Warning: Permanently added '[localhost]:16720' (ECDSA) to the list of known hosts. 2023/08/16 22:54:25 fuzzer started 2023/08/16 22:54:25 dialing manager at localhost:43643 syzkaller login: [ 121.579781] cgroup: Unknown subsys name 'net' [ 121.789026] cgroup: Unknown subsys name 'rlimit' [ 133.611901] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/16 22:54:40 syscalls: 2217 2023/08/16 22:54:40 code coverage: enabled 2023/08/16 22:54:40 comparison tracing: enabled 2023/08/16 22:54:40 extra coverage: enabled 2023/08/16 22:54:40 setuid sandbox: enabled 2023/08/16 22:54:40 namespace sandbox: enabled 2023/08/16 22:54:40 Android sandbox: enabled 2023/08/16 22:54:40 fault injection: enabled 2023/08/16 22:54:40 leak checking: enabled 2023/08/16 22:54:40 net packet injection: enabled 2023/08/16 22:54:40 net device setup: enabled 2023/08/16 22:54:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/16 22:54:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/16 22:54:40 USB emulation: enabled 2023/08/16 22:54:40 hci packet injection: enabled 2023/08/16 22:54:40 wifi device emulation: enabled 2023/08/16 22:54:40 802.15.4 emulation: enabled 2023/08/16 22:54:41 fetching corpus: 50, signal 24680/26503 (executing program) 2023/08/16 22:54:41 fetching corpus: 100, signal 35318/38783 (executing program) 2023/08/16 22:54:41 fetching corpus: 150, signal 45241/50212 (executing program) 2023/08/16 22:54:41 fetching corpus: 200, signal 50669/57091 (executing program) 2023/08/16 22:54:41 fetching corpus: 250, signal 57413/65210 (executing program) 2023/08/16 22:54:41 fetching corpus: 300, signal 63472/72584 (executing program) 2023/08/16 22:54:41 fetching corpus: 350, signal 67371/77778 (executing program) 2023/08/16 22:54:41 fetching corpus: 400, signal 71178/82829 (executing program) 2023/08/16 22:54:41 fetching corpus: 450, signal 75040/87878 (executing program) 2023/08/16 22:54:42 fetching corpus: 500, signal 78749/92692 (executing program) 2023/08/16 22:54:42 fetching corpus: 550, signal 81854/96950 (executing program) 2023/08/16 22:54:42 fetching corpus: 600, signal 85364/101487 (executing program) 2023/08/16 22:54:42 fetching corpus: 650, signal 88359/105539 (executing program) 2023/08/16 22:54:42 fetching corpus: 700, signal 91343/109583 (executing program) 2023/08/16 22:54:42 fetching corpus: 750, signal 94193/113408 (executing program) 2023/08/16 22:54:42 fetching corpus: 800, signal 96746/116904 (executing program) 2023/08/16 22:54:42 fetching corpus: 850, signal 100522/121417 (executing program) 2023/08/16 22:54:43 fetching corpus: 900, signal 102598/124384 (executing program) 2023/08/16 22:54:43 fetching corpus: 950, signal 104141/126924 (executing program) 2023/08/16 22:54:43 fetching corpus: 1000, signal 107468/130951 (executing program) 2023/08/16 22:54:43 fetching corpus: 1050, signal 109499/133827 (executing program) 2023/08/16 22:54:43 fetching corpus: 1100, signal 110798/136067 (executing program) 2023/08/16 22:54:43 fetching corpus: 1150, signal 112804/138896 (executing program) 2023/08/16 22:54:43 fetching corpus: 1200, signal 114888/141705 (executing program) 2023/08/16 22:54:43 fetching corpus: 1250, signal 116745/144315 (executing program) 2023/08/16 22:54:43 fetching corpus: 1300, signal 118774/147064 (executing program) 2023/08/16 22:54:44 fetching corpus: 1350, signal 119842/148980 (executing program) 2023/08/16 22:54:44 fetching corpus: 1400, signal 121447/151286 (executing program) 2023/08/16 22:54:44 fetching corpus: 1450, signal 123144/153615 (executing program) 2023/08/16 22:54:44 fetching corpus: 1500, signal 124370/155611 (executing program) 2023/08/16 22:54:44 fetching corpus: 1550, signal 125793/157786 (executing program) 2023/08/16 22:54:44 fetching corpus: 1600, signal 127485/160108 (executing program) 2023/08/16 22:54:44 fetching corpus: 1650, signal 129427/162592 (executing program) 2023/08/16 22:54:44 fetching corpus: 1700, signal 131073/164813 (executing program) 2023/08/16 22:54:45 fetching corpus: 1750, signal 133383/167477 (executing program) 2023/08/16 22:54:45 fetching corpus: 1800, signal 134666/169395 (executing program) 2023/08/16 22:54:45 fetching corpus: 1850, signal 136037/171326 (executing program) 2023/08/16 22:54:45 fetching corpus: 1900, signal 137167/173074 (executing program) 2023/08/16 22:54:45 fetching corpus: 1950, signal 138108/174661 (executing program) 2023/08/16 22:54:45 fetching corpus: 2000, signal 139153/176297 (executing program) 2023/08/16 22:54:45 fetching corpus: 2050, signal 140444/178099 (executing program) 2023/08/16 22:54:45 fetching corpus: 2100, signal 141496/179778 (executing program) 2023/08/16 22:54:46 fetching corpus: 2150, signal 142623/181434 (executing program) 2023/08/16 22:54:46 fetching corpus: 2200, signal 143878/183196 (executing program) 2023/08/16 22:54:46 fetching corpus: 2250, signal 144887/184742 (executing program) 2023/08/16 22:54:46 fetching corpus: 2300, signal 146316/186580 (executing program) 2023/08/16 22:54:46 fetching corpus: 2350, signal 147445/188171 (executing program) 2023/08/16 22:54:46 fetching corpus: 2400, signal 148240/189592 (executing program) 2023/08/16 22:54:46 fetching corpus: 2450, signal 149858/191504 (executing program) 2023/08/16 22:54:47 fetching corpus: 2500, signal 150754/192896 (executing program) 2023/08/16 22:54:47 fetching corpus: 2550, signal 151930/194491 (executing program) 2023/08/16 22:54:47 fetching corpus: 2600, signal 152756/195818 (executing program) 2023/08/16 22:54:47 fetching corpus: 2650, signal 153650/197176 (executing program) 2023/08/16 22:54:47 fetching corpus: 2700, signal 154802/198627 (executing program) 2023/08/16 22:54:47 fetching corpus: 2750, signal 155918/200094 (executing program) 2023/08/16 22:54:47 fetching corpus: 2800, signal 156847/201443 (executing program) 2023/08/16 22:54:47 fetching corpus: 2850, signal 157748/202723 (executing program) 2023/08/16 22:54:48 fetching corpus: 2900, signal 158533/203951 (executing program) 2023/08/16 22:54:48 fetching corpus: 2950, signal 159180/205056 (executing program) 2023/08/16 22:54:48 fetching corpus: 3000, signal 159981/206295 (executing program) 2023/08/16 22:54:48 fetching corpus: 3050, signal 161316/207777 (executing program) 2023/08/16 22:54:48 fetching corpus: 3100, signal 162206/208998 (executing program) 2023/08/16 22:54:48 fetching corpus: 3150, signal 163145/210285 (executing program) 2023/08/16 22:54:48 fetching corpus: 3200, signal 163699/211325 (executing program) 2023/08/16 22:54:48 fetching corpus: 3250, signal 164476/212464 (executing program) 2023/08/16 22:54:48 fetching corpus: 3300, signal 165073/213518 (executing program) 2023/08/16 22:54:49 fetching corpus: 3350, signal 165927/214680 (executing program) 2023/08/16 22:54:49 fetching corpus: 3400, signal 166771/215801 (executing program) 2023/08/16 22:54:49 fetching corpus: 3450, signal 167423/216855 (executing program) 2023/08/16 22:54:49 fetching corpus: 3500, signal 168681/218169 (executing program) 2023/08/16 22:54:49 fetching corpus: 3550, signal 169520/219255 (executing program) 2023/08/16 22:54:49 fetching corpus: 3600, signal 171513/220848 (executing program) 2023/08/16 22:54:49 fetching corpus: 3650, signal 171923/221692 (executing program) 2023/08/16 22:54:49 fetching corpus: 3700, signal 172565/222663 (executing program) 2023/08/16 22:54:50 fetching corpus: 3750, signal 173232/223587 (executing program) 2023/08/16 22:54:50 fetching corpus: 3800, signal 173822/224479 (executing program) 2023/08/16 22:54:50 fetching corpus: 3850, signal 174634/225484 (executing program) 2023/08/16 22:54:50 fetching corpus: 3900, signal 175523/226481 (executing program) 2023/08/16 22:54:50 fetching corpus: 3950, signal 176363/227441 (executing program) 2023/08/16 22:54:50 fetching corpus: 4000, signal 177970/228716 (executing program) 2023/08/16 22:54:50 fetching corpus: 4050, signal 178777/229678 (executing program) 2023/08/16 22:54:51 fetching corpus: 4100, signal 179405/230557 (executing program) 2023/08/16 22:54:51 fetching corpus: 4150, signal 179934/231383 (executing program) 2023/08/16 22:54:51 fetching corpus: 4200, signal 180816/232316 (executing program) 2023/08/16 22:54:51 fetching corpus: 4250, signal 181434/233170 (executing program) 2023/08/16 22:54:51 fetching corpus: 4300, signal 182026/233990 (executing program) 2023/08/16 22:54:51 fetching corpus: 4350, signal 182643/234787 (executing program) 2023/08/16 22:54:51 fetching corpus: 4400, signal 183182/235570 (executing program) 2023/08/16 22:54:51 fetching corpus: 4450, signal 183649/236334 (executing program) 2023/08/16 22:54:52 fetching corpus: 4500, signal 184305/237152 (executing program) 2023/08/16 22:54:52 fetching corpus: 4550, signal 185159/238016 (executing program) 2023/08/16 22:54:52 fetching corpus: 4600, signal 187483/239262 (executing program) 2023/08/16 22:54:52 fetching corpus: 4650, signal 187964/239972 (executing program) 2023/08/16 22:54:52 fetching corpus: 4700, signal 188679/240747 (executing program) 2023/08/16 22:54:52 fetching corpus: 4750, signal 189192/241443 (executing program) 2023/08/16 22:54:52 fetching corpus: 4800, signal 189739/242146 (executing program) 2023/08/16 22:54:52 fetching corpus: 4850, signal 190867/242980 (executing program) 2023/08/16 22:54:53 fetching corpus: 4900, signal 191485/243722 (executing program) 2023/08/16 22:54:53 fetching corpus: 4950, signal 192138/244405 (executing program) 2023/08/16 22:54:53 fetching corpus: 5000, signal 192650/245045 (executing program) 2023/08/16 22:54:53 fetching corpus: 5050, signal 193260/245701 (executing program) 2023/08/16 22:54:53 fetching corpus: 5100, signal 193558/246296 (executing program) 2023/08/16 22:54:53 fetching corpus: 5150, signal 194120/246939 (executing program) 2023/08/16 22:54:53 fetching corpus: 5200, signal 194640/247578 (executing program) 2023/08/16 22:54:53 fetching corpus: 5250, signal 194998/248181 (executing program) 2023/08/16 22:54:53 fetching corpus: 5300, signal 195874/248902 (executing program) 2023/08/16 22:54:54 fetching corpus: 5350, signal 196539/249508 (executing program) 2023/08/16 22:54:54 fetching corpus: 5400, signal 197180/250102 (executing program) 2023/08/16 22:54:54 fetching corpus: 5450, signal 197814/250671 (executing program) 2023/08/16 22:54:54 fetching corpus: 5500, signal 198280/251218 (executing program) 2023/08/16 22:54:54 fetching corpus: 5550, signal 199258/251848 (executing program) 2023/08/16 22:54:54 fetching corpus: 5600, signal 199757/252398 (executing program) 2023/08/16 22:54:54 fetching corpus: 5650, signal 200065/252890 (executing program) 2023/08/16 22:54:54 fetching corpus: 5700, signal 200484/253432 (executing program) 2023/08/16 22:54:55 fetching corpus: 5750, signal 201296/253978 (executing program) 2023/08/16 22:54:55 fetching corpus: 5800, signal 201831/254498 (executing program) 2023/08/16 22:54:55 fetching corpus: 5850, signal 202268/254953 (executing program) 2023/08/16 22:54:55 fetching corpus: 5900, signal 202831/255448 (executing program) 2023/08/16 22:54:55 fetching corpus: 5950, signal 203361/255947 (executing program) 2023/08/16 22:54:55 fetching corpus: 6000, signal 203881/256440 (executing program) 2023/08/16 22:54:55 fetching corpus: 6050, signal 204487/256955 (executing program) 2023/08/16 22:54:56 fetching corpus: 6100, signal 204868/257415 (executing program) 2023/08/16 22:54:56 fetching corpus: 6150, signal 205236/257864 (executing program) 2023/08/16 22:54:56 fetching corpus: 6200, signal 205723/258279 (executing program) 2023/08/16 22:54:56 fetching corpus: 6250, signal 206469/258727 (executing program) 2023/08/16 22:54:56 fetching corpus: 6300, signal 206892/259156 (executing program) 2023/08/16 22:54:56 fetching corpus: 6350, signal 207333/259597 (executing program) 2023/08/16 22:54:56 fetching corpus: 6400, signal 207753/260020 (executing program) 2023/08/16 22:54:56 fetching corpus: 6450, signal 208209/260440 (executing program) 2023/08/16 22:54:57 fetching corpus: 6500, signal 208527/260858 (executing program) 2023/08/16 22:54:57 fetching corpus: 6550, signal 208925/261066 (executing program) 2023/08/16 22:54:57 fetching corpus: 6600, signal 209404/261066 (executing program) 2023/08/16 22:54:57 fetching corpus: 6650, signal 209787/261066 (executing program) 2023/08/16 22:54:57 fetching corpus: 6700, signal 210295/261066 (executing program) 2023/08/16 22:54:57 fetching corpus: 6750, signal 210934/261066 (executing program) 2023/08/16 22:54:57 fetching corpus: 6800, signal 211234/261066 (executing program) 2023/08/16 22:54:57 fetching corpus: 6850, signal 211668/261066 (executing program) 2023/08/16 22:54:57 fetching corpus: 6900, signal 212325/261066 (executing program) 2023/08/16 22:54:58 fetching corpus: 6950, signal 212695/261066 (executing program) 2023/08/16 22:54:58 fetching corpus: 7000, signal 213169/261066 (executing program) 2023/08/16 22:54:58 fetching corpus: 7050, signal 213517/261066 (executing program) 2023/08/16 22:54:58 fetching corpus: 7100, signal 214028/261066 (executing program) 2023/08/16 22:54:58 fetching corpus: 7150, signal 214515/261066 (executing program) 2023/08/16 22:54:58 fetching corpus: 7200, signal 214848/261066 (executing program) 2023/08/16 22:54:58 fetching corpus: 7250, signal 215335/261066 (executing program) 2023/08/16 22:54:58 fetching corpus: 7300, signal 215611/261066 (executing program) 2023/08/16 22:54:58 fetching corpus: 7350, signal 215975/261066 (executing program) 2023/08/16 22:54:59 fetching corpus: 7400, signal 216365/261066 (executing program) 2023/08/16 22:54:59 fetching corpus: 7450, signal 216933/261066 (executing program) 2023/08/16 22:54:59 fetching corpus: 7500, signal 217375/261066 (executing program) 2023/08/16 22:54:59 fetching corpus: 7550, signal 217684/261066 (executing program) 2023/08/16 22:54:59 fetching corpus: 7600, signal 218120/261066 (executing program) 2023/08/16 22:54:59 fetching corpus: 7650, signal 218565/261066 (executing program) 2023/08/16 22:54:59 fetching corpus: 7700, signal 218881/261066 (executing program) 2023/08/16 22:55:00 fetching corpus: 7750, signal 219265/261066 (executing program) 2023/08/16 22:55:00 fetching corpus: 7800, signal 219585/261066 (executing program) 2023/08/16 22:55:00 fetching corpus: 7850, signal 219870/261066 (executing program) 2023/08/16 22:55:00 fetching corpus: 7900, signal 220205/261066 (executing program) 2023/08/16 22:55:00 fetching corpus: 7950, signal 220494/261066 (executing program) 2023/08/16 22:55:00 fetching corpus: 8000, signal 220904/261066 (executing program) 2023/08/16 22:55:00 fetching corpus: 8050, signal 221199/261066 (executing program) 2023/08/16 22:55:00 fetching corpus: 8100, signal 221591/261066 (executing program) 2023/08/16 22:55:00 fetching corpus: 8150, signal 221919/261066 (executing program) 2023/08/16 22:55:01 fetching corpus: 8200, signal 222455/261066 (executing program) 2023/08/16 22:55:01 fetching corpus: 8250, signal 222948/261066 (executing program) 2023/08/16 22:55:01 fetching corpus: 8300, signal 223291/261066 (executing program) 2023/08/16 22:55:01 fetching corpus: 8350, signal 223715/261066 (executing program) 2023/08/16 22:55:01 fetching corpus: 8400, signal 224185/261066 (executing program) 2023/08/16 22:55:01 fetching corpus: 8450, signal 224521/261066 (executing program) 2023/08/16 22:55:01 fetching corpus: 8500, signal 224781/261066 (executing program) 2023/08/16 22:55:01 fetching corpus: 8550, signal 225147/261066 (executing program) 2023/08/16 22:55:02 fetching corpus: 8600, signal 225489/261066 (executing program) 2023/08/16 22:55:02 fetching corpus: 8650, signal 225764/261066 (executing program) 2023/08/16 22:55:02 fetching corpus: 8700, signal 226203/261066 (executing program) 2023/08/16 22:55:02 fetching corpus: 8750, signal 226592/261066 (executing program) 2023/08/16 22:55:02 fetching corpus: 8800, signal 226815/261066 (executing program) 2023/08/16 22:55:02 fetching corpus: 8850, signal 227081/261066 (executing program) 2023/08/16 22:55:02 fetching corpus: 8900, signal 227507/261070 (executing program) 2023/08/16 22:55:02 fetching corpus: 8950, signal 227894/261070 (executing program) 2023/08/16 22:55:02 fetching corpus: 9000, signal 228581/261070 (executing program) 2023/08/16 22:55:03 fetching corpus: 9050, signal 228866/261070 (executing program) 2023/08/16 22:55:03 fetching corpus: 9100, signal 229061/261070 (executing program) 2023/08/16 22:55:03 fetching corpus: 9150, signal 229279/261070 (executing program) 2023/08/16 22:55:03 fetching corpus: 9200, signal 229659/261070 (executing program) 2023/08/16 22:55:03 fetching corpus: 9250, signal 229948/261070 (executing program) 2023/08/16 22:55:03 fetching corpus: 9300, signal 230264/261070 (executing program) 2023/08/16 22:55:03 fetching corpus: 9350, signal 230774/261070 (executing program) 2023/08/16 22:55:03 fetching corpus: 9400, signal 230978/261070 (executing program) 2023/08/16 22:55:03 fetching corpus: 9450, signal 231316/261070 (executing program) 2023/08/16 22:55:04 fetching corpus: 9500, signal 231618/261070 (executing program) 2023/08/16 22:55:04 fetching corpus: 9550, signal 231924/261070 (executing program) 2023/08/16 22:55:04 fetching corpus: 9600, signal 232319/261070 (executing program) 2023/08/16 22:55:04 fetching corpus: 9650, signal 232645/261070 (executing program) 2023/08/16 22:55:04 fetching corpus: 9700, signal 233324/261070 (executing program) 2023/08/16 22:55:04 fetching corpus: 9750, signal 233644/261070 (executing program) 2023/08/16 22:55:04 fetching corpus: 9800, signal 234029/261070 (executing program) 2023/08/16 22:55:04 fetching corpus: 9850, signal 234918/261070 (executing program) 2023/08/16 22:55:05 fetching corpus: 9900, signal 235153/261070 (executing program) 2023/08/16 22:55:05 fetching corpus: 9950, signal 235457/261070 (executing program) 2023/08/16 22:55:05 fetching corpus: 10000, signal 235834/261070 (executing program) 2023/08/16 22:55:05 fetching corpus: 10050, signal 236074/261070 (executing program) 2023/08/16 22:55:05 fetching corpus: 10100, signal 236432/261070 (executing program) 2023/08/16 22:55:05 fetching corpus: 10150, signal 236698/261070 (executing program) 2023/08/16 22:55:05 fetching corpus: 10200, signal 236997/261070 (executing program) 2023/08/16 22:55:05 fetching corpus: 10250, signal 237287/261070 (executing program) 2023/08/16 22:55:06 fetching corpus: 10300, signal 237607/261070 (executing program) 2023/08/16 22:55:06 fetching corpus: 10350, signal 237800/261070 (executing program) 2023/08/16 22:55:06 fetching corpus: 10400, signal 238058/261070 (executing program) 2023/08/16 22:55:06 fetching corpus: 10450, signal 238413/261070 (executing program) 2023/08/16 22:55:06 fetching corpus: 10500, signal 238588/261070 (executing program) 2023/08/16 22:55:06 fetching corpus: 10550, signal 238895/261070 (executing program) 2023/08/16 22:55:06 fetching corpus: 10600, signal 239146/261070 (executing program) 2023/08/16 22:55:06 fetching corpus: 10650, signal 239396/261070 (executing program) 2023/08/16 22:55:07 fetching corpus: 10700, signal 239584/261070 (executing program) 2023/08/16 22:55:07 fetching corpus: 10750, signal 239961/261070 (executing program) 2023/08/16 22:55:07 fetching corpus: 10800, signal 240200/261070 (executing program) 2023/08/16 22:55:07 fetching corpus: 10850, signal 240386/261070 (executing program) 2023/08/16 22:55:07 fetching corpus: 10900, signal 240667/261070 (executing program) 2023/08/16 22:55:07 fetching corpus: 10950, signal 241103/261070 (executing program) 2023/08/16 22:55:07 fetching corpus: 11000, signal 241362/261070 (executing program) 2023/08/16 22:55:07 fetching corpus: 11050, signal 241623/261070 (executing program) 2023/08/16 22:55:07 fetching corpus: 11100, signal 241792/261070 (executing program) 2023/08/16 22:55:08 fetching corpus: 11150, signal 241968/261070 (executing program) 2023/08/16 22:55:08 fetching corpus: 11200, signal 242228/261070 (executing program) 2023/08/16 22:55:08 fetching corpus: 11250, signal 243316/261070 (executing program) 2023/08/16 22:55:08 fetching corpus: 11300, signal 243639/261070 (executing program) 2023/08/16 22:55:08 fetching corpus: 11350, signal 243872/261070 (executing program) 2023/08/16 22:55:08 fetching corpus: 11400, signal 244025/261070 (executing program) 2023/08/16 22:55:08 fetching corpus: 11450, signal 244269/261070 (executing program) 2023/08/16 22:55:09 fetching corpus: 11500, signal 244540/261070 (executing program) 2023/08/16 22:55:09 fetching corpus: 11550, signal 244721/261070 (executing program) 2023/08/16 22:55:09 fetching corpus: 11600, signal 245019/261070 (executing program) 2023/08/16 22:55:09 fetching corpus: 11650, signal 245338/261070 (executing program) 2023/08/16 22:55:09 fetching corpus: 11700, signal 245641/261070 (executing program) 2023/08/16 22:55:09 fetching corpus: 11750, signal 245881/261070 (executing program) 2023/08/16 22:55:09 fetching corpus: 11800, signal 246210/261070 (executing program) 2023/08/16 22:55:09 fetching corpus: 11850, signal 246461/261070 (executing program) 2023/08/16 22:55:10 fetching corpus: 11900, signal 246801/261070 (executing program) 2023/08/16 22:55:10 fetching corpus: 11950, signal 247151/261070 (executing program) 2023/08/16 22:55:10 fetching corpus: 12000, signal 247653/261070 (executing program) 2023/08/16 22:55:10 fetching corpus: 12050, signal 247948/261070 (executing program) 2023/08/16 22:55:10 fetching corpus: 12100, signal 248293/261070 (executing program) 2023/08/16 22:55:10 fetching corpus: 12150, signal 248560/261070 (executing program) 2023/08/16 22:55:10 fetching corpus: 12200, signal 248835/261070 (executing program) 2023/08/16 22:55:10 fetching corpus: 12250, signal 249107/261070 (executing program) 2023/08/16 22:55:11 fetching corpus: 12300, signal 249357/261070 (executing program) 2023/08/16 22:55:11 fetching corpus: 12350, signal 249618/261070 (executing program) 2023/08/16 22:55:11 fetching corpus: 12400, signal 249872/261070 (executing program) 2023/08/16 22:55:11 fetching corpus: 12450, signal 250108/261070 (executing program) 2023/08/16 22:55:11 fetching corpus: 12500, signal 250347/261070 (executing program) 2023/08/16 22:55:11 fetching corpus: 12550, signal 250544/261070 (executing program) 2023/08/16 22:55:11 fetching corpus: 12600, signal 250813/261070 (executing program) 2023/08/16 22:55:11 fetching corpus: 12650, signal 250985/261070 (executing program) 2023/08/16 22:55:12 fetching corpus: 12700, signal 251184/261070 (executing program) 2023/08/16 22:55:12 fetching corpus: 12750, signal 251440/261070 (executing program) 2023/08/16 22:55:12 fetching corpus: 12787, signal 251585/261070 (executing program) 2023/08/16 22:55:12 fetching corpus: 12787, signal 251585/261070 (executing program) 2023/08/16 22:55:15 starting 8 fuzzer processes 22:55:15 executing program 0: msgrcv(0x0, &(0x7f0000000000)={0x0, ""/58}, 0x42, 0x3, 0x1000) r0 = msgget$private(0x0, 0x387) msgsnd(r0, &(0x7f0000000080)={0x3, "0382717e4a58386b579e9817944fe34e195971752b61dc08cf3820c1b52b5c788bce17064cffc5e327259839c482a460bb359430c01ff9b8fff60ef108c3"}, 0x46, 0x0) r1 = msgget(0x0, 0x80) msgrcv(r1, &(0x7f0000000100), 0x8, 0x1, 0x1000) r2 = getgid() msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r2, 0xffffffffffffffff, 0xee00, 0x14a, 0x1}, 0x0, 0x0, 0x2, 0x9, 0x401, 0x8000, 0x80000001, 0x1, 0x20, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}) setresgid(r2, r2, r2) r3 = msgget$private(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000380)={{0x0, 0x0, r2, r4, r5, 0x149, 0x7}, 0x0, 0x0, 0x8, 0x2, 0x9, 0x7f, 0xed, 0x2624, 0xf801, 0x65f4, 0xffffffffffffffff}) getgid() r6 = msgget$private(0x0, 0x40) msgrcv(r6, &(0x7f0000000400)={0x0, ""/6}, 0xe, 0x0, 0x2000) msgctl$IPC_RMID(r1, 0x0) msgctl$IPC_RMID(r3, 0x0) msgrcv(r6, &(0x7f0000000440)={0x0, ""/73}, 0x51, 0x1, 0x3800) r7 = msgget(0x2, 0x380) msgrcv(r7, &(0x7f00000004c0)={0x0, ""/48}, 0x38, 0x2, 0x800) 22:55:15 executing program 1: ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000000)) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x101003, 0x0) write$binfmt_elf32(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x8, 0x3, 0x8, 0xb87d, 0x3, 0x6, 0x5, 0x395, 0x38, 0x2b6, 0x63, 0x401, 0x20, 0x2, 0xc38, 0x20, 0x6}, [{0x6, 0x8, 0x1, 0x73, 0x80000000, 0x0, 0x3b, 0x100}, {0x70000000, 0x0, 0x3, 0x47, 0x9, 0x8, 0x1, 0x8000}], "5f71b72c6fb7a7bd74b234f1314966e41795f40911d032cb4c2fe63da4b626a4a0c0c96e70bf38dbcc14c8af7dd0fa87f533ad52684d790c18aaa9912dd9f8e9bd87c38214e529ae31d6d990288dd6f63d80f625c7ab35d0b4242ef29a48309a3e11e80f2f071baceacc4ed4fefbd22bbb6efb3946010cd346d7a075f6afee2312a675f117374fc324717780ef434320cc14e042672c19e58b1c3e252d91cb08", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x818) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000001d00)={"b315bf60d69b46b06aca0f20", &(0x7f0000000c80)="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", 0x1000, 0x7a2, &(0x7f0000001c80)={0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, "cc584d14", 0x7, "7e844d6c", 0x1, 0x8, 0x0, "1be908", "130d2ceb092d2ef7fae67a630be96a3d1c171752007762e5cfd66ec79a472c2b50e8ce9a0e9b8203e9bec8ce5b97"}, 0x2, 0x8, 0x42, &(0x7f0000001cc0)}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x810, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000001e00)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r2, 0x0, &(0x7f0000001d40)="018d7ace4cf47d8ca509e96901c4747480be3d51fd68e15ac20d5d3515f8bea77b4aba51807d3524eee2086b6049981ae0ea450f1e3340f6f6775eb03592f9b639df7351158683b99d28f2f11e809a7344eaeea57042e41377200196b1b94ebd156833ce687ddf1bc65ffdd9bcf32540efb495603294e85de2d682a18624502d9ef4ce47df404521b1935093f1ed87f88f995b6ea982625bf27aeb413cf7790af29eb8522e00a6a2a25fa5995250ad39444a7c", 0xb3, 0x22020, 0x1}, 0xdc) close_range(r2, r2, 0x2) r3 = creat(&(0x7f0000001e40)='./file0\x00', 0x0) ioctl$CDROM_MEDIA_CHANGED(r3, 0x5325, 0x6) preadv(r3, &(0x7f00000020c0)=[{&(0x7f0000001e80)}, {&(0x7f0000001ec0)=""/235, 0xeb}, {&(0x7f0000001fc0)=""/145, 0x91}, {&(0x7f0000002080)=""/23, 0x17}], 0x4, 0x7fff, 0x3) r4 = openat(r3, &(0x7f0000002100)='./file0\x00', 0x80800, 0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r3) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x20, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x15}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x40008081) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000002380)={"b173e7c65749719ef87a226b", &(0x7f0000002280)="7ff2aa979880b7e3e949421bad147eedff99992fadcfc277347743197b82f1716522a3adec3e765c6f99cafc7be79e9cb00daa022bd6e7e1f80aa9ea4b55602beeea5074edcf003cb258b2bd91cdff4d59bb5921aec1", 0x56, 0x9d2, &(0x7f0000002300)={0x1a, 0x1, 0x69, 0x9, 0x0, 0x0, 0x0, "4dd15eeb", 0xde, "d1bdde2e", 0x1a, 0x25, 0x1f, "0ebf81", "196b5129e58fccb38f6e8a371f5e5b87fdc8f2f2f197c445870ccb9227a8585ee913f15d29ed5d38f8ac397eb806"}, 0x1, 0x5, 0x80000000, &(0x7f0000002340)}) r6 = syz_open_dev$vcsn(&(0x7f00000023c0), 0x81, 0x200043) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), r4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x810) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002580), 0x80000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r8) 22:55:15 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x111) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x7, 0x0, 0x4, 0x81}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0, r0, r0, r0, r0, r1], 0x6) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x1c, 0x200, 0x70bd28, 0x25dfdbfb, {0xb}, [@typed={0x8, 0x86, 0x0, 0x0, @u32=0x80000000}, @typed={0x8, 0x26, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="5047adaccccec5165e21f2fccc77e9c0eecb5f", @generic="77a5f2b36c4004b6d21b177e105edf4af7f2949553188ce43aee28a281e56fb193dc8075db91fc57392529afd464c94a"]}, 0x68}, 0x1, 0x0, 0x0, 0x4000811}, 0x20000000) r2 = dup3(r0, r1, 0x0) fgetxattr(r2, &(0x7f0000000240)=@random={'system.', '/dev/ttyS3\x00'}, &(0x7f0000000280)=""/124, 0x7c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) fsmount(r3, 0x0, 0x80) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000003c0)={0xde, 0x10, '\x00', 0x1, &(0x7f0000000380)=[0x0, 0x0]}) syncfs(r0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000400)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_merged\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000004c0)='ro\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000500)={0x0, 0x3, 0x2, 0x3}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x840) 22:55:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8012) r1 = memfd_secret(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000805) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000240)={0x2, 'syzkaller0\x00', {0x2}, 0x1ff}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x327}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000400)) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='smaps\x00') ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000480)=""/86) ioctl$FICLONE(r6, 0x40049409, r5) getsockname$unix(r6, &(0x7f0000000500)=@abs, &(0x7f0000000580)=0x6e) memfd_secret(0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4805) r7 = syz_open_dev$vcsa(&(0x7f0000000700), 0x784, 0x10841) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r8 = syz_open_dev$vcsn(&(0x7f0000000780), 0x8c, 0x100) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f00000007c0)={0x5, 0x4, 0x0, 0xfffffffc, 0x1ff}) [ 170.965868] audit: type=1400 audit(1692226515.195:6): avc: denied { execmem } for pid=269 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:55:15 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000040)='\xa0(@),\xe9*%\x00', &(0x7f0000000080)='@\x00', &(0x7f00000000c0)=']\x00', &(0x7f0000000100)='.${+-\x00', &(0x7f0000000140)='//\x00', &(0x7f0000000180)='@-{\x00', &(0x7f00000001c0)='}!\x00'], &(0x7f0000000380)=[&(0x7f0000000240)='#\x00', &(0x7f0000000280)='%\x99\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)=',.\x00', &(0x7f0000000340)='pz-^:!m&\x00'], 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/../file0\x00', 0x401, 0x1a1) inotify_add_watch(r0, &(0x7f0000000400)='./file0/../file0\x00', 0x800) mkdir(&(0x7f0000000440)='./file1\x00', 0x1) r1 = openat(r0, &(0x7f0000000480)='./file0\x00', 0x101000, 0x0) stat(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x568d, &(0x7f0000000580)={0x0, 0x56bd, 0x10, 0x2, 0x2db}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000006c0)=@IORING_OP_OPENAT={0x12, 0x7, 0x0, r1, 0x0, &(0x7f0000000680)='./file0/../file0\x00', 0xc0, 0x204642, 0x12345}, 0x5) r6 = syz_open_dev$sg(&(0x7f0000000780), 0xffffffffffffff80, 0x4001) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000008c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000700)='./file0/../file0\x00', &(0x7f0000000740), 0x20, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_user}, {@aname={'aname', 0x3d, ']\'%'}}], [{@euid_lt={'euid<', r7}}, {@permit_directio}, {@appraise}, {@audit}, {@obj_role={'obj_role', 0x3d, '%\x99\x00'}}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r6, {r7, r2}}, './file0/../file0\x00'}) fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f0000000a00)=0x2) sendfile(r1, r8, &(0x7f0000000a40)=0xffffffffffffff58, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r3, {0x8000}}, './file0/file0\x00'}) r9 = memfd_secret(0x80000) getdents64(r9, &(0x7f0000000ac0)=""/4096, 0x1000) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000001ac0), 0x1, 0x0) getdents(r10, &(0x7f0000001b00)=""/188, 0xbc) syz_io_uring_submit(0x0, r5, &(0x7f0000001bc0)=@IORING_OP_NOP={0x0, 0x5}, 0x401) 22:55:15 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x218, r0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0x38}}}}, [@NL80211_ATTR_KEYS={0x18c, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xc, 0x4, "5c2ab41401e689a4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x6, 0x4, "77f5"}, @NL80211_KEY_SEQ={0xe, 0x4, "8de5cd220cd0915142bb"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d88e0792c3"}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, "8939"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0x12, 0x4, "412f55157a6fab1e05df5cf5767d"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "33d3452e041f2e034db323d583"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "45539b8338425cf3e87e5aef14"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "95766612a0"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0xc, 0x4, "76c63376e299119c"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x51}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x35}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xc0}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x65}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x47}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x801) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24008010) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) chdir(&(0x7f0000000640)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000006c0)={'wg1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000800)=0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x6c, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20008801) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c081}, 0x800) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x70}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r8, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) getsockname$packet(r7, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e80)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x78, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x48055) mkdir(&(0x7f0000000fc0)='./file0\x00', 0x180) 22:55:15 executing program 6: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x800) r2 = accept4$packet(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x800) r3 = mq_open(&(0x7f0000000140)='\x00', 0x2, 0x108, &(0x7f0000000180)={0x80000001, 0x20, 0x7, 0x3}) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r5, 0x1, 0x6, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000380)) recvfrom$packet(r0, &(0x7f00000003c0)=""/231, 0xe7, 0x2040, &(0x7f00000004c0)={0x11, 0x1b, r5, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) r7 = timerfd_create(0x1, 0x80800) r8 = dup3(r4, r7, 0x80000) getsockname(r6, &(0x7f0000000500)=@hci, &(0x7f0000000580)=0x80) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000005c0)={0x1, 0x7}, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000006c0)={r5, 0x1, 0x6}, 0x10) r9 = openat$incfs(r8, &(0x7f0000000700)='.pending_reads\x00', 0x24080, 0x138) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000c40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x160, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x44000}, 0x40) 22:55:15 executing program 7: syz_emit_ethernet(0x2e1, &(0x7f0000000000)={@random="39b66b1d2b93", @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "ab7b64", 0x2ab, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @private2, {[@fragment={0x73, 0x0, 0xb9, 0x1, 0x0, 0xc, 0x66}, @routing={0x5c, 0x6, 0x0, 0x4f, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3d}, @local, @rand_addr=' \x01\x00']}, @dstopts={0x33, 0x1, '\x00', [@ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x90}]}, @hopopts={0x8, 0x1e, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x33}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x0, 0xb9, "c04b4a84e46d9be3196ac9cf373e1a27eba968ce24e6ae1911d99cd71434f5b4e937799a6b73aa84c2f1ca0269ffc755a4fd23f5df40dfbe3ae6da2cff2f2fd0bc750b22c25d723839455ea1613c4320f8a15743a4df0119504dee4b701d0b02f9a358eba1da200809a3a00e6b7a0d603fcd47861b9afe1c49fbcbcaa5cd434dbc5e68a2e43cf478c1adfb856e74174416e7223103d18ec1e09b82aee329a60ca1f73db88492328966dc9cc3768a988e3fdd192a22c15f4e3d"}, @pad1, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x11, 0x0, 0x9, 0x1, 0x0, 0x1a, 0x67}, @dstopts={0x2e, 0x8, '\x00', [@pad1, @ra={0x5, 0x2, 0x7fff}, @jumbo={0xc2, 0x4, 0xfff}, @generic={0x6, 0x19, "5f4ecb1b49ea825c4b63019ee5d0a5d66e7da300c3a9318dd0"}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x9e}, @enc_lim={0x4, 0x1, 0x1c}]}, @dstopts={0x5e, 0xa, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0x5, 0x8, [0x7ff, 0x7ff, 0x30, 0x2, 0x7, 0x7, 0x0, 0x0]}}, @enc_lim={0x4, 0x1, 0x4d}]}, @hopopts={0x89, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x401}]}], {{0x4e22, 0x4e22, 0x4, 0x1, 0x2, 0x0, 0x0, 0x7, 0x7, "2f8276", 0x7, "73da70"}, "00e106e61702059aea584e118c3c7acf3a16c2046a7b7c6bc7c34ffa5d09ac5cc65282329beb88f413f53e6f8691d54dc20f7cc9a996159ac37be46e2d9c308fa2498a5f429f130c5d7bae14fe469790902dd102fd214ad6a308855a4919f0350e338f26d6911a92d5d8c6baa1373f9b13cf127f4594d0404b1251f671c730af4c2179ecd5d171167b4f3f"}}}}}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)={0x2, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x9}]}, 0x10) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8be}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x48}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_emit_ethernet(0xa7, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0xa, 0x6, 'o2H', 0x6d, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, {[@routing={0x73, 0x8, 0x1, 0xff, 0x0, [@remote, @loopback, @private2, @private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_direct={{{{0x25, 0x0, 0x0, 0x1, 0x1, 0x8, 0x2, 0x2, 0x3, 0x0, 0x2, 0x4, 0x2, 0x3, 0x7, 0x0, 0x3, 0x4e24, 0x4e23}, 0x2, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, &(0x7f0000000540)={0x1, 0x3, [0xb27, 0xd21, 0x15c, 0x7f9]}) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/36, 0x24, 0x102, &(0x7f00000005c0)=@x25, 0x80) syz_emit_ethernet(0x307, &(0x7f0000000640)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "a9e3cc", 0x2cd, 0x6, 0x1, @loopback, @private2, {[@routing={0x1d, 0xe, 0x0, 0xf9, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x35}, @loopback, @private2, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x21}]}, @srh={0x0, 0x4, 0x4, 0x2, 0x8, 0x40, 0x3, [@mcast2, @remote]}, @fragment={0x55dc923f6658fe8, 0x0, 0x3, 0x1, 0x0, 0x1d, 0x68}, @dstopts={0x62, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3f}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x8}]}, @srh={0xc, 0xe, 0x4, 0x7, 0x2, 0x28, 0x1a, [@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @routing={0x33, 0x10, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x31}, @mcast2]}, @srh={0x1d, 0x4, 0x4, 0x2, 0x4, 0x10, 0x8, [@loopback, @dev={0xfe, 0x80, '\x00', 0x18}]}, @routing={0xff, 0x14, 0x1, 0x80, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast2, @local, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}]}], @payload_mcast={{{{{{0x35, 0x0, 0x0, 0x0, 0x1, 0xb, 0x3, 0x2, 0xfffe, 0x0, 0x3, 0x3, 0x3, 0x1, 0x0, 0x9a05, 0x3, 0x4e21, 0x4e22}, 0x2, 0x2}, 0x3, 0x3}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000980), 0x1, 0xbd9) syz_emit_ethernet(0x109, &(0x7f00000009c0)={@empty, @random="35f6be1adf8d", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "963384", 0xd3, 0x3b, 0x1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@routing={0x33, 0xc, 0x1, 0x1f, 0x0, [@private0, @loopback, @empty, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}, @routing={0x21, 0x8, 0x1, 0x20, 0x0, [@empty, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}], "7141ac9eab6303fbe187c30d38a02f26cb81a837323e37e60b46e47dd8490cbf7eb495"}}}}}, &(0x7f0000000b00)={0x0, 0x1, [0x6e5, 0xc1a, 0xc53, 0x62b]}) syz_emit_ethernet(0x2a1, &(0x7f0000000b40)={@broadcast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "e264cb", 0x267, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @private2, {[@srh={0x2e, 0xa, 0x4, 0x5, 0x18, 0x50, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x88, 0x0, 0x2, 0x0, 0x0, 0x7, 0x67}, @routing={0x1f3, 0xa, 0x1, 0x1, 0x0, [@mcast2, @empty, @mcast2, @local, @rand_addr=' \x01\x00']}, @hopopts={0xb6, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0xcd}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0x70, [0xa9, 0x7fff, 0xd8]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x1f, 0xffd4, [0x9, 0x100000001, 0x6, 0xffff]}}]}, @dstopts={0x0, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x81}]}, @srh={0x16, 0x8, 0x4, 0x4, 0x6, 0x40, 0x3, [@local, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x5e, 0x2, 0x4, 0x1, 0x33, 0x0, 0x4, [@mcast1]}, @routing={0x33, 0xc, 0x1, 0xa5, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x39}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x2, 0x2, "7e4bc2", 0x5, "3aa733"}, "44e4f4e4beb0a4f01b7afff5edf7b9c00aa15d7e9938c89ec74ba7adb68e8d71b7d54b9b8077ee7944a0c92128a151c1056ee149e49c1a420cefbd0024799f1d3b34ef89cea6409d603445b6badd7583801bf80fd4b3c336aed6c5b579e874"}}}}}}, &(0x7f0000000e00)={0x0, 0x1, [0x803, 0xd73, 0x314, 0x3ea]}) syz_extract_tcp_res$synack(&(0x7f0000000e40), 0x1, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000e80)={@remote, @empty, @void, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "27ca1ac60ac513a2"}}}}, &(0x7f0000000ec0)={0x1, 0x1, [0xffc, 0xd79, 0xa4e, 0x9e6]}) syz_emit_ethernet(0x33, &(0x7f0000000f00)={@local, @local, @val={@val={0x9100, 0x0, 0x0, 0x2}, {0x8100, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0x1, "cf", "fc472e", 0x600, "9883e332b0fac2db3cb2dd02d4a91465426eaf35c2"}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000f40), 0x1, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x28, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xffff, 0x26}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4000810) syz_extract_tcp_res$synack(&(0x7f0000001100), 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001140)={0x67, 0x0, '\x00', [@pad1]}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000001180)={@val={0x0, 0x19}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @multicast, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x38) creat(&(0x7f00000011c0)='./file0\x00', 0x40) [ 172.360155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.364198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.366660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.376411] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.380379] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.385174] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.441155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.446063] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.453309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.470431] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.476865] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.479137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.498375] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.501119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.505055] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.522481] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.530364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.540058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.545498] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.553063] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.555190] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.556871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.566091] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 172.574395] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.583404] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 172.590691] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 172.598176] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 172.634055] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 172.639168] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 172.652544] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.438348] Bluetooth: hci0: command 0x0409 tx timeout [ 174.439123] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 174.565721] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 174.566846] Bluetooth: hci2: command 0x0409 tx timeout [ 174.568536] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 174.629877] Bluetooth: hci4: command 0x0409 tx timeout [ 174.693691] Bluetooth: hci3: command 0x0409 tx timeout [ 174.757885] Bluetooth: hci5: command 0x0409 tx timeout [ 176.485670] Bluetooth: hci0: command 0x041b tx timeout [ 176.613922] Bluetooth: hci2: command 0x041b tx timeout [ 176.678924] Bluetooth: hci4: command 0x041b tx timeout [ 176.742692] Bluetooth: hci3: command 0x041b tx timeout [ 176.807149] Bluetooth: hci5: command 0x041b tx timeout [ 177.669393] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.670553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.672783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.685169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.687569] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 177.689917] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.900164] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.903894] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.905899] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.927297] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.929090] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 177.933236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.983056] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.987680] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.988720] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.997033] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.003887] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 178.017329] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.534642] Bluetooth: hci0: command 0x040f tx timeout [ 178.662993] Bluetooth: hci2: command 0x040f tx timeout [ 178.727225] Bluetooth: hci4: command 0x040f tx timeout [ 178.789802] Bluetooth: hci3: command 0x040f tx timeout [ 178.854648] Bluetooth: hci5: command 0x040f tx timeout [ 179.750954] Bluetooth: hci1: command 0x0409 tx timeout [ 180.005913] Bluetooth: hci6: command 0x0409 tx timeout [ 180.070696] Bluetooth: hci7: command 0x0409 tx timeout [ 180.581683] Bluetooth: hci0: command 0x0419 tx timeout [ 180.709642] Bluetooth: hci2: command 0x0419 tx timeout [ 180.773809] Bluetooth: hci4: command 0x0419 tx timeout [ 180.837722] Bluetooth: hci3: command 0x0419 tx timeout [ 180.902022] Bluetooth: hci5: command 0x0419 tx timeout [ 181.797834] Bluetooth: hci1: command 0x041b tx timeout [ 182.054847] Bluetooth: hci6: command 0x041b tx timeout [ 182.117886] Bluetooth: hci7: command 0x041b tx timeout [ 183.845651] Bluetooth: hci1: command 0x040f tx timeout [ 184.103645] Bluetooth: hci6: command 0x040f tx timeout [ 184.165923] Bluetooth: hci7: command 0x040f tx timeout [ 185.895789] Bluetooth: hci1: command 0x0419 tx timeout [ 186.149822] Bluetooth: hci6: command 0x0419 tx timeout [ 186.213962] Bluetooth: hci7: command 0x0419 tx timeout [ 236.464199] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.465409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.466757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.475209] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.480934] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 236.486137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.415301] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 238.502642] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 238.565737] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 238.567445] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 238.568861] Bluetooth: hci1: command 0x0409 tx timeout [ 238.967719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.972154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.980974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.984607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.988106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 238.989198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.615168] Bluetooth: hci1: command 0x041b tx timeout [ 240.616928] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 240.807144] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 241.061675] Bluetooth: hci3: command 0x0409 tx timeout [ 242.022871] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 242.662737] Bluetooth: hci1: command 0x040f tx timeout [ 243.112647] Bluetooth: hci3: command 0x041b tx timeout [ 243.433684] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 243.557744] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 243.559365] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 244.709986] Bluetooth: hci1: command 0x0419 tx timeout [ 245.094208] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 245.158334] Bluetooth: hci3: command 0x040f tx timeout [ 245.477856] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 246.071118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.074413] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.076993] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.080100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.082975] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 246.084101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.822886] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 247.205642] Bluetooth: hci3: command 0x0419 tx timeout [ 247.939291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.940686] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.947870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.959423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.972912] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.978934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.165948] Bluetooth: hci2: command 0x0409 tx timeout [ 248.486683] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 248.488200] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 250.022705] Bluetooth: hci0: command 0x0409 tx timeout [ 250.214658] Bluetooth: hci2: command 0x041b tx timeout [ 250.279029] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 251.878661] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 252.070664] Bluetooth: hci0: command 0x041b tx timeout [ 252.263132] Bluetooth: hci2: command 0x040f tx timeout [ 252.509404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.517106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.587876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.613381] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.626140] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 252.630145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.605740] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 254.117654] Bluetooth: hci0: command 0x040f tx timeout [ 254.310855] Bluetooth: hci2: command 0x0419 tx timeout [ 254.375354] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.382491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.383951] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.387847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.390257] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 254.391534] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.693860] Bluetooth: hci4: command 0x0409 tx timeout [ 256.166663] Bluetooth: hci0: command 0x0419 tx timeout [ 256.486684] Bluetooth: hci5: command 0x0409 tx timeout [ 256.744681] Bluetooth: hci4: command 0x041b tx timeout [ 257.575659] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 258.534886] Bluetooth: hci5: command 0x041b tx timeout [ 258.790826] Bluetooth: hci4: command 0x040f tx timeout [ 259.238686] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 260.585088] Bluetooth: hci5: command 0x040f tx timeout [ 260.838891] Bluetooth: hci4: command 0x0419 tx timeout [ 261.291168] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 261.322884] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 261.336436] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 261.372926] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 261.399906] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 261.414465] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 262.630854] Bluetooth: hci5: command 0x0419 tx timeout [ 263.464973] Bluetooth: hci6: command 0x0409 tx timeout [ 264.742663] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 265.509705] Bluetooth: hci6: command 0x041b tx timeout [ 267.557721] Bluetooth: hci6: command 0x040f tx timeout [ 269.606199] Bluetooth: hci6: command 0x0419 tx timeout [ 270.374721] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 273.995174] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.008742] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.019072] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.043883] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.049965] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.053876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.197909] Bluetooth: hci7: command 0x0409 tx timeout [ 278.247088] Bluetooth: hci7: command 0x041b tx timeout [ 280.293857] Bluetooth: hci7: command 0x040f tx timeout [ 281.408927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.409566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.845368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.846190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.341998] Bluetooth: hci7: command 0x0419 tx timeout 22:57:08 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3f, 0x2, 0x26, 0x2, 0x0, 0x56e, 0xe7a0aabbb5f158ba, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37b5, 0x1, @perf_bp={&(0x7f0000000040)}, 0x8042, 0x7, 0x1, 0x5, 0x7, 0x4, 0x8, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x6, r0, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) pread64(r2, &(0x7f00000012c0)=""/4093, 0xffd, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) vmsplice(r1, &(0x7f0000000740)=[{&(0x7f0000000180)="def5ca73d440dba861231b8743aa40df10f44ca5856d5a2fc9504c5be5b553ac07c9596c5f1ce155daf550a75a2b473fc22412149bd250d73e3e9e5b740671628e2da01639c126be5ae67450e22f342f87511834cd28356850f57f32418a50733a44d5cc68bee04fbc530c56208a58c913891de1d87a6a151e47ab151d1fe1a50ae15521ae7b75724a5161e349abb8897f58c57a37cc92298dac3695c215b4a2cb244da6e908af7f16f8a8c4bf81c9762bc9872abb50fa69abffab", 0xbb}, {&(0x7f0000000240)="737ef74bc8539fad681161e39e488c41b8ae6efc81d27ea8d13598ffd4d712a36d7867185e9ae0ceacfa7db7c56989cd65d65fb52388b190ab72449e7ffe23b90a3e861c141aa53a544ad89022884eae75cfef98dee9359348f55313bccae82a8e566f6df76f231a74d7ebbaa7ff2d6bde53446ce0b3cb414d8822bc2158b3c411dd75", 0x83}, {&(0x7f00000003c0)="33ccb447af5a25e6330766761424e8abd68eda62c4398798d349db98dcd61c7ccc11133881f9822d141a00d20e9dbc54f9203fc89ca3221056d45f6475028917e9c8e0c45c50822b4996f3ad860c2f18992e8f90620e3b248eac3001e82a22cc25e6a986c828c2aeda89d72f4d01cdefe0e79a3c6bf7c8b96a285cfb4b717135e12405e7317078377aa40ee2c5be8ef485a79c238004e57c95e29973aacea0ac45aaf104ecf2905ee2a0d4a8f336a3a3c81f6bb63e940d5353379b4f9e03dcf68ae032dc1b5a8d8771b75f9dff8c3df79c58f13e84c4e2018b341ed5531cfbd72382992d28", 0xe5}, {&(0x7f00000004c0)="525a902d8c9f176483803c2c53da593cb953899f0b98a552d9467d14e873", 0x1e}, {&(0x7f0000000600)="8798386320f006c058de54ff08d3785b1ec3446cdf97bdecb1373b85e0c0cb431329eb8d287ba2e92740dc89cd5567e367c6089b680a1c70db7519beed4a7d3b9d132189871724ea399f1f03faacf732baf981db272368dabfedea76d65f1e54c2dbb752005feff45b4ef97c485b03382afd127322ce36adc1365790774de944c3f26f8469524ab04c39242fdc8595565b4919c31bdf3d6ffb19e774e2e82e274e6b19cc6f49d878d8d37fb0228852739643a0cc41dd8cab779f82aee759cdd51daec619262e9847854adedbc6bbfd0be43556e8c8e0dda505695322230c6e4244e28dd1d4ee7a7ff4b8312c", 0xec}, {&(0x7f0000000500)="c1c0d2f745ea3af7322f7bb9e31843e30a1f2ae8542e2156e285b8c1b367723b3af6c61f55773a964114a3b7e522902226d1edb2dd4bc8cd5034a78a4f41aba8f5d169995985989fbc5dfe2b9630cd82d3c1bb0b757c1cd55dbe6397d5e045fe424c7a89e7486d4af09e814f7a28e0df", 0x70}, {&(0x7f0000000700)="0da5c3d3faf7b422b123fd6e32682f5bb88d6f7d2b000794d0f3ff756f1e39fc0baf3077c856ed89d3fab388a4bda32867", 0x31}], 0x7, 0xd) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote={0xfe, 0x6}}, 0x14) sendfile(r3, r0, 0x0, 0x8000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000300)=ANY=[@ANYBLOB="8aa1d642f97b161f5d513212e24383359bf2c9c37057d64b9bfb30c6e3643e3f4a8d0e57256a1e3e7c978961adc4e3167212ec7568271504dbeb2a90a30cd5950eba14f8f77494de862fcea506621ec886f8545cc8d0d7c3be871c7be8d29ac60d00bd38ee7a5f9f5cc0979542d518bd775aabc321f8c683bf9ecf082653d8c32d405dd4278d24327afa9875c9b6164cdee1f7e6055bdf0cdb441d1b4290188a25ca"]) [ 284.367029] audit: type=1400 audit(1692226628.592:7): avc: denied { open } for pid=5248 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 284.382249] audit: type=1400 audit(1692226628.593:8): avc: denied { kernel } for pid=5248 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 284.432631] hrtimer: interrupt took 27611 ns 22:57:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000600)={{0x10b, 0x4, 0x80, 0x207, 0x1e6, 0x0, 0x1d8, 0x5}, "f9a424bc5b72119668c62ee98e02179de5ba4df16b971aa56ec8eb3125ab361561d41b40efe3f29994c5ab926fd7ee3253287cc7231c5645a640ced822ec4fe962d043ad60fd0286fff63970e91b1ff9895106f06d87d65c61c6a31acef51bdad34b0bed603185db85dea9d84e2da3cff3", ['\x00', '\x00', '\x00']}, 0x391) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0800000000000000eaff0000"]}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) close(0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = fork() ptrace$setopts(0x4206, r4, 0x81, 0x10) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x6, 0x3, 0x3, 0x0, 0xffffffffffffb824, 0x8200, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x1f8f}, 0x4, 0x0, 0x3f, 0x5, 0x1, 0x6, 0x9, 0x0, 0x10000}, r4, 0xf, r5, 0x1) [ 286.946946] audit: type=1400 audit(1692226631.171:9): avc: denied { read } for pid=5317 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 22:57:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000600)={{0x10b, 0x4, 0x80, 0x207, 0x1e6, 0x0, 0x1d8, 0x5}, "f9a424bc5b72119668c62ee98e02179de5ba4df16b971aa56ec8eb3125ab361561d41b40efe3f29994c5ab926fd7ee3253287cc7231c5645a640ced822ec4fe962d043ad60fd0286fff63970e91b1ff9895106f06d87d65c61c6a31acef51bdad34b0bed603185db85dea9d84e2da3cff3", ['\x00', '\x00', '\x00']}, 0x391) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0800000000000000eaff0000"]}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) close(0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = fork() ptrace$setopts(0x4206, r4, 0x81, 0x10) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x6, 0x3, 0x3, 0x0, 0xffffffffffffb824, 0x8200, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x1f8f}, 0x4, 0x0, 0x3f, 0x5, 0x1, 0x6, 0x9, 0x0, 0x10000}, r4, 0xf, r5, 0x1) 22:57:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000600)={{0x10b, 0x4, 0x80, 0x207, 0x1e6, 0x0, 0x1d8, 0x5}, "f9a424bc5b72119668c62ee98e02179de5ba4df16b971aa56ec8eb3125ab361561d41b40efe3f29994c5ab926fd7ee3253287cc7231c5645a640ced822ec4fe962d043ad60fd0286fff63970e91b1ff9895106f06d87d65c61c6a31acef51bdad34b0bed603185db85dea9d84e2da3cff3", ['\x00', '\x00', '\x00']}, 0x391) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0800000000000000eaff0000"]}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) close(0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = fork() ptrace$setopts(0x4206, r4, 0x81, 0x10) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x6, 0x3, 0x3, 0x0, 0xffffffffffffb824, 0x8200, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x1f8f}, 0x4, 0x0, 0x3f, 0x5, 0x1, 0x6, 0x9, 0x0, 0x10000}, r4, 0xf, r5, 0x1) 22:57:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0xdc, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x402, 0x3, 0x0, 0x0, 0x9, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x95, 0x0, 0x0, 0x0, 0x800, 0x1408a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x5, @perf_config_ext={0xffffffffffff0000, 0x1}, 0x980b, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffff7fffffffffff, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001140)=ANY=[@ANYBLOB="140000816436af1ce2001200210a000000000000000030000000"], 0x14}], 0x1}, 0x0) read(r2, &(0x7f0000000140)=""/4096, 0x20001140) read(r2, &(0x7f0000000080)=""/103, 0x67) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x74}}, './file0\x00'}) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x400001, 0xf80f51a27d2caf83, 0x1}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2287, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2287, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0xfffffdef) [ 289.399449] syz-executor.5[5441]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 289.422203] loop5: detected capacity change from 0 to 40 [ 289.774093] syz-executor.5: attempt to access beyond end of device [ 289.774093] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 289.775365] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 290.242766] syz-executor.5[5452]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 22:57:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0xdc, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x402, 0x3, 0x0, 0x0, 0x9, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x95, 0x0, 0x0, 0x0, 0x800, 0x1408a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x5, @perf_config_ext={0xffffffffffff0000, 0x1}, 0x980b, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffff7fffffffffff, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001140)=ANY=[@ANYBLOB="140000816436af1ce2001200210a000000000000000030000000"], 0x14}], 0x1}, 0x0) read(r2, &(0x7f0000000140)=""/4096, 0x20001140) read(r2, &(0x7f0000000080)=""/103, 0x67) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x74}}, './file0\x00'}) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x400001, 0xf80f51a27d2caf83, 0x1}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2287, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2287, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0xfffffdef) [ 290.794773] syz-executor.5[5505]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 290.805280] loop5: detected capacity change from 0 to 40 [ 291.316234] syz-executor.5: attempt to access beyond end of device [ 291.316234] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 291.317784] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:57:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0xdc, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x402, 0x3, 0x0, 0x0, 0x9, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x95, 0x0, 0x0, 0x0, 0x800, 0x1408a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x5, @perf_config_ext={0xffffffffffff0000, 0x1}, 0x980b, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffff7fffffffffff, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001140)=ANY=[@ANYBLOB="140000816436af1ce2001200210a000000000000000030000000"], 0x14}], 0x1}, 0x0) read(r2, &(0x7f0000000140)=""/4096, 0x20001140) read(r2, &(0x7f0000000080)=""/103, 0x67) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x74}}, './file0\x00'}) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x400001, 0xf80f51a27d2caf83, 0x1}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2287, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2287, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0xfffffdef) [ 292.050750] syz-executor.5[5553]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 292.063126] loop5: detected capacity change from 0 to 40 [ 292.507148] syz-executor.5: attempt to access beyond end of device [ 292.507148] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 292.508888] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:57:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0xdc, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x402, 0x3, 0x0, 0x0, 0x9, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x95, 0x0, 0x0, 0x0, 0x800, 0x1408a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x5, @perf_config_ext={0xffffffffffff0000, 0x1}, 0x980b, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffff7fffffffffff, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001140)=ANY=[@ANYBLOB="140000816436af1ce2001200210a000000000000000030000000"], 0x14}], 0x1}, 0x0) read(r2, &(0x7f0000000140)=""/4096, 0x20001140) read(r2, &(0x7f0000000080)=""/103, 0x67) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x74}}, './file0\x00'}) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x400001, 0xf80f51a27d2caf83, 0x1}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2287, &(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2287, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0xfffffdef) [ 293.141655] syz-executor.5[5599]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 293.148099] loop5: detected capacity change from 0 to 40 [ 293.477927] syz-executor.5: attempt to access beyond end of device [ 293.477927] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 293.478854] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 296.152048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.152580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.546821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.547370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.717686] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 307.185208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.216584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.218071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.252929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.270977] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.273881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.954261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.955962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.960095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.976975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.996387] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 309.011902] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.349705] Bluetooth: hci0: command 0x0409 tx timeout [ 310.473538] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.480138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.485980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.534170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.547372] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 310.548661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.142782] Bluetooth: hci2: command 0x0409 tx timeout [ 311.398664] Bluetooth: hci0: command 0x041b tx timeout [ 312.677684] Bluetooth: hci3: command 0x0409 tx timeout [ 313.190668] Bluetooth: hci2: command 0x041b tx timeout [ 313.445659] Bluetooth: hci0: command 0x040f tx timeout [ 314.627009] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.646523] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.666592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.674444] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.678003] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 314.682445] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.726641] Bluetooth: hci3: command 0x041b tx timeout [ 315.238778] Bluetooth: hci2: command 0x040f tx timeout [ 315.493651] Bluetooth: hci0: command 0x0419 tx timeout [ 316.298161] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.316080] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.317284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.331424] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.359901] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 316.362227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.774713] Bluetooth: hci4: command 0x0409 tx timeout [ 316.775287] Bluetooth: hci3: command 0x040f tx timeout [ 317.285680] Bluetooth: hci2: command 0x0419 tx timeout [ 318.505763] Bluetooth: hci5: command 0x0409 tx timeout [ 318.822703] Bluetooth: hci3: command 0x0419 tx timeout [ 318.823135] Bluetooth: hci4: command 0x041b tx timeout [ 320.549808] Bluetooth: hci5: command 0x041b tx timeout [ 320.869645] Bluetooth: hci4: command 0x040f tx timeout [ 322.598678] Bluetooth: hci5: command 0x040f tx timeout [ 322.917830] Bluetooth: hci4: command 0x0419 tx timeout [ 323.021441] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.048045] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.058356] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.073423] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.112903] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 323.117896] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.645652] Bluetooth: hci5: command 0x0419 tx timeout [ 325.222988] Bluetooth: hci6: command 0x0409 tx timeout [ 327.269657] Bluetooth: hci6: command 0x041b tx timeout [ 329.317688] Bluetooth: hci6: command 0x040f tx timeout [ 331.365821] Bluetooth: hci6: command 0x0419 tx timeout [ 338.662931] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 344.039786] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 349.414902] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 349.795068] syz-fuzzer (265) used greatest stack depth: 24384 bytes left 2023/08/16 22:58:14 executor 0 failed 11 times: executor 0: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 [ 351.111056] sshd (244) used greatest stack depth: 24144 bytes left VM DIAGNOSIS: 22:58:14 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=ffffffff85d53070 RCX=ffffffff812ea8fa RDX=0000000000000000 RSI=0000000000000008 RDI=0000000000000000 RBP=1ffff110075b4ed0 RSP=ffff88803ada7670 R8 =0000000000000001 R9 =fffffbfff0baa3e2 R10=ffffffff85d51f17 R11=0000000000000001 R12=ffff88806ce397d8 R13=ffffffff845b044c R14=ffff88803b61d1c0 R15=ffff888008d9b680 RIP=ffffffff812ea9a5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8f49a006c0 CR3=000000003d760000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88806cf09a90 RCX=ffffffff8113c36e RDX=ffff88803a16b680 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffffff8614b4c6 RSP=ffff88806cf09a08 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=ffff888034a87730 R14=ffff888034a87728 R15=ffffffff8614b4ca RIP=ffffffff814d97c8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5d77a12710 CR3=000000003c7cc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000