Warning: Permanently added '[localhost]:40035' (ECDSA) to the list of known hosts. 2024/11/13 19:41:37 fuzzer started 2024/11/13 19:41:37 dialing manager at localhost:46317 syzkaller login: [ 67.890668] cgroup: Unknown subsys name 'net' [ 68.003425] cgroup: Unknown subsys name 'cpuset' [ 68.055704] cgroup: Unknown subsys name 'rlimit' 2024/11/13 19:41:55 syscalls: 203 2024/11/13 19:41:55 code coverage: enabled 2024/11/13 19:41:55 comparison tracing: enabled 2024/11/13 19:41:55 extra coverage: enabled 2024/11/13 19:41:55 setuid sandbox: enabled 2024/11/13 19:41:55 namespace sandbox: enabled 2024/11/13 19:41:55 Android sandbox: enabled 2024/11/13 19:41:55 fault injection: enabled 2024/11/13 19:41:55 leak checking: enabled 2024/11/13 19:41:55 net packet injection: enabled 2024/11/13 19:41:55 net device setup: enabled 2024/11/13 19:41:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/13 19:41:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/13 19:41:55 USB emulation: enabled 2024/11/13 19:41:55 hci packet injection: enabled 2024/11/13 19:41:55 wifi device emulation: enabled 2024/11/13 19:41:55 802.15.4 emulation: enabled 2024/11/13 19:41:55 fetching corpus: 0, signal 0/0 (executing program) 2024/11/13 19:41:56 starting 8 fuzzer processes 19:41:56 executing program 0: sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x48040}, 0x2000c000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x42010}, 0x80) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000740)) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4004000) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x16c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x200480d0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r2) 19:41:56 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0\x00', @ifru_addrs=@ax25={0x3, @null}}}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000044}, 0x4000000) r1 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000011c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r0, 0x0, &(0x7f00000001c0)="b0a1f09565aff65e2ce76ed2ca2d4183c35814a76bb83487300b4d24ae3eec9b42efc1d80399dd54a02cc09a0f7b9d72834e9a747291ebebb59f7601c8c60e4321976e9117932a9e6db9cde3621db6597261cb50b8e3a5014d0e97cf43beb1357634bdde38726423e3ef0480225cbf5324522d91ad0fd24c6bacd2a7fcdfa8aa4f89868a330a1df3c859fd0ef4055094a7aca6a3ae8d9642b83d319618d476b7a36c5082ff40093c8bfd678836be8f545f3d08b1db9d8890eba2d80bde9a632a5ea01fd788c801c4062d4358e397949549ddb8e95cfb7f3b3b50b641cc9a39eaca6e49e94adfa65121c63e0da875e4d6a07e97fdcc443e98a7bed340320ba6bdd8feca6d93dc013951b848908eff8bf47d3266cbd7fe8a64af66212c0aac5428f7358f13d349d678dbb71a88ecd54085231f2801dad2fbb6e2fc80b25432d218aa3e84e9b22fb3f36cfdf81eb2e2d4470d96243db104db315ba9c2a119ad92c37ceff6654be76f61503d9fdb93bf3e30d9d4ce35c6d37f32fe6348ffdbd78e2c92d3d4b38ac157355c8226819b6314459de291ca9ed7bb254783245ca16585a853ff2d14611dee455d1a48ffa27baa33aa66f4b9b3af3649ed7fad9bd276b5179a42982527965ab30ad549ef7723d5f16ec6ee7ca8497cc284b8e5c3e676187f878147626aee9486cd20ba25fc2d44c021d81998d147655820adb1c469cc8bfe1c9782e95a4c8c327ddbcf4b06f914f36725abed5e39c7ca4c876a925371b1fa909b2482f8ccdbfeab200cc9ca7f79e5fc521063e73892d684291e65455daa8e35779250a4ccb9ca6daae5b10a7e7aaa74085d6b0e9be988581e6f152f42ef84e9fd2b89eda7620719ca7b8ccf5a31551c9197621e806f9f6c9e614d197f5a80209bacd2cfa428205ebffd577b7949117a2c47474475ac0dd5d284ef47a9a635dd0c73a95dc87528de1566877957bff7091e50e5f8061f3b53f5ea8bbe54b0206867442d2c18d21a38f200d0f791c9da69c8d44534f9e3c660dc7c46ce20ce257bf4512186c63c441b82c7dac8360ac02c2e25f6f001304cc4ffb6d3fa73e5e82c725b19d8db83f1568835e882f920eb3c25485d86e2dd78d456e6aee56a23739487fd34b660fecdf890e04e29e707fbd74884807e7708174e6262d96303694353463c5a438d89b49dc337c6da2a334a0dcd745e95e264618941ea17bdb03b53a93f76f04710d43b41a0aefe15ba366db74fc90388780c126d3af785392483288aaba46aabf4f84b5686264e235a057ea0499d87a5ca5a0a1cdf7152894e91f44fff16fa76f868180bcef136d21bf0b4cc024a25ad38fad1d1a1b780350b1b3be700849bcd67676f78f3d07d4afc858af5379c0a01ab4ad17d80f2dba785bd5cad3e7b5e068c2f3f48875d18a9e3666c080dbff0f942eb84c840de683f4ede5ec059438613de468e670cfe594ea4a78f4e202b0fc80e2471710424085f3811ba2ed44a6ff4e196e74e1e455ed1bb5c913a8203a57d32228286dd53c6c542668e7c1fabee6f12fed63808875f07a8c38b1c6cde0ea2a8e6aa614f87a092662850e290b6cfaa2214e13d588cf010d2a4a379542cd52a0fda20c2ac32026fc6b5c708dcd1c1d06476b7337904c105b209807a9a0f8ba23dcb7d7475ec6caccde93bf5329941535e95c7b401907bd004f806fdac6b25956081c0377ae32179c2a0dab1f78c37cd0f3f149b4c2d86db666138cd7e62a21b3d06d40dda40eafda57da626a10a6bae29cba8907bd86e54f1973889f585c0d4b3990412cc76a4c1501943787cb61cb96f6ac9992fc858c0ff45e87d103f3b8c33199a845197bdaeffc50ff6934e58279b285d6471d41b9929137a83021a7f69d7a7f7c4cb64137fa0e1d7868ca48a6bba773e054db71cfdcf0392bda1159bf0a05fc2d5efdc81d2ec91effe7785b6e925993d3397370a99b35164762aed3db1889ae9372307725b3445382a7688e33528ddd3b1a2fa5be976c18c0f8d5d5039d97cc41a955368c46ff65cc6b7f452192cf26840ab3bc696df18f60869912e24b7c01e099f194d2c0c57a145739db335699bc261e678f9dcb02f58297bfb14b0da22ad4f92d167aa5e8febe371e80d9714885d5a3429634502231defc328af350833e88802cd62bce6e5e638a0effcb83dcca4d2030348c0b205e545c3a16355b3403b6a51affd64dc3b2de801ac0da3f4a2928e55cfe2b93389ba47939d4f04716ca5de574c7ca15785c1b8fe61200b9817f07e21e30ef6e60ceae4457c9ecc573e3f7fe3b6f76adb2dc3ec01272979372ec7cfd4482a267a7ce0102a864ec50d970a41579f9643aa6e8039c19ae11f486fe9077c82d92eb7c680bb2e1c061658ab63b00469bf9e50053eacbb7ccc6337afb4cda2f55a1088fb12c8a4c597fa00d653b7c74cce2dbf30fa87bf383b503999fd77958f291fd0b0d0f57248c7c2108a5e6e94e8e8c091773834fb3ccb79269255275353d719b3df0a86f2fd8a4b6291fdd246a1d5312e3d195089047b0dcbd0e8ea187e9e66b4ede293a3c5855c3afe031fb6257d0a608db6dcd1fb6f7395c8db8798d78a64c51408ab4aa3c74aaac8b06cce40cd8836d9af5b51fe4c78cf1afd20b6c5a06d388f0fb63ebe35d4a59d29bdf5c6a55e102a85669a62350d3620d86e473b76f6b0c4abd32c3cb45c93d2b3196791f62aeb8a73735e82ade9ee6bfc7c167339c05625f182534003b9c73f33b46c9002790f8e4c0c60b888c08d96b0b16820668fa1e3c3dfc1566c6cc2fa85a3aa23c847a277f9894e5baebc943d0aebefd2e6817f24a62574fdeac4eb22d1207e07ea5d6509db477e567df09fe33b0169f0d15f811e87c5914b76a4f5ebaceb7abb18460f10a5c17b4516b73dcbd1a80e0d37b549254683e1b72933cde9d9870366aaabbd5532563157faeef7fc5fe997af012d3ab8b631d8e6ab499543176d59ff82e9f3b1f87994583bdcd20723e5963285d0ab54c97384003455acb8a2ffee198187531fc8afa63a7772a04a6f2dc13e875863f5704808fdb8e94d718b291d44a05331ddacac7f39e0a8ff256009e8494b2ab4a5d10611ad861f56944953c89215904517deefe4734c9cd0b8be55977a87e886fa739288fe84dfffcd1594675f8b42bd64cfc407ead0a39b8ac95aecd54a42c38288230f9c21bc549f7e628b861591efff5d67bf561c3233d42a4ea35736a224e5c40963846cd69b03933f6a298e2164bfca42425daead54a9b94ee1d4cca04121d94a86123f168e918399f5dc3bf7e544ac05bb1d0862cdcb616f172c867a5b8e4ba59ef8190a79556bf3d1806f93a573ecb16ea35fd2dbea6a6bc1301836c8fe38eb761fa39d6dcfda69866c64b30ec5a45378000eff2695a2bb7d8d80367436b36c742b96b170a46926523e49e7e51ad1424378714eb128f92401a8a965673a89f65047848b70b0922f49b5d18204640123055d26563953b5001969004e2054ce1dae1a48f139f975b31c3cd997120b600df5bd0bba00d73c5dd0dd563b066838fb01bc4663754ea331ebe3ff35cc37f5e6a6bd861028501b95d5c4466cb6e082b0a8c30fe372678897dea5d1453071f125c1ec44fa6c4cb4fc60d1b82f04289f8b99aec971a8d94c6372a91b6f183bab27a535cfd454987d736cdb5dba1b8c692102a6e1f3859eebe077028aeb8337d5c9fb1ce8b9edb457d4e3a3dff1b12d397efde44854bd87d6e427d97728466dbfb3308dd6e1693f78e877be21aed95448850aa134dce9ff1ca52227393e8ca78ce4c36f1a8eaed08e01d5546c83a09b4caa28efc10691c996532383919d175fb31d4f8b23569293952862cf867dd6cdd785243ab2d20edc53a41a9af1536de8037457258de93ba82736f1a3953d8c8354690baea7582c8c015aa170308819b214b835e1644589d5588c7a370db3db9e3e06942ddcdca471a4e428ea548c8495d06724f45fe09b30bd2011668e573fa4037a2345cc43c882e01b5ceb147594d4eca775695264fb72333838bcecdff1a05ebac4c7f22474d2fa08f9826c4dba78f329771fd915c8b0ec8f38ada4aed04840394d68f284bc81f4c2fe72c544b17c6f7bdbab929cfd76d6b7b9f479b84a1fb846c670a46472ecd96dc4b2b507f3855a04a3130401a74b6f34d2a8a295ccd74d2bdddd7993e419c45f8145e711f68d4dbb4d88c19df1fb3458833cba599b4f4a2a3cf22991266dfd1c94c68294427b204f85323ad867b098d1329ad165892155789feed7fe8da4ce7a753a8b7a575ec598e17cfc588126b003024bd698c2a2a96400b96cd5f61c04a2414cb91117dcc14364bb8416305a72bd4d283875e152b27e816ce598da11e3da5deafea163a0b1f9372f00cc1b04dfb0f9b2261addcdd0ed63bcccc7b39fa31f1c37f1b816e68705784ad71a758f68d0cc40ee232d3c289cec87034b7c5047cb3509f3d51fc26d012592635fd0707d5493b6a2ca6c5108082aa51d3a764ada4861d56391f4f5475e7b9644f8fcef5f4548226dd0935ca65daa840789a0932be6375d9325cca1a14947c69667473beea8036137993e300b4a9f96dd7e24c8e05c31fb6500c75b037ab712d492d19f5575dab6755ce88a012bf0ba0f23d88456baf96bd85d0d160518e7b97c85ce1ba6a4cee1be2b16a408ee87a2838e221879d38793e8edf876bff8f02410ff698b446671c7ca90dfee62e57e168d92f384fe8c583e7ca65de4c60aa40e5521410148d57df2278a24b80abda8df882d581d5e81212a3b3fcdf28605cfc802569d0b2b1e5629eacd5654ed1c3254277c8b197490bb21cc73b8fea34c904c689f7b3a715932c3613379233c9047f2d62be1b18cda40a72c379e59f87d717c0a19acaa8312044db4543252b00c256dbab8cbf7f859c8b570274987861e7c8399cf3a8d236393dc0b646d0cdbefb13a4a52e93cfdec1ac8a6e915aeabe7f63133dbf5fb7f9950abb4af207fa1caea5b76477eaa0d1a2890bd68e1438ea43ff5bbb76e47b928629c00a4355a41e3f5614c619f937b28eab6f2b5b8645f5676484074895670fd1041ed843d42a0fbeb19b5376d67a8d92df45c0d0c003de818b8eff5438b56302629a406c7b25d66f87b0ce3c6107bbd0f086d7fe9ea50eb3aa5370954092160ccf7c2fee1775786bf3c9ef872a2ad6d6b103b02a9189851d7b66b57d6fed7c1b9f496adc56a7c25b976e542b05f14ce443065c4d32b1d74bf48bef230c061858d67c20a046f475b3a3e44bdb84fca9f4af606cb3bb9582857fc882f4833c8c499b6d89e64712373a680cf16208259586d86b12b26db0e0081159a1bc3669091a3bc92123a1db7d58c136ca925cf43e16fb33ca8a468dd1d602f547336def0553d966151c488a03928467e5c4a9a2df086f6c1cc46d7a389a98cc8949c8d3b7f89224f31e5c4affeec53c7653c6ab2a2f87542b4df41bd580dc0ab86d6c2dd8390a25044980d2c2ea228dcc87a9a454f9cfe87b11ccdcb44207501dbff6cb54a9ece348323f2d8d88ebd335922cddda8f4b5e5bb74a07047aacf3c0784b7091e3535a01bf00cfd176865495edcd58a3000359af4928c7521330e972643f83492c06cbb897ddde9c5534776170f8e4182b0c8a78ffc8b7516243c95e1c9e46e21c935c35d1f29d58b7c7e781349bcc383e6662a909c08beb3bf0e1f4a5091db8b1cceb92b4f636b55f258407bcc4f41d138cff3316c329b2852962d1854a9e2482e23086efb5474028b1be81f6b2e38b80baebdaad84ba7", 0x1000, 0x120}, 0xdba) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x10000000) r3 = syz_io_uring_setup(0x4499, &(0x7f0000001200)={0x0, 0x341c, 0x1, 0x3, 0x21e, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001280)=0x0, &(0x7f00000012c0)=0x0) r6 = syz_io_uring_complete(r4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000001340)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r1, 0x0, &(0x7f0000001300)="eba474cdc9236b8b51ca2130ef0e7a73c7880654113452c23507837751d93204376d75b87aac42e8d64f12217e", 0x2d, 0x801, 0x1, {0x0, r7}}, 0x7) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000001380)=""/142) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001440)={0x5, 0x100, 0xfffffff9, 0x7, 0x7d7a2646}, 0x14) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008005}, 0x40008d4) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000001600), &(0x7f0000001640)={'U-', 0x1}, 0x16, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000001680)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f00000016c0), &(0x7f0000001740)=0x68) 19:41:56 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x8000}}, './file0\x00'}) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x11, 0x3, 0x4}, {{0x0, 0xea60}, 0x0, 0xc99c, 0x4}, {{0x77359400}, 0x4, 0x7, 0x200}, {{}, 0x16, 0x800, 0xb9e}], 0x60) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0x9, 0x7fffffff, 0x20, 0x8, 0x9, 0x4376}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000140)=""/13) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r2, 0x1, r3, 0x6, 0x80000}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x206}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x54) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0xd93}}, './file0\x00'}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x400082, 0x0) accept(r3, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x80) getpeername$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) getpeername$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000b00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x15c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfea}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10}, 0x4048080) 19:41:57 executing program 3: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x40010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000c, 0x20010, 0xffffffffffffffff, 0x8000000) r1 = memfd_secret(0x80000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r1, &(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x2000}, 0x7ff) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffff800}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20040841) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9f}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x85}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r5 = memfd_secret(0x80000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x13, 0x0, @random="3c576691269f09849faf0f79a58a56"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x24014000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) socketpair(0x2, 0x215c1b9aea2dcd0d, 0x7, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6, {0x517, 0x800}}, './file0\x00'}) syz_io_uring_setup(0x142a, &(0x7f00000006c0)={0x0, 0xfc38, 0x2, 0x0, 0xc0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000740), &(0x7f0000000780)) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000880)={0x3, 0x81, &(0x7f00000007c0)="1ad8befaa8afa783022d916f53398551a0ab6d3ca4d6a8e0410f3819068962e2a35734a92d121d0161fed9b88b1fa1dd7055d5924f2b37117225275357efa287a5bb3a6b8ef495defa8e473f1759c67bb8cbc33196f37e72363adcd95f6ec23327f861cc8a4400d97017af63645904340b4101965098b5be0fcc5442365c7b2f20"}) accept(r6, 0x0, &(0x7f00000008c0)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940)={'L+', 0x10000}, 0x16, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000009c0)={0x40002000}) 19:41:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, 0x0, 0x700, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9a7}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x110}}, 0x20008051) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x400) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) socketpair(0x29, 0x3, 0x5, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40882}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x24440, 0x0) getpeername$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000640)={0x2fc, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r7}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x1000, 0x7, 0x0, 0x6}, {0x20, 0x4, 0x7c, 0x2}, {0x1, 0x6, 0x0, 0x3}, {0x80d, 0x0, 0x4, 0x4}, {0x81, 0xff, 0x27, 0x5a6}, {0x0, 0xfe, 0x46, 0x9}, {0x6, 0x7, 0x9, 0xa7}, {0xfff7, 0x6, 0x40, 0x4}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfffa, 0xa0, 0x1, 0x50}, {0x2, 0x4, 0x81, 0x2}, {0x6, 0x5, 0x4, 0x2}, {0x8, 0x1f, 0x8, 0x9}, {0xfffb, 0x3f, 0x6, 0x80000000}, {0x9, 0x1f, 0x40, 0x6}, {0x30, 0x0, 0x9}]}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x1}, 0x10) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000009c0), 0x8800, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a40), 0xc00200, 0x0) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) r10 = inotify_init1(0x1000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r8) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x109009}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x88, r11, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x44800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {0x200}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_SERVICE(r12, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68) [ 86.497306] audit: type=1400 audit(1731526917.018:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:41:57 executing program 5: r0 = syz_io_uring_complete(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000180)=""/4, 0x4}], 0x2, &(0x7f0000000200)=""/80, 0x50}, 0x0, 0x40, 0x0, {0x2}}, 0x9) r1 = socket(0x0, 0x2, 0x7) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r3 = memfd_secret(0x80000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000380)="6e703217a11975a85a700e2216b0069e", 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x6, 0x7, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000400), &(0x7f0000000440)={'U+', 0x4}, 0x16, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf69}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x811) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000700)='vlan1\x00') shutdown(r1, 0x1) pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000780)={0x4}) accept(r5, 0x0, &(0x7f00000007c0)) timerfd_create(0x7, 0x800) write$P9_RREADLINK(r3, &(0x7f0000000800)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 19:41:57 executing program 6: setgid(0xee00) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r3, 0x1, r6, 0x2b9, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000001c0), 0xf0, 0x105580) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r9, {0x8, 0x7}}, './file0\x00'}) syz_io_uring_setup(0xb57, &(0x7f0000000280)={0x0, 0x1a8e, 0x0, 0x1, 0x288, 0x0, r9}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r10, 0xffffffffffffff81, 0x0, 0x8}, 0x7) r12 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$EVIOCGRAB(r12, 0x40044590, &(0x7f0000000400)=0x6) r13 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r13, &(0x7f0000000440)={0x20000016}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r10, {r1, r2}}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r14, &(0x7f00000004c0)={r0, r6, 0x9}) r15 = memfd_secret(0x0) fsetxattr$trusted_overlay_nlink(r15, &(0x7f0000000500), &(0x7f0000000540)={'U-', 0x10001}, 0x16, 0x1) 19:41:57 executing program 7: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x20000000}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1ff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000100)=""/172) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000001c0)={0x10000, 0xfff, 0x5, 0x80000001, 0xff}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x7, 0x3, 0x7, 0x1ff}, {0x4, 0xff, 0x0, 0xbb96}, {0x9, 0x6, 0xb3, 0x1}, {0x3ff, 0x8e, 0x7, 0x1}]}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x2) r7 = inotify_init1(0x80000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {r7}}, './file0\x00'}) r9 = accept(r0, &(0x7f00000003c0)=@hci, &(0x7f0000000440)=0x80) r10 = syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r3) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x14844ccfb8c50aa5}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4080) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r8) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r11, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x12}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x200}]}, 0x30}}, 0x20000040) [ 87.815783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.817247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.818693] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.821246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.825442] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.826768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.884720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.887115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.888505] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.892299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.893252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.900072] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.903329] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.905207] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.909300] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.910337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.919176] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.921033] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.959772] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.960297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.973291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.973382] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.981176] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.997614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.003045] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.006533] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.011303] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.013255] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.014609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.014730] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.016558] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.017447] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.018695] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.020611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.021538] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.023308] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.024590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.024788] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.030855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.033716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.035034] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.041886] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.043836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.063329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.064324] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.089253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.093569] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.096257] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.849478] Bluetooth: hci0: command tx timeout [ 89.977709] Bluetooth: hci2: command tx timeout [ 89.978786] Bluetooth: hci1: command tx timeout [ 90.041007] Bluetooth: hci4: command tx timeout [ 90.104221] Bluetooth: hci3: command tx timeout [ 90.104255] Bluetooth: hci7: command tx timeout [ 90.104416] Bluetooth: hci5: command tx timeout [ 90.168566] Bluetooth: hci6: command tx timeout [ 91.896824] Bluetooth: hci0: command tx timeout [ 92.024223] Bluetooth: hci1: command tx timeout [ 92.024732] Bluetooth: hci2: command tx timeout [ 92.088185] Bluetooth: hci4: command tx timeout [ 92.152391] Bluetooth: hci5: command tx timeout [ 92.153201] Bluetooth: hci7: command tx timeout [ 92.153701] Bluetooth: hci3: command tx timeout [ 92.216028] Bluetooth: hci6: command tx timeout [ 93.944005] Bluetooth: hci0: command tx timeout [ 94.073206] Bluetooth: hci1: command tx timeout [ 94.073704] Bluetooth: hci2: command tx timeout [ 94.137058] Bluetooth: hci4: command tx timeout [ 94.201691] Bluetooth: hci7: command tx timeout [ 94.202342] Bluetooth: hci3: command tx timeout [ 94.202791] Bluetooth: hci5: command tx timeout [ 94.264009] Bluetooth: hci6: command tx timeout [ 95.992189] Bluetooth: hci0: command tx timeout [ 96.120202] Bluetooth: hci2: command tx timeout [ 96.120767] Bluetooth: hci1: command tx timeout [ 96.185009] Bluetooth: hci4: command tx timeout [ 96.249657] Bluetooth: hci5: command tx timeout [ 96.250169] Bluetooth: hci3: command tx timeout [ 96.250617] Bluetooth: hci7: command tx timeout [ 96.313171] Bluetooth: hci6: command tx timeout [ 150.467475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.469566] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.471466] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.477335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.479794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.495129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.603672] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.605442] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.606871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.610834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.613852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.615239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.623234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.628327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.635367] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.657408] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.664212] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.665577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.673102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.677494] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.678671] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.692433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.697107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.698362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.859962] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.867518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.880088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.892616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.894866] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.896432] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.924566] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.928531] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.934209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.935087] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.937376] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.942346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.966494] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.974384] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.982042] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.990688] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.990739] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.996511] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.000276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.011160] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.014036] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.029408] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.058258] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.064572] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.568120] Bluetooth: hci0: command tx timeout [ 152.697087] Bluetooth: hci2: command tx timeout [ 152.697814] Bluetooth: hci1: command tx timeout [ 152.761009] Bluetooth: hci3: command tx timeout [ 153.016205] Bluetooth: hci5: command tx timeout [ 153.080152] Bluetooth: hci6: command tx timeout [ 153.081651] Bluetooth: hci4: command tx timeout [ 153.146028] Bluetooth: hci7: command tx timeout [ 154.616986] Bluetooth: hci0: command tx timeout [ 154.744235] Bluetooth: hci1: command tx timeout [ 154.744261] Bluetooth: hci2: command tx timeout [ 154.809977] Bluetooth: hci3: command tx timeout [ 155.065026] Bluetooth: hci5: command tx timeout [ 155.128051] Bluetooth: hci4: command tx timeout [ 155.130973] Bluetooth: hci6: command tx timeout [ 155.193118] Bluetooth: hci7: command tx timeout [ 156.664068] Bluetooth: hci0: command tx timeout [ 156.792273] Bluetooth: hci1: command tx timeout [ 156.792819] Bluetooth: hci2: command tx timeout [ 156.856282] Bluetooth: hci3: command tx timeout [ 157.112190] Bluetooth: hci5: command tx timeout [ 157.176316] Bluetooth: hci6: command tx timeout [ 157.176755] Bluetooth: hci4: command tx timeout [ 157.240146] Bluetooth: hci7: command tx timeout [ 158.713425] Bluetooth: hci0: command tx timeout [ 158.842029] Bluetooth: hci2: command tx timeout [ 158.842574] Bluetooth: hci1: command tx timeout [ 158.904017] Bluetooth: hci3: command tx timeout [ 159.160262] Bluetooth: hci5: command tx timeout [ 159.224062] Bluetooth: hci4: command tx timeout [ 159.224602] Bluetooth: hci6: command tx timeout [ 159.289222] Bluetooth: hci7: command tx timeout [ 212.821113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.823197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.838619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.883417] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.885456] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.886452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.081285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.083238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.089096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.093104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.095235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.099948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.254403] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.528403] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.529886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.531133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.534291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.535473] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.539822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.542254] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.543257] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.574339] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.581588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.583058] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.585713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.587239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.588338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.610877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.612435] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.615471] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.616834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.617872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.625393] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.688621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.691988] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.694302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.696140] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.697137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.703209] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.757490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.843279] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.844795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.848148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.851883] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.854046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.995435] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.003182] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.004648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.905177] Bluetooth: hci0: command tx timeout [ 215.608932] Bluetooth: hci2: command tx timeout [ 215.609634] Bluetooth: hci5: command tx timeout [ 215.672264] Bluetooth: hci1: command tx timeout [ 215.674238] Bluetooth: hci4: command tx timeout [ 215.737005] Bluetooth: hci3: command tx timeout [ 215.865079] Bluetooth: hci6: command tx timeout [ 216.057066] Bluetooth: hci7: command tx timeout [ 216.953172] Bluetooth: hci0: command tx timeout [ 217.657872] Bluetooth: hci5: command tx timeout [ 217.658872] Bluetooth: hci2: command tx timeout [ 217.721106] Bluetooth: hci1: command tx timeout [ 217.723013] Bluetooth: hci4: command tx timeout [ 217.783982] Bluetooth: hci3: command tx timeout [ 217.914948] Bluetooth: hci6: command tx timeout [ 218.104076] Bluetooth: hci7: command tx timeout [ 219.000041] Bluetooth: hci0: command tx timeout [ 219.705447] Bluetooth: hci2: command tx timeout [ 219.706100] Bluetooth: hci5: command tx timeout [ 219.768050] Bluetooth: hci4: command tx timeout [ 219.768619] Bluetooth: hci1: command tx timeout [ 219.832159] Bluetooth: hci3: command tx timeout [ 219.960131] Bluetooth: hci6: command tx timeout [ 220.152176] Bluetooth: hci7: command tx timeout [ 221.053572] Bluetooth: hci0: command tx timeout [ 221.752737] Bluetooth: hci5: command tx timeout [ 221.753328] Bluetooth: hci2: command tx timeout [ 221.816984] Bluetooth: hci1: command tx timeout [ 221.817460] Bluetooth: hci4: command tx timeout [ 221.880972] Bluetooth: hci3: command tx timeout [ 222.008131] Bluetooth: hci6: command tx timeout [ 222.199989] Bluetooth: hci7: command tx timeout [ 275.241531] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.243825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.247806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.250167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.250206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.251340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.255279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.255306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.259286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.260350] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.261369] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.265602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.333705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.342651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.348390] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.348393] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.349117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.351374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.359330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.363538] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.373106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.374231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.394401] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.399322] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.404247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.409588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.430154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.436813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.438259] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.441661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.466752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.472177] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.478640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.480139] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.511185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.512231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.513529] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.514346] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.530238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.535444] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.539589] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.541303] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.543034] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.551282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.559486] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.597118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.605793] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.607341] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.304224] Bluetooth: hci0: command tx timeout [ 277.304257] Bluetooth: hci1: command tx timeout [ 277.434965] Bluetooth: hci2: command tx timeout [ 277.497037] Bluetooth: hci3: command tx timeout [ 277.624530] Bluetooth: hci7: command tx timeout [ 277.625544] Bluetooth: hci5: command tx timeout [ 277.688034] Bluetooth: hci4: command tx timeout [ 277.752009] Bluetooth: hci6: command tx timeout [ 279.351972] Bluetooth: hci0: command tx timeout [ 279.354944] Bluetooth: hci1: command tx timeout [ 279.480052] Bluetooth: hci2: command tx timeout [ 279.543975] Bluetooth: hci3: command tx timeout [ 279.672013] Bluetooth: hci5: command tx timeout [ 279.674984] Bluetooth: hci7: command tx timeout [ 279.736061] Bluetooth: hci4: command tx timeout [ 279.799953] Bluetooth: hci6: command tx timeout [ 281.400109] Bluetooth: hci1: command tx timeout [ 281.400213] Bluetooth: hci0: command tx timeout [ 281.528918] Bluetooth: hci2: command tx timeout [ 281.592065] Bluetooth: hci3: command tx timeout [ 281.721149] Bluetooth: hci7: command tx timeout [ 281.721212] Bluetooth: hci5: command tx timeout [ 281.784015] Bluetooth: hci4: command tx timeout [ 281.849151] Bluetooth: hci6: command tx timeout [ 283.448115] Bluetooth: hci1: command tx timeout [ 283.449645] Bluetooth: hci0: command tx timeout [ 283.579055] Bluetooth: hci2: command tx timeout [ 283.641265] Bluetooth: hci3: command tx timeout [ 283.767991] Bluetooth: hci5: command tx timeout [ 283.769085] Bluetooth: hci7: command tx timeout [ 283.833432] Bluetooth: hci4: command tx timeout [ 283.895966] Bluetooth: hci6: command tx timeout [ 337.768784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.776757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.781651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.786677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.788754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.791923] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.799591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.819244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.833184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.846153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.851701] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.854366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.863466] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.873128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.874491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.883945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.890269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.891567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.982076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.989369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.993956] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.995385] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.996815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.002157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.004398] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.005698] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.015105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.021133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.039149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.039511] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.043391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.047543] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.052272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.053403] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.079119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.080314] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.088650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.100619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.102260] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.103740] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.123828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.131167] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.158134] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.167036] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.167059] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.174088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.175837] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.181133] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.831970] Bluetooth: hci1: command tx timeout [ 339.896154] Bluetooth: hci0: command tx timeout [ 339.959972] Bluetooth: hci2: command tx timeout [ 340.024056] Bluetooth: hci5: command tx timeout [ 340.152162] Bluetooth: hci4: command tx timeout [ 340.216014] Bluetooth: hci3: command tx timeout [ 340.345350] Bluetooth: hci7: command tx timeout [ 340.792903] Bluetooth: hci6: command tx timeout [ 341.880047] Bluetooth: hci1: command tx timeout [ 341.944279] Bluetooth: hci0: command tx timeout [ 342.008050] Bluetooth: hci2: command tx timeout [ 342.074052] Bluetooth: hci5: command tx timeout [ 342.200017] Bluetooth: hci4: command tx timeout [ 342.266000] Bluetooth: hci3: command tx timeout [ 342.392143] Bluetooth: hci7: command tx timeout [ 342.840369] Bluetooth: hci6: command tx timeout [ 343.928066] Bluetooth: hci1: command tx timeout [ 343.992993] Bluetooth: hci0: command tx timeout [ 344.055941] Bluetooth: hci2: command tx timeout [ 344.120014] Bluetooth: hci5: command tx timeout [ 344.248036] Bluetooth: hci4: command tx timeout [ 344.311951] Bluetooth: hci3: command tx timeout [ 344.439958] Bluetooth: hci7: command tx timeout [ 344.889998] Bluetooth: hci6: command tx timeout [ 345.976136] Bluetooth: hci1: command tx timeout [ 346.040175] Bluetooth: hci0: command tx timeout [ 346.104262] Bluetooth: hci2: command tx timeout [ 346.168131] Bluetooth: hci5: command tx timeout [ 346.296094] Bluetooth: hci4: command tx timeout [ 346.359960] Bluetooth: hci3: command tx timeout [ 346.505100] Bluetooth: hci7: command tx timeout [ 346.935969] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 19:47:07 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffff88801b427158 RDX=0000000000000001 RSI=ffffffff813ef6ff RDI=ffff88801b4270b8 RBP=ffff88801b427110 RSP=ffff88801b427048 R8 =0000000000000001 R9 =ffff88801b4270f8 R10=000000000003c001 R11=0000000000003eff R12=ffff88801b427118 R13=ffff88801b427100 R14=ffff88801b4270f9 R15=ffff88801b4270b8 RIP=ffffffff8114919a RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f13ca67b8e0 CR3=000000002c95e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=fffffbfff0c7eef2 RBX=fffffbfff0c7eef3 RCX=ffffffff8139b72e RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff863f7790 RBP=fffffbfff0c7eef2 RSP=ffff888029bc7950 R8 =0000000000000000 R9 =fffffbfff0c7eef2 R10=ffffffff863f7797 R11=00000000000c33ea R12=ffff88806cf00000 R13=ffff88806cf3c780 R14=ffff88806cf3c820 R15=0000000000000000 RIP=ffffffff818bb09b RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556b599b5080 CR3=00000000319dc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000