[ 46.644503] audit: type=1400 audit(1735818104.171:6): avc: denied { checkpoint_restore } for pid=220 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:6305' (ECDSA) to the list of known hosts. 2025/01/02 11:41:49 fuzzer started 2025/01/02 11:41:50 dialing manager at localhost:34561 syzkaller login: [ 53.608624] cgroup: Unknown subsys name 'net' [ 53.705809] cgroup: Unknown subsys name 'cpuset' [ 53.735051] cgroup: Unknown subsys name 'rlimit' 2025/01/02 11:42:08 syscalls: 239 2025/01/02 11:42:08 code coverage: enabled 2025/01/02 11:42:08 comparison tracing: enabled 2025/01/02 11:42:08 extra coverage: enabled 2025/01/02 11:42:08 setuid sandbox: enabled 2025/01/02 11:42:08 namespace sandbox: enabled 2025/01/02 11:42:08 Android sandbox: enabled 2025/01/02 11:42:08 fault injection: enabled 2025/01/02 11:42:08 leak checking: enabled 2025/01/02 11:42:08 net packet injection: enabled 2025/01/02 11:42:08 net device setup: enabled 2025/01/02 11:42:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/02 11:42:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/02 11:42:08 USB emulation: enabled 2025/01/02 11:42:08 hci packet injection: enabled 2025/01/02 11:42:08 wifi device emulation: enabled 2025/01/02 11:42:08 802.15.4 emulation: enabled 2025/01/02 11:42:08 fetching corpus: 0, signal 0/0 (executing program) 2025/01/02 11:42:10 starting 8 fuzzer processes 11:42:10 executing program 0: r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @rand_addr=0x64010100}, {0x0, @local}, 0x2, {0x2, 0x4e23, @broadcast}, 'veth1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", "", ""]}, 0x24}}, 0x2008051) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev, @in6=@empty}}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c084) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x128, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x791b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb0, 0xc, 0x0, 0x1, [{0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3104525b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe62}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x362d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c34e854}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33f426d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x518f607e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d392428}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5d1576}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23542eb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51a0c676}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdce8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ca5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9140}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52b4e913}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x180d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6367570c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c63}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c4ab005}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x841) io_uring_setup(0x346, &(0x7f0000000740)={0x0, 0x171, 0x1, 0x3, 0x27a, 0x0, r1}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000880)={'filter\x00', 0x0, 0x4, 0x24, [0xd4a22da, 0x7c036722, 0xbee, 0xfffffffffffff290, 0x4, 0x100], 0x6, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000840)=""/36}, &(0x7f0000000900)=0x78) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r2, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) read$ptp(r4, &(0x7f0000000a80)=""/5, 0x5) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 11:42:10 executing program 3: sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x5ae482c134f58b8b}, 0x8000) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x6252, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x48005) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x72}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4004010) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0xb, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x8, 0x1, ']@+\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r0, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", "", ""]}, 0x24}}, 0x4000801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x7c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ee40651}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25b9299f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x345ccc31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) socketpair(0x21, 0x80000, 0x7ff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x300, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x44) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xc8, 0x2, 0x1, 0x101, 0x0, 0x0, {0x8, 0x0, 0x1}, [@CTA_MARK={0x8}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7f]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xdd1e}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}]}}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x7}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x81}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x804) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x60, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10000}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048}, 0x8004) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x48, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xd64}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f40), r7) 11:42:10 executing program 1: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x100000010}) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x9d, 0x18000) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc32f}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004010) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000180)) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000001c0)={{0x0, 0x2}, {0x0, 0x7fff}, 0x80000000}) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000200)={{0xda, 0x6}, {0x6, 0x4}, 0xfffff4cc, 0x0, 0x3f}) syz_io_uring_setup(0xa22, &(0x7f0000000280)={0x0, 0xf4fd, 0x20, 0x2, 0x210}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x0, {0x0, r0}, 0xffff, 0x3, 0x1, {0x0, 0x0, r0}}, 0x101) openat$cgroup_subtree(r0, &(0x7f00000003c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [0x55c0e33c, 0x400000000000000, 0x1, 0x3, 0x40, 0x80000000], 0x7, &(0x7f0000000440)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) recvfrom$inet(r3, &(0x7f0000000580)=""/13, 0xd, 0x2000, &(0x7f00000005c0)={0x2, 0x4e22, @loopback}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600), 0xea, 0x0, &(0x7f0000000640)="48181a7f25a5b282e1f8d622f238c26f45df43a157b30eebdac2b5c6879aae3ba3f922e09af32918f8237e57a432bfaffb86fdf152fbc848dd70c61105acbe0c048a0009f85f18d0471375ffbc1d75d1644ca5356cfb4553831c0b49a2035b5a739fdc93850c0ae2f84071d8dc1c472f298220161e44f9f36318155206ba799dcb623368e400df971d39b6cf5001e1d38ac307f7a96c6f119cb2b18e0f63feb426c152d31ee8eb4f77593697c4c090b7c6a4d7b381a6a55feeadd8f9646722435ba28d3e8e5276346fb6c4872f85d900fd1c80e3dda0ed6da1edba1734aecdfb950e6564c533364bcb97"}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x24000001) syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), r0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000980)=0x80, 0x800) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f00000009c0)={'filter\x00', 0x4c, "a29041beec82cd2d4ff836eda817541a8c12f366a09a9409ac3aa43475e895b54cd67a5d8b9547dbde0c0ae12059ffd1fdfc6f6c48dcdaf155ff9e875e908b3f45c75b4a58558367763f6d84"}, &(0x7f0000000a40)=0x70) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000b00)={{0x1, 0x1, 0x18}, './file0\x00'}) 11:42:10 executing program 2: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x102, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc90d}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4040084}, 0x91) r3 = socket(0x25, 0x3, 0x10000) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x11, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x20000084) accept$inet(r3, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10) recvfrom$inet(r3, &(0x7f0000000400)=""/221, 0xdd, 0x10041, &(0x7f0000000500)={0x2, 0x4e20, @private=0xa010102}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg0\x00'}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r0, 0x4, 0x8, 0x5, 0xffff, 0x4, @mcast2, @private1, 0x10, 0x8, 0x3}}) socketpair(0x8, 0xa, 0x70, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f00000007c0)={@local, @dev}, &(0x7f0000000800)=0x8) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000880)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x3ff, 0x4, 0x40, 0x9, 0x3ff], 0x4, &(0x7f0000000840)=[{}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x54}}, 0x880) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) 11:42:10 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x14000084}, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040800}, 0x8054) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1000, &(0x7f00000005c0)={0x84, 0x2, 0x0, {r4}}, 0x20) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r3) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x144, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x144}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x74, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x20}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x45}, 0x4000054) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x80010, r3, 0x0) syz_io_uring_setup(0x750d, &(0x7f0000000a80)={0x0, 0x19c5, 0x4, 0x2, 0x1e2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000b00), &(0x7f0000000b40)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000b80)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x7, 0x7, 0x0, 0xfffffff8, 0x1, 0x1}, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000bc0)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) [ 73.310415] audit: type=1400 audit(1735818130.842:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:42:10 executing program 5: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24040800) write$cgroup_freezer_state(r2, &(0x7f0000000240)='FROZEN\x00', 0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000280)={0x40, {{0x2, 0x4e21, @loopback}}, 0x1, 0x4, [{{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e21, @private=0x7ff}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x290) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000540), &(0x7f0000000580)=0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x18c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4258}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65c80c5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x439f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8e3}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13ea5148}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bab1951}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8639}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cc553b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f397e03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f93}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x123fe9d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x360b7240}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54993f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x340a92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x935b786}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64254eed}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ed708d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e93cea7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d44c710}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43df}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75747f4e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b072e32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21f9}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r7 = syz_open_dev$vcsu(&(0x7f0000000840), 0x48000, 0x200) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000880)={{0x1, 0x1, 0x18, r5, {0x8000}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@private0, @in=@broadcast}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f00000009c0)=0xe8) r8 = syz_open_dev$vcsu(&(0x7f0000000a00), 0x7, 0x440) write$9p(r8, &(0x7f0000000a40)="a3b1675ee7613d68", 0x8) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000081) 11:42:10 executing program 7: getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x5, 0x280000000, 0x0, 0x3ff, 0x1]}, &(0x7f0000000080)=0x78) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @rand_addr=0x64010102, 0x4e23, 0x3, 'lc\x00', 0x23, 0x8, 0x5a}, 0x2c) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x81, 0x20000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xf2e) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @rand_addr=0x64010101}, {0x6, @broadcast}, 0xc, {0x2, 0x4e20, @rand_addr=0x64010101}, 'ip6_vti0\x00'}) mount_setattr(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xb1979ea7ccfc2374, &(0x7f0000000240)={0x71, 0x7c, 0x40000}, 0x20) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f00000002c0)={0xd}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) recvfrom$inet(r2, &(0x7f00000007c0)=""/226, 0xe2, 0x10020, &(0x7f00000008c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0x9d}}, './file0\x00'}) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x7, 0x1, 'lc\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xacb36d23b49d1af7) getpeername$inet(r3, &(0x7f0000000a40), &(0x7f0000000a80)=0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000ac0)={@empty, @remote, @empty}, 0xc) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000b00)={@broadcast, @loopback, @remote}, &(0x7f0000000b40)=0xc) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000b80)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x330, 0x0, 0x0, 0x0, 0xffe9, 0x0, 0x4, 0x7, 0x80}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040881}, 0x58) 11:42:10 executing program 6: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000040)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) r2 = socket(0x2c, 0x800, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', r3, 0x8000, 0x40, 0xff, 0x5, {{0x1b, 0x4, 0x3, 0x19, 0x6c, 0x66, 0x0, 0x1, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x9c, 0x1, 0x3, [{@private=0xa010101, 0x4}]}, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x72, 0x1, 0xb, [{@broadcast, 0x5}, {@local, 0x8000}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x100}, {@multicast2, 0x9}, {@empty, 0x1}, {@multicast2, 0xcb31}, {@local, 0x4}]}]}}}}}) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000380)) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x400080, 0xfffffff9}}, './file0\x00'}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000001540)={'filter\x00', 0x0, 0x4, 0x1000, [0x7f, 0x6, 0xfffffffffffffffa, 0x5, 0x1ff, 0xffff], 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000000540)=""/4096}, &(0x7f00000015c0)=0x78) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000001600), &(0x7f0000001640)=0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001680)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f00000016c0)={0x1, 0x1, {0x1c, 0x3, 0xf, 0x9, 0xa, 0x3, 0x0, 0x2e}}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x6c2) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000001700)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x6, 0x8, 0x9, 0x1e6, 0x97]}, &(0x7f0000001780)=0x78) [ 74.563787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.567166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.569729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.644677] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.649161] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.651075] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.694658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.704871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.710615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.719116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.722513] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.728946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.767171] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.771840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.775401] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.778687] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.783936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.787759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.789746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.796705] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.801538] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.816035] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.824709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.832579] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.834196] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.838812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.843305] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.845951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.847721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.849650] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.851975] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.854064] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.858873] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.861221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.870296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.870911] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.877674] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.881898] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.886784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.888195] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.891128] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.894026] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.924520] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.938709] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.941487] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.943195] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.951740] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.955000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.715271] Bluetooth: hci0: command tx timeout [ 76.778474] Bluetooth: hci1: command tx timeout [ 76.906489] Bluetooth: hci3: command tx timeout [ 76.906509] Bluetooth: hci2: command tx timeout [ 76.969634] Bluetooth: hci7: command tx timeout [ 76.970433] Bluetooth: hci6: command tx timeout [ 77.034537] Bluetooth: hci4: command tx timeout [ 77.034554] Bluetooth: hci5: command tx timeout [ 78.762070] Bluetooth: hci0: command tx timeout [ 78.825721] Bluetooth: hci1: command tx timeout [ 78.954414] Bluetooth: hci2: command tx timeout [ 78.956074] Bluetooth: hci3: command tx timeout [ 79.017445] Bluetooth: hci6: command tx timeout [ 79.018010] Bluetooth: hci7: command tx timeout [ 79.081542] Bluetooth: hci5: command tx timeout [ 79.081561] Bluetooth: hci4: command tx timeout [ 80.809424] Bluetooth: hci0: command tx timeout [ 80.874392] Bluetooth: hci1: command tx timeout [ 81.001437] Bluetooth: hci3: command tx timeout [ 81.001463] Bluetooth: hci2: command tx timeout [ 81.065506] Bluetooth: hci7: command tx timeout [ 81.065967] Bluetooth: hci6: command tx timeout [ 81.129488] Bluetooth: hci5: command tx timeout [ 81.129763] Bluetooth: hci4: command tx timeout [ 82.857565] Bluetooth: hci0: command tx timeout [ 82.922413] Bluetooth: hci1: command tx timeout [ 83.049582] Bluetooth: hci3: command tx timeout [ 83.050082] Bluetooth: hci2: command tx timeout [ 83.113567] Bluetooth: hci6: command tx timeout [ 83.113590] Bluetooth: hci7: command tx timeout [ 83.177395] Bluetooth: hci4: command tx timeout [ 83.178544] Bluetooth: hci5: command tx timeout [ 138.919889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.922900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.926173] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.933554] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.938387] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.940954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.938703] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.943221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.948915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.959862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.972712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.976042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.981464] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.981504] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.993449] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.993650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.994561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.996943] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.999074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.019823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.021945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.024169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.025409] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.028624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.031825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.034562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.035727] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 140.037711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.043765] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 140.058757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.066577] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 140.066643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.071554] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 140.074470] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 140.076209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.112563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.285615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.296648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.301250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.305769] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.308900] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 140.310843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 140.763052] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 140.783742] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 140.824767] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 140.830813] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 140.833529] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 140.835753] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 140.970890] Bluetooth: hci0: command tx timeout [ 142.121583] Bluetooth: hci2: command tx timeout [ 142.121632] Bluetooth: hci5: command tx timeout [ 142.122647] Bluetooth: hci4: command tx timeout [ 142.186457] Bluetooth: hci1: command tx timeout [ 142.186492] Bluetooth: hci3: command tx timeout [ 142.378660] Bluetooth: hci6: command tx timeout [ 143.018389] Bluetooth: hci0: command tx timeout [ 143.210517] Bluetooth: hci7: command tx timeout [ 144.169485] Bluetooth: hci5: command tx timeout [ 144.169517] Bluetooth: hci2: command tx timeout [ 144.170729] Bluetooth: hci4: command tx timeout [ 144.233426] Bluetooth: hci1: command tx timeout [ 144.233893] Bluetooth: hci3: command tx timeout [ 144.425385] Bluetooth: hci6: command tx timeout [ 145.065510] Bluetooth: hci0: command tx timeout [ 145.257566] Bluetooth: hci7: command tx timeout [ 146.217683] Bluetooth: hci4: command tx timeout [ 146.217797] Bluetooth: hci5: command tx timeout [ 146.218718] Bluetooth: hci2: command tx timeout [ 146.282590] Bluetooth: hci3: command tx timeout [ 146.283476] Bluetooth: hci1: command tx timeout [ 146.473476] Bluetooth: hci6: command tx timeout [ 147.113433] Bluetooth: hci0: command tx timeout [ 147.305428] Bluetooth: hci7: command tx timeout [ 148.265441] Bluetooth: hci4: command tx timeout [ 148.265949] Bluetooth: hci5: command tx timeout [ 148.265983] Bluetooth: hci2: command tx timeout [ 148.329382] Bluetooth: hci3: command tx timeout [ 148.329845] Bluetooth: hci1: command tx timeout [ 148.521380] Bluetooth: hci6: command tx timeout [ 149.353418] Bluetooth: hci7: command tx timeout [ 200.574805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.577028] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.579203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.591261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.593086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.595070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.080257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.082886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.084498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.090354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.091474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.093446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.097245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 201.098964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.100472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.106520] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.107792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.114830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.119731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.121620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.125923] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.129917] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.150514] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 201.177963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.187082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.198572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.208537] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.211845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.222954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.224798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 201.225512] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 201.227155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.228997] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.232227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.235335] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 201.236763] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.246177] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.251066] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.255707] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.269056] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 201.284844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 201.287024] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 201.291493] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 201.294270] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.301900] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 201.303675] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 201.305500] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 201.312799] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 202.665651] Bluetooth: hci0: command tx timeout [ 203.113571] Bluetooth: hci2: command tx timeout [ 203.177575] Bluetooth: hci1: command tx timeout [ 203.241701] Bluetooth: hci3: command tx timeout [ 203.305554] Bluetooth: hci4: command tx timeout [ 203.305577] Bluetooth: hci5: command tx timeout [ 203.369397] Bluetooth: hci7: command tx timeout [ 203.433416] Bluetooth: hci6: command tx timeout [ 204.714266] Bluetooth: hci0: command tx timeout [ 205.161461] Bluetooth: hci2: command tx timeout [ 205.226139] Bluetooth: hci1: command tx timeout [ 205.292396] Bluetooth: hci3: command tx timeout [ 205.353409] Bluetooth: hci5: command tx timeout [ 205.354438] Bluetooth: hci4: command tx timeout [ 205.418365] Bluetooth: hci7: command tx timeout [ 205.481500] Bluetooth: hci6: command tx timeout [ 206.761446] Bluetooth: hci0: command tx timeout [ 207.210376] Bluetooth: hci2: command tx timeout [ 207.273412] Bluetooth: hci1: command tx timeout [ 207.337358] Bluetooth: hci3: command tx timeout [ 207.401366] Bluetooth: hci4: command tx timeout [ 207.401509] Bluetooth: hci5: command tx timeout [ 207.467343] Bluetooth: hci7: command tx timeout [ 207.529405] Bluetooth: hci6: command tx timeout [ 208.811320] Bluetooth: hci0: command tx timeout [ 209.257427] Bluetooth: hci2: command tx timeout [ 209.321462] Bluetooth: hci1: command tx timeout [ 209.387311] Bluetooth: hci3: command tx timeout [ 209.449411] Bluetooth: hci4: command tx timeout [ 209.450413] Bluetooth: hci5: command tx timeout [ 209.515351] Bluetooth: hci7: command tx timeout [ 209.578346] Bluetooth: hci6: command tx timeout [ 263.096788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.104460] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.108984] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.114216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.120372] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 263.125790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.234795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.237437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.239351] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.244143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.247814] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.250043] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.420786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.423977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.427063] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.431964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.437850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 263.440773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.628480] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.630999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.636819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.653721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.660636] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.663418] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.698859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.722956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.731691] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.751191] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.767056] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.771825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.787591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.803125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 263.811361] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.813351] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.845842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.851375] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.869743] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.892164] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 263.895359] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.896968] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.910782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.918243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 263.924807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.967999] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.991720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 264.041724] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 264.077661] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 264.105227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 265.193506] Bluetooth: hci0: command tx timeout [ 265.323397] Bluetooth: hci1: command tx timeout [ 265.513442] Bluetooth: hci2: command tx timeout [ 265.769388] Bluetooth: hci3: command tx timeout [ 265.962375] Bluetooth: hci4: command tx timeout [ 266.026390] Bluetooth: hci5: command tx timeout [ 266.089411] Bluetooth: hci7: command tx timeout [ 266.153455] Bluetooth: hci6: command tx timeout [ 267.244462] Bluetooth: hci0: command tx timeout [ 267.369450] Bluetooth: hci1: command tx timeout [ 267.561501] Bluetooth: hci2: command tx timeout [ 267.818326] Bluetooth: hci3: command tx timeout [ 268.010405] Bluetooth: hci4: command tx timeout [ 268.074437] Bluetooth: hci5: command tx timeout [ 268.137417] Bluetooth: hci7: command tx timeout [ 268.202525] Bluetooth: hci6: command tx timeout [ 269.290334] Bluetooth: hci0: command tx timeout [ 269.418325] Bluetooth: hci1: command tx timeout [ 269.610435] Bluetooth: hci2: command tx timeout [ 269.866321] Bluetooth: hci3: command tx timeout [ 270.058336] Bluetooth: hci4: command tx timeout [ 270.122475] Bluetooth: hci5: command tx timeout [ 270.188327] Bluetooth: hci7: command tx timeout [ 270.250332] Bluetooth: hci6: command tx timeout [ 271.338980] Bluetooth: hci0: command tx timeout [ 271.465904] Bluetooth: hci1: command tx timeout [ 271.657394] Bluetooth: hci2: command tx timeout [ 271.913539] Bluetooth: hci3: command tx timeout [ 272.106626] Bluetooth: hci4: command tx timeout [ 272.171348] Bluetooth: hci5: command tx timeout [ 272.233737] Bluetooth: hci7: command tx timeout [ 272.297371] Bluetooth: hci6: command tx timeout [ 325.502115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.507441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.510828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.516742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.520552] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 325.523594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.830977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.842801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.843457] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.851714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.855677] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.858148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.869635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.874671] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.880392] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 325.886470] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.888734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.893650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.897419] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 325.898819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.903662] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.918537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.923709] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 325.926504] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.958899] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.965868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.968017] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.978756] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.982642] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 325.993596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.001943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.013094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.015495] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.022172] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 326.026489] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 326.028636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 326.036560] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 326.042071] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 326.044219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 326.054556] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 326.058112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 326.060670] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.065757] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.067204] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.070039] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 326.072948] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 326.094218] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 326.096929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.593379] Bluetooth: hci0: command tx timeout [ 327.977493] Bluetooth: hci3: command tx timeout [ 327.977530] Bluetooth: hci2: command tx timeout [ 328.041749] Bluetooth: hci1: command tx timeout [ 328.105398] Bluetooth: hci4: command tx timeout [ 328.169395] Bluetooth: hci5: command tx timeout [ 328.169449] Bluetooth: hci6: command tx timeout [ 328.170078] Bluetooth: hci7: command tx timeout [ 329.641433] Bluetooth: hci0: command tx timeout [ 330.025396] Bluetooth: hci3: command tx timeout [ 330.026431] Bluetooth: hci2: command tx timeout [ 330.089311] Bluetooth: hci1: command tx timeout [ 330.153425] Bluetooth: hci4: command tx timeout [ 330.217857] Bluetooth: hci6: command tx timeout [ 330.217886] Bluetooth: hci7: command tx timeout [ 330.218313] Bluetooth: hci5: command tx timeout [ 331.689391] Bluetooth: hci0: command tx timeout [ 332.074335] Bluetooth: hci2: command tx timeout [ 332.074810] Bluetooth: hci3: command tx timeout [ 332.137367] Bluetooth: hci1: command tx timeout [ 332.201324] Bluetooth: hci4: command tx timeout [ 332.265368] Bluetooth: hci5: command tx timeout [ 332.265827] Bluetooth: hci6: command tx timeout [ 332.266417] Bluetooth: hci7: command tx timeout [ 333.738312] Bluetooth: hci0: command tx timeout [ 334.121380] Bluetooth: hci2: command tx timeout [ 334.121403] Bluetooth: hci3: command tx timeout [ 334.185326] Bluetooth: hci1: command tx timeout [ 334.251328] Bluetooth: hci4: command tx timeout [ 334.315362] Bluetooth: hci5: command tx timeout [ 334.315423] Bluetooth: hci7: command tx timeout [ 334.316106] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 11:47:18 Registers: info registers vcpu 0 RAX=1ffffffff0d06aea RBX=0000000000000001 RCX=ffffffff86835754 RDX=dffffc0000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88802a3bf5c0 RSP=ffff88802a3bf4f8 R8 =ffffffff86835758 R9 =ffff88802a3bf5a8 R10=000000000003aab6 R11=0000000000021eda R12=ffff88802a3bf5c8 R13=ffff88802a3bf5b0 R14=ffff88802a3bfab8 R15=ffff88802a3bf568 RIP=ffffffff8134a149 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f45c0a4a540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f34737f1000 CR3=000000002578c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000f911567684 RBX=0000000000000000 RCX=00000000000006e0 RDX=00000000000000f9 RSI=ffff88806cf28300 RDI=0000000000050016 RBP=ffff88806cf28300 RSP=ffff88806cf09ed0 R8 =0000000000000001 R9 =ffff88800d8e41c0 R10=00000000000e505b R11=0000000000000000 R12=0000000000050016 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf2cac0 RIP=ffffffff8131f515 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd898dfd008 CR3=0000000031070000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000