Warning: Permanently added '[localhost]:39946' (ECDSA) to the list of known hosts. 2024/11/14 12:57:18 fuzzer started 2024/11/14 12:57:19 dialing manager at localhost:46317 syzkaller login: [ 70.725818] cgroup: Unknown subsys name 'net' [ 70.799062] cgroup: Unknown subsys name 'cpuset' [ 70.840628] cgroup: Unknown subsys name 'rlimit' 2024/11/14 12:57:36 syscalls: 203 2024/11/14 12:57:36 code coverage: enabled 2024/11/14 12:57:36 comparison tracing: enabled 2024/11/14 12:57:36 extra coverage: enabled 2024/11/14 12:57:36 setuid sandbox: enabled 2024/11/14 12:57:36 namespace sandbox: enabled 2024/11/14 12:57:36 Android sandbox: enabled 2024/11/14 12:57:36 fault injection: enabled 2024/11/14 12:57:36 leak checking: enabled 2024/11/14 12:57:36 net packet injection: enabled 2024/11/14 12:57:36 net device setup: enabled 2024/11/14 12:57:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/14 12:57:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/14 12:57:36 USB emulation: enabled 2024/11/14 12:57:36 hci packet injection: enabled 2024/11/14 12:57:36 wifi device emulation: enabled 2024/11/14 12:57:36 802.15.4 emulation: enabled 2024/11/14 12:57:36 fetching corpus: 0, signal 0/0 (executing program) 2024/11/14 12:57:38 starting 8 fuzzer processes 12:57:38 executing program 0: sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0xc, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x404c894) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/devres', 0x140, 0x140) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc004104) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x2, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000014) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x4, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xdd8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb6b}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4800) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x20240, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x1d32) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000600)=0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000940)={&(0x7f00000005c0), 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x2b4, 0x1, 0x3, 0x101, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x4}, [@typed={0x4, 0x93}, @generic="a2c00dbe553a9d7e57ec3da6d3bc316fea9ee9ad9b9ec5404e1f28b1766f", @nested={0x156, 0x24, 0x0, 0x1, [@generic="451784617955f3ba308b0a54c19b7537bb6007f5324e6df22d4147b488f4fd0ed84218d65e46a7d7fd802b4cfddc0e078e7594c1aa67353c26cad2c2cba34901d0ae236d4b2565fa6cb9fd2d1467506960bb781eccb11b1bd9810b69120a9d135f8af5ee8c554a0d2b734d2527a09306a9f1398744f363aad60fc8e17021d3dc6e32d45e82274162468e50e49c699e0d4695208e845da1c77d8a9e8a02c671d2ad6f7d8b707685721a2745feab938f873dea13de2d6b2f2020211992a14aa8045bc75465", @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x69, 0x0, 0x0, @fd=r2}, @generic="91b59534b108ce56abf2eeabb054fa43e0e6fbdece582533c3157ec40e88d766d69ad56d2db6ca79a6b1eef8af3f9c6bbe9eeb8c4a08bc3b6414bc863e7db236e742e39a60162b42c6f0804e6f51cd086de1158fbb06536a1361f424f8da60d9c7c09042f9194a4da190246b4a204f12481ec582d50f3f97103b01d1a577"]}, @nested={0x68, 0x1e, 0x0, 0x1, [@typed={0x14, 0x11, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x3b, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x3a, 0x0, 0x0, @pid=r3}, @typed={0x4}, @typed={0x32, 0x7e, 0x0, 0x0, @binary="daeb7e4f7fe6d7c685f02a78c19356195ae98fcf41b1cdc9122a167c875ccc79c12303cc7a10dcaa455f698fa413"}, @typed={0x8, 0x89, 0x0, 0x0, @u32=0x2}]}, @typed={0x8, 0x5b, 0x0, 0x0, @fd=r0}, @typed={0xb1, 0x78, 0x0, 0x0, @binary="59c5c661b206ba0d7fabaae185a63a9251516259faae2221852c9135fedb6c91e61832c4df54287b6d65ceea040f8f2e59797886712f5393f74b9b97bbb4bf845cf02c607d6ebd04755f0d365e033da6e87e19a804be145377a28f2a97945e6c5da05a02550842a415c737cf4f94038e38fc458f729452b50cb6ce9ee946224f63c97600e3fb3548e4577c24eb8b068dc68365fc7434c9a3ef53ded65b95dce057b722c6fba66f9b7dff7400d2"}]}, 0x2b4}}, 0x20000) r4 = openat$cgroup_subtree(r1, &(0x7f0000000980), 0x2, 0x0) fcntl$addseals(r4, 0x409, 0x2) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000a00), 0x2, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000a40)={0x9, 0xffff, 0x2, 0x6, 0x1, 0x6}) openat$cgroup_subtree(r5, &(0x7f0000000a80), 0x2, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000ac0)=0x8) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, ':\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) r6 = openat$incfs(r1, &(0x7f0000000c00)='.pending_reads\x00', 0x80, 0x3a) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000c40)={0x7, 0x1, 0x6}) 12:57:38 executing program 1: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) r2 = openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4140, 0x6a, 0xc}, 0x18) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0xc, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000085) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000003c0)={0x81, 0x8, 0x101, 0x4, 0x1f, "c71b6bf15985c55c91909b10ae54fe88a9e749", 0x9, 0x2}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x9, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1f}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8001}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4002001}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x90, 0x1, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2bb6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x39}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000114}, 0x40008011) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc132}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x83}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x8011) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x6c, 0x0, 0xed9e429c2d5d8084, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x200, 0x9}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x21}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$TCSBRK(r4, 0x5409, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa0, 0x1, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x703}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1e}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4ad7}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400e4}, 0x20000800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r3, {0x7ff}}, './file0\x00'}) fcntl$dupfd(r1, 0x0, r5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004880}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) sendmsg$nl_netfilter(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x18, 0x0, 0x8, 0x6, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x9}, [@typed={0x4, 0x6e}]}, 0x18}, 0x1, 0x0, 0x0, 0x4805c}, 0x40080) 12:57:38 executing program 5: r0 = getgid() r1 = msgget(0x2, 0xc4) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000, 0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x2, 0xee00, r0, 0xee01, r2, 0x0, 0x4}, 0x0, 0x0, 0x8, 0x7fffffff, 0x7, 0x4, 0xfffffffffffffff7, 0x2, 0x1, 0x9, 0x0, r3}) r4 = syz_open_pts(0xffffffffffffffff, 0x200c0) ioctl$KDENABIO(r4, 0x4b36) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x2, 0x2, 0x80e, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4e}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x84) getgid() sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x3, 0x3, 0x104, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x20}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3f8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) getgid() r5 = msgget(0x3, 0x1) msgctl$MSG_INFO(r5, 0xc, &(0x7f0000000400)=""/4096) ioctl$TCXONC(r4, 0x540a, 0x1) msgctl$IPC_RMID(r1, 0x0) clone3(&(0x7f0000001680)={0x4000000, &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)=0x0, {0x38}, &(0x7f00000014c0)=""/207, 0xcf, &(0x7f00000015c0)=""/79, &(0x7f0000001640)=[r3, r3, r3, r3, r3], 0x5, {r4}}, 0x58) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000001700)=r6) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBLED(r7, 0x4b64, &(0x7f0000001740)) msgrcv(r5, &(0x7f0000001780)={0x0, ""/142}, 0x96, 0x3, 0x800) 12:57:38 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x1, 0x8, 0x1f}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x6) r1 = fork() sendmsg$nl_netfilter(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x2cc, 0x14, 0x6, 0x3, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x8}, [@generic="0f06014c38751f6eaeb27f8db30c9d861506bd155fe22f609dfb31ae7cbd8af83a81af1fbe4497d536a7e72cc36963b1dc87f2138e033ec847df426c1402ebf565677ea38f852a99aad0575fc8eae0b47bd5f13c70de2bd315fa18b4e2b2afa6555594", @typed={0x7, 0x68, 0x0, 0x0, @str='+-\x00'}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1e2, 0x8b, 0x0, 0x1, [@generic="33e60d2da326f2c6baa1e64730972297ea43eb26e40e68b46cf2a6808ee63f6b75d37b584a10dfd1364612f6e73c86006f4ade1707b7f145fba71e7818ed9b7c6cad290c2af819", @typed={0x5, 0x7c, 0x0, 0x0, @str='\x00'}, @generic="785546760ed48575a303dfbd9e0b5b83f2b33de06c51ffb1b43149ed53d96e98f4675fb65fdf6c4b0e1112b49fb219aa9d99e64cbcb41a66b4b01fe480bf768e2d6f19853262b09ac2f437c8cac10d5b14d4abc870cef33ed880d389f67f50eb1e7f83eeaed5f3ba7a4fa57f95affdf65d90403d15d257e8c3e9af3c791acd1de3008c94da7fea9708fd9cfbdbf768f0ae5c3f071fe5cc076227164e4140e9aa975d83a102cddaf12e24c09177ce300d82f53c76176a1e40", @typed={0x4, 0x84}, @generic="62ad93bf3580ccf1a80901b9c8167a4357eec923297e73170485d17a80caacddeb487e4e84a17c7aeb6bc7023a9641e7a470a4b0f81cc76d64722cb306e7158eded0a8fc185d974cd4f22507fe081e27f05e3d133562b203e000f8a4c69692157da4db0233e453f7c0f7c29b1b3a4c2548fe0c3216bdce2781ec21b5bab49afc8556fdac11bec66e8cf0be3964e3bff3ddf57d06b3859cf9316f1c69dcab72ec43d8653d68d12bbc1e23d987131e8956a6cbcd241c650c42c0cbc8def56ed9ef6c52d8fdfd7e81fbbd4356", @typed={0x8, 0x2a, 0x0, 0x0, @pid=r1}]}, @generic="d0432772de3dc50e17d0c5e6938c3f3507545ba62dc693d6df54fef556e0686b448f973c674815dfd3a725d477225f54cb054e6177981094a482d2dace6160c351698cb25bdc8d8257792393bacba42ef7709d0a855c7cd7d97e496d7d4e154797"]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048090) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x80402, 0x4, 0x4}, 0x18) renameat(r0, &(0x7f00000004c0)='./file0\x00', r2, &(0x7f0000000580)='./file0\x00') ioctl$TIOCEXCL(r0, 0x540c) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000005c0)={0x81, 0x400, 0xb71a}) r3 = getpgrp(r1) sched_rr_get_interval(r3, &(0x7f0000000600)) sched_rr_get_interval(r3, &(0x7f0000000640)) ioctl$TIOCNOTTY(r2, 0x5422) r4 = openat$incfs(r0, &(0x7f0000000680)='.pending_reads\x00', 0x200200, 0xa) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000ac0)={0x1, 0x0, 0x5, 0xe, 0x1f4, &(0x7f00000006c0)}) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$NFT_BATCH(r5, &(0x7f0000000b80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40040}, 0x20040840) sched_rr_get_interval(0x0, &(0x7f0000000c00)) 12:57:38 executing program 3: ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000040)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes128, 0x2, @desc2}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4, 0x103) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4, 0x1200) r0 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x200040, 0x166b39f72ab0c371}, 0x18) readlinkat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/4096, 0x1000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000001300)='./file0\x00', r0, &(0x7f0000001340)='./file0\x00', 0x7) r2 = openat$incfs(r1, &(0x7f0000001380)='.log\x00', 0x0, 0x5d) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f00000013c0)={@desc={0x1, 0x0, @desc2}}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) futimesat(r3, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={{}, {0x0, 0xea60}}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000014c0), 0xa000, 0x0) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) utimensat(r4, &(0x7f0000001500)='./file0\x00', &(0x7f0000001580)={{r5, r6/1000+60000}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000015c0)='/sys/module/cfg80211', 0x100, 0x60) 12:57:38 executing program 4: r0 = msgget$private(0x0, 0x100) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/23) r1 = msgget(0x1, 0x8) msgrcv(r1, &(0x7f0000000040)={0x0, ""/6}, 0xe, 0x2, 0x0) msgget(0x2, 0x128) msgsnd(0x0, &(0x7f0000000080)={0x0, "7eaeab621229743fd7ceb0775c2c69f5f6c3f660122b98a9b4e45871d270e9fe619e0122361b7ef831133b7851ec7fac6b260edf602f9a6e84f92b73c35b9ba50b1965b23772bd14f3d4cd331c9b29e0d7618f4b279561ebc2d8ba8838bc672016c9518c1707ea11bb1af8f0658ae0576274182b2c158a9c5e612783456a91fff0d9814be4c18b680116347c423b"}, 0x96, 0x0) r2 = msgget(0x2, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000140)=""/49) msgrcv(r1, &(0x7f0000000180)={0x0, ""/47}, 0x37, 0x2, 0x0) r3 = msgget(0x2, 0x8) msgctl$IPC_RMID(r3, 0x0) r4 = getpgrp(0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00, 0xe, 0xec1}, 0x0, 0x0, 0xeb48, 0x800, 0x8, 0x3, 0x4e894246, 0x400, 0x6, 0x1f, r4, 0xffffffffffffffff}) waitid(0x0, r4, 0x0, 0x1000000, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000240)=""/108) msgsnd(r3, &(0x7f00000002c0)={0x2, "7fa1d990c21a8ce2f613e80c5dc2b961213bfb4dbb4407a80fe05979e2df97c52db348b7f8"}, 0x2d, 0x800) r5 = msgget$private(0x0, 0x6cc) msgsnd(r5, &(0x7f0000000300)={0x0, "1db5e27fbc17e6528cefa84208b496c12bc57fc174e9e6c900b071ee619b89337383764f9e585e8b429ee9de72289d9aefe0f665416d8480b4763038d5d978b893c46b930badf0af800823248946b4c210469517ef4027c420d0690d649d582660d323cb500714797bd5d8533a61e90eb22805db063113dcfae5a55eed39983c8fd862f6ec2b3c9cc94d567755931e19d3fdded25ef2e86f342491d17ef5778b087a17965f19747a32d718ee28e0bc4690ba9b21"}, 0xbc, 0x800) r6 = msgget(0x0, 0x208) msgrcv(r6, &(0x7f00000003c0)={0x0, ""/93}, 0x65, 0x3, 0x3800) [ 88.890949] audit: type=1400 audit(1731589058.189:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:57:38 executing program 6: sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0xd, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) socketpair(0xb, 0x4, 0x6, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x101}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8091}, 0x40000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x40002, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x7a4c8fb92ab7d071) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0xc010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x3, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x3f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) r3 = openat$incfs(r2, &(0x7f0000000780)='.pending_reads\x00', 0x420001, 0x81) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0xc, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x0, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4814) socketpair(0x10, 0x3, 0x3ff, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040000}, 0x50) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000001040)={0x0, 0x1, 0x19, 0x19, 0x13d, &(0x7f0000000c40)="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"}) getdents64(r3, &(0x7f0000001080)=""/57, 0x39) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x204200c0}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x50, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x20}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5d}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0xd53ed9ba9094d09) 12:57:38 executing program 7: r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x88000, 0x20, 0xb}, 0x18) ioctl$KDDELIO(r0, 0x4b35, 0x9) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080)) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x5ab000, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x3, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7fa5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x50800}, 0x8080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040815}, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x3, 0x3, 0x301, 0x0, 0x0, {0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xaa60}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x400c000) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0xc000, 0x0) write$nbd(r3, &(0x7f0000000680)={0x67446698, 0x0, 0x0, 0x0, 0x2, "5e4fa32a7d23"}, 0x16) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000006c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000700)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/asound/seq/clients\x00', 0x0, 0x0) statx(r4, &(0x7f0000000780)='./file0\x00', 0x0, 0x20, &(0x7f00000007c0)) openat$incfs(r0, &(0x7f00000008c0)='.pending_reads\x00', 0x20000, 0x110) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x150, 0x1, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_STATUS={0x8}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) [ 90.247336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.249578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.250877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.257610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.260058] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.261425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.307713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.313545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.315269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.318347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.321490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.327675] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.357935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.372966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.380121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.382766] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.384550] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.386415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.432615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.433683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.439288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.440026] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.443308] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.445426] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.450661] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.458201] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.460007] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.462623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.469383] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.471920] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.479592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.509377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.516433] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.545301] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.551269] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.553452] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.560705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.562575] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.567308] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.569628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.571876] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.579586] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.582345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.610434] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.615532] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.624423] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.640823] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.643780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.334554] Bluetooth: hci0: command tx timeout [ 92.399468] Bluetooth: hci1: command tx timeout [ 92.462298] Bluetooth: hci2: command tx timeout [ 92.527409] Bluetooth: hci4: command tx timeout [ 92.593311] Bluetooth: hci5: command tx timeout [ 92.655033] Bluetooth: hci3: command tx timeout [ 92.655791] Bluetooth: hci6: command tx timeout [ 92.719472] Bluetooth: hci7: command tx timeout [ 94.385135] Bluetooth: hci0: command tx timeout [ 94.447225] Bluetooth: hci1: command tx timeout [ 94.511696] Bluetooth: hci2: command tx timeout [ 94.575465] Bluetooth: hci4: command tx timeout [ 94.638292] Bluetooth: hci5: command tx timeout [ 94.703232] Bluetooth: hci3: command tx timeout [ 94.703705] Bluetooth: hci6: command tx timeout [ 94.767256] Bluetooth: hci7: command tx timeout [ 96.431282] Bluetooth: hci0: command tx timeout [ 96.495138] Bluetooth: hci1: command tx timeout [ 96.561119] Bluetooth: hci2: command tx timeout [ 96.622190] Bluetooth: hci4: command tx timeout [ 96.686288] Bluetooth: hci5: command tx timeout [ 96.751188] Bluetooth: hci6: command tx timeout [ 96.751669] Bluetooth: hci3: command tx timeout [ 96.815233] Bluetooth: hci7: command tx timeout [ 98.478205] Bluetooth: hci0: command tx timeout [ 98.543985] Bluetooth: hci1: command tx timeout [ 98.606256] Bluetooth: hci2: command tx timeout [ 98.671714] Bluetooth: hci4: command tx timeout [ 98.735166] Bluetooth: hci5: command tx timeout [ 98.799254] Bluetooth: hci3: command tx timeout [ 98.800628] Bluetooth: hci6: command tx timeout [ 98.863312] Bluetooth: hci7: command tx timeout [ 150.158407] syz-executor.2 (288) used greatest stack depth: 24432 bytes left [ 153.188916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.190878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.195490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.197832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.199854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.200866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.211635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.214028] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.215047] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.217229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.220749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.221559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.223409] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.225951] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.227208] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.228270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.234880] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.238389] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.241804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.245564] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.247961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.249226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.250734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.261062] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.263659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.269623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.274407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.275560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.277060] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.278529] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.279720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.279739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.282910] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.282957] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.288565] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.303778] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.311500] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.318650] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.329555] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.331968] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.333249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.351626] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.359217] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.392572] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.395920] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.420257] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.425813] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.432486] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.310375] Bluetooth: hci1: command tx timeout [ 155.311643] Bluetooth: hci5: command tx timeout [ 155.313123] Bluetooth: hci0: command tx timeout [ 155.374173] Bluetooth: hci4: command tx timeout [ 155.376001] Bluetooth: hci3: command tx timeout [ 155.439224] Bluetooth: hci7: command tx timeout [ 155.440903] Bluetooth: hci6: command tx timeout [ 155.504443] Bluetooth: hci2: command tx timeout [ 157.358269] Bluetooth: hci5: command tx timeout [ 157.359891] Bluetooth: hci1: command tx timeout [ 157.359959] Bluetooth: hci0: command tx timeout [ 157.423256] Bluetooth: hci3: command tx timeout [ 157.423346] Bluetooth: hci4: command tx timeout [ 157.489337] Bluetooth: hci7: command tx timeout [ 157.489562] Bluetooth: hci6: command tx timeout [ 157.551167] Bluetooth: hci2: command tx timeout [ 159.408136] Bluetooth: hci0: command tx timeout [ 159.408271] Bluetooth: hci5: command tx timeout [ 159.408950] Bluetooth: hci1: command tx timeout [ 159.470184] Bluetooth: hci3: command tx timeout [ 159.471223] Bluetooth: hci4: command tx timeout [ 159.534273] Bluetooth: hci7: command tx timeout [ 159.534434] Bluetooth: hci6: command tx timeout [ 159.598275] Bluetooth: hci2: command tx timeout [ 161.454228] Bluetooth: hci5: command tx timeout [ 161.456138] Bluetooth: hci1: command tx timeout [ 161.456144] Bluetooth: hci0: command tx timeout [ 161.518224] Bluetooth: hci4: command tx timeout [ 161.519921] Bluetooth: hci3: command tx timeout [ 161.582325] Bluetooth: hci6: command tx timeout [ 161.583760] Bluetooth: hci7: command tx timeout [ 161.646234] Bluetooth: hci2: command tx timeout [ 215.295363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.300279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.302377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.306854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.310623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.311764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.415644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.417648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.418706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.421243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.424549] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.425569] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.617549] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.619394] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.620461] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.623282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.624705] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.625942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.683842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.689333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.693351] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.719312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.726472] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.727775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.782950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.803613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.806720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.816082] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.819954] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.823400] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.827383] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.828782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.843771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.852383] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.853560] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.862682] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.864361] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.865513] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.872394] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.889611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.894269] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.897892] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.901500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.906462] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.912998] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.913648] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.916610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.957300] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.327307] Bluetooth: hci0: command tx timeout [ 217.456162] Bluetooth: hci1: command tx timeout [ 217.646159] Bluetooth: hci2: command tx timeout [ 217.775562] Bluetooth: hci3: command tx timeout [ 217.903298] Bluetooth: hci4: command tx timeout [ 217.968151] Bluetooth: hci6: command tx timeout [ 218.031274] Bluetooth: hci5: command tx timeout [ 218.032017] Bluetooth: hci7: command tx timeout [ 219.375309] Bluetooth: hci0: command tx timeout [ 219.505105] Bluetooth: hci1: command tx timeout [ 219.695160] Bluetooth: hci2: command tx timeout [ 219.823269] Bluetooth: hci3: command tx timeout [ 219.952400] Bluetooth: hci4: command tx timeout [ 220.015147] Bluetooth: hci6: command tx timeout [ 220.078192] Bluetooth: hci7: command tx timeout [ 220.078695] Bluetooth: hci5: command tx timeout [ 221.422181] Bluetooth: hci0: command tx timeout [ 221.551147] Bluetooth: hci1: command tx timeout [ 221.744095] Bluetooth: hci2: command tx timeout [ 221.871197] Bluetooth: hci3: command tx timeout [ 221.999773] Bluetooth: hci4: command tx timeout [ 222.063462] Bluetooth: hci6: command tx timeout [ 222.128340] Bluetooth: hci5: command tx timeout [ 222.129816] Bluetooth: hci7: command tx timeout [ 223.471237] Bluetooth: hci0: command tx timeout [ 223.598175] Bluetooth: hci1: command tx timeout [ 223.791122] Bluetooth: hci2: command tx timeout [ 223.918234] Bluetooth: hci3: command tx timeout [ 224.047133] Bluetooth: hci4: command tx timeout [ 224.112093] Bluetooth: hci6: command tx timeout [ 224.175143] Bluetooth: hci7: command tx timeout [ 224.176594] Bluetooth: hci5: command tx timeout [ 276.817265] hrtimer: interrupt took 4183903 ns [ 277.572722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.580846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.582405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.584943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.588180] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.590679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.814776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.818435] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.822420] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.826214] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.829494] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.832277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.952907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.963571] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.966922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.986819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.993870] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.002820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.077426] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.080380] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.082857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.084956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.087598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.096013] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.098779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.102196] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.106855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.115266] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.117379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.123609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.139753] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.141232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.149308] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.160262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.161332] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.183285] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.184387] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.185395] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.189821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.213534] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.215937] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.218475] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.282670] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.286789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.298293] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.360445] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.388285] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.391023] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.663167] Bluetooth: hci0: command tx timeout [ 279.855165] Bluetooth: hci1: command tx timeout [ 280.046231] Bluetooth: hci2: command tx timeout [ 280.238172] Bluetooth: hci6: command tx timeout [ 280.238359] Bluetooth: hci4: command tx timeout [ 280.432348] Bluetooth: hci5: command tx timeout [ 280.558260] Bluetooth: hci3: command tx timeout [ 280.558402] Bluetooth: hci7: command tx timeout [ 281.712093] Bluetooth: hci0: command tx timeout [ 281.904116] Bluetooth: hci1: command tx timeout [ 282.095096] Bluetooth: hci2: command tx timeout [ 282.286738] Bluetooth: hci6: command tx timeout [ 282.286815] Bluetooth: hci4: command tx timeout [ 282.478121] Bluetooth: hci5: command tx timeout [ 282.606183] Bluetooth: hci7: command tx timeout [ 282.606246] Bluetooth: hci3: command tx timeout [ 283.758137] Bluetooth: hci0: command tx timeout [ 283.950283] Bluetooth: hci1: command tx timeout [ 284.142250] Bluetooth: hci2: command tx timeout [ 284.335124] Bluetooth: hci6: command tx timeout [ 284.335170] Bluetooth: hci4: command tx timeout [ 284.526150] Bluetooth: hci5: command tx timeout [ 284.656232] Bluetooth: hci3: command tx timeout [ 284.656323] Bluetooth: hci7: command tx timeout [ 285.806164] Bluetooth: hci0: command tx timeout [ 285.999259] Bluetooth: hci1: command tx timeout [ 286.191122] Bluetooth: hci2: command tx timeout [ 286.384104] Bluetooth: hci6: command tx timeout [ 286.385910] Bluetooth: hci4: command tx timeout [ 286.574250] Bluetooth: hci5: command tx timeout [ 286.703114] Bluetooth: hci7: command tx timeout [ 286.703138] Bluetooth: hci3: command tx timeout [ 340.222948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.226913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.230816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.234406] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.239738] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.242994] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.416214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.418111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.420374] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.424208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.427373] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.431147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.443467] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.446324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.447695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.452705] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.454671] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.460749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.477844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.482186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.483337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.492311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.494330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.495243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.499671] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.502067] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.505955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.511205] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.514750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.522297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.562150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.577592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.600305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.610849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.616238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.619326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.706867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.708605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.731766] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.732763] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.748436] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.749253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.774201] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.775369] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.797922] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.803517] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.811355] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.812296] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.254318] Bluetooth: hci0: command tx timeout [ 342.447092] Bluetooth: hci1: command tx timeout [ 342.574379] Bluetooth: hci2: command tx timeout [ 342.574709] Bluetooth: hci4: command tx timeout [ 342.638403] Bluetooth: hci3: command tx timeout [ 342.702215] Bluetooth: hci5: command tx timeout [ 342.894142] Bluetooth: hci6: command tx timeout [ 342.894180] Bluetooth: hci7: command tx timeout [ 344.303138] Bluetooth: hci0: command tx timeout [ 344.494155] Bluetooth: hci1: command tx timeout [ 344.623203] Bluetooth: hci2: command tx timeout [ 344.623454] Bluetooth: hci4: command tx timeout [ 344.686132] Bluetooth: hci3: command tx timeout [ 344.750166] Bluetooth: hci5: command tx timeout [ 344.942100] Bluetooth: hci7: command tx timeout [ 344.943362] Bluetooth: hci6: command tx timeout [ 346.350129] Bluetooth: hci0: command tx timeout [ 346.543298] Bluetooth: hci1: command tx timeout [ 346.670140] Bluetooth: hci4: command tx timeout [ 346.670648] Bluetooth: hci2: command tx timeout [ 346.734174] Bluetooth: hci3: command tx timeout [ 346.798254] Bluetooth: hci5: command tx timeout [ 346.990276] Bluetooth: hci6: command tx timeout [ 346.990366] Bluetooth: hci7: command tx timeout [ 348.398367] Bluetooth: hci0: command tx timeout [ 348.591070] Bluetooth: hci1: command tx timeout [ 348.718157] Bluetooth: hci2: command tx timeout [ 348.718646] Bluetooth: hci4: command tx timeout [ 348.783144] Bluetooth: hci3: command tx timeout [ 348.847124] Bluetooth: hci5: command tx timeout [ 349.038125] Bluetooth: hci6: command tx timeout [ 349.038144] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:02:48 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff847bf35d RDX=ffff88802a329b80 RSI=0000000000000000 RDI=0000000000000005 RBP=dffffc0000000000 RSP=ffff888031aa6d78 R8 =0000000000000001 R9 =ffff88800e9a980c R10=0000000000000001 R11=ffff88800e9a9c0c R12=ffff888031aa6e70 R13=0000000000000001 R14=0000000000000003 R15=0000000000000300 RIP=ffffffff8485d8c0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbbf922a540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2e58820894 CR3=000000002c032000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000330 RCX=ffffffff812f079e RDX=fffffbfff0fdc5f1 RSI=0000000000000008 RDI=ffffffff87ee2f80 RBP=ffff88800ebd3700 RSP=ffff88800bacfa28 R8 =0000000000000000 R9 =fffffbfff0fdc5f0 R10=ffffffff87ee2f87 R11=ffff88802f33a028 R12=0000000000000006 R13=ffff88800ebd4168 R14=0000000000000040 R15=0000000000000000 RIP=ffffffff812f07a6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f509d6510f0 CR3=0000000033770000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00712d3d534e4f4954504f5f45424f52 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000