Warning: Permanently added '[localhost]:11103' (ECDSA) to the list of known hosts. 2023/08/09 10:23:50 fuzzer started 2023/08/09 10:23:51 dialing manager at localhost:43987 syzkaller login: [ 101.511919] cgroup: Unknown subsys name 'net' [ 101.717314] cgroup: Unknown subsys name 'rlimit' [ 113.855128] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/09 10:24:04 syscalls: 204 2023/08/09 10:24:04 code coverage: enabled 2023/08/09 10:24:04 comparison tracing: enabled 2023/08/09 10:24:04 extra coverage: enabled 2023/08/09 10:24:04 setuid sandbox: enabled 2023/08/09 10:24:04 namespace sandbox: enabled 2023/08/09 10:24:04 Android sandbox: enabled 2023/08/09 10:24:04 fault injection: enabled 2023/08/09 10:24:04 leak checking: enabled 2023/08/09 10:24:04 net packet injection: enabled 2023/08/09 10:24:04 net device setup: enabled 2023/08/09 10:24:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/09 10:24:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/09 10:24:04 USB emulation: enabled 2023/08/09 10:24:04 hci packet injection: enabled 2023/08/09 10:24:04 wifi device emulation: enabled 2023/08/09 10:24:04 802.15.4 emulation: enabled 2023/08/09 10:24:04 fetching corpus: 0, signal 0/0 (executing program) 2023/08/09 10:24:06 starting 8 fuzzer processes 10:24:06 executing program 0: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="0c1678aa21f40ec293b996a6a1bb5149", 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_io_uring_complete(0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x12, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, &(0x7f0000000100)=0x800, 0x0, 0x4) wait4(0x0, &(0x7f0000000140), 0x1, 0x0) r3 = syz_io_uring_complete(r2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000180)="5ddd3d32803f3e604e5022ad6e3b74585984fb330a3e9a968a861158edb8baeb8b2c0f398aa36597af8aae46f72d1bcbcc2fd6534b8b5d068bd8eb10fd6c09b2a52440468df5611a5becdf1fea87aec92b66b46848c9e04222dfd0b7b52c7b6d9f366f0dd1013f684801b96c26ed7c2410f6", 0x72, 0x8081}, 0xc70d) r4 = openat$incfs(r1, &(0x7f0000000240)='.log\x00', 0x20002, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) syz_io_uring_setup(0x2788, &(0x7f0000000300)={0x0, 0xd35d, 0x1, 0x3, 0x6f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r6 = syz_io_uring_complete(r2) syz_io_uring_submit(r5, 0x0, &(0x7f0000001640)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f0000001600)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2, &(0x7f0000001580)=""/77, 0x4d}, 0x0, 0x41}, 0xffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000001680)) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000016c0)) write$9p(r6, &(0x7f0000001700)="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", 0x1000) 10:24:06 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000080)="aba110ee176d5de02ad532c110fe1ea943e4a484f251fdce817f47eca34f2368db84458d4bfbf8d67cdfcdcd3cd52956785cd0ac7bc9cd91512e61d678a06b52a24f2abf5bd12cfa7346368a8cdaa4cb1d99a13b888d3cdf77150799ea752427c298db5d9c1a981a5769fccf37fa1a266ac78d6c19e00e662ecce704067c6c0efcb2bf169c7918f98331493c7af5a8adabff66dd2dde996508198c70c8ed9f5221dda417ef114d5901755aa0d28a0f701a220565e00bbfa90fc5c7cc4e5769a05131", 0xc2, 0xfff}, {&(0x7f0000000180)="2d6d062611abf9aa3a7717b3d29fc42105fb9695d4187ba6e060801f4c66533bb0b911bbe0c87b352c7eaa5cbef2f2c6b63b747ce0e19561aa0eafbfc31e2c550ebb7d1b9bfd41957a873853b5d7609d35f2e184ec550d35487e579a9dad03146fd5cd8a31eeba4cf652b72848923c36e37de6e28f7312ea63c76b75c744484afcbd0a3fd88497441232fb149a85a850fd2e02676e727482ac9c71206d5815d051181e0854a0411f9d86be1c5fde34ee18d8d603df562889d4e3061aafd510ac602d07e4cb", 0xc5, 0xff}, {&(0x7f0000000280)="990b4b38eb4edf9b52b3d71f86ce087350f825df43cecaf99b039eec4a7be78ded98bde9004e4f80d57a0ee8f5711aade454a1e3c3f7aaa5730157dd94791c9654683a471b00e36b0765d5ea9f5f2ecb45e33d2ec1884223a588fb904ffae8814d430dc4c96d65b471f58772d646652e0e52d9682ba3899ffe762a5fff1c1df06561c118b413479e7de6", 0x8a, 0x3f}, {&(0x7f0000000340)="1500d44bd7940518a9c650010e8a43c4b68c606d51f094e89517fece4653383515464579d08dded6623a6893005866640555cdea7995855b7f90dc3f6fb86960fc4cabab5316f874fe9940a1eca00174a13b86e3d9e6ce6a997f95993fab012bed022d7b3c26d5059eb0986bdd36e72400985a861aa745332ad341f1a6c1249725dcb76c783d8d3c655b66451d7ae9e39a046a9063d4f89fb88565d25189bdcfb80427b8160d4193eff65ca0e795e85b1e50d2f45d65899ed1f68dfc4edf90e32fefc9ace2d2e492b38405674857b6ab2ace13aa20c7bc780ddea9fb5edbee1598d43a8787b9d7d693328055", 0xec, 0xcbf}], 0x8c0, &(0x7f00000004c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x67]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x33]}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_within_size}, {@huge_always}, {@size={'size', 0x3d, [0x35, 0x67, 0x74]}}, {@mode={'mode', 0x3d, 0x7}}, {@huge_always}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) faccessat(r0, &(0x7f0000000580)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLCREATE(r1, &(0x7f0000000600)={0x18, 0xf, 0x2, {{0x10, 0x4, 0x7}, 0x80000000}}, 0x18) write$P9_RWALK(r1, &(0x7f0000000640)={0x64, 0x6f, 0x1, {0x7, [{0x4, 0x2, 0x3}, {0x2, 0x2, 0x4}, {0x40, 0x4, 0x8}, {0x2, 0x4, 0x6}, {0x8, 0x3, 0x3}, {0x2, 0x2, 0x1}, {0x8, 0x4, 0x3}]}}, 0x64) mknodat$loop(r0, &(0x7f00000006c0)='./file0\x00', 0x200, 0x1) r2 = syz_mount_image$nfs4(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x6, 0x2, &(0x7f0000000900)=[{&(0x7f0000000780)="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", 0xff, 0x6}, {&(0x7f0000000880)="c688e45e8e0f6ff3aef0d300cb5fdb71b4a1c1692f82fad9b516446b41d799d9b521a1c753eaa47ef0dfbd9bb3aad901712169ea6e17c9a2d57cac3103918f09233ad150d4f08fb3e69c39d1cb8345", 0x4f, 0x3}], 0x8000, &(0x7f0000000940)={[{}, {'fscontext'}, {'fscontext'}], [{@dont_appraise}, {@fowner_eq}, {@subj_user={'subj_user', 0x3d, 'uid'}}, {@euid_eq}]}) faccessat2(r2, &(0x7f00000009c0)='./file1\x00', 0x82, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000c00)='./file1\x00', 0x100, 0x4000, 0x1}, 0xc0) getgroups(0x3, &(0x7f0000000cc0)=[0xee00, 0xffffffffffffffff, 0x0]) getgroups(0x2, &(0x7f0000000d00)=[r3, r4]) r6 = syz_io_uring_complete(0x0) write$P9_RREADDIR(r6, &(0x7f0000000d40)={0x2a, 0x29, 0x2, {0x8000, [{{0x2, 0x3, 0x5}, 0x100000000, 0x1f, 0x7, './file0'}]}}, 0x2a) openat2$dir(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x80480, 0xc0, 0x10}, 0x18) r7 = syz_open_dev$evdev(&(0x7f0000000e00), 0x8001, 0x244a01) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f0000000e40)=""/140) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000f00)=[@mss={0x2, 0x6}, @window={0x3, 0x3, 0x3}, @timestamp, @timestamp, @window={0x3, 0x5, 0x1}, @window={0x3, 0x1, 0xb2}], 0x6) getgroups(0x3, &(0x7f0000000f40)=[r4, r5, r4]) getgroups(0x3, &(0x7f0000000f80)=[r4, r8, r4]) mknodat$loop(r2, &(0x7f0000000fc0)='./file0\x00', 0x1000, 0x0) 10:24:06 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xf9, 0xfffffffe, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}, @rand_addr=' \x01\x00', 0x1, 0x10, 0x8001, 0x80}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x200000c1) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f00000003c0)=""/4096) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f00000013c0)=""/100) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000001440)={0x999}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000001480)={0x4}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000014c0)={0x3ff, 0x0, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'batadv_slave_0\x00'}) faccessat(0xffffffffffffffff, &(0x7f0000001540)='./file0\x00', 0x80) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000001580)={0x7, 0x6d, 0x1}, 0x7) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000015c0)={0xf, 0x1f, 0x2, 0x7f}, 0xf) r2 = memfd_secret(0x0) write$P9_RVERSION(r2, &(0x7f0000001600)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.L'}, 0x15) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000071) r3 = syz_io_uring_setup(0x35a3, &(0x7f0000001740)={0x0, 0xc139, 0x4, 0x0, 0x2ba, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000017c0)=0x0, &(0x7f0000001800)) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) syz_io_uring_submit(r4, 0x0, &(0x7f00000018c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000001880)={r5, r6+60000000}}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3800009, 0x40010, r3, 0x10000000) syz_open_dev$hidraw(&(0x7f0000001900), 0x1376, 0x2000c0) [ 115.600877] audit: type=1400 audit(1691576646.343:6): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:24:06 executing program 2: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x44) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffffffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40008}, 0x4008000) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000280)=""/41) r1 = memfd_secret(0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x148, 0x0, 0xa20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x917f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4323}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x84}}, 0x44000) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x4020) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xf15}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x100000c1) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000a80)=""/214, 0xd6}, {&(0x7f0000000b80)=""/36, 0x24}, {&(0x7f0000000bc0)=""/7, 0x7}, {&(0x7f0000000c00)=""/189, 0xbd}], 0x4, &(0x7f0000000d00)=""/245, 0xf5}, 0xffffffff}], 0x1, 0x40002042, &(0x7f0000000e40)={0x0, 0x3938700}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000001000)={'ip6tnl0\x00', &(0x7f0000000f80)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0xff, 0x1ff, 0x33, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x700, 0x10, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000010c0)={'syztnl1\x00', &(0x7f0000001040)={'syztnl0\x00', r4, 0x4, 0x2, 0x5, 0xba5, 0x2, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x20, 0x2, 0x6}}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001140), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x24, r5, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x1) epoll_create1(0x0) 10:24:06 executing program 4: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x200}, 0xf) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x4, 0x12, 0x563d, 0x7, "92b61b15d17379adad949ea42546efc286426a770b5fcdf0a257ba3e222adf72"}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='lp\x00', 0x3) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000200)=""/38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0xfffffff8, @local, 0x15b}}, 0x0, 0x0, 0x33, 0x0, "afbf6e49eeaf9c3fdfc7e9b25fe2b8ec8a5fd4ca722f604de3cb20b6042afcf7f486ec6e0777e9078f71849d2539174bdbea4b5a145af46a1c518f4bdfa9ee73760705e7cc01ad4323c3b4edfca1620c"}, 0xd8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r2 = memfd_secret(0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000480)=""/215) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x10001}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x4) r4 = socket(0x2c, 0x3, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r2) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x28, r5, 0x8, 0x70bd2d, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x15}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004814}, 0x4000000) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000003440)={0x7, 0x1, 0x272, 0x7, 0x7fffffff, 0xfff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000003480), r6) 10:24:06 executing program 5: ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000000)={0x83, "db2bfc37ba432e3844425d979af718c5f1b65c671913da6c1316e813b76d799c808cee0e15b74f00bc23682d698020cf9b26e8b719ff26980c6494f647e9a1b7"}) r0 = memfd_secret(0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/140) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x7fffffff, 0x814, 0x9, 0x7, 0x2, 0x6}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x10040090) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000300), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000340), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4000}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x0) r3 = syz_io_uring_complete(0x0) openat$cgroup_procs(r3, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_io_uring_complete(0x0) faccessat2(r4, &(0x7f0000000540)='./file0\x00', 0x1, 0x200) write$P9_RAUTH(r0, &(0x7f0000000580)={0x14, 0x67, 0x2, {0x80, 0x0, 0x4}}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) syz_io_uring_complete(0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000600)) 10:24:06 executing program 6: r0 = syz_io_uring_complete(0x0) write$rfkill(r0, &(0x7f0000000000)={0xfffffffb, 0x1, 0x3, 0x0, 0x1}, 0x8) r1 = memfd_secret(0x0) write$rfkill(r1, &(0x7f0000000040)={0x5c, 0x9, 0x0, 0x0, 0x1}, 0x8) write$P9_RFLUSH(r1, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4000800) r4 = openat$incfs(r1, &(0x7f00000002c0)='.log\x00', 0x8000, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3}, 0x5}, {{&(0x7f0000001600)=@ax25={{0x3, @netrom}, [@remote, @null, @netrom, @bcast, @rose, @null, @netrom, @null]}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001680)=""/134, 0x86}, {&(0x7f0000001740)=""/169, 0xa9}, {&(0x7f0000001800)=""/80, 0x50}, {&(0x7f0000001880)=""/105, 0x69}, {&(0x7f0000001900)=""/44, 0x2c}, {&(0x7f0000001940)=""/11, 0xb}, {&(0x7f0000001980)=""/123, 0x7b}, {&(0x7f0000001a00)=""/180, 0xb4}], 0x8, &(0x7f0000001b40)=""/65, 0x41}, 0x6}, {{&(0x7f0000001bc0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/18, 0x12}, {&(0x7f0000001c80)=""/183, 0xb7}, {&(0x7f0000001d40)=""/52, 0x34}, {&(0x7f0000001d80)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/177, 0xb1}, {&(0x7f0000001e80)=""/53, 0x35}, {&(0x7f0000001ec0)=""/83, 0x53}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/85, 0x55}], 0x9, &(0x7f0000002140)=""/202, 0xca}, 0x8}, {{&(0x7f0000002240)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002540)=[{&(0x7f00000022c0)=""/159, 0x9f}, {&(0x7f0000002380)=""/247, 0xf7}, {&(0x7f0000002480)=""/12, 0xc}, {&(0x7f00000024c0)=""/123, 0x7b}], 0x4, &(0x7f0000002580)=""/49, 0x31}, 0x9}, {{&(0x7f00000025c0)=@nfc_llcp, 0x80, &(0x7f0000002840)=[{&(0x7f0000002640)=""/207, 0xcf}, {&(0x7f0000002740)=""/248, 0xf8}], 0x2, &(0x7f0000002880)=""/132, 0x84}, 0x81}], 0x5, 0x10000, &(0x7f0000002a80)={0x77359400}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002c40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x11c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000002c80)={0x7, 0x21, 0x1}, 0x7) mq_getsetattr(r1, &(0x7f0000002cc0)={0x1, 0x3, 0x4, 0x8}, &(0x7f0000002d00)) syz_io_uring_setup(0x37c, &(0x7f0000002d40)={0x0, 0xa79a, 0x2, 0x0, 0x3c5, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002dc0)=0x0, &(0x7f0000002e00)) r8 = syz_mount_image$tmpfs(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', 0x80000001, 0x2, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)="9b729fd8fb738248685ba819403ede8c4b5c9b9ea0d9d4609b590e52496945b685b604c816aa20d0681e77b3cff549c504a32ab17473a6e77f07b3072b74354aef044c6dc3c868cc2ed594a46633a5d88a1ec3b15c28588644a103f3648f0d16c14e1dd75f05dc4e22e1367767d4cc452a50f2ed9e37ef8e0b404c17238fde069175006c0f885e0cc85b66707e0687fc12702bcdce8ee17f", 0x98, 0x9}, {&(0x7f0000002f80)="60f97390371fb0896036954da8863bb0ae6bee2fae2a5b1a9059bea9757a1b16ba0c27e481c80efb2780c29f", 0x2c, 0xdbf}], 0x200000, &(0x7f0000003000)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'batadv0\x00'}}]}) syz_io_uring_submit(r7, 0x0, &(0x7f0000003180)=@IORING_OP_STATX={0x15, 0x1, 0x0, r8, &(0x7f0000003040), &(0x7f0000003140)='./file0\x00', 0x0, 0x0, 0x1}, 0x6de) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x7c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) write$P9_RLOCK(r2, &(0x7f0000003300)={0x8, 0x35, 0x2, 0x1}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003340)='./cgroup.net/syz1\x00', 0x200002, 0x0) 10:24:06 executing program 7: r0 = socket(0x25, 0x2, 0x80000000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "571dfc5c0ec21caec225c48aff10d41d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "2e70e1c435f3c732cf021de62d93215f"}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40000800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x29114}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) r2 = socket(0xb, 0x800, 0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x41204225}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r3, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40000, 0xb}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40000884) r4 = socket(0x27, 0x4, 0x9) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2b9b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x3f, 0x4}, {0xac, 0x4}, {0x8, 0x1}], "c9abbce0d05300e0"}}]}, 0x30}}, 0x42840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000055}, 0x94) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8091}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r8) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x198, r3, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x183, 0x2a, [@tim={0x5, 0xf8, {0x4, 0x1c, 0x7, "9df440fd1a425e316454ae6598d7175d6bfe94e2cc4db499dd856b73a459451da532444cd51fa40b7c436315438d0f30930c1d4389dd9a877c35367e852dcc644ee47fb9e2dac3760d554cbc4d7f5f1af050e4541693284629024dfe6d2c307b809ca789fbf5b3bcbfdbe0d34b37a73c66fd696fb15171edfcf02b51f386f9eaa2edc871a42e9c0d77d07a8e65cc44eb49b87ddc3e3e4150adbffe74f8290ee037b2b6a4324af3bcccdb129bd5ee34c73d46e62e351a6f99655ac8bc2321d1b1e7a729cfd58846f107637a816db00d9b7070beeed8cabacddd9011ea42957b7bac0a78ede5c014b4901ca77387050922b977a4c8a9"}}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0x81, 0xf8, 0x4, @device_a, 0x4, "", 0x2, 0x7, 0x6, [{{0x0, 0x0, 0x1}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0xcac1}, {{}, @device_b, 0x5fb}, {{0x0, 0x0, 0x1}, @device_a, 0xfffffffd}, {{0x0, 0x0, 0x1}, @device_b, 0x3}, {{}, @device_a, 0x178}]}}, @peer_mgmt={0x75, 0x4, {0x1, 0x3, @void, @void, @void}}, @supported_rates={0x1, 0x3, [{0x60}, {0x16, 0x1}, {0x29, 0x1}]}, @ht={0x2d, 0x1a, {0x570d, 0x0, 0x0, 0x0, {0x7, 0x20, 0x0, 0x7f, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x101, 0x80}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4040}, 0x880) [ 117.073661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.076320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.078349] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.083516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.085413] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.086494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.160557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.162717] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 117.163943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.164067] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 117.166647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.166853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 117.170528] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 117.171380] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.173686] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 117.175471] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.176461] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.182993] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.126967] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 119.128104] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 119.191763] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 119.192302] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 119.193386] Bluetooth: hci0: command 0x0409 tx timeout [ 119.254742] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 119.256363] Bluetooth: hci6: command 0x0409 tx timeout [ 119.257432] Bluetooth: hci4: command 0x0409 tx timeout [ 121.239363] Bluetooth: hci0: command 0x041b tx timeout [ 121.302723] Bluetooth: hci4: command 0x041b tx timeout [ 121.303220] Bluetooth: hci6: command 0x041b tx timeout [ 122.560104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.562007] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.567976] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.590954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.599554] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.605961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.916364] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.921076] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.924159] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.980275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.004980] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 123.018590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 123.287673] Bluetooth: hci0: command 0x040f tx timeout [ 123.350699] Bluetooth: hci6: command 0x040f tx timeout [ 123.351256] Bluetooth: hci4: command 0x040f tx timeout [ 124.631026] Bluetooth: hci1: command 0x0409 tx timeout [ 124.886727] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 124.950719] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 124.952147] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 125.143719] Bluetooth: hci7: command 0x0409 tx timeout [ 125.336890] Bluetooth: hci0: command 0x0419 tx timeout [ 125.399700] Bluetooth: hci6: command 0x0419 tx timeout [ 125.400206] Bluetooth: hci4: command 0x0419 tx timeout [ 126.678718] Bluetooth: hci1: command 0x041b tx timeout [ 127.190679] Bluetooth: hci7: command 0x041b tx timeout [ 128.726697] Bluetooth: hci1: command 0x040f tx timeout [ 129.238810] Bluetooth: hci7: command 0x040f tx timeout [ 130.392521] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 130.518713] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 130.582719] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 130.775699] Bluetooth: hci1: command 0x0419 tx timeout [ 131.288698] Bluetooth: hci7: command 0x0419 tx timeout [ 133.883244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.893241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.909687] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.970354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.973933] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 133.977197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.319213] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 135.959036] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 136.086742] Bluetooth: hci3: command 0x0409 tx timeout [ 138.134796] Bluetooth: hci3: command 0x041b tx timeout [ 138.372861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.379010] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.382999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.388427] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.392900] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.397063] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.289606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.320081] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.321949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.362198] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.366710] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 139.370310] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.184700] Bluetooth: hci3: command 0x040f tx timeout [ 140.439391] Bluetooth: hci2: command 0x0409 tx timeout [ 141.462994] Bluetooth: hci5: command 0x0409 tx timeout [ 142.230770] Bluetooth: hci3: command 0x0419 tx timeout [ 142.488679] Bluetooth: hci2: command 0x041b tx timeout [ 143.510757] Bluetooth: hci5: command 0x041b tx timeout [ 144.534682] Bluetooth: hci2: command 0x040f tx timeout [ 145.558734] Bluetooth: hci5: command 0x040f tx timeout [ 146.582799] Bluetooth: hci2: command 0x0419 tx timeout [ 147.606777] Bluetooth: hci5: command 0x0419 tx timeout [ 176.999877] syz-executor.5 (285) used greatest stack depth: 23672 bytes left [ 180.304395] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.310261] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.312891] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.321436] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.335942] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 180.355048] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.975700] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 182.166731] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 182.486748] Bluetooth: hci6: command 0x0409 tx timeout [ 184.378021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.398285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.400473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.425021] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.433058] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 184.434185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.535657] Bluetooth: hci6: command 0x041b tx timeout [ 184.642346] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.647524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.661375] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.679081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.683531] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 184.685235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.067479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.072422] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.081947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.124028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.127108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 185.143578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.519301] Bluetooth: hci0: command 0x0409 tx timeout [ 186.582725] Bluetooth: hci6: command 0x040f tx timeout [ 186.774776] Bluetooth: hci1: command 0x0409 tx timeout [ 187.158719] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 187.224975] Bluetooth: hci4: command 0x0409 tx timeout [ 188.566736] Bluetooth: hci0: command 0x041b tx timeout [ 188.630893] Bluetooth: hci6: command 0x0419 tx timeout [ 188.822955] Bluetooth: hci1: command 0x041b tx timeout [ 189.270882] Bluetooth: hci4: command 0x041b tx timeout [ 190.614699] Bluetooth: hci0: command 0x040f tx timeout [ 190.870882] Bluetooth: hci1: command 0x040f tx timeout [ 191.320042] Bluetooth: hci4: command 0x040f tx timeout [ 192.279009] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 192.663836] Bluetooth: hci0: command 0x0419 tx timeout [ 192.919933] Bluetooth: hci1: command 0x0419 tx timeout [ 193.368683] Bluetooth: hci4: command 0x0419 tx timeout [ 195.672005] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.673946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.677334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.726051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.739980] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 195.747045] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.846731] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 197.847757] Bluetooth: hci3: command 0x0409 tx timeout [ 199.895787] Bluetooth: hci3: command 0x041b tx timeout [ 199.929120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.949793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.962826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.994816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.003563] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 200.006502] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.032809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 201.034484] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 201.045069] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 201.065085] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 201.070487] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 201.072915] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 201.942930] Bluetooth: hci3: command 0x040f tx timeout [ 202.134996] Bluetooth: hci2: command 0x0409 tx timeout [ 202.838798] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 203.223319] Bluetooth: hci7: command 0x0409 tx timeout [ 203.990930] Bluetooth: hci3: command 0x0419 tx timeout [ 204.182748] Bluetooth: hci2: command 0x041b tx timeout [ 205.270809] Bluetooth: hci7: command 0x041b tx timeout [ 206.232667] Bluetooth: hci2: command 0x040f tx timeout [ 207.318691] Bluetooth: hci7: command 0x040f tx timeout [ 208.023147] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 208.278676] Bluetooth: hci2: command 0x0419 tx timeout [ 209.367689] Bluetooth: hci7: command 0x0419 tx timeout [ 213.081681] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 216.202394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.209518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.227989] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.280035] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.317171] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.319209] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.454726] Bluetooth: hci5: command 0x0409 tx timeout [ 220.502712] Bluetooth: hci5: command 0x041b tx timeout [ 222.550715] Bluetooth: hci5: command 0x040f tx timeout [ 224.598698] Bluetooth: hci5: command 0x0419 tx timeout [ 244.246703] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 246.832603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.841238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.844952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.872165] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.888056] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 246.897263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.342994] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 248.472254] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 248.983817] Bluetooth: hci4: command 0x0409 tx timeout [ 249.111131] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 251.031134] Bluetooth: hci4: command 0x041b tx timeout [ 251.766285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.780261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.794281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.824052] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.835445] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 251.856247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.057664] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.070313] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.097048] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.122023] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.142131] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 252.148400] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.078831] Bluetooth: hci4: command 0x040f tx timeout [ 253.527088] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 253.910775] Bluetooth: hci1: command 0x0409 tx timeout [ 254.232222] Bluetooth: hci6: command 0x0409 tx timeout [ 255.126689] Bluetooth: hci4: command 0x0419 tx timeout [ 255.960381] Bluetooth: hci1: command 0x041b tx timeout [ 256.280670] Bluetooth: hci6: command 0x041b tx timeout [ 256.665157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.675557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.677294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.689254] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.696963] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 256.700117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.137303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.170229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.183335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.198119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.228185] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 257.231281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.006735] Bluetooth: hci1: command 0x040f tx timeout [ 258.327708] Bluetooth: hci6: command 0x040f tx timeout [ 258.775715] Bluetooth: hci0: command 0x0409 tx timeout [ 259.351039] Bluetooth: hci3: command 0x0409 tx timeout [ 260.054734] Bluetooth: hci1: command 0x0419 tx timeout [ 260.374884] Bluetooth: hci6: command 0x0419 tx timeout [ 260.823674] Bluetooth: hci0: command 0x041b tx timeout [ 261.399091] Bluetooth: hci3: command 0x041b tx timeout [ 262.012896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.032975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.034932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.051030] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.063093] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 262.067303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.873027] Bluetooth: hci0: command 0x040f tx timeout [ 263.194099] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.215502] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.222253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.229803] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.231807] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 263.234873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.447033] Bluetooth: hci3: command 0x040f tx timeout [ 264.153119] Bluetooth: hci2: command 0x0409 tx timeout [ 264.918690] Bluetooth: hci0: command 0x0419 tx timeout [ 265.302838] Bluetooth: hci7: command 0x0409 tx timeout [ 265.494702] Bluetooth: hci3: command 0x0419 tx timeout [ 266.199188] Bluetooth: hci2: command 0x041b tx timeout [ 267.351450] Bluetooth: hci7: command 0x041b tx timeout [ 268.247007] Bluetooth: hci2: command 0x040f tx timeout [ 269.398837] Bluetooth: hci7: command 0x040f tx timeout [ 270.294996] Bluetooth: hci2: command 0x0419 tx timeout [ 271.448200] Bluetooth: hci7: command 0x0419 tx timeout [ 278.387601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.391196] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.393036] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.417472] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.421042] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.428198] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.534999] Bluetooth: hci5: command 0x0409 tx timeout [ 282.584683] Bluetooth: hci5: command 0x041b tx timeout [ 284.630998] Bluetooth: hci5: command 0x040f tx timeout [ 286.679679] Bluetooth: hci5: command 0x0419 tx timeout [ 310.935418] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 314.184371] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.192687] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.201215] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.227537] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.278848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 314.285975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.286824] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 316.254587] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 316.374877] Bluetooth: hci4: command 0x0409 tx timeout [ 318.422694] Bluetooth: hci4: command 0x041b tx timeout [ 318.525569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.529821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.537342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.551046] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.562275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 318.584665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.780286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.790520] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.801275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.854085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.865955] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 318.873950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.164229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.174024] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.175496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.191524] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.195485] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 319.196549] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.470801] Bluetooth: hci4: command 0x040f tx timeout [ 320.672703] Bluetooth: hci0: command 0x0409 tx timeout [ 320.919447] Bluetooth: hci1: command 0x0409 tx timeout [ 321.240038] Bluetooth: hci3: command 0x0409 tx timeout [ 321.366727] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 322.521314] Bluetooth: hci4: command 0x0419 tx timeout [ 322.715657] Bluetooth: hci0: command 0x041b tx timeout [ 322.970262] Bluetooth: hci1: command 0x041b tx timeout [ 323.287865] Bluetooth: hci3: command 0x041b tx timeout [ 324.426121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 324.428416] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 324.429508] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 324.432671] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 324.434403] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 324.436102] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.760686] Bluetooth: hci0: command 0x040f tx timeout [ 325.015234] Bluetooth: hci1: command 0x040f tx timeout [ 325.334714] Bluetooth: hci3: command 0x040f tx timeout [ 325.654910] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 326.488728] Bluetooth: hci6: command 0x0409 tx timeout [ 326.806710] Bluetooth: hci0: command 0x0419 tx timeout [ 326.806750] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 327.067429] Bluetooth: hci1: command 0x0419 tx timeout [ 327.383730] Bluetooth: hci3: command 0x0419 tx timeout [ 328.534912] Bluetooth: hci6: command 0x041b tx timeout [ 328.903835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.908095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.929757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.961980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.971432] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 328.974328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.863411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 329.865004] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 329.873505] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 329.898975] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 329.909267] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 329.917666] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 330.582835] Bluetooth: hci6: command 0x040f tx timeout [ 331.031803] Bluetooth: hci2: command 0x0409 tx timeout [ 331.990946] Bluetooth: hci7: command 0x0409 tx timeout [ 332.630726] Bluetooth: hci6: command 0x0419 tx timeout [ 333.080674] Bluetooth: hci2: command 0x041b tx timeout [ 334.038715] Bluetooth: hci7: command 0x041b tx timeout [ 335.127045] Bluetooth: hci2: command 0x040f tx timeout [ 336.087693] Bluetooth: hci7: command 0x040f tx timeout [ 337.174716] Bluetooth: hci2: command 0x0419 tx timeout [ 338.134904] Bluetooth: hci7: command 0x0419 tx timeout [ 340.427843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.432783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.435276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.442518] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.444609] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.452956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.550765] Bluetooth: hci5: command 0x0409 tx timeout [ 344.598991] Bluetooth: hci5: command 0x041b tx timeout [ 346.646692] Bluetooth: hci5: command 0x040f tx timeout [ 348.694972] Bluetooth: hci5: command 0x0419 tx timeout [ 376.235722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.240195] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.256019] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.282809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.304031] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 376.313202] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.391792] Bluetooth: hci4: command 0x0409 tx timeout [ 380.438699] Bluetooth: hci4: command 0x041b tx timeout [ 381.223296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.230294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.245957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.341303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.356511] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 381.364963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.486713] Bluetooth: hci4: command 0x040f tx timeout [ 382.934702] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 383.254697] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 383.450708] Bluetooth: hci1: command 0x0409 tx timeout [ 384.535110] Bluetooth: hci4: command 0x0419 tx timeout [ 385.496304] Bluetooth: hci1: command 0x041b tx timeout [ 386.119323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 386.128972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 386.148017] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 386.174529] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 386.182348] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 386.183549] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.697037] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 386.698477] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 386.709372] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.761364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.783336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 386.794371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.543689] Bluetooth: hci1: command 0x040f tx timeout [ 388.247777] Bluetooth: hci0: command 0x0409 tx timeout [ 388.765696] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 388.951088] Bluetooth: hci3: command 0x0409 tx timeout [ 389.590853] Bluetooth: hci1: command 0x0419 tx timeout [ 390.294712] Bluetooth: hci0: command 0x041b tx timeout [ 390.999809] Bluetooth: hci3: command 0x041b tx timeout [ 392.343936] Bluetooth: hci0: command 0x040f tx timeout [ 392.727714] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 393.046745] Bluetooth: hci3: command 0x040f tx timeout [ 393.879725] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 394.199721] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 394.391709] Bluetooth: hci0: command 0x0419 tx timeout [ 395.094696] Bluetooth: hci3: command 0x0419 tx timeout [ 395.932222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.959237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.962124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.990512] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.994181] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 395.995687] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.854816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 396.871315] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 396.882369] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 396.887576] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 396.890957] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 396.892335] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 398.167699] Bluetooth: hci2: command 0x0409 tx timeout [ 398.935723] Bluetooth: hci6: command 0x0409 tx timeout [ 399.322087] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 400.215674] Bluetooth: hci2: command 0x041b tx timeout [ 400.983705] Bluetooth: hci6: command 0x041b tx timeout [ 402.263684] Bluetooth: hci2: command 0x040f tx timeout [ 403.032207] Bluetooth: hci6: command 0x040f tx timeout [ 404.311724] Bluetooth: hci2: command 0x0419 tx timeout [ 404.630695] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 404.761689] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 405.078980] Bluetooth: hci6: command 0x0419 tx timeout 2023/08/09 10:28:55 executor 7 failed 11 times: executor 7: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 VM DIAGNOSIS: 10:28:56 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88802b787ad0 RCX=0000000000000000 RDX=1ffff110056f0f5f RSI=ffffffff8176c5c4 RDI=0000000000000007 RBP=ffffffffffffffff RSP=ffff88802b7876f0 R8 =0000000000000007 R9 =0000000000000000 R10=ffffffffffffffff R11=0000000000000001 R12=0000000000000000 R13=ffffea0000b66cc0 R14=ffff88802b787af8 R15=dffffc0000000000 RIP=ffffffff8176c5dd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f617b494008 CR3=000000001b184000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000000 RBX=0000000000000020 RCX=ffffffff8454c70f RDX=ffff888033d08000 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88800cacd208 RSP=ffff8880292e7c78 R8 =0000000000000000 R9 =0000000000000004 R10=000000000000000f R11=0000000000000001 R12=0000000000000004 R13=000000000000000f R14=00007fab8c87e008 R15=00007fab8c5a4fff RIP=ffffffff814da501 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fab8c3c1540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fab8c87e008 CR3=0000000031568000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000