Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:61949' (ECDSA) to the list of known hosts. 2023/08/17 09:53:56 fuzzer started 2023/08/17 09:53:56 dialing manager at localhost:43643 syzkaller login: [ 100.671418] cgroup: Unknown subsys name 'net' [ 100.825272] cgroup: Unknown subsys name 'rlimit' [ 112.759638] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/17 09:54:10 syscalls: 212 2023/08/17 09:54:10 code coverage: enabled 2023/08/17 09:54:10 comparison tracing: enabled 2023/08/17 09:54:10 extra coverage: enabled 2023/08/17 09:54:10 setuid sandbox: enabled 2023/08/17 09:54:10 namespace sandbox: enabled 2023/08/17 09:54:10 Android sandbox: enabled 2023/08/17 09:54:10 fault injection: enabled 2023/08/17 09:54:10 leak checking: enabled 2023/08/17 09:54:10 net packet injection: enabled 2023/08/17 09:54:10 net device setup: enabled 2023/08/17 09:54:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/17 09:54:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/17 09:54:10 USB emulation: enabled 2023/08/17 09:54:10 hci packet injection: enabled 2023/08/17 09:54:10 wifi device emulation: enabled 2023/08/17 09:54:10 802.15.4 emulation: enabled 2023/08/17 09:54:10 fetching corpus: 0, signal 0/0 (executing program) 2023/08/17 09:54:11 starting 8 fuzzer processes 09:54:11 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000040)={{}, r0, 0x0, @unused=[0x10000, 0x6, 0x7, 0xfffffffffffff000], @subvolid=0x100000000}) r1 = accept(0xffffffffffffffff, &(0x7f0000001040)=@caif=@util, &(0x7f00000010c0)=0x80) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}}, 0x40040) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001280)={{r2}, r0, 0x0, @inherit={0x70, &(0x7f0000001200)={0x0, 0x5, 0x0, 0x8, {0x1, 0x4c7, 0x9, 0xe7e9, 0x9}, [0x2, 0xff, 0x4, 0x7, 0x3]}}, @subvolid=0x3f}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000002280)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000002680)) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000026c0), &(0x7f0000002700)=0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002740)) socketpair(0x1, 0xa, 0x0, &(0x7f0000002b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$802154_dgram(r4, &(0x7f0000002b80)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000002c00)={0x0, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @qipcrtr={0x2a, 0x2, 0x4000}, @nfc={0x27, 0x0, 0x2, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x44, &(0x7f0000002bc0)='vlan1\x00', 0x9, 0x9, 0x2}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000002c80), 0x1) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002cc0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002d00)={{0x0, 0x2, 0x9, 0xbfe1, 0xffffffff, 0x8, 0x1, 0xffffffff, 0x6, 0x0, 0x0, 0xffffffffffffffe0, 0xec, 0x800, 0x1}, 0x20, [0x0, 0x0, 0x0, 0x0]}) eventfd2(0x5, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x101012}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x67, 0x6e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x30}}, 0x10) 09:54:11 executing program 1: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010) setns(0xffffffffffffffff, 0x20000) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_TID={0xc}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, r1, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x37}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dd38fd7e86115a60448b3022360169854f3aa2cc0111fc69"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20044000}, 0x40004) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x18, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@privport}], [{@seclabel}, {@euid_eq}]}}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) pipe2$9p(&(0x7f00000007c0), 0x84000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000800), r5) pipe2$9p(&(0x7f0000000840), 0x4000) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000880)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r5) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000009c0)) 09:54:11 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) r1 = request_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='#$[\x00', r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "949f8b69063354588dbbc922fa4b7d297cccb818194fc52e68b98af38e3b18a67a25133a76672a5325727c94d9a2b55cd61a0c92bf929e55228508d9d25e59c2", 0x10}, 0x48, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x63, 0x32, 0x63, 0x4, 0x32, 0x36, 0x32, 0x32, 0xa5b0e235517b63d9, 0x37, 0x63, 0x30, 0x65, 0x62, 0x31]}, &(0x7f00000002c0)={0x0, "067f15b8217debef2b692817d8cff6920c0a1573e01f30086e0992bba046f1d244c38dde5f6b30e1db8fc15d9efe6dde2e99e977db930bcaee6b32fdf7fc85ad", 0x2b}, 0x48, 0xffffffffffffffff) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2004084, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x80000000}}, {@privport}, {@version_u}, {@cache_fscache}, {@access_client}, {@mmap}], [{@smackfstransmute={'smackfstransmute', 0x3d, '(+'}}, {@subj_role={'subj_role', 0x3d, '$:&%/$'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', 0xee01}}, {@dont_measure}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x2d4}}, {@fsname={'fsname', 0x3d, '\x8f'}}, {@obj_type={'obj_type', 0x3d, ',\''}}, {@hash}]}}) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540)) add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc3}, &(0x7f0000000680)={0x0, "e3bd52afa9f4c6386863e2204007e9c8edbb284c13174f626e6103a6d974612e63f7fcb21023219c015aba3a5b2bdf4fbb972f3aeee9e0be6e0fbac2e4aaa4f5", 0x35}, 0x48, r0) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000700)='})][#\x00', &(0x7f0000000740)) add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840)=0x4) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000880)) inotify_init1(0x80000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000008c0)=0x6, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000b00)=r5) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x40000400) request_key(&(0x7f0000000b80)='blacklist\x00', &(0x7f0000000bc0)={'syz', 0x2}, &(0x7f0000000c00)='fsname', 0xfffffffffffffff8) keyctl$read(0xb, r4, &(0x7f0000000c40)=""/183, 0xb7) [ 114.282780] audit: type=1400 audit(1692266051.406:6): avc: denied { execmem } for pid=269 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:54:11 executing program 3: sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0885}, 0x4000001) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000880) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0xd0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r1, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x20}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4051}, 0x20000002) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000700)=0x1, 0x4) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000880)={{0x0, 0x5, 0x8, 0x2520000000000000, 0x7, 0x3, 0x8000, 0xfff, 0x2, 0x0, 0x0, 0xfffffffffffffff8, 0x5, 0x4}, 0x10, [0x0, 0x0]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) r5 = io_uring_setup(0x5569, &(0x7f0000000a80)={0x0, 0xaff3, 0x0, 0x1, 0x1f4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000b00), 0x1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 09:54:11 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x80) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004000) r1 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000001980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000000400)={0x1514, 0x13, 0x800, 0x70bd25, 0x25dfdbfb, {0x1d, 0x6, 0x4, 0x6, {0x4e21, 0x4e24, [0x3ff, 0xb15a, 0x7a79, 0x2], [0x400, 0xe3d, 0x3, 0x7], 0x0, [0x40, 0x2]}, 0x97e, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "37219fb29808080a832d4338ebe2f7494ae4d6457a4d9b0d778d20c4ce5294c37263afa40f88568cf3027ce2644a7f32eb3ee28df9a0c19c87474bc05c6c519311ed121a88beb3c947b7693a23fb002b2e0b0b0e3dba9711bdb797d7bd2ff3ed47c9a7e21540cf3bc53bb934961c2f88e4647baead0f000965c95fb565ccdd49091b31fa09b285c782d00b2bece0d50c0dce7cddcaa8be898fb55f8ca448b11d6774de9c41f192b5b7d9437616e1cd6ee252eb4fb1526c669881006971fdacf80adb3829891c6ce877ed4373003d8a97a5b5e5cb5106730d73d786d1e3da2de1"}, @INET_DIAG_REQ_BYTECODE={0xc3, 0x1, "f6b6c9e18f1b6a97905e884ae791f000ef27baddfef8412b679ceab4325938abb06f3ce467607445e49a3a2f27da1c1607a464b9b699f8f1bb89f7a26781254c5a4b48a7c37bc0b7c819228c317d46f44f9ae4c466ecc1f255f1124378def2301d22aab81830b7257355181997bd7e231a7d277149d306c9347bed6895066554407f18054900e2a5c67861d2d87af4f0143a253da3f95a903db2cd90756252f08587409cf6b5fcdfc90dca45412bdffccf37242785c93be88f8ee4d60bdfe6"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "34a504b57ba0299e42716738588453e62011595453293960be459a706d89b6e7d343b8bdb2fe434cfb487122a90c946960c2a0414ab347ea33fb2dca2d3f49ea8d0c2420ca330c0158d417e431b90e1a1021001679e61629965baf0b501e5c7646e7bc664ea5c923b74bfc40cd1e9754c0aeb6fd433ac403ec6e175a56d2fdbd7783be14de873085f2f2d3de8bef016684f6641c3ea790e220cb53598d"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "5382750ed92f251e04bb6ed6ec33106b05ab77b7cb30c6872e9eab6ba934b6fe127f60c3ad0f540061b80d39ca1852776839dc1177e7024b7c083da2200743d9c328f0af1d6f03138d0dcf8c5c52214e73dbfadd60cae992c517ef8d62a9c43b13be99efe448997e58b3c4d18f5a6399f1fd45470cb38240a3fd933d887c3c41e139b8a4e80e"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "6c4da02101c6ce303e55aece39a57a18bf554098ad4f182f24b4dbbab75ae29ed58fd5bd41883f12a8424a66cd9b0afc8531f1ef6ef9ccd265dae8c716a4d11ec6e74494b4712addf2acd4b7e5b8bb610a54fd394ea2f91f8f55f3e225ce2d59cfa052b19f1e5d6ce3fdb1e88aa86d7f1dd01c86c2a4898f21d320bb7b136a893d49de3b233e36a76811dbd68d419fd6366178f50640da9f92e846cd2c92576205a22672870921c845d35cae4caa60d0b48acf1b918bc50d8ebedc51e660cca38ee2fa98cbd56c698e0fa0203538c5e7bc137795a38cf5919adfed0410ed8938616872f9b700262f"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "b90dd171ff2a1153cf1dc200a3977bc83a3736e20d7af3afca2e063aff53cee4712c9d682d6a2ecb0c0f5c1d527d065dccffe2fb3dcf269225230f0bfbd1c7f0117fd37a938b39e1b1dd5419aa82be51eff11c978a464398322d90ab7559349f5ab9f20a9f0147b3b476d93a1ef660f14c"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "02e9e3538b82bd0f651718e6dbc4737bd32a5ec5b715961943b7878f3fd13200a8bbb3267d822c0b9970e0d025064589c8075a5fb30e1ca4abd8f396e51876384104dd8c01ffa124fe9015da88603a500f3aa7ba38a63a3a3cacc655aaeeeb59391ba82d5a1235de71a6d45762684d1a40e44599b42ea4dba40eb11acd7f7d401b44c1"}]}, 0x1514}, 0x1, 0x0, 0x0, 0x4044080}, 0x850) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000001b40)={&(0x7f00000019c0), 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x58, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffe, 0x611}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3f}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x18}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004081}, 0x1) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x35}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c801) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001fc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001d00)={0x244, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x350c}, @NL80211_ATTR_IE={0x202, 0x2a, [@ibss={0x6, 0x2, 0x5}, @prep={0x83, 0x1f, @not_ext={{}, 0x7f, 0x4, @device_b, 0xffffffff, "", 0x6, 0xfffffffc, @broadcast, 0x9}}, @random, @random_vendor={0xdd, 0x99, "6779382b96aa406816016e6b2a7f342529cce42083cfae3ed2a2690114b51eb53df38a876b3e3b7a9fb5d4820d42d4ba023a749a2f4a0868a4315a4a96eebafe7a2127b92acc0a247b275593ab470065902e66be6f112a2b09fbc8c1f847d8a9a953923f10f8e736cddbfec9419a424ed533d355b93109fde099b40fd1294d1717f4a42741b35ba6872dc78a54e6a125e30528d3d89ffa6174"}, @mic={0x8c, 0x18, {0x97f, "9a65ffa11806", @long="9d07169470c1beb8fc43c4133c9fa1af"}}, @random_vendor={0xdd, 0xfa, "8016c83e174b75ae7a31c94ca3c7135c6d6e16e5e5d442831543fe85bf379a04a19783923e09604bb8bc2beaa4e88597eccb4c0e7cc0d051116b2a104799122ec29984b5acb0476e1479356abd1c96e4c0f19d3d6c09de17525df7073d7dc5a7ee2dfdd213e1603e9b0fade364ef55e68e7413fbd4819a70ba55ae52f29c345eb4d7e8cb37a8d0ffd46b25fdfe974affdff0f2e0c4df32dbfb8cb27a6c58658d74a0b7a54993212c29552bc6bcce19a6ea9ec625213625897ae7e606627fb8da8f1e50a23bae707c7d4d4d7762a5603e9f0c5feaf932137eafd7ab5a2ce1c980a218eb33bce831b03048a585d24791e89bbe262defed30b3e621"}, @peer_mgmt={0x75, 0x8, {0x0, 0x126, @val=0x1b8f, @val=0x17, @void}}, @ht={0x2d, 0x1a, {0x400, 0x3, 0x7, 0x0, {0x2, 0x7, 0x0, 0x1d6, 0x0, 0x1, 0x0, 0x3}, 0x400, 0x6, 0x3f}}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1092}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xd}}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000014}, 0x40801) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r7, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000884) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0x8c, 0x12, 0x0, 0x70bd29, 0x25dfdbfb, {0x1, 0xe7, 0x6a, 0x4, {0x4e23, 0x4e22, [0x1f, 0x5, 0x3c], [0x54f7, 0x9, 0xfc08, 0x1], 0x0, [0x3, 0x4c]}, 0x6, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "b30e1563d7d82a9833efc2d8cf5896e6152423afc25f46c5fe450fae3d3efba82af3a55f60176cdd26386a"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "5b4cda6498fc8433dc71"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x6008000}, 0x4000004) r8 = accept4(r1, &(0x7f0000002300)=@nl, &(0x7f0000002380)=0x80, 0x800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002400), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x50, r9, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x63}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x800}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4040) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002540)) 09:54:11 executing program 5: bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4f}, @void, @val={0xc, 0x99, {0x8000, 0x27}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6c5276342c5a3969fe9f9e67f4b801ec9942602ddf135e78"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98ee5a327166980846bdbdca96ee45623e6eb5e4c0bb5846"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cac289a2c74a19159444e6dbc818855002a5ab9f9197463f"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40040}, 0x4040000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x40, 0x186a6446908fc80b, 0x1000, 0x10000, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x65, 0x0, 0xf7, 0x4, 0x0, @loopback, @multicast1, {[@end, @timestamp_addr={0x44, 0xc, 0xd2, 0x1, 0x0, [{@remote, 0x9}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000885) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f00000005c0)={0x24, @none={0x0, 0xffff}}, 0x14) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f00000008c0)={{r4}, r6, 0x10, @unused=[0x6e3b, 0x6, 0xffffffff, 0x3f], @devid}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x15c, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x80, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe5d}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x402}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1fffe00}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x20}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_RULES={0xb0, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xef7a}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x30e}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) accept(r3, &(0x7f0000001b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000001bc0)=0x80) r9 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0x40000000) 09:54:11 executing program 6: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "63b2478740d0cb8570f72fa421d675e72c9f27d93b737e60"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x47}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @initdev, @multicast1}, &(0x7f0000000540)=0xc) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1d0, 0x13, 0x2, 0x70bd2a, 0x25dfdbff, {0x1f, 0x0, 0x3f, 0x9, {0x4e23, 0x4e24, [0x1000, 0x3ff, 0x6, 0x401], [0x2, 0x6, 0x10000, 0x2], r3, [0x1ee00, 0x5d5]}, 0x3, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x40, 0x1, "300e63b277898cde70df22006c345a80bb293b678bc9fe5ec24271710f4cabbc4eea51c3be3130f60e764e817102e5bf0820ca504bcff36bd7d2413a"}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "ad3847c2c9263a09a7a0e01cc05d20f95b72145af023e3c7385f7039ca828cb97f064c5eda7e24ce71de2a397b11da6edb17773b553b204d6fd78d424f81e7fea8efaa32dc95ddc30b64c620b852a503fa26c1f8cfe7d97d10794660b7494b8466f54f3e7272656c1547f6d1eb4761ccc347c8266a08a3100c7ad3962b3655c84a6bcee0ab7e06e29d69a8"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "5bf44cd9f9c427c6e34b3804bd8102d500400be7136ddbbca4dbc1eff1bde3e1d0aad323113d55850b542191db079b147f43176f890f26af54df87dad771646dde219c2f09d2c4a9fd00e3a97fbb2ba0c66396a5296f57d0fedf9a9b502a11d825f8dd682447617643c6ac0f625af15d5aa1934532a880c599174f9d51a6b7ce69e1656b9511a0910ab07ada622de26cd2f52f9f641d5915b77cd6de900a34cc6f85494bc5559341ca565fc4e2"}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x404c841}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd06, 0x73}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) r5 = accept4(r4, 0x0, &(0x7f0000000980), 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x4e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x165}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008011}, 0x4) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r2, 0x700, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r6, 0x0, 0x70bd25, 0x304c, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd16, 0x6e}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004050) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x70, r6, 0x108, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7c}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x63}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x480c0) 09:54:11 executing program 7: getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_extract_tcp_res(&(0x7f00000001c0), 0x4, 0x1) socketpair(0x1e, 0xa, 0x6, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @mss={0x2, 0xffffffff}, @timestamp, @mss={0x2, 0x2}, @sack_perm, @mss={0x2, 0x7ff}, @sack_perm, @timestamp], 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='dctcp-reno\x00', 0xb) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c041}, 0x8004) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'erspan0\x00', r1, 0x7820, 0x8, 0x8, 0x7, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x67, 0x0, 0xff, 0x29, 0x0, @private=0xa010100, @empty, {[@cipso={0x86, 0x26, 0x3, [{0x0, 0xb, "02fe0872991c2da8ac"}, {0x7, 0xa, "90554b7eed9bb9fe"}, {0x6, 0xb, "86c329895081f8a31a"}]}, @rr={0x7, 0x13, 0xed, [@remote, @private=0xa010100, @multicast1, @loopback]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc}]}, 0x5c}}, 0x8000000) r7 = accept(r3, &(0x7f0000000640)=@l2={0x1f, 0x0, @none}, &(0x7f00000006c0)=0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xdbe53fa9a00771a0}, 0x80) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4000090) [ 115.569747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.573622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.577112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.581086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.583174] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.584722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.779279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.781141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.782804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.789290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.791523] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 115.793511] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.836709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.840591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.842938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.844576] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.845791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.849524] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.861037] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.863116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.864816] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.869498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.871720] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 115.874740] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.878666] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.886107] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.886297] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.888513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.890169] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.892859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.896600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.911606] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.916012] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.917130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.932845] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 115.938919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.664074] Bluetooth: hci0: command 0x0409 tx timeout [ 117.793062] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 117.855335] Bluetooth: hci4: command 0x0409 tx timeout [ 117.856839] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 117.983760] Bluetooth: hci3: command 0x0409 tx timeout [ 117.984510] Bluetooth: hci7: command 0x0409 tx timeout [ 117.985036] Bluetooth: hci2: command 0x0409 tx timeout [ 118.111639] Bluetooth: hci6: command 0x0409 tx timeout [ 119.712241] Bluetooth: hci0: command 0x041b tx timeout [ 119.903960] Bluetooth: hci4: command 0x041b tx timeout [ 120.031796] Bluetooth: hci7: command 0x041b tx timeout [ 120.031837] Bluetooth: hci2: command 0x041b tx timeout [ 120.032580] Bluetooth: hci3: command 0x041b tx timeout [ 120.159292] Bluetooth: hci6: command 0x041b tx timeout [ 121.759302] Bluetooth: hci0: command 0x040f tx timeout [ 121.952300] Bluetooth: hci4: command 0x040f tx timeout [ 122.079365] Bluetooth: hci3: command 0x040f tx timeout [ 122.080020] Bluetooth: hci2: command 0x040f tx timeout [ 122.080853] Bluetooth: hci7: command 0x040f tx timeout [ 122.207288] Bluetooth: hci6: command 0x040f tx timeout [ 123.488304] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 123.553886] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 123.809251] Bluetooth: hci0: command 0x0419 tx timeout [ 123.999503] Bluetooth: hci4: command 0x0419 tx timeout [ 124.127303] Bluetooth: hci2: command 0x0419 tx timeout [ 124.127686] Bluetooth: hci3: command 0x0419 tx timeout [ 124.127855] Bluetooth: hci7: command 0x0419 tx timeout [ 124.255273] Bluetooth: hci6: command 0x0419 tx timeout [ 127.246489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.256407] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.264704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.369821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.379700] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 127.380987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.376274] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 129.503529] Bluetooth: hci1: command 0x0409 tx timeout [ 131.551262] Bluetooth: hci1: command 0x041b tx timeout [ 133.599990] Bluetooth: hci1: command 0x040f tx timeout [ 134.432636] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 135.647299] Bluetooth: hci1: command 0x0419 tx timeout [ 137.756384] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.762711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.771155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.800624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.858391] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.931065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.999607] Bluetooth: hci5: command 0x0409 tx timeout [ 142.048736] Bluetooth: hci5: command 0x041b tx timeout [ 144.095338] Bluetooth: hci5: command 0x040f tx timeout [ 146.143690] Bluetooth: hci5: command 0x0419 tx timeout [ 178.500900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.508889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.513842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.518710] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.523163] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.525944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.383298] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 180.447361] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 180.575318] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 180.639362] Bluetooth: hci3: command 0x0409 tx timeout [ 180.703359] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 180.831549] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 182.687275] Bluetooth: hci3: command 0x041b tx timeout [ 183.995558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.999659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.005468] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.010022] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.014883] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 184.017493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.215749] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 184.218273] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 184.246653] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 184.258392] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 184.264998] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 184.283681] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 184.735276] Bluetooth: hci3: command 0x040f tx timeout [ 185.375309] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 186.079612] Bluetooth: hci2: command 0x0409 tx timeout [ 186.079865] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 186.143339] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 186.399626] Bluetooth: hci7: command 0x0409 tx timeout [ 186.783911] Bluetooth: hci3: command 0x0419 tx timeout [ 188.127310] Bluetooth: hci2: command 0x041b tx timeout [ 188.367504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.398176] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.412783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.443474] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.447323] Bluetooth: hci7: command 0x041b tx timeout [ 188.469730] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.473697] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.405865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.415841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.420925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.427995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.433096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 189.435132] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.175317] Bluetooth: hci2: command 0x040f tx timeout [ 190.495726] Bluetooth: hci7: command 0x040f tx timeout [ 190.559320] Bluetooth: hci0: command 0x0409 tx timeout [ 190.879921] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 191.519468] Bluetooth: hci4: command 0x0409 tx timeout [ 191.583399] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 192.224723] Bluetooth: hci2: command 0x0419 tx timeout [ 192.544794] Bluetooth: hci7: command 0x0419 tx timeout [ 192.609862] Bluetooth: hci0: command 0x041b tx timeout [ 193.567844] Bluetooth: hci4: command 0x041b tx timeout [ 193.879265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.892714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.905693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.942604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.949853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.982613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.657243] Bluetooth: hci0: command 0x040f tx timeout [ 194.708617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.724627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.734661] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.758626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.773708] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 194.795705] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.616451] Bluetooth: hci4: command 0x040f tx timeout [ 196.063682] Bluetooth: hci1: command 0x0409 tx timeout [ 196.703332] Bluetooth: hci0: command 0x0419 tx timeout [ 196.898736] Bluetooth: hci6: command 0x0409 tx timeout [ 197.663268] Bluetooth: hci4: command 0x0419 tx timeout [ 198.111333] Bluetooth: hci1: command 0x041b tx timeout [ 198.943607] Bluetooth: hci6: command 0x041b tx timeout [ 200.160406] Bluetooth: hci1: command 0x040f tx timeout [ 200.992296] Bluetooth: hci6: command 0x040f tx timeout [ 201.759543] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 202.207327] Bluetooth: hci1: command 0x0419 tx timeout [ 203.039555] Bluetooth: hci6: command 0x0419 tx timeout [ 206.943497] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 212.191357] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 215.326613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.357933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.366853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.401151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.421849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.433865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.569323] Bluetooth: hci5: command 0x0409 tx timeout [ 219.615274] Bluetooth: hci5: command 0x041b tx timeout [ 221.663270] Bluetooth: hci5: command 0x040f tx timeout [ 223.711460] Bluetooth: hci5: command 0x0419 tx timeout [ 242.655789] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 245.976093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.981970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.983964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.020700] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.052441] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 246.055807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.295168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.300563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.301916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.312827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.357683] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 246.358961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.377761] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 246.405933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 246.458975] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 246.483188] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.504785] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 246.549646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 248.160354] Bluetooth: hci2: command 0x0409 tx timeout [ 248.416291] Bluetooth: hci3: command 0x0409 tx timeout [ 248.671419] Bluetooth: hci7: command 0x0409 tx timeout [ 250.208335] Bluetooth: hci2: command 0x041b tx timeout [ 250.464270] Bluetooth: hci3: command 0x041b tx timeout [ 250.720276] Bluetooth: hci7: command 0x041b tx timeout [ 252.256444] Bluetooth: hci2: command 0x040f tx timeout [ 252.512318] Bluetooth: hci3: command 0x040f tx timeout [ 252.767477] Bluetooth: hci7: command 0x040f tx timeout [ 253.279594] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 253.601582] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 254.304258] Bluetooth: hci2: command 0x0419 tx timeout [ 254.559331] Bluetooth: hci3: command 0x0419 tx timeout [ 254.816310] Bluetooth: hci7: command 0x0419 tx timeout [ 255.524331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.544623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.548625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.571706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.613650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.620665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.093146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.100669] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.110164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.149369] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.155831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 257.157667] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.695332] Bluetooth: hci0: command 0x0409 tx timeout [ 258.783847] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 259.103315] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 259.232609] Bluetooth: hci4: command 0x0409 tx timeout [ 259.744503] Bluetooth: hci0: command 0x041b tx timeout [ 261.280354] Bluetooth: hci4: command 0x041b tx timeout [ 261.792415] Bluetooth: hci0: command 0x040f tx timeout [ 263.328287] Bluetooth: hci4: command 0x040f tx timeout [ 263.839296] Bluetooth: hci0: command 0x0419 tx timeout [ 264.031433] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 264.351677] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 265.375506] Bluetooth: hci4: command 0x0419 tx timeout [ 267.253197] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.256929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.258587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.296408] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.329649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 267.331059] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.731652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 267.744606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 267.751788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 267.779656] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 267.782585] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 267.787575] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.409676] Bluetooth: hci1: command 0x0409 tx timeout [ 269.855371] Bluetooth: hci6: command 0x0409 tx timeout [ 271.455554] Bluetooth: hci1: command 0x041b tx timeout [ 271.903622] Bluetooth: hci6: command 0x041b tx timeout [ 273.503463] Bluetooth: hci1: command 0x040f tx timeout [ 273.951299] Bluetooth: hci6: command 0x040f tx timeout [ 275.553275] Bluetooth: hci1: command 0x0419 tx timeout [ 275.999278] Bluetooth: hci6: command 0x0419 tx timeout [ 277.972924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.996081] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.002188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.009763] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.073746] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.075950] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.159404] Bluetooth: hci5: command 0x0409 tx timeout [ 282.207714] Bluetooth: hci5: command 0x041b tx timeout [ 284.255821] Bluetooth: hci5: command 0x040f tx timeout [ 286.305277] Bluetooth: hci5: command 0x0419 tx timeout [ 308.143077] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.154867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.170838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.193709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.210890] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 308.216679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.673991] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.695411] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.697013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.747670] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.759663] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.762063] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.303359] Bluetooth: hci2: command 0x0409 tx timeout [ 310.820288] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 310.943420] Bluetooth: hci3: command 0x0409 tx timeout [ 312.352496] Bluetooth: hci2: command 0x041b tx timeout [ 312.991690] Bluetooth: hci3: command 0x041b tx timeout [ 314.399300] Bluetooth: hci2: command 0x040f tx timeout [ 315.039267] Bluetooth: hci3: command 0x040f tx timeout [ 316.002263] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 316.447298] Bluetooth: hci2: command 0x0419 tx timeout [ 317.087291] Bluetooth: hci3: command 0x0419 tx timeout [ 318.336533] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.354132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.356394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.391812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.422665] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 318.428619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.313703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.322925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.326907] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.334433] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.365773] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 319.368182] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.841518] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 320.544349] Bluetooth: hci4: command 0x0409 tx timeout [ 321.440542] Bluetooth: hci7: command 0x0409 tx timeout [ 322.593241] Bluetooth: hci4: command 0x041b tx timeout [ 322.706093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.709402] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.713481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.741568] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.747374] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 322.755566] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.488502] Bluetooth: hci7: command 0x041b tx timeout [ 324.640505] Bluetooth: hci4: command 0x040f tx timeout [ 324.832854] Bluetooth: hci0: command 0x0409 tx timeout [ 325.535499] Bluetooth: hci7: command 0x040f tx timeout [ 326.688304] Bluetooth: hci4: command 0x0419 tx timeout [ 326.882263] Bluetooth: hci0: command 0x041b tx timeout [ 327.584245] Bluetooth: hci7: command 0x0419 tx timeout [ 328.928247] Bluetooth: hci0: command 0x040f tx timeout [ 329.220945] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 329.226647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 329.229723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 329.250655] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 329.256471] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 329.258613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 330.592273] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 330.976071] Bluetooth: hci0: command 0x0419 tx timeout [ 331.295292] Bluetooth: hci6: command 0x0409 tx timeout [ 333.343478] Bluetooth: hci6: command 0x041b tx timeout [ 335.392515] Bluetooth: hci6: command 0x040f tx timeout [ 335.712408] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 337.445809] Bluetooth: hci6: command 0x0419 tx timeout [ 339.666915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.675790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.696692] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.719110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.722510] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.723663] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.640676] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 341.792285] Bluetooth: hci5: command 0x0409 tx timeout [ 343.839334] Bluetooth: hci5: command 0x041b tx timeout [ 345.887662] Bluetooth: hci5: command 0x040f tx timeout [ 346.208265] Bluetooth: hci1: Opcode 0x c03 failed: -110 2023/08/17 09:58:03 executor 4 failed 11 times: executor 4: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 VM DIAGNOSIS: 09:58:03 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=ffff88802db177f8 RCX=0000000000000000 RDX=1ffff11005b62f01 RSI=ffffffff8113b471 RDI=ffff88802db17808 RBP=ffff88802db17e80 RSP=ffff88802db17730 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000008 R13=ffff88802db10000 R14=ffff88802db18000 R15=ffffffff861664a6 RIP=ffffffff814d9c8b RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6d538028e0 CR3=0000000026a6e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff8880287e7828 RCX=0000000000000000 RDX=ffff88801bc90000 RSI=ffffffff8113d386 RDI=ffff8880287e7838 RBP=ffff8880287e7e18 RSP=ffff8880287e77a0 R8 =0000000000000004 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=ffff8880287e0000 R13=ffff8880287e8000 R14=ffff8880287e7e20 R15=0000000000000001 RIP=ffffffff814d9cbb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f32f258f028 CR3=000000003426a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000