Warning: Permanently added '[localhost]:22016' (ECDSA) to the list of known hosts. 2025/07/07 03:10:16 fuzzer started 2025/07/07 03:10:16 dialing manager at localhost:42083 syzkaller login: [ 56.106780] cgroup: Unknown subsys name 'net' [ 56.172410] cgroup: Unknown subsys name 'cpuset' [ 56.186892] cgroup: Unknown subsys name 'rlimit' 2025/07/07 03:10:28 syscalls: 201 2025/07/07 03:10:28 code coverage: enabled 2025/07/07 03:10:28 comparison tracing: enabled 2025/07/07 03:10:28 extra coverage: enabled 2025/07/07 03:10:28 setuid sandbox: enabled 2025/07/07 03:10:28 namespace sandbox: enabled 2025/07/07 03:10:28 Android sandbox: enabled 2025/07/07 03:10:28 fault injection: enabled 2025/07/07 03:10:28 leak checking: enabled 2025/07/07 03:10:28 net packet injection: enabled 2025/07/07 03:10:28 net device setup: enabled 2025/07/07 03:10:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/07 03:10:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/07 03:10:28 USB emulation: enabled 2025/07/07 03:10:28 hci packet injection: enabled 2025/07/07 03:10:28 wifi device emulation: enabled 2025/07/07 03:10:28 802.15.4 emulation: enabled 2025/07/07 03:10:28 fetching corpus: 0, signal 0/0 (executing program) 2025/07/07 03:10:29 starting 8 fuzzer processes 03:10:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400d1}, 0x88c0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_read_part_table(0x3, 0x4, &(0x7f0000000500)=[{&(0x7f00000002c0)="8db39ab2db4ff17942442103f64f5e6fce52b1641674f12aa7f1597b6a14122caad166124598382eb3c4e0f21713246a43dabff66fed1ce75048f8f55cf6164007a2a6635af9c248c926500a8b94f01a23b9b472bfea76d5cfd5dc63727914dd98b2bfd02b03beedb7430a517973c56d69a72f678fc2db74bff4a57f5b1942c20e16a4b53d96a38943f200dab5d1c53967020f886fe6bd9bcd8d9d", 0x9b, 0x2}, {&(0x7f0000000380)="85fea20cc8da3258306b7a3fc4a02de6960346fe9f75d39d0c5fbe831fb0fbe01d627c43409939beba2ad2467476814fe18517b68a", 0x35, 0x1}, {&(0x7f00000003c0)="0f7843e7db076accf0f57365eb65750f91f58b76642141b6e2a8684060dd094837ad2468a060af12a4bc54141d7b8a6be761ff26f40ae25ce4c1a04d77c52faa3ee80f0fc0237b375f8459c035f4ee2306aa878c3b53a8474290c283de84149d5ad6ada8740f4cc6b1cecd23af88fbbc9d03fb092722aef1dfdf9798e5d0c985a077bd4465a1e39d92efd5c58f6368a35fd47b4d771106c15504afa54fdfed4b42070a5d421a3575e66c94c1a1d5b4fb9c373d8622de0d78b1dd9f7d6a95b28d93ce0b31828915d413c7b6cda19f32b61413", 0xd2, 0xfffffffffffffffd}, {&(0x7f00000004c0)="df474679521deb5a77cd43", 0xb, 0x5}]) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000580)=0x80, 0x4) r1 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc2}, &(0x7f0000000680)={0x0, "3c2a6501e2134ff9a50eaac2df3709cab7d542a5e900e007c0b052524199a6167a7b82f12bbcb9cc9f09af7ae9e0787d6b8d24f35050ffb5d7b7bee0b98dbc41", 0x25}, 0x48, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000700)=@keyring={'key_or_keyring:', r1}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000740)={'TPROXY\x00'}, &(0x7f0000000780)=0x1e) r2 = socket(0x5, 0x5, 0x6) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb0, 0x0, 0x120, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x3}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x7}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x704}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40894}, 0x1) syz_read_part_table(0x4, 0x0, &(0x7f0000000940)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80c0}, 0x4001004) syz_read_part_table(0x2, 0x2, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="4f6ab492e5d58cf6a405aaa0aa7a18bd09d42c732b78377c9798e0c4570957d414059aec3fbab4715aaf", 0x2a, 0x7f}, {&(0x7f0000000b00)="a331070aa7b482b481078507d69d60167934b49871c22203352a1e43f4deb1d5f3915536660d3844afa18898d3790e6c9e8fa8445873999cca265666064131251d09ed7b545ac09b", 0x48, 0x567b}]) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r3) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000d00)={&(0x7f0000000bc0), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x11) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_NET_NS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c005}, 0x4000) 03:10:29 executing program 1: r0 = getpgid(0x0) r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r2 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') getrusage(0x0, &(0x7f0000000080)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140)=0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3, r4}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r8, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x2800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r12 = getpgid(r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r9, 0x501, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6f}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x49}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_PID={0x8, 0x52, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x400c810) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000018}, 0x20000080) sendmsg$NL80211_CMD_SET_POWER_SAVE(r10, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r9, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040010}, 0x8) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa4, r9, 0xb00, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x59, 0x1, "fd169c4dd2bae75bddc4fbf1263d162830c5f56ecf18e2af9e2bdbdf49fb61c558425def1842c6412ffb780d190ab10900d0492d6be96b53420f39ce9fc8fa3d044fead3aaba0074a271ac55197642b3e1136c19db"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000044}, 0x24000800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00'}) 03:10:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'veth1_to_team\x00', @ifru_data=&(0x7f0000000000)="8e0160a453734a29ecab74ed8d9d61b2d0f0345c570387b70eac19a879269a70"}}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x7f, 0x4, 0x7, 0x12, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7, 0x0, 0x8000}}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x161082, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@broadcast, @in6=@private1}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffeff, 0x40, 0xc1f, 0x0, 0x3, 0xffffffffffffffff], 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}]}, 0x78) setns(r1, 0x20000000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @broadcast}, {0x306, @random="b16c54fb3432"}, 0x60, {0x2, 0x4e23, @local}, 'gretap0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x40040000) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000700), 0x4) r4 = socket$inet(0x2, 0x5, 0x7fffffff) setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000740)=0x8000, 0x4) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=0x4) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x4d}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xbb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r5 = accept4$inet(r0, 0x0, &(0x7f0000000900), 0x800) connect$inet(r5, &(0x7f0000000940)={0x2, 0x4e23, @loopback}, 0x10) 03:10:29 executing program 3: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r1 = memfd_secret(0x80000) getsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@remote}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) r2 = accept4$inet(r1, &(0x7f0000000400)={0x2, 0x0, @local}, &(0x7f0000000440)=0x10, 0x80800) getsockopt$inet_buf(r2, 0x0, 0x9, &(0x7f0000000480)=""/166, &(0x7f0000000540)=0xa6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x80, 0x8000, 0xa9c, 0xffffff89, {{0x3e, 0x4, 0x3, 0x3e, 0xf8, 0x66, 0x0, 0x7f, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x15, 0x1, 0x5, [{@multicast2, 0x77e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0x9}, {@multicast1, 0xf3e7}, {@loopback, 0x6}, {@remote, 0x5}, {@empty, 0x2}]}, @ssrr={0x89, 0x23, 0x76, [@empty, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @multicast2, @multicast2, @remote]}, @generic={0x82, 0xe, "5ac3b6171f2c57efde4557e2"}, @cipso={0x86, 0x77, 0xffffffffffffffff, [{0x7, 0x12, "bb2fd361ad3680c557d2c4af62ce51d6"}, {0x2, 0xa, "cd329785307cc392"}, {0x6, 0x11, "ff66f17c10dd09a95b5412a20a59b7"}, {0x1, 0x7, "7aaa98ce4d"}, {0x5, 0xf, "0411d5dda901b0335b47941247"}, {0x0, 0xe, "1d6c9aad5a39e42c020ec136"}, {0x2, 0xe, "7e28ce39e1d4db3a60d7dd54"}, {0x0, 0x12, "f2c87787ba3bf242dc8252f8080af592"}]}]}}}}}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000700)={'filter\x00', 0xc0, "57847029d65a7de9ab3374a7463f074858604f5db0c4b1ec0777c990273ac2f730ea4e96974213387cd14d446c1e2c686fd588ba9ebbc615af04d8c9095bee440be031b3fe487aae66deb156acf464dfb128f78dbdb3bf4e2b76bb7e52dadae6ce26ecadcf510d837d269aa64c7fdbbcff50e2d21a82808452a84d7a8512422ecb3939d23eddd0fba3c23d53b8d2a221c54f660b28a472e05160f150899062a94e192c58f2b907664d438340731997a40951fa5fa66115f3cbdd7dad2f8028cd"}, &(0x7f0000000800)=0xe4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000840)={{0x2, 0x4e21, @empty}, {0x1, @random="55d4d76cdca7"}, 0x3a, {0x2, 0x4e24, @loopback}, 'rose0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000008c0)={0x0, 0x418, 0x1, 0x4, 0x1}, 0x14) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000900)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000940)='tls\x00', 0x0, r2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a40)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000b40)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c00)={'erspan0\x00', &(0x7f0000000b80)={'erspan0\x00', r3, 0x700, 0x8, 0x8, 0x2, {{0x16, 0x4, 0x3, 0x29, 0x58, 0x64, 0x0, 0x91, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@lsrr={0x83, 0xb, 0xe4, [@loopback, @multicast2]}, @end, @noop, @timestamp_prespec={0x44, 0x2c, 0x3, 0x3, 0x8, [{@loopback, 0x5}, {@multicast1, 0x2}, {@local}, {@local, 0xa5e0}, {@multicast1, 0x3}]}, @timestamp={0x44, 0x8, 0xed, 0x0, 0x2, [0x3]}]}}}}}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000c40)={{0x2, 0x4e22, @private=0xa010101}, {0x300, @multicast}, 0x8, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 'erspan0\x00'}) getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000cc0)=""/92, &(0x7f0000000d40)=0x5c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) 03:10:29 executing program 4: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0xc00) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0x84, [0x10001, 0xffff, 0xf5, 0x4, 0x1ff, 0x6], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/132}, &(0x7f0000000200)=0x78) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000300)='\'\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x3c}}, 0x20000088) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000480)={0x0, 'hsr0\x00', 0x2}, 0x18) r2 = accept4$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, &(0x7f0000000500)=0x10, 0x800) getsockopt$inet_buf(r2, 0x0, 0x26, &(0x7f0000000540)=""/41, &(0x7f0000000580)=0x29) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000005c0)={'icmp6\x00'}, &(0x7f0000000600)=0x1e) openat$cgroup_devices(r1, &(0x7f0000000640)='devices.deny\x00', 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000680)=""/244, &(0x7f0000000780)=0xf4) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000840)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x9, 0x69b3, 0x6, 0x4, 0xeaf], 0xa, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x118) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000980)={0x1, 'syz_tun\x00', 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r2, {0x0, 0xee01}}, './file0\x00'}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000a00)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x0, 0xa, [@remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x34}]}, 0x38) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000a40)={0x10000, 0x3, 0x6, 0xddc}, 0x14) connect$inet(r0, &(0x7f0000000a80)={0x2, 0x4e23, @local}, 0x10) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000ac0)='&%{\x00', 0x0, r0) keyctl$setperm(0x5, 0x0, 0x2000800) 03:10:29 executing program 5: getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000140)=0xdb, 0x4) r1 = accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @window={0x3, 0x3}, @timestamp, @mss={0x2, 0x726}, @mss={0x2, 0x7f}, @window={0x3, 0x4f8}, @timestamp, @sack_perm, @timestamp, @window={0x3, 0x8, 0x2}], 0xa) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000081) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000440)={'icmp\x00'}, &(0x7f0000000480)=0x1e) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000004c0)={0x8001, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000580), 0x4) r3 = add_key(&(0x7f00000005c0)='logon\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="71106a151d442f53118ebbdfcbc27a7e583e", 0x12, 0xfffffffffffffff9) getgroups(0x1, &(0x7f0000000680)=[0x0]) keyctl$chown(0x4, r3, 0xee00, r4) setsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f00000006c0)=0x4, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000700)=0x1, 0x4) ioctl$sock_ifreq(r2, 0x8913, &(0x7f0000000780)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000740)="2c3a466ca644f7c14f2ef0b0c1576da0f85131ba3a861f7f310f575a5c5b99bb"}) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000007c0)={0x4, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x5, 0x2, 0x67}, 0x2c) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000800)='ns/net\x00') setns(r5, 0x10000000) syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/mnt\x00') [ 68.224133] audit: type=1400 audit(1751857829.646:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:10:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x5) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x509000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x50) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x600, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9c}]}, 0x90}}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x128, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc00}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x1e}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r3) write$cgroup_devices(r1, &(0x7f0000000780)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(r1, &(0x7f00000007c0)={'a', ' *:* ', 'rw\x00'}, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r2, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x82, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000890) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b00), r6) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r7, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4c085) 03:10:29 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0xf4) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x69}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4008844) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x14000000) r4 = socket(0xb, 0x80000, 0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x44000) r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) waitid(0x0, r6, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800), 0xd0000, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r3) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x180, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x22}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2d}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x1c}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1c, 0x30}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4041}, 0x28854) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r9, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, r9, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x681, 0x5a}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x4c000) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x94, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3fe000, 0x5d}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xbda}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x8884}, 0x20000010) [ 69.496577] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.498567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.503887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.507255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.511575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.511762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.515052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.516738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.527805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.533780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.537768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.539097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.540477] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.552041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.552219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.554432] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.555814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.557399] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.559729] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.562773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.564669] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.566968] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.569882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.570382] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.572600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.573927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.577067] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.579673] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.587451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.594467] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.598979] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.607986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.610025] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.625950] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.626039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.628660] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.656721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.658793] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.662514] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.671038] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.988313] [ 69.988913] ============================= [ 69.989621] WARNING: suspicious RCU usage [ 69.990274] 6.16.0-rc4-next-20250704 #1 Not tainted [ 69.991657] ----------------------------- [ 69.992609] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 69.994609] [ 69.994609] other info that might help us debug this: [ 69.994609] [ 69.997187] [ 69.997187] rcu_scheduler_active = 2, debug_locks = 1 [ 69.999944] 3 locks held by syz-executor.7/287: [ 70.001533] #0: ffff88800fb6c400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 70.003760] #1: ffff88800bf0e618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 70.005269] #2: ffff88801b531270 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 70.006747] [ 70.006747] stack backtrace: [ 70.007434] CPU: 1 UID: 0 PID: 287 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250704 #1 PREEMPT(voluntary) [ 70.007461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 70.007473] Call Trace: [ 70.007481] [ 70.007489] dump_stack_lvl+0xfa/0x120 [ 70.007515] lockdep_rcu_suspicious+0x152/0x1c0 [ 70.007541] proc_sys_compare+0x28a/0x340 [ 70.007561] ? __pfx_proc_sys_compare+0x10/0x10 [ 70.007583] d_same_name+0x229/0x2e0 [ 70.007618] d_alloc_parallel+0x7c1/0x1330 [ 70.007653] ? __pfx_d_alloc_parallel+0x10/0x10 [ 70.007679] ? __pfx_default_wake_function+0x10/0x10 [ 70.007709] ? __d_lookup+0x25f/0x490 [ 70.007740] lookup_open.isra.0+0x64f/0x1530 [ 70.007772] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 70.007815] ? mnt_get_write_access+0x81/0x2d0 [ 70.007834] ? mnt_get_write_access+0x1ea/0x2d0 [ 70.007861] path_openat+0xc26/0x2880 [ 70.007899] ? __lock_acquire+0x694/0x1b70 [ 70.007920] ? __pfx_path_openat+0x10/0x10 [ 70.007959] do_filp_open+0x1e8/0x450 [ 70.007988] ? __pfx_do_filp_open+0x10/0x10 [ 70.008028] ? find_held_lock+0x2b/0x80 [ 70.008055] ? alloc_fd+0x2c1/0x560 [ 70.008081] ? lock_release+0xc8/0x290 [ 70.008108] ? alloc_fd+0x2c1/0x560 [ 70.008143] do_sys_openat2+0x104/0x1b0 [ 70.008172] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.008198] ? __fput+0x67b/0xb50 [ 70.008225] __x64_sys_openat+0x142/0x200 [ 70.008249] ? __pfx___x64_sys_openat+0x10/0x10 [ 70.008272] ? __pfx_fput_close_sync+0x10/0x10 [ 70.008306] do_syscall_64+0xbf/0x360 [ 70.008330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.008352] RIP: 0033:0x7fe358662a04 [ 70.008368] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 70.008387] RSP: 002b:00007ffd4f0efab0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 70.008407] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe358662a04 [ 70.008420] RDX: 0000000000080001 RSI: 00007fe3587192d3 RDI: 00000000ffffff9c [ 70.008433] RBP: 00007fe3587192d3 R08: 0000000000000000 R09: 00007ffd4f0efaa0 [ 70.008446] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 70.008458] R13: 00007ffd4f0efb50 R14: 0000000000000000 R15: 00000000000000f8 [ 70.008486] [ 71.587315] Bluetooth: hci0: command tx timeout [ 71.650412] Bluetooth: hci4: command tx timeout [ 71.651170] Bluetooth: hci2: command tx timeout [ 71.651807] Bluetooth: hci1: command tx timeout [ 71.653717] Bluetooth: hci6: command tx timeout [ 71.715436] Bluetooth: hci7: command tx timeout [ 71.716137] Bluetooth: hci5: command tx timeout [ 71.716978] Bluetooth: hci3: command tx timeout [ 73.637231] Bluetooth: hci0: command tx timeout [ 73.698423] Bluetooth: hci6: command tx timeout [ 73.699004] Bluetooth: hci1: command tx timeout [ 73.699521] Bluetooth: hci2: command tx timeout [ 73.699911] Bluetooth: hci4: command tx timeout [ 73.763312] Bluetooth: hci7: command tx timeout [ 73.763371] Bluetooth: hci5: command tx timeout [ 73.763812] Bluetooth: hci3: command tx timeout [ 75.682523] Bluetooth: hci0: command tx timeout [ 75.746465] Bluetooth: hci4: command tx timeout [ 75.747220] Bluetooth: hci2: command tx timeout [ 75.747913] Bluetooth: hci6: command tx timeout [ 75.748673] Bluetooth: hci1: command tx timeout [ 75.810541] Bluetooth: hci5: command tx timeout [ 75.812248] Bluetooth: hci7: command tx timeout [ 75.812939] Bluetooth: hci3: command tx timeout [ 77.730400] Bluetooth: hci0: command tx timeout [ 77.796301] Bluetooth: hci4: command tx timeout [ 77.797044] Bluetooth: hci2: command tx timeout [ 77.797716] Bluetooth: hci6: command tx timeout [ 77.797736] Bluetooth: hci1: command tx timeout [ 77.859305] Bluetooth: hci7: command tx timeout [ 77.859708] Bluetooth: hci5: command tx timeout [ 77.860086] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 03:10:31 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88801646c608 RCX=ffffffff84afbc73 RDX=ffff888033c9b700 RSI=ffffffff84afbcc0 RDI=0000000000000006 RBP=00007f886392d000 RSP=ffff8880169a6f60 R8 =0000000000000001 R9 =0000000000000001 R10=00007f886392f000 R11=0000000000000000 R12=00007f886392f000 R13=0000000000000001 R14=0000000000000008 R15=00007f8863951fff RIP=ffffffff81735e8b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8863929540 00000000 00000000 GS =0000 ffff8880e55f3000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc3a93a7290 CR3=000000001b191000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b5a45 RDI=ffffffff8871dee0 RBP=ffffffff8871dea0 RSP=ffff888032f97298 R8 =0000000000000000 R9 =ffffed1001750046 R10=0000000000000063 R11=0000000000000001 R12=0000000000000063 R13=0000000000000010 R14=ffffffff8871dea0 R15=ffffffff828b5a30 RIP=ffffffff828b5a9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558c426400 00000000 00000000 GS =0000 ffff8880e56f3000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbb618ff008 CR3=00000000332e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000