Warning: Permanently added '[localhost]:3330' (ECDSA) to the list of known hosts. 2023/08/20 03:58:15 fuzzer started 2023/08/20 03:58:16 dialing manager at localhost:46849 syzkaller login: [ 110.059803] cgroup: Unknown subsys name 'net' [ 110.232472] cgroup: Unknown subsys name 'rlimit' [ 122.087824] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/20 03:58:29 syscalls: 201 2023/08/20 03:58:29 code coverage: enabled 2023/08/20 03:58:29 comparison tracing: enabled 2023/08/20 03:58:29 extra coverage: enabled 2023/08/20 03:58:29 setuid sandbox: enabled 2023/08/20 03:58:29 namespace sandbox: enabled 2023/08/20 03:58:29 Android sandbox: enabled 2023/08/20 03:58:29 fault injection: enabled 2023/08/20 03:58:29 leak checking: enabled 2023/08/20 03:58:29 net packet injection: enabled 2023/08/20 03:58:29 net device setup: enabled 2023/08/20 03:58:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/20 03:58:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/20 03:58:29 USB emulation: enabled 2023/08/20 03:58:29 hci packet injection: enabled 2023/08/20 03:58:29 wifi device emulation: enabled 2023/08/20 03:58:29 802.15.4 emulation: enabled 2023/08/20 03:58:29 fetching corpus: 0, signal 0/0 (executing program) 2023/08/20 03:58:30 starting 8 fuzzer processes 03:58:30 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x9f, 0xff, @buffer={0x0, 0x8f, &(0x7f00000000c0)=""/143}, &(0x7f0000000180)="6a17a8fac2d01e08ba8c5603725cd6915be423622368606b34b9caf5fa65107d911a3e04ac1c1e9a7b0b6a4840866b8f31aaa882b9f32357d509fc3d9057b6560041494205c3e40ffc3726a281527df7cb336d4def5796f56722776b42b7d7de54d284c78a3cdc873cdad7b1dec9e8c22e60b67536e29443b11b658ab1fba8c4714d9c81797bbc0a8e0a6c0002fabba93a2220ffeb79a01023ef0bc351b2d6", &(0x7f0000000240)=""/67, 0x548, 0x0, 0x2, &(0x7f00000002c0)}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000380)={0x1, 0x0, [0x0]}) r2 = perf_event_open$cgroup(&(0x7f0000000480)={0x2, 0x80, 0x91, 0x8, 0x6, 0x26, 0x0, 0x4, 0x80048, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000440), 0x2}, 0x20, 0xf03, 0x4, 0x5, 0x80000000, 0x200, 0x2, 0x0, 0x8000, 0x0, 0x2}, r1, 0x5, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x40, 0x2, 0x81, 0xf7, 0x0, 0x9, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x2dbc5ed9, 0x5a2}, 0x450, 0xffffffffffffff01, 0x3, 0x6, 0x3, 0x6, 0x8000, 0x0, 0x80000001, 0x0, 0x40d}, 0x0, 0x2, r2, 0x0) syz_open_dev$sg(&(0x7f0000000500), 0xfffffffffffffff7, 0x40) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x200201, 0x0) io_cancel(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000540)="d24a799b7b597ec9d9e3bdeb19ef55a081a7f01cabc71b48dcbf4dab2301204f9d7f7db5cb2ea21577b97dee3ff29aa5f8afed0fa15a8c6d059fe482134cda761fdb94de3c3dd7588d35417c8ccfd9845f62f1a1f39e96df668037fc4c8678531ddea8e4674f49c51db56a61aaec61a67509a62abcaa76c50f572bb9b2b81aae1455edb2486624e1631ff05322d58b52dd01c3941cb0", 0x96, 0x7, 0x0, 0x2, r4}, &(0x7f0000000680)) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000006c0)={0x7, 0x8}) prctl$PR_SET_SECUREBITS(0x1c, 0x30) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000700)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x442240, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000780)='@!,^\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r6) 03:58:30 executing program 1: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/238, 0xee}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/137, 0x89}], 0x3, &(0x7f00000003c0)=""/17, 0x11}, 0x76}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f00000004c0)=""/232, 0xe8}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/120, 0x78}, {&(0x7f0000000680)=""/104, 0x68}], 0x5, &(0x7f0000000780)=""/120, 0x78}, 0x9}, {{&(0x7f0000000800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/76, 0x4c}, {&(0x7f0000000900)=""/1, 0x1}, {&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000a40)=""/92, 0x5c}], 0x4, &(0x7f0000000b00)=""/184, 0xb8}, 0x401}, {{&(0x7f0000000bc0)=@tipc, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c40)=""/117, 0x75}, {&(0x7f0000000cc0)=""/31, 0x1f}], 0x2, &(0x7f0000000d40)=""/114, 0x72}, 0x10000}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000dc0)=""/46, 0x2e}, {&(0x7f0000000e00)=""/143, 0x8f}, {&(0x7f0000000ec0)=""/168, 0xa8}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)=""/55, 0x37}], 0x5}, 0xb47}], 0x5, 0x20010000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000007840)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000007ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000008180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000008140)={&(0x7f0000007b00)={0x618, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r1}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x19}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x48}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1cc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r6}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x618}, 0x1, 0x0, 0x0, 0x40000}, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f00000081c0), 0x800, 0x0) recvmmsg(r0, &(0x7f000000a280)=[{{&(0x7f0000008240)=@rc={0x1f, @none}, 0x80, &(0x7f0000008300)=[{&(0x7f00000082c0)=""/28, 0x1c}], 0x1, &(0x7f0000008340)=""/131, 0x83}, 0x2}, {{&(0x7f0000008400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000009540)=[{&(0x7f0000008480)=""/163, 0xa3}, {&(0x7f0000008540)=""/4096, 0x1000}], 0x2, &(0x7f0000009580)=""/173, 0xad}, 0x9}, {{&(0x7f0000009640)=@sco={0x1f, @none}, 0x80, &(0x7f0000009b00)=[{&(0x7f00000096c0)=""/64, 0x40}, {&(0x7f0000009700)=""/221, 0xdd}, {&(0x7f0000009800)=""/42, 0x2a}, {&(0x7f0000009840)=""/181, 0xb5}, {&(0x7f0000009900)=""/73, 0x49}, {&(0x7f0000009980)=""/163, 0xa3}, {&(0x7f0000009a40)=""/135, 0x87}], 0x7}}, {{&(0x7f0000009b80)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f000000a140)=[{&(0x7f0000009c00)=""/128, 0x80}, {&(0x7f0000009c80)=""/167, 0xa7}, {&(0x7f0000009d40)=""/78, 0x4e}, {&(0x7f0000009dc0)=""/124, 0x7c}, {&(0x7f0000009e40)=""/194, 0xc2}, {&(0x7f0000009f40)=""/212, 0xd4}, {&(0x7f000000a040)=""/223, 0xdf}], 0x7, &(0x7f000000a1c0)=""/150, 0x96}, 0x3ff}], 0x4, 0x42, &(0x7f000000a380)={0x0, 0x989680}) syz_genetlink_get_family_id$mptcp(&(0x7f0000008200), r7) r8 = syz_genetlink_get_family_id$batadv(&(0x7f000000a400), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f000000a500)={&(0x7f000000a3c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000a4c0)={&(0x7f000000a440)={0x64, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffff7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f000000a600)={&(0x7f000000a540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000a5c0)={&(0x7f000000a580)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) syz_open_dev$evdev(&(0x7f000000a640), 0xffff, 0x3837a27f0cddbaa2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f000000a680)={'batadv_slave_1\x00'}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f000000a6c0)={'wlan1\x00'}) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r10, &(0x7f000000fec0)=[{{&(0x7f000000be40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f000000e3c0)=[{&(0x7f000000bec0)=""/124, 0x7c}, {&(0x7f000000bf40)=""/138, 0x8a}, {&(0x7f000000c000)=""/128, 0x80}, {&(0x7f000000c080)=""/110, 0x6e}, {&(0x7f000000c100)=""/182, 0xb6}, {&(0x7f000000c1c0)=""/236, 0xec}, {&(0x7f000000c2c0)=""/4096, 0x1000}, {&(0x7f000000d2c0)=""/199, 0xc7}, {&(0x7f000000d3c0)=""/4096, 0x1000}], 0x9, &(0x7f000000e480)=""/95, 0x5f}, 0x7ff}, {{&(0x7f000000e500)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f000000e740)=[{&(0x7f000000e580)=""/40, 0x28}, {&(0x7f000000e5c0)=""/230, 0xe6}, {&(0x7f000000e6c0)=""/55, 0x37}, {&(0x7f000000e700)=""/5, 0x5}], 0x4, &(0x7f000000e780)=""/23, 0x17}, 0x42413999}, {{0x0, 0x0, &(0x7f000000e800)=[{&(0x7f000000e7c0)}], 0x1, &(0x7f000000e840)=""/232, 0xe8}, 0x10000}, {{&(0x7f000000e940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f000000fe40)=[{&(0x7f000000e9c0)=""/155, 0x9b}, {&(0x7f000000ea80)=""/63, 0x3f}, {&(0x7f000000eac0)=""/4096, 0x1000}, {&(0x7f000000fac0)=""/156, 0x9c}, {&(0x7f000000fb80)=""/87, 0x57}, {&(0x7f000000fc00)=""/121, 0x79}, {&(0x7f000000fc80)=""/171, 0xab}, {&(0x7f000000fd40)=""/209, 0xd1}], 0x8}, 0x4}], 0x4, 0x12100, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) 03:58:30 executing program 2: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14}]}, 0x68}}, 0x20000800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40845) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044004}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'vxcan0\x00', 0x0}) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001600)=0x14, 0x80c00) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000006240)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000006280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000000aa80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000b480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000b440)={&(0x7f000000aac0)={0x964, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x7, 0x23, 0x3}, {0x9ed, 0x0, 0x7, 0x5}, {0x1, 0x20, 0xff, 0x8a4}, {0x20, 0x9, 0x0, 0x1}]}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x2, 0x3f, 0x1}, {0x0, 0x7f, 0x3f, 0x4}, {0x377, 0xfa, 0x33, 0x27}, {0x3, 0x9, 0x4, 0x5}, {0xf64, 0x16, 0xd7, 0xffffffff}, {0x7f, 0x7, 0xff, 0x4}, {0x4, 0xf3, 0xfa, 0x1}, {0x6, 0x5, 0xc2, 0x2}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f352216}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3370, 0x7, 0x2, 0xb99fd39e}, {0x9f, 0x8, 0xf9, 0x401}, {0x0, 0x6c, 0x6, 0xfdb}, {0x1f, 0x0, 0x1, 0x4}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r7}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x7f, 0x80, 0x5f86}, {0xff, 0x99, 0x9, 0x8}, {0x0, 0x6, 0xfc, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000050}, 0x40000) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_INFO(r9, 0x0, 0x481, &(0x7f000000b4c0), &(0x7f000000b500)=0xc) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f000000b540), &(0x7f000000b580)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f000000b5c0)={'wlan1\x00'}) setsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f000000b600)={0x77359400}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f000000b640), 0x40000, 0x0) socketpair(0x29, 0xa, 0x80000000, &(0x7f000000b680)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f000000b780)={&(0x7f000000b6c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000b740)={&(0x7f000000b700)={0x24, r0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004044) 03:58:30 executing program 3: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x8000, 0x34f, 0x7, 0x8}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x80000001) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000080)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x9, 0x40, 0x0, 0x7, 0x2}}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000100)) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)={0x1f, "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"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0x17) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x4002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000440)={0x9, 0x3ff, 0x3f}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000580)=[@enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x100}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}, @exit_looper], 0xc4, 0x0, &(0x7f0000000600)="dc8536ed3b0ea4476724750710100298ad0d6b6ab6396138adedd128a77c609bdbf431096be0000138e8154dc40e701d496ba62f6dc75c40d31e9b89c44507a28454085af12bce59f2e32fc287b8bf6a6f1e3fe934a7a4334718ff38e0790fb218e2d9af833a7288be89c0c8aba1adff018cb57b462082783eea1a4c98dc85c12fa7fa835e68c2fa397711bd3dc1c0d17f9c9b3341b8fd4d404c49a4868e8886fc798484856cc95579aea9ad6275fd7b4fb03ef8e63afdea9fd379ebe9e3c9c4c765d355"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{&(0x7f0000000780)=@ieee802154, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/89, 0x59}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/86, 0x56}, {&(0x7f0000001900)=""/181, 0xb5}, {&(0x7f00000019c0)=""/243, 0xf3}, {&(0x7f0000001ac0)=""/176, 0xb0}], 0x6, &(0x7f0000001c00)=""/58, 0x3a}, 0x4}, {{&(0x7f0000001c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001cc0)=""/33, 0x21}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/37, 0x25}, {&(0x7f0000002d40)=""/85, 0x55}, {&(0x7f0000002dc0)}], 0x5}, 0xffffffff}, {{&(0x7f0000002e80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002f00)=""/197, 0xc5}, {&(0x7f0000003000)=""/215, 0xd7}, {&(0x7f0000003100)=""/72, 0x48}, {&(0x7f0000003180)=""/154, 0x9a}], 0x4, &(0x7f0000003280)=""/241, 0xf1}, 0xe0e4}], 0x3, 0x2040, &(0x7f0000003440)) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f00000034c0)={0x0, @can, @sco, @hci={0x1f, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x7, &(0x7f0000003480)='veth1_vlan\x00', 0x5, 0x1000, 0x1}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000003540)=0x6) [ 123.964874] audit: type=1400 audit(1692503910.999:6): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:58:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x80000000) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x2, {{0xa, 0x4e24, 0x6, @empty, 0x1}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x8000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}}]}, 0x110) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x7, {{0xa, 0x4e20, 0x34, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, 0x1, 0x2, [{{0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}, {{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}]}, 0x190) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000300)={0x1f, @none}, 0x8) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9bd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x22000043) getsockname(r0, &(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)={0x454, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0xec, 0x40, 0x101}, {0x160, 0x5, 0x80}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r1}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf1c8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xeacef0d}}}]}}]}, 0x454}, 0x1, 0x0, 0x0, 0x800}, 0x4001) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000e40)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000e80)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000ec0)={'vcan0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000f80)=@x25={0x9, @remote}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)=""/227, 0xe3}], 0x1}, 0x3}, {{&(0x7f0000001140)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001200)=[{&(0x7f00000011c0)=""/44, 0x2c}], 0x1, &(0x7f0000001240)=""/10, 0xa}, 0x8}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001280)=""/76, 0x4c}, {&(0x7f0000001300)=""/44, 0x2c}], 0x2, &(0x7f0000001380)=""/214, 0xd6}}, {{&(0x7f0000001480)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001500)=""/223, 0xdf}, {&(0x7f0000001600)=""/26, 0x1a}, {&(0x7f0000001640)=""/143, 0x8f}, {&(0x7f0000001700)=""/56, 0x38}, {&(0x7f0000001740)=""/138, 0x8a}, {&(0x7f0000001800)=""/96, 0x60}], 0x6, &(0x7f0000001900)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002900)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002980)=""/220, 0xdc}, {&(0x7f0000002a80)=""/22, 0x16}, {&(0x7f0000002ac0)=""/226, 0xe2}, {&(0x7f0000002bc0)=""/206, 0xce}, {&(0x7f0000002cc0)=""/194, 0xc2}, {&(0x7f0000002dc0)=""/75, 0x4b}, {&(0x7f0000002e40)=""/56, 0x38}, {&(0x7f0000002e80)=""/49, 0x31}], 0x8, &(0x7f0000002f40)=""/21, 0x15}}], 0x5, 0x2080, &(0x7f00000030c0)) accept4$packet(0xffffffffffffffff, &(0x7f0000004340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004380)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000043c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000004580)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000004680)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000046c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000005500)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000054c0)={&(0x7f0000004940)={0xb70, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x110, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x101, 0xfd, 0xfa, 0x2}, {0x5, 0xb4, 0x8, 0x1}, {0x2, 0x9, 0xf2, 0x9}, {0x3ff, 0x0, 0x80, 0x7}, {0x8000, 0x8, 0x0, 0x5}]}}}]}}, {{0x8, 0x1, r1}, {0x268, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff, 0x81, 0x3f, 0x3}, {0x2, 0x8, 0x7, 0x3}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r1}, {0x240, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x8, 0x5, 0xffffffc1}, {0x7, 0x5, 0xe8, 0x3}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff6c65}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r1}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r1}, {0x248, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x0, 0x3f, 0xa8d}, {0x4, 0xff, 0x6, 0xf3000000}, {0x9, 0x1, 0x80, 0x4}, {0x1, 0x7f, 0x0, 0x1000}, {0x200, 0x0, 0x3, 0xfffffff7}, {0x7, 0xfd, 0xa1, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xae}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x40, 0x5, 0xff, 0x2}, {0x81, 0x2, 0x0, 0xc1}, {0x6, 0x4f, 0x6d, 0x2}, {0x0, 0x5, 0xe0, 0x5}, {0x7fff, 0x9c, 0x5, 0x1000}, {0x1f, 0xff, 0x9, 0x2}, {0x200, 0x81, 0x3f, 0xfff}, {0xfff, 0x95, 0x8, 0xa71}, {0x0, 0x1, 0x1, 0x4}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe82}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r1}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x937c}}}]}}]}, 0xb70}, 0x1, 0x0, 0x0, 0x10}, 0x40089) 03:58:31 executing program 5: socketpair(0x18, 0x5, 0x7, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x34040891) r2 = perf_event_open$cgroup(&(0x7f0000001b80)={0x4, 0x80, 0x7f, 0x1, 0x3f, 0x4, 0x0, 0x9, 0x10, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000001b40), 0x2}, 0x80, 0x401, 0x26165511, 0x1, 0x2, 0x40, 0x20, 0x0, 0x7ff, 0x0, 0x7}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7d}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff0001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4c1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000001d40)={0x4, 0x80, 0xff, 0x6b, 0xf8, 0x1, 0x0, 0x4, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xd4, 0x1}, 0x10400, 0x7, 0x8, 0x6, 0x6, 0x5433, 0xf8, 0x0, 0x81, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7f) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001e80), 0x2e080, 0x0) perf_event_open$cgroup(&(0x7f0000001e00)={0x3, 0x80, 0x4, 0x81, 0x5, 0x3, 0x0, 0x1, 0x80112, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffe00, 0x0, @perf_bp={&(0x7f0000001dc0)}, 0x40c0, 0x3, 0x1, 0x3, 0x7, 0x7fff, 0x7, 0x0, 0x4, 0x0, 0xfff}, r3, 0x6, 0xffffffffffffffff, 0xf) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000004000), 0x181000, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4015}, 0x28004815) r5 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, &(0x7f0000004140)) r6 = socket$inet6(0xa, 0x2, 0x10000) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000004180), &(0x7f00000041c0)=0x8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000042c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000004240)={0x0, 0x80, 0x9, 0xe7, 0x11, 0x64, 0x0, 0x101, 0x301, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000004200), 0x3}, 0x9, 0x100, 0x80000000, 0x0, 0x1, 0x10001, 0x2, 0x0, 0x1, 0x0, 0xffffffffffffffff}, r7, 0xa, r2, 0x828ab0f1e03a84a3) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000004300)=0xfff, 0x4) ptrace$pokeuser(0x6, 0x0, 0x5, 0xffffffffffffffff) 03:58:31 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff801}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x84) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@phonet, &(0x7f0000000240)=0x80) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x200}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24020050}, 0x200800d0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000800), 0x101000, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r1, 0x90a49354c1c7507b, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x48000) getpeername(r0, &(0x7f0000000980)=@rc, &(0x7f0000000a00)=0x80) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) read$ptp(r5, &(0x7f0000000a80)=""/4096, 0x1000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r6, &(0x7f0000001d40)={&(0x7f0000001a80)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b00)=""/57, 0x39}, {&(0x7f0000001b40)=""/81, 0x51}, {&(0x7f0000001bc0)=""/239, 0xef}], 0x3, &(0x7f0000001d00)=""/62, 0x3e}, 0x60) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000001d80)={0x385, 0xc}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) syz_open_pts(r4, 0x400000) 03:58:31 executing program 7: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff090c}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x48004) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000014c0)={0x3}) getsockname(r0, &(0x7f00000015c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, &(0x7f0000001640)=0x80) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x92000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x64, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x85b}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) clock_gettime(0x0, &(0x7f0000003600)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003540)=[{{&(0x7f00000018c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/223, 0xdf}, {&(0x7f0000001a40)=""/11, 0xb}], 0x2, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002ac0)=@alg, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002b40)=""/110, 0x6e}, {&(0x7f0000002bc0)=""/126, 0x7e}, {&(0x7f0000002c40)=""/145, 0x91}, {&(0x7f0000002d00)=""/19, 0x13}, {&(0x7f0000002d40)=""/234, 0xea}, {&(0x7f0000002e40)=""/15, 0xf}], 0x6, &(0x7f0000002f00)=""/35, 0x23}, 0x6}, {{&(0x7f0000002f40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002fc0)=""/44, 0x2c}, {&(0x7f0000003000)=""/72, 0x48}, {&(0x7f0000003080)=""/8, 0x8}, {&(0x7f00000030c0)=""/76, 0x4c}, {&(0x7f0000003140)=""/173, 0xad}, {&(0x7f0000003200)=""/254, 0xfe}, {&(0x7f0000003300)=""/127, 0x7f}, {&(0x7f0000003380)=""/40, 0x28}, {&(0x7f00000033c0)=""/61, 0x3d}], 0x9, &(0x7f00000034c0)=""/74, 0x4a}, 0x8}], 0x3, 0x21, &(0x7f0000003640)={r2, r3+60000000}) read$ptp(r4, &(0x7f0000003680)=""/103, 0x67) syz_genetlink_get_family_id$nl80211(&(0x7f0000003700), r1) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000003740)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000003780), 0x105501, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7fffffff) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) r8 = syz_open_pts(r7, 0x1) ioctl$PIO_FONTRESET(r8, 0x4b6d, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000003800)=""/173, 0xad) [ 125.400204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.404713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.411018] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.419752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.425695] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 125.429752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.475005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.489434] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.494551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.515845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.520997] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 125.524771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.597058] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 125.604216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 125.618734] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 125.632813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.643112] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 125.654953] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 125.657574] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 125.659759] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.693498] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.723452] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.733577] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 125.750848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.351402] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 127.478650] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 127.478720] Bluetooth: hci1: command 0x0409 tx timeout [ 127.541657] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 127.605728] Bluetooth: hci2: command 0x0409 tx timeout [ 127.605798] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 127.734890] Bluetooth: hci6: command 0x0409 tx timeout [ 127.798401] Bluetooth: hci5: command 0x0409 tx timeout [ 129.526363] Bluetooth: hci1: command 0x041b tx timeout [ 129.653355] Bluetooth: hci2: command 0x041b tx timeout [ 129.781342] Bluetooth: hci6: command 0x041b tx timeout [ 129.846319] Bluetooth: hci5: command 0x041b tx timeout [ 131.037094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.040173] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.041818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.049556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.051489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 131.053356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.575287] Bluetooth: hci1: command 0x040f tx timeout [ 131.701523] Bluetooth: hci2: command 0x040f tx timeout [ 131.830660] Bluetooth: hci6: command 0x040f tx timeout [ 131.894699] Bluetooth: hci5: command 0x040f tx timeout [ 133.046872] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 133.109367] Bluetooth: hci3: command 0x0409 tx timeout [ 133.109381] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 133.111388] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 133.623783] Bluetooth: hci1: command 0x0419 tx timeout [ 133.749343] Bluetooth: hci2: command 0x0419 tx timeout [ 133.877488] Bluetooth: hci6: command 0x0419 tx timeout [ 133.941351] Bluetooth: hci5: command 0x0419 tx timeout [ 135.160315] Bluetooth: hci3: command 0x041b tx timeout [ 136.454721] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 136.462540] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 136.477560] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 136.484009] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 136.487979] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 136.491964] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.205327] Bluetooth: hci3: command 0x040f tx timeout [ 138.165334] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 138.421513] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 138.550608] Bluetooth: hci7: command 0x0409 tx timeout [ 139.254465] Bluetooth: hci3: command 0x0419 tx timeout [ 140.598455] Bluetooth: hci7: command 0x041b tx timeout [ 141.201563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.221513] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.222586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.251829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.271065] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.273039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.645303] Bluetooth: hci7: command 0x040f tx timeout [ 142.901575] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 143.349339] Bluetooth: hci4: command 0x0409 tx timeout [ 144.693308] Bluetooth: hci7: command 0x0419 tx timeout [ 145.397501] Bluetooth: hci4: command 0x041b tx timeout [ 147.445465] Bluetooth: hci4: command 0x040f tx timeout [ 147.701319] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 149.494661] Bluetooth: hci4: command 0x0419 tx timeout [ 150.496927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.498391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.510101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.525969] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.546934] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.562220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.693341] Bluetooth: hci0: command 0x0409 tx timeout [ 154.741570] Bluetooth: hci0: command 0x041b tx timeout [ 156.790306] Bluetooth: hci0: command 0x040f tx timeout [ 158.838487] Bluetooth: hci0: command 0x0419 tx timeout [ 184.826462] syz-executor.2 (285) used greatest stack depth: 23960 bytes left [ 187.551410] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.560083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.561221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.585787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.590199] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 187.603607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.046972] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.050814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.053649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.066020] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.073640] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 188.078660] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.185136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 188.204405] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 188.212517] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 188.228842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 188.261870] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 188.263459] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.685355] Bluetooth: hci1: command 0x0409 tx timeout [ 189.941598] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 190.133682] Bluetooth: hci5: command 0x0409 tx timeout [ 190.325354] Bluetooth: hci6: command 0x0409 tx timeout [ 191.733484] Bluetooth: hci1: command 0x041b tx timeout [ 192.181322] Bluetooth: hci5: command 0x041b tx timeout [ 192.373308] Bluetooth: hci6: command 0x041b tx timeout [ 193.050418] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.069649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.084612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.110846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.122745] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.136997] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.781330] Bluetooth: hci1: command 0x040f tx timeout [ 194.229596] Bluetooth: hci5: command 0x040f tx timeout [ 194.421607] Bluetooth: hci6: command 0x040f tx timeout [ 194.869310] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 195.255564] Bluetooth: hci3: command 0x0409 tx timeout [ 195.829575] Bluetooth: hci1: command 0x0419 tx timeout [ 196.277552] Bluetooth: hci5: command 0x0419 tx timeout [ 196.471348] Bluetooth: hci6: command 0x0419 tx timeout [ 197.301326] Bluetooth: hci3: command 0x041b tx timeout [ 198.249729] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 198.250955] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 198.267692] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 198.316589] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 198.318436] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 198.321514] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.349327] Bluetooth: hci3: command 0x040f tx timeout [ 200.053508] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 200.374371] Bluetooth: hci7: command 0x0409 tx timeout [ 201.398610] Bluetooth: hci3: command 0x0419 tx timeout [ 202.421376] Bluetooth: hci7: command 0x041b tx timeout [ 204.471296] Bluetooth: hci7: command 0x040f tx timeout [ 205.109370] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 205.110412] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 206.519297] Bluetooth: hci7: command 0x0419 tx timeout [ 208.405816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.407533] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.411501] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.448944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.450805] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.451986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.487772] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 210.614342] Bluetooth: hci2: command 0x0409 tx timeout [ 212.661665] Bluetooth: hci2: command 0x041b tx timeout [ 214.197458] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 214.713296] Bluetooth: hci2: command 0x040f tx timeout [ 215.158329] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 216.757477] Bluetooth: hci2: command 0x0419 tx timeout [ 216.937489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.942874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.952405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.958774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.002167] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.009703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.126325] Bluetooth: hci0: command 0x0409 tx timeout [ 219.829326] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 221.175334] Bluetooth: hci0: command 0x041b tx timeout [ 223.221522] Bluetooth: hci0: command 0x040f tx timeout [ 224.629362] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 225.271322] Bluetooth: hci0: command 0x0419 tx timeout [ 229.686543] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 232.460048] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.468852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.469872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.493489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.512526] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.514563] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.613475] Bluetooth: hci4: command 0x0409 tx timeout [ 236.661629] Bluetooth: hci4: command 0x041b tx timeout [ 238.710447] Bluetooth: hci4: command 0x040f tx timeout [ 240.757307] Bluetooth: hci4: command 0x0419 tx timeout [ 249.115107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.117921] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.125562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.147601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.154525] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 249.155427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.871623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.874769] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.882490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.889103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.893501] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 249.896675] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.255533] Bluetooth: hci1: command 0x0409 tx timeout [ 251.510359] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 251.958329] Bluetooth: hci6: command 0x0409 tx timeout [ 253.302319] Bluetooth: hci1: command 0x041b tx timeout [ 254.008284] Bluetooth: hci6: command 0x041b tx timeout [ 254.681674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.687641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.691636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.709647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.714659] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 254.725691] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.349590] Bluetooth: hci1: command 0x040f tx timeout [ 256.053697] Bluetooth: hci6: command 0x040f tx timeout [ 256.565343] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 256.822640] Bluetooth: hci5: command 0x0409 tx timeout [ 257.397554] Bluetooth: hci1: command 0x0419 tx timeout [ 258.101328] Bluetooth: hci6: command 0x0419 tx timeout [ 258.869388] Bluetooth: hci5: command 0x041b tx timeout [ 260.132736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.140737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.141795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.149147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.157134] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.171695] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.919308] Bluetooth: hci5: command 0x040f tx timeout [ 262.262530] Bluetooth: hci3: command 0x0409 tx timeout [ 262.325348] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 262.966697] Bluetooth: hci5: command 0x0419 tx timeout [ 264.312367] Bluetooth: hci3: command 0x041b tx timeout [ 265.437336] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 265.439607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 265.445143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 265.460064] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 265.472524] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 265.481100] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 266.357623] Bluetooth: hci3: command 0x040f tx timeout [ 267.573712] Bluetooth: hci7: command 0x0409 tx timeout [ 268.410318] Bluetooth: hci3: command 0x0419 tx timeout [ 269.621354] Bluetooth: hci7: command 0x041b tx timeout [ 271.669345] Bluetooth: hci7: command 0x040f tx timeout [ 272.183361] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 273.720359] Bluetooth: hci7: command 0x0419 tx timeout [ 275.215049] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.224467] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.226945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.238500] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.250496] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.253987] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.365498] Bluetooth: hci2: command 0x0409 tx timeout [ 279.417044] Bluetooth: hci2: command 0x041b tx timeout [ 280.693352] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 281.462430] Bluetooth: hci2: command 0x040f tx timeout [ 283.509704] Bluetooth: hci2: command 0x0419 tx timeout [ 285.493509] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 288.369963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.375673] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.379516] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.387205] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.401823] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 288.406000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.487319] Bluetooth: hci0: command 0x0409 tx timeout [ 292.533303] Bluetooth: hci0: command 0x041b tx timeout [ 294.581326] Bluetooth: hci0: command 0x040f tx timeout [ 296.374305] Bluetooth: hci4: Opcode 0x c03 failed: -110 2023/08/20 04:01:23 executor 1 failed 11 times: executor 1: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 [ 296.629318] Bluetooth: hci0: command 0x0419 tx timeout VM DIAGNOSIS: 04:01:23 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806ce28300 RCX=0000000000000000 RDX=ffff88803386b680 RSI=ffffffff81131fd0 RDI=0000000000000001 RBP=ffff88802a037048 RSP=ffff88806ce09fd0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffff88806ce09ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff811215fd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff5c71491f0 CR3=000000001ad84000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff8880322f7758 RCX=0000000000000000 RDX=ffff888033801b40 RSI=ffffffff8113b80d RDI=0000000000000007 RBP=0000000000000000 RSP=ffff8880322f76d0 R8 =0000000000000007 R9 =0000000000000000 R10=ffffffff84558a16 R11=0000000000000001 R12=0000000000000001 R13=ffffffff84558a16 R14=ffff8880322f7799 R15=ffff8880322f77f8 RIP=ffffffff814d916b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f628a3ad1f0 CR3=000000002b4a2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000