a61e168c3b8cb40d86cce1053f586d2caa99eee0f8e1d27a028d421cd0ee3bfded8f230badb2f6021e249cfbf1f5f5f8c6d0fba4fbf8a8ba0a1c4b278bd06da1c96cbcb8664400fa824b1764eb6aa1ac982d0bedd5405f88ad102b50155c4fdb223a784d6a33d73c990fdbf6e2b51db7ed4da31a8e21d94adba4e4dc6354bba629da9cc35a934ca468ab4daeaee79e1363cc88100b9bbc21ab0579c77c37516278726c3f9b905ec1347b05d2265694428be8e8fe0ac848052dcf0fa588c90929a975550f711e5cd", 0xc8, 0xfffffffffffffff8}, {&(0x7f00000002c0)="1bfbb27897ac8789eeeade2e3c69c490dee3c72667", 0x15, 0xffff}, {&(0x7f0000000300)="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", 0x1000, 0x10000}, {&(0x7f0000001300)="d42871cdbd3d00629c0f44884108bcc0f87de2294d57d9801f05cb925c7371ce52603e1de164a66b322ea326d806b662cc472ae3ec4b537bbd31d64d0fb5eba80bf27f74cf2d61c403f782b802eeadd573b361350b9ab9ecdbfcbffb24f651f8e810f345d8e619b6e27e5a04cef43f7f953061b868520bd31aa7f46d97bf42bd7de7a8559450c9bf40cbb1d2a13d4191b68d3ae6418d5156f31ca42ecb5d73f88aa91452c65a3f982b312d9b2d514ba5596c8443b8acab00eeccd799a50aeb56679e364a74d6cb369a6382bc8da03da23c82a1038bc7905f9cd6dcae7ee0", 0xde, 0x8}], 0x20, &(0x7f0000001480)={[{@shortname_winnt}, {@uni_xlate}, {@utf8}, {@rodir}, {@utf8}, {@shortname_mixed}], [{@uid_gt={'uid>', 0xee00}}, {@appraise_type}, {@uid_lt={'uid<', 0xee01}}, {@obj_role={'obj_role', 0x3d, '-@-'}}]}) getdents(r0, &(0x7f0000001540)=""/38, 0x26) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000001580)={0x1, 0x7f}) r1 = syz_mount_image$vfat(&(0x7f00000015c0), &(0x7f0000001600)='./file0/file0\x00', 0x1ff, 0x1, &(0x7f0000001700)=[{&(0x7f0000001640)="36e3a1488052ec06d7a515d4f653e113c4113ce2e162bfc1f647093c5b6b940dee7b329e15917e1eb7d8b4a63d27db91736fb28977085ce362660fa52345eec80c22813b0e6ce95835c08f8b46ffd7c3eb679606024824cff0ec0e7a2afbcfb65d2c99ef6f7a6b40fc7d410f37a08d24c05c38ee94f496b01fa7fc7a25a605c20f718a94c8f0c4ca70a32b89", 0x8c, 0xf3}], 0x80, &(0x7f0000001740)={[{@fat=@errors_continue}, {@fat=@flush}, {@shortname_win95}, {@utf8}, {@rodir}, {}, {@uni_xlateno}, {@rodir}, {@shortname_mixed}], [{@obj_type={'obj_type', 0x3d, '/\xf5'}}, {@audit}, {@permit_directio}, {@fsname={'fsname', 0x3d, 'obj_role'}}, {@uid_eq}, {@subj_role={'subj_role', 0x3d, 'shortname=winnt'}}, {@hash}]}) r2 = getgid() fchownat(r1, &(0x7f0000001840)='./file0\x00', 0xee00, r2, 0x1000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001880), 0x482) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000018c0)={0x10000, 0xdc9, 0xca, 0x80000001, 0x9}) r4 = openat$incfs(r1, &(0x7f0000001940)='.log\x00', 0x101000, 0x21) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000001980)={0x5, 0x7fff}) mount$9p_fd(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x1080010, &(0x7f0000001a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@loose}, {@cache_none}, {@nodevmap}, {@cache_loose}, {@msize={'msize', 0x3d, 0x6d}}, {@fscache}, {@fscache}], [{@subj_type={'subj_type', 0x3d, ','}}, {@hash}]}}) faccessat2(r0, &(0x7f0000001b00)='./file0\x00', 0x129, 0x8019892774f8221c) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x40, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x88005}, 0x4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000280}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000001d40)={0x7, 0x1, {0x0, 0x3, 0x73, 0x1, 0x3}, 0x6}) r5 = syz_open_dev$vcsn(&(0x7f0000001dc0), 0x7, 0x181) faccessat(r5, &(0x7f0000001e00)='./file0\x00', 0x2) fchownat(r4, &(0x7f0000001e40)='./file0/file0\x00', 0x0, r2, 0x100) 23:37:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x400, 0x900) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x54d, 0x40b6, 0x1, 'queue0\x00', 0x5605}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x6, 0x81}, 'port1\x00', 0x40, 0x10000c, 0x9, 0x2, 0x10000, 0x6, 0x3484, 0x0, 0x4, 0x9}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x8, 0x5}, {0xe2, 0x5}, 0x8, 0x5, 0xf7}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x389401) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000002c0)={0x28cd0567, 0x5, 0xeee, 0xfffffffa, 0x6, 0x8}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000300)={{0x80, 0x6}, 'port0\x00', 0x31, 0x140008, 0x401, 0x40, 0x0, 0x80000000, 0x8, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000003c0)={0x1f, 0xec, 0xf8}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000400)='.pending_reads\x00', 0x111000, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000440)={{0x81, 0x81}, 'port1\x00', 0x4, 0x40414, 0x9, 0x2, 0x1, 0x200, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000500)={{0xd, 0x38}, 0x0, 0x7, 0x8001, {0x9}, 0x80, 0x5}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000005c0)={{0x4}, 0x0, 0xf4f7, 0x6576fdad, {0x6, 0x9}, 0x8, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000640)={{0x0, 0x5}, 'port0\x00', 0x50, 0x120012, 0x80000000, 0x1, 0x1000, 0x6, 0x81, 0x0, 0x2, 0x5}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000700), 0x189000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000740)={{0x3f, 0x3}, {0x4, 0x7e}, 0x1f, 0x6, 0x81}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000007c0)={0x6, 0xfffffff9, 0x1, 'queue1\x00', 0x40db}) r6 = gettid() perf_event_open(&(0x7f00000008c0)={0x5, 0x80, 0x7, 0x8, 0x80, 0x3f, 0x0, 0x9, 0x4100, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc75, 0x4, @perf_bp={&(0x7f0000000880), 0xc}, 0x80, 0x49, 0x2, 0x4, 0x4, 0xfffffffe, 0x8, 0x0, 0x3be9, 0x0, 0x4}, r6, 0x10, r1, 0x9) 23:37:37 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x6000c5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x42}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xec, r2, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x74}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x2}, {0xf55d2a51ffadcefe}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x86, 0xac, "e58bb0ae6b90dea01ab6fb92c3938ead34f5187364523fa765ee269f37ef78fb074630bc4b10b7d174e95ddd6c27156b8088f9ab9fa2dd5af444bbf75875465665c52fe3d482fa0b6c1c47a1d0187109c99623d37c0b98c6eeb06c7046aff1d9201f7dbc81bc9177df36419278b2b1fa4d664dcd5a179713e81e80e7315c0bc503b1"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x94}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0xec}, 0x1, 0x0, 0x0, 0x1010}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x52}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x8800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r2, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008081) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xe0, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xde, 0x18}}}}, [@NL80211_ATTR_IE={0x48, 0x2a, [@ht={0x2d, 0x1a, {0x400c, 0x1, 0x1, 0x0, {0x9, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7, 0x914, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @dsss={0x3, 0x1, 0x64}, @peer_mgmt={0x75, 0x14, {0x1, 0x0, @void, @void, @val="9aa47e7ead2deeb350814543a845a46e"}}, @dsss={0x3, 0x1, 0xb8}, @ibss={0x6, 0x2, 0xffff}, @channel_switch={0x25, 0x3, {0x0, 0x8, 0x8}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x40, 0x2a, [@challenge={0x10, 0x1, 0x3}, @dsss={0x3, 0x1, 0xb0}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x80}}, @preq={0x82, 0x2b, @ext={{0x1}, 0x94, 0x1, 0x7, @broadcast, 0x1, @device_b, 0x0, 0x7, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0x6}]}}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @dsss={0x3, 0x1, 0xae}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000090) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x98, r6, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb7c0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x4, 0x7, 0x560, 0x7, 0x1, 0x2, 0x2]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x8}}, 0x3d, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x44040) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x190, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x109, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xad, 0x78}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x7, 0xe3, @device_a, 0x3, 0x3, 0x800}}, @mesh_chsw={0x76, 0x6, {0x20, 0x87, 0xc, 0x5}}, @mesh_chsw={0x76, 0x6, {0x9, 0x3, 0x19, 0x1d}}, @measure_req={0x26, 0xa3, {0x1f, 0x40, 0xff, "499f94537520e792431db24f854446f2aadecfe78a4b029b3579cca09c162f9b0a92f50f52c959d9234399cbbccb79b1557f75fdf9194bf97d0b32844da5e4e0c14fe69da35df5a2c48f4793afbb078ddd35c6afef11e48dd735cef9fcf81eecb2843c499aa88c45cfb56a7673af8761a59de2e50e8855df7a00260e596e9e4da7d3875c31b32d25b2f3f4382575c6585181b2223ac68f249ca4727affec30de"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x9, @void, @val=0x27, @val="cba8c3ee012bc4bd183dd4c850f870f2"}}, @tim={0x5, 0x1a, {0x3f, 0x14, 0x5, "6ccebd3f0c6b366165afa008bba9871e4c124558272162"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}, @NL80211_ATTR_IE={0x27, 0x2a, [@mic={0x8c, 0x10, {0x4d1, "d77cff093033", @short="441b41e89059318f"}}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x5, 0xffffffffffffffff, 0x6, 0x1}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x190}}, 0x4000800) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x8000) io_uring_setup(0x30c3, &(0x7f0000000d40)={0x0, 0x1adb, 0x4, 0x1, 0x277}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f00000013c0)={&(0x7f0000000dc0), 0xc, &(0x7f0000001380)={&(0x7f0000000e40)={0x538, r2, 0x70e, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x3b8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4a3a19545014"}, @NL80211_NAN_FUNC_SRF={0x3a0, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xb1}, @NL80211_NAN_SRF_MAC_ADDRS={0x70, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x20}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0x164, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xff}, @NL80211_NAN_FUNC_SERVICE_INFO={0x76, 0xb, "8549bdb44254b70e70e3e05b1adb56190343aadc5fa203e323ba8022169b5ba44e9876de52ce6588d0d19109c96a4b0f8ad398116b2d4a0fc03e01dbc2541f325f5e6f25a56fc086266059b7fd1cbffaf4ac7377ffb9b14e8cc38d49d907086ee267608154ef381d936f68cbef5de8b0dd40"}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb8, 0xb, "70b5ca02256a0eac5844d65b0fce2d7a4dcfff7d606da1d5502a823cac1148af3a334dc8056113e83b4daecfc57c03a3463a204ba704c05da745929c944727f7b5e1af5920d099ef309454cc29b3fb245879990ab2e788b59e121a80b78e33a739c0393a9fe2dc7c9d2222a79eab764333993c5c711c287c3f80fecff933b7e8cbbb52e5863c2f4bb68e1e7a84149d574272d551f92e59d29029530c6f44c0de78acccbdefdc456d5be943266757c08f4d4fcd16"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x71}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x80}, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004880}, 0x20000000) [ 128.944568] audit: type=1400 audit(1750981057.366:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:37:37 executing program 5: r0 = fork() waitid(0x1, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x7, 0x6, 0x0, 0x7, 0x800, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x80}, 0x8, 0x3, 0x5, 0x1, 0xca2f, 0x56, 0x4, 0x0, 0x8001, 0x0, 0x800}, r0, 0xb, 0xffffffffffffffff, 0x2) getgid() ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000001c0)={0x5, 0x80, 0x0, 'queue1\x00', 0x7fff}) r1 = getpgid(r0) wait4(r1, &(0x7f0000000280), 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x400100, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000300)={{0x2, 0xffffffff, 0xfff, 0x2, 0x5, 0x2}, 0x2fb, [0x0, 0x0, 0xfffff09b, 0x1000, 0x8000, 0x3, 0x3, 0x20, 0xff, 0x20f9, 0x8, 0x3, 0x2fe6d674, 0xdc, 0x0, 0x6, 0xbc4e, 0x7, 0x7ff, 0xccf7, 0xffff0000, 0x99, 0x6, 0x38, 0x969, 0x6fce1279, 0x3ff, 0x1, 0x9f7, 0x1, 0x8, 0x4, 0x3, 0xfffffff9, 0x1000, 0x7b41, 0x400, 0x3, 0x10001, 0x4, 0xfff, 0x6, 0x800, 0xac0, 0x1c, 0xffff, 0x8001, 0x10001, 0x4, 0x8000, 0x7, 0x1ca, 0x5, 0xab50, 0xfffff001, 0x2, 0x9, 0x6, 0x1, 0x7ff, 0xffff7fff, 0x1, 0x10001, 0x100, 0xd0ef, 0x4, 0x10001, 0x100000, 0xe1, 0x8, 0x200, 0x100, 0x9, 0x7, 0x400, 0xeadb, 0x2, 0x0, 0x3, 0x6, 0x5, 0x2, 0x3, 0x3c33934a, 0x3, 0x6, 0x8001, 0x9, 0x40, 0xffff, 0x2, 0x1000, 0x5, 0x251a, 0x5, 0x9, 0x8, 0xe0d, 0xaf, 0x2, 0x0, 0x2, 0x7fff, 0x4, 0xe3ec, 0x4, 0x1, 0x8, 0xf93, 0xf91, 0x3c0000, 0x1, 0x5, 0x7, 0x20, 0x954, 0x3c, 0x29, 0x8000, 0x189, 0x2, 0x10001, 0x1, 0x1, 0x4, 0x2, 0x8001, 0x5, 0x0, 0x6, 0x0, 0x40, 0x2, 0x200, 0xfffffff9, 0x401, 0x7fffffff, 0x1, 0x80000001, 0x767, 0x1, 0x1ff, 0x5, 0x80, 0x5, 0x4, 0x2, 0x4, 0x4, 0x97, 0x1, 0x7fff, 0x3f, 0x7, 0x0, 0x401, 0x9, 0x4, 0x266, 0xffff12e2, 0x7fffffff, 0x2, 0xff, 0x8, 0x4, 0x3, 0x7ff, 0xa1cc, 0xfffffffc, 0x400, 0x8, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1ff, 0x1f, 0x3ff, 0x4, 0x6b72acdb, 0x3f, 0x3f, 0x1, 0x7, 0x6, 0x3, 0x3, 0x9, 0x6, 0xfffffe01, 0x6, 0xb, 0x6, 0x20, 0x1c00, 0x8001, 0x8, 0x3ff, 0x91b, 0xe1e, 0x50, 0x2, 0x6, 0x0, 0xfff, 0x9, 0x11, 0x9, 0x9, 0x80000001, 0x0, 0x0, 0x8, 0xfffffffb, 0xef0, 0x2, 0x1f, 0x7, 0x5d42, 0x1, 0x7, 0x8, 0x1, 0x9, 0x9, 0x7, 0x8, 0x6, 0x401, 0x401, 0x0, 0x5425, 0x8, 0xc7, 0x2000, 0x7, 0x3, 0x200, 0x8, 0x352, 0x0, 0x5, 0x1, 0x2, 0xfffffffb, 0x1f, 0x3, 0x101, 0x7fff, 0x9, 0x6, 0x3, 0x6, 0x2, 0x7fffffff, 0x9, 0x3646e6f7, 0x6, 0xfffffffc, 0x3, 0xea4, 0x3, 0x3, 0x92, 0x5, 0x6, 0x6, 0x0, 0x3448, 0x3, 0x7, 0x40, 0xfff, 0x8, 0x1, 0x1ff, 0x2, 0x6, 0x4, 0x7f, 0x7, 0x10001, 0xff, 0x8000, 0x2, 0xfa, 0x1000, 0x262, 0x5, 0x101, 0x9, 0x8, 0x3, 0x4df5, 0x80000000, 0x80000000, 0x8001, 0xe00, 0x1, 0x4, 0x5, 0x200, 0x4, 0x8, 0xffff, 0x8, 0x5, 0x5803, 0x6, 0x1f, 0xd51, 0xfffffffe, 0x2, 0x10000, 0x4, 0x562, 0x8, 0x2, 0x6, 0x7fffffff, 0x4, 0xffffffff, 0x5b5, 0x4, 0x1f, 0x0, 0x1, 0xb01, 0x200, 0x1ff, 0xff, 0x1, 0x80, 0x7, 0x0, 0x8, 0x89, 0x1, 0x7fff, 0x1, 0x76d1, 0x3ff, 0x0, 0x0, 0x9, 0x3, 0x1, 0x4, 0x0, 0xfffffff9, 0xb2, 0xff, 0xac, 0x6, 0x8000, 0x1, 0x80, 0x400, 0x0, 0x7fff, 0x6, 0x0, 0x80, 0x2, 0x9, 0x6, 0x81, 0x6, 0x3, 0x200, 0xb7ef, 0x100, 0x81, 0x9, 0x20, 0xfff, 0x80000001, 0x3, 0x7be6, 0x1, 0x3, 0xffffffff, 0x5, 0x0, 0x9, 0x1f, 0x4, 0x9, 0x400, 0x71, 0x4, 0x6, 0x3, 0x10001, 0x3, 0x8, 0x9, 0x3acf, 0x401, 0x8, 0xfffff001, 0xe09, 0xfffffffc, 0x7ff, 0x0, 0x5, 0xcb5, 0x7e2f48e, 0x52, 0x6ee, 0x3, 0x2, 0xfffffff7, 0x0, 0x1ff, 0x62, 0x8001, 0x7fffffff, 0x7, 0x0, 0x8, 0xcfc, 0x7, 0x9, 0x2, 0x8, 0x6, 0x409354ff, 0x6, 0x0, 0x9, 0x3, 0x9, 0x5, 0x3, 0x7, 0x0, 0x3, 0xfffff75c, 0xb3a5, 0x6bf, 0xaa, 0x80000000, 0x7f, 0x5, 0x8, 0x1ff, 0x5, 0xa000, 0x7c, 0x4, 0x4b, 0xfffffffe, 0xe1, 0x0, 0x80000000, 0x3, 0x9, 0x9ba0, 0x10001, 0x0, 0x6, 0x6, 0x62e43e6f, 0x3, 0x1, 0x200, 0x0, 0x1, 0x0, 0xc16, 0x9, 0xe739, 0x5, 0x0, 0x9, 0x5, 0x8, 0x7fffffff, 0x8, 0x7, 0xe312, 0x80000000, 0x9, 0xffc00000, 0x3, 0x6, 0xffff, 0x10001, 0xffff7fff, 0x4, 0x4, 0x5, 0x3, 0x9, 0x5, 0x5, 0x3, 0x7, 0x3f, 0x5, 0x37, 0x40, 0x4, 0x243c6c38, 0x80, 0x80000001, 0x3ff, 0x2, 0x1, 0x1, 0x1ff, 0x9, 0x7fff, 0x970, 0x0, 0x1000, 0x9, 0xce, 0xff2, 0x4, 0x2, 0x3ca48531, 0x3d2c, 0x7, 0x400, 0x0, 0x6, 0x7, 0x100, 0x101, 0xa1aa, 0x1, 0x0, 0x8, 0x6, 0x2, 0x4, 0x4, 0x5, 0x0, 0x1c, 0x0, 0x8001, 0xefb1, 0x7, 0x1ff, 0x4, 0x5, 0x4c, 0x4, 0x9, 0x10001, 0x7, 0x8000, 0x2, 0xf2b, 0x0, 0x6, 0x0, 0x59af, 0xfffffff9, 0x3, 0x101, 0x1, 0xb44, 0x6, 0xff, 0x7, 0xfa3, 0xfffffff7, 0x80, 0x4, 0x7, 0x7, 0x0, 0xffffffff, 0x7, 0x40, 0x89e, 0x2, 0x5, 0x0, 0xd9, 0x67, 0x2, 0x5, 0x80000001, 0x800, 0x8, 0xfffffffb, 0x101, 0x4, 0x7c00d648, 0x6, 0x5, 0xfffffffd, 0x4, 0x6, 0x6, 0x0, 0x10001, 0x101, 0x0, 0x1f, 0x8, 0x6, 0x8, 0x1d, 0xf12, 0x1, 0x9, 0x100, 0x7ff, 0x7, 0x2, 0x7, 0x9, 0x0, 0x4, 0x0, 0x8, 0x9, 0x0, 0x5, 0x3ff, 0x81, 0x80, 0xffffffff, 0x1, 0xb21, 0xffffffe0, 0x2, 0x0, 0xb52, 0x8, 0xff, 0x2, 0x0, 0xbc, 0x4, 0x9, 0x10001, 0x5, 0x92cd, 0x50, 0xffffffff, 0xde4, 0x9, 0x400, 0x7f, 0x7, 0xfff, 0x0, 0x0, 0x5, 0x7, 0x5, 0x3, 0x100, 0x8d, 0x1, 0x3ff, 0x3, 0x6, 0x2bf0, 0x10001, 0x0, 0x8, 0x2da7, 0x6, 0x2, 0x3, 0x1, 0x7fff, 0x5, 0xd4, 0xe834, 0x4, 0x7ff, 0x2, 0xcc1d, 0x8000, 0xff, 0x6, 0x81, 0x6f66c4cc, 0x1ff, 0x5, 0x2, 0xbf18, 0x0, 0xf0, 0x5, 0xfffffffd, 0x2, 0x0, 0x7, 0x6, 0x3ff, 0x41f, 0x3, 0x7fffffff, 0xffffffff, 0x1, 0x4, 0x3, 0x6, 0xddc, 0x7, 0x2, 0x7, 0x9, 0x1, 0x423, 0x80000001, 0x23, 0x4, 0x3ff, 0x4a58, 0x1, 0x8, 0x0, 0x20, 0x5, 0x1, 0x2, 0x7, 0x5, 0x7, 0x3ff, 0x6, 0x1bc7, 0x3, 0x7, 0x9, 0x8, 0x200, 0x3, 0x9, 0x1, 0x9f, 0x7fff, 0x7, 0xffffffff, 0x1ff, 0x8c, 0x8, 0x6d, 0xb23, 0x0, 0x1, 0x6, 0x0, 0x9, 0x2, 0x7fff, 0xe901, 0x400, 0x5, 0x8, 0x6, 0x5, 0x6, 0x1, 0x0, 0x1, 0x4, 0x0, 0x401, 0x98d, 0x5, 0x3f, 0x6, 0x7ff, 0x5, 0x81, 0x6, 0x9, 0x200, 0x7b, 0x3, 0x9, 0x87, 0x7, 0x4, 0x7, 0x1f, 0x63b0, 0x1, 0x31b1, 0x7e365d6c, 0x80000000, 0x1, 0x10000, 0x0, 0x5, 0x3, 0x4, 0x11, 0x8, 0x3, 0x5, 0x9, 0x6, 0x4, 0xfffffff8, 0x7fff, 0x9, 0x5, 0x80000001, 0x2, 0x8001, 0x3, 0x2, 0x3, 0x0, 0x0, 0x8000, 0xfffffff7, 0x7, 0x3, 0x1d, 0x663, 0x9, 0x7, 0x0, 0x80000000, 0xa509, 0x33, 0x2, 0x54f9, 0x4d, 0x7, 0x995, 0x401, 0x1, 0x3, 0xcb, 0x2, 0x6b0, 0x2, 0x27e2fd76, 0x3ff, 0x8d3, 0xde8d, 0x6b, 0x10001, 0x5, 0x5, 0x8, 0xfffffff1, 0x0, 0x4, 0x40, 0x2, 0xffffffff, 0x8, 0x20, 0x81, 0xffffffff, 0x75da, 0x7, 0x8, 0x81, 0xfffffffa, 0x5, 0x3, 0x7, 0x9d66, 0x2, 0x2, 0x7, 0x4, 0x8, 0x1, 0x401, 0x3, 0xffffffff, 0x57, 0x9, 0x4, 0x7ff, 0x8001, 0x2, 0x0, 0x7fff, 0x400, 0x7, 0x3, 0x3, 0x3f, 0x4, 0xfff, 0x9, 0x8, 0x3ff, 0xf2, 0x1, 0xfffffffb, 0x4, 0x8001, 0x5, 0x8, 0x5, 0x7fff, 0xf9, 0xffff, 0x0, 0xf87, 0x80000000, 0x2, 0xb3c7, 0x2, 0x3f, 0x2, 0x9, 0x5, 0xb51, 0x3, 0x8001, 0x800, 0x115, 0x80, 0x9, 0x0, 0xff, 0x3, 0x75a, 0x9, 0xcd9, 0xffff0001, 0x7, 0x9, 0x3ff, 0x3, 0x5, 0x6ded, 0x5, 0x3f, 0x1000, 0x0, 0x4f6, 0x1, 0x3, 0xed0, 0x1, 0xffff, 0x0, 0x16, 0x10000, 0x7f, 0x24fd, 0x8f, 0x6, 0x9, 0x5, 0x7, 0x4, 0x3, 0x9, 0xd6, 0x100, 0x2, 0x1, 0xe0b, 0x80, 0x0, 0x6, 0x59c0, 0x100, 0x10001, 0x3f, 0x10001, 0x7ff, 0xffff8809, 0x4, 0x10000, 0x1, 0x7, 0xfff, 0x7, 0xfd9f, 0x0, 0x0, 0x6, 0x1, 0xfffffc00, 0xffff, 0x1, 0x10001, 0x2, 0x2, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x3, 0x5, 0x9ea5, 0x400, 0x3, 0x93c, 0x5, 0x68, 0x0, 0x1f, 0x338ec000, 0x80000000, 0x2, 0x7, 0x20, 0x1, 0xffffffe2, 0x200, 0xffffff7f, 0x3, 0x6, 0x0, 0x0, 0x6]}) waitid(0x1, r1, &(0x7f0000001340), 0x8, &(0x7f00000013c0)) waitid(0x1, r0, &(0x7f0000001480), 0x8, &(0x7f0000001500)) wait4(r1, &(0x7f00000015c0), 0x8, &(0x7f0000001600)) getrusage(0x1, &(0x7f00000016c0)) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000001780)=""/34) waitid(0x2, r0, &(0x7f00000017c0), 0x80000000, &(0x7f0000001840)) waitid(0x1aed05253630b862, r1, &(0x7f0000001900), 0x8, &(0x7f0000001980)) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffff, 0x40}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000088}, 0x4040) 23:37:37 executing program 6: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000140)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000200)={0x7, 0x7f, 0x0, 'queue0\x00', 0xfff}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000002c0)={{0x55, 0x20}, {0x8, 0x81}, 0x7f, 0x2}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000380)={0x2019, 0x4, 0x1, 'queue0\x00', 0x8}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x53}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x6010085}, 0x84) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x7c85a9864a8201f4, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000005c0)={{0x5, 0x8}, 'port0\x00', 0x8, 0x160000, 0x7d0, 0x9, 0x1, 0x4, 0x83b0, 0x0, 0xb, 0x40}) r3 = getpgid(0x0) perf_event_open(&(0x7f00000006c0)={0x3, 0x80, 0xfb, 0x2, 0x1f, 0x7, 0x0, 0x7, 0x8100c, 0xa6a91ceee967a13, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000680), 0x2}, 0x80, 0x42cf, 0x400, 0x5, 0x7, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40}, r3, 0x0, r2, 0xb) sched_rr_get_interval(r3, &(0x7f0000000740)) r4 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x29, 0xd3, 0x11, 0x7, 0x18, @loopback, @private1, 0x1, 0x0, 0x467, 0x1}}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x128, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4090}, 0x4000080) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x72}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x44804) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000b80)={{0x3f, 0x3f}, {0x0, 0x7}, 0x0, 0x4, 0x40}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, 0x0, 0x500, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x800) 23:37:37 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x91, 0xb0da, 0x8a4, 0x1, 0x1, 0x7fff, 0x6, 0x4}, &(0x7f0000000040)={0x0, 0x467, 0x3b7, 0x5, 0x6dae, 0x4, 0x4, 0x9}, &(0x7f0000000080)={0x7, 0x3, 0x3, 0xe, 0x4, 0x800, 0x9, 0x7fffffff}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) r0 = semget(0x1, 0x0, 0x14) semtimedop(r0, &(0x7f0000000180)=[{0x1, 0x1ff, 0x1000}, {0x0, 0x1, 0x1800}, {0x2, 0x6}], 0x3, &(0x7f00000001c0)={0x0, 0x3938700}) r1 = semget(0x1, 0x1, 0x41) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000200)=""/189) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000002c0)=""/33) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000300)=""/84) r2 = semget(0x3, 0x3, 0x80) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000380)=[0x400, 0x5]) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000003c0)=""/61) r3 = semget(0x3, 0x1, 0x1) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000400)=""/36) pidfd_open(0xffffffffffffffff, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000440)=[0x9, 0x200, 0xfb0d, 0x5, 0x6, 0x6, 0x6, 0xfef8, 0x9, 0xc7e8]) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f0000000480)=""/100) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x500a9890}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24048001}, 0x1000) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000600)=""/191) r4 = semget(0x2, 0x0, 0x0) semctl$GETZCNT(r4, 0x2, 0xf, &(0x7f00000006c0)=""/142) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000780)=""/158) [ 130.491467] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.498693] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.502183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.512172] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.522189] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.661179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.669713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.672411] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.683057] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.687071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.741902] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.751488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.759458] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.767801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.771988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.776079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.794980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.804499] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.813823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.819047] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.824057] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.827976] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.832880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.839111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.841624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 130.844666] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.847932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 130.850123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.853243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.855512] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.862427] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 130.868844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 130.873622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.890822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.893905] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 130.898805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.904673] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 130.912050] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.921615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.945464] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 132.565127] Bluetooth: hci0: command tx timeout [ 132.758341] Bluetooth: hci1: command tx timeout [ 132.948639] Bluetooth: hci2: command tx timeout [ 132.948749] Bluetooth: hci4: command tx timeout [ 132.950034] Bluetooth: hci3: command tx timeout [ 133.012543] Bluetooth: hci7: command tx timeout [ 133.012979] Bluetooth: hci6: command tx timeout [ 133.013259] Bluetooth: hci5: command tx timeout [ 134.612743] Bluetooth: hci0: command tx timeout [ 134.804926] Bluetooth: hci1: command tx timeout [ 134.997333] Bluetooth: hci4: command tx timeout [ 134.997815] Bluetooth: hci3: command tx timeout [ 134.998232] Bluetooth: hci2: command tx timeout [ 135.060460] Bluetooth: hci5: command tx timeout [ 135.060902] Bluetooth: hci7: command tx timeout [ 135.061331] Bluetooth: hci6: command tx timeout [ 136.660357] Bluetooth: hci0: command tx timeout [ 136.854586] Bluetooth: hci1: command tx timeout [ 137.044410] Bluetooth: hci2: command tx timeout [ 137.044891] Bluetooth: hci3: command tx timeout [ 137.045351] Bluetooth: hci4: command tx timeout [ 137.109181] Bluetooth: hci7: command tx timeout [ 137.110381] Bluetooth: hci6: command tx timeout [ 137.110558] Bluetooth: hci5: command tx timeout [ 138.709079] Bluetooth: hci0: command tx timeout [ 138.900452] Bluetooth: hci1: command tx timeout [ 139.093390] Bluetooth: hci4: command tx timeout [ 139.093613] Bluetooth: hci3: command tx timeout [ 139.093864] Bluetooth: hci2: command tx timeout [ 139.156395] Bluetooth: hci7: command tx timeout [ 139.156609] Bluetooth: hci6: command tx timeout [ 139.156823] Bluetooth: hci5: command tx timeout [ 192.807180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.812723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.816048] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.824942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.831747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.954830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.957335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.971841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.978734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.984769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.004162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.024947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.030764] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.053709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.054977] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.058757] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.061086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.069643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.071099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.075728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.079855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.083791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.087717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.090708] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.097484] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.100211] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.106891] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.114041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.116062] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.122493] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.125690] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.130222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.134991] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.136200] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.158002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.166594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.169771] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.173596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.173959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.187568] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.900468] Bluetooth: hci0: command tx timeout [ 195.028398] Bluetooth: hci1: command tx timeout [ 195.156367] Bluetooth: hci2: command tx timeout [ 195.157384] Bluetooth: hci5: command tx timeout [ 195.220361] Bluetooth: hci3: command tx timeout [ 195.284406] Bluetooth: hci4: command tx timeout [ 195.285478] Bluetooth: hci7: command tx timeout [ 195.285551] Bluetooth: hci6: command tx timeout [ 196.949350] Bluetooth: hci0: command tx timeout [ 197.079343] Bluetooth: hci1: command tx timeout [ 197.204368] Bluetooth: hci5: command tx timeout [ 197.204397] Bluetooth: hci2: command tx timeout [ 197.269772] Bluetooth: hci3: command tx timeout [ 197.334406] Bluetooth: hci7: command tx timeout [ 197.334498] Bluetooth: hci4: command tx timeout [ 197.334887] Bluetooth: hci6: command tx timeout [ 198.996357] Bluetooth: hci0: command tx timeout [ 199.124895] Bluetooth: hci1: command tx timeout [ 199.252485] Bluetooth: hci2: command tx timeout [ 199.252963] Bluetooth: hci5: command tx timeout [ 199.317427] Bluetooth: hci3: command tx timeout [ 199.380480] Bluetooth: hci4: command tx timeout [ 199.380532] Bluetooth: hci7: command tx timeout [ 199.381647] Bluetooth: hci6: command tx timeout [ 201.044636] Bluetooth: hci0: command tx timeout [ 201.173498] Bluetooth: hci1: command tx timeout [ 201.300688] Bluetooth: hci2: command tx timeout [ 201.302813] Bluetooth: hci5: command tx timeout [ 201.364527] Bluetooth: hci3: command tx timeout [ 201.428586] Bluetooth: hci6: command tx timeout [ 201.429025] Bluetooth: hci7: command tx timeout [ 201.429105] Bluetooth: hci4: command tx timeout [ 255.078588] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.082772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.086374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.095915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.100755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.146220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.149148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.153669] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.163905] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.171730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.284721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.293124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.295656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.301804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.306346] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.312043] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.346840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.348864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.353490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.375771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.382939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.400995] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.403698] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.406553] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 255.410548] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 255.427964] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 255.433912] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 255.446586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.448992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.450896] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.452946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.457530] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.470375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.473952] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.482720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.488640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.490452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.497746] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.510682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.521527] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.172469] Bluetooth: hci0: command tx timeout [ 257.237321] Bluetooth: hci1: command tx timeout [ 257.428357] Bluetooth: hci2: command tx timeout [ 257.556718] Bluetooth: hci7: command tx timeout [ 257.556743] Bluetooth: hci3: command tx timeout [ 257.620379] Bluetooth: hci6: command tx timeout [ 257.620456] Bluetooth: hci5: command tx timeout [ 257.621105] Bluetooth: hci4: command tx timeout [ 259.223309] Bluetooth: hci0: command tx timeout [ 259.285514] Bluetooth: hci1: command tx timeout [ 259.477393] Bluetooth: hci2: command tx timeout [ 259.604553] Bluetooth: hci3: command tx timeout [ 259.607349] Bluetooth: hci7: command tx timeout [ 259.668409] Bluetooth: hci6: command tx timeout [ 259.668863] Bluetooth: hci4: command tx timeout [ 259.669345] Bluetooth: hci5: command tx timeout [ 261.268460] Bluetooth: hci0: command tx timeout [ 261.333026] Bluetooth: hci1: command tx timeout [ 261.524645] Bluetooth: hci2: command tx timeout [ 261.654354] Bluetooth: hci7: command tx timeout [ 261.654429] Bluetooth: hci3: command tx timeout [ 261.716545] Bluetooth: hci6: command tx timeout [ 261.716575] Bluetooth: hci5: command tx timeout [ 261.717056] Bluetooth: hci4: command tx timeout [ 263.317837] Bluetooth: hci0: command tx timeout [ 263.381428] Bluetooth: hci1: command tx timeout [ 263.573583] Bluetooth: hci2: command tx timeout [ 263.700773] Bluetooth: hci3: command tx timeout [ 263.701351] Bluetooth: hci7: command tx timeout [ 263.764433] Bluetooth: hci6: command tx timeout [ 263.764579] Bluetooth: hci5: command tx timeout [ 263.766007] Bluetooth: hci4: command tx timeout [ 317.160698] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.163753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.170012] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.177492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.182970] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.557317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.562913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.567819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.577912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.583502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.706801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.716877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.723802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.745843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.758203] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.802598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.820714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.834812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.846165] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.852902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.868225] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 317.871043] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 317.877216] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 317.879137] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.887867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.892612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 317.902470] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 317.903975] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.908617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.948947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.958411] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.966117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.966219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.991756] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.019233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.024014] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.042810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.049803] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.116757] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.132813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.253119] Bluetooth: hci0: command tx timeout [ 319.636419] Bluetooth: hci1: command tx timeout [ 319.828491] Bluetooth: hci2: command tx timeout [ 319.956383] Bluetooth: hci5: command tx timeout [ 320.020683] Bluetooth: hci7: command tx timeout [ 320.148491] Bluetooth: hci3: command tx timeout [ 320.148579] Bluetooth: hci4: command tx timeout [ 320.276701] Bluetooth: hci6: command tx timeout [ 321.301127] Bluetooth: hci0: command tx timeout [ 321.684573] Bluetooth: hci1: command tx timeout [ 321.876426] Bluetooth: hci2: command tx timeout [ 322.005746] Bluetooth: hci5: command tx timeout [ 322.069319] Bluetooth: hci7: command tx timeout [ 322.196478] Bluetooth: hci3: command tx timeout [ 322.197251] Bluetooth: hci4: command tx timeout [ 322.324378] Bluetooth: hci6: command tx timeout [ 323.348379] Bluetooth: hci0: command tx timeout [ 323.732753] Bluetooth: hci1: command tx timeout [ 323.926312] Bluetooth: hci2: command tx timeout [ 324.053450] Bluetooth: hci5: command tx timeout [ 324.116621] Bluetooth: hci7: command tx timeout [ 324.244433] Bluetooth: hci3: command tx timeout [ 324.244500] Bluetooth: hci4: command tx timeout [ 324.372488] Bluetooth: hci6: command tx timeout [ 325.396806] Bluetooth: hci0: command tx timeout [ 325.780993] Bluetooth: hci1: command tx timeout [ 325.974306] Bluetooth: hci2: command tx timeout [ 326.100579] Bluetooth: hci5: command tx timeout [ 326.165397] Bluetooth: hci7: command tx timeout [ 326.292722] Bluetooth: hci3: command tx timeout [ 326.293154] Bluetooth: hci4: command tx timeout [ 326.420365] Bluetooth: hci6: command tx timeout [ 379.695653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.708340] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.715941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.729080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.734530] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.877550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.880699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.882870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.888348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.892253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.145402] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.160900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.163611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.172561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.174630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.177239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.191073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.196722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.219684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.225403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.232844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.235068] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.237795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.241572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.275560] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.294439] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.305028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.311645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.315595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.319040] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.323411] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.351602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 380.375808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 380.417513] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 380.424733] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.525246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.550432] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.607069] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 380.642934] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 380.653639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.782529] Bluetooth: hci0: command tx timeout [ 381.909362] Bluetooth: hci1: command tx timeout [ 382.356372] Bluetooth: hci3: command tx timeout [ 382.356601] Bluetooth: hci2: command tx timeout [ 382.420379] Bluetooth: hci4: command tx timeout [ 382.485793] Bluetooth: hci5: command tx timeout [ 382.548353] Bluetooth: hci6: command tx timeout [ 382.804399] Bluetooth: hci7: command tx timeout [ 383.829421] Bluetooth: hci0: command tx timeout [ 383.957675] Bluetooth: hci1: command tx timeout [ 384.405320] Bluetooth: hci2: command tx timeout [ 384.405787] Bluetooth: hci3: command tx timeout [ 384.470301] Bluetooth: hci4: command tx timeout [ 384.532384] Bluetooth: hci5: command tx timeout [ 384.596566] Bluetooth: hci6: command tx timeout [ 384.852423] Bluetooth: hci7: command tx timeout [ 385.877308] Bluetooth: hci0: command tx timeout [ 386.004369] Bluetooth: hci1: command tx timeout [ 386.452611] Bluetooth: hci3: command tx timeout [ 386.452633] Bluetooth: hci2: command tx timeout [ 386.518355] Bluetooth: hci4: command tx timeout [ 386.580409] Bluetooth: hci5: command tx timeout [ 386.644643] Bluetooth: hci6: command tx timeout [ 386.902391] Bluetooth: hci7: command tx timeout [ 387.924828] Bluetooth: hci0: command tx timeout [ 388.052677] Bluetooth: hci1: command tx timeout [ 388.500392] Bluetooth: hci3: command tx timeout [ 388.502586] Bluetooth: hci2: command tx timeout [ 388.565559] Bluetooth: hci4: command tx timeout [ 388.629355] Bluetooth: hci5: command tx timeout [ 388.693337] Bluetooth: hci6: command tx timeout [ 388.949433] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:42:39 Registers: info registers vcpu 0 RAX=ffff88802859c0e0 RBX=00007ffa4c0ab000 RCX=ffffffff819fa7a2 RDX=ffff888015033700 RSI=ffffffff819fa7c6 RDI=0000000000000006 RBP=ffff888028935c40 RSP=ffff888036da7a00 R8 =0000000000000000 R9 =ffffed1005126ca9 R10=00007ffa4c0ab000 R11=0000000000000001 R12=0000000000000000 R13=00007ffa4c0ab000 R14=ffff88802859c0e0 R15=00007ffa4c01d000 RIP=ffffffff819fa7c9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55f6000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6931621000 CR3=00000000259b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880e56f6000 RCX=38d053afe7524f81 RDX=0000000000000000 RSI=00000000ea677e04 RDI=ffff88806cf31850 RBP=ffff88806cf086d0 RSP=ffff88806cf085f8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff88806cf086c0 R14=ffff888034d09b80 R15=ffff88806cf08678 RIP=ffffffff815abb70 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56f6000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f96907468e0 CR3=0000000030544000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000ff000000000000000000 XMM01=00ff0000000001002e6f732e6362696c XMM02=312e312e6f732e6f747079726362696c XMM03=00000000000000000000000000000000 XMM04=000000000000ff000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000