Warning: Permanently added '[localhost]:42520' (ECDSA) to the list of known hosts. 2025/01/21 05:40:31 fuzzer started 2025/01/21 05:40:32 dialing manager at localhost:44833 syzkaller login: [ 70.778548] cgroup: Unknown subsys name 'net' [ 70.890604] cgroup: Unknown subsys name 'cpuset' [ 70.926194] cgroup: Unknown subsys name 'rlimit' [ 77.544959] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 88.553394] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/21 05:40:51 syscalls: 2217 2025/01/21 05:40:51 code coverage: enabled 2025/01/21 05:40:51 comparison tracing: enabled 2025/01/21 05:40:51 extra coverage: enabled 2025/01/21 05:40:51 setuid sandbox: enabled 2025/01/21 05:40:51 namespace sandbox: enabled 2025/01/21 05:40:51 Android sandbox: enabled 2025/01/21 05:40:51 fault injection: enabled 2025/01/21 05:40:51 leak checking: enabled 2025/01/21 05:40:51 net packet injection: enabled 2025/01/21 05:40:51 net device setup: enabled 2025/01/21 05:40:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 05:40:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 05:40:51 USB emulation: enabled 2025/01/21 05:40:51 hci packet injection: enabled 2025/01/21 05:40:51 wifi device emulation: enabled 2025/01/21 05:40:51 802.15.4 emulation: enabled 2025/01/21 05:40:51 fetching corpus: 50, signal 15138/16313 (executing program) 2025/01/21 05:40:51 fetching corpus: 100, signal 19016/21012 (executing program) 2025/01/21 05:40:51 fetching corpus: 150, signal 20289/23051 (executing program) 2025/01/21 05:40:51 fetching corpus: 200, signal 21144/24642 (executing program) 2025/01/21 05:40:51 fetching corpus: 250, signal 22926/26843 (executing program) 2025/01/21 05:40:51 fetching corpus: 299, signal 23570/28097 (executing program) 2025/01/21 05:40:51 fetching corpus: 299, signal 23570/28920 (executing program) 2025/01/21 05:40:51 fetching corpus: 299, signal 23570/29705 (executing program) 2025/01/21 05:40:51 fetching corpus: 299, signal 23570/30457 (executing program) 2025/01/21 05:40:51 fetching corpus: 299, signal 23570/31233 (executing program) 2025/01/21 05:40:51 fetching corpus: 299, signal 23570/32002 (executing program) 2025/01/21 05:40:51 fetching corpus: 299, signal 23570/32757 (executing program) 2025/01/21 05:40:51 fetching corpus: 299, signal 23570/33543 (executing program) 2025/01/21 05:40:51 fetching corpus: 299, signal 23570/34292 (executing program) 2025/01/21 05:40:52 fetching corpus: 299, signal 23570/35076 (executing program) 2025/01/21 05:40:52 fetching corpus: 299, signal 23570/35849 (executing program) 2025/01/21 05:40:52 fetching corpus: 299, signal 23570/36638 (executing program) 2025/01/21 05:40:52 fetching corpus: 299, signal 23570/37395 (executing program) 2025/01/21 05:40:52 fetching corpus: 299, signal 23570/38157 (executing program) 2025/01/21 05:40:52 fetching corpus: 299, signal 23570/38286 (executing program) 2025/01/21 05:40:52 fetching corpus: 299, signal 23570/38286 (executing program) 2025/01/21 05:40:55 starting 8 fuzzer processes 05:40:55 executing program 0: fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@sha1={0x1, "24af42e5537c20f70fb008e3d3540f8c642d0ca2"}, 0x15, 0x3) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) copy_file_range(r1, &(0x7f00000000c0)=0x6d8, r0, &(0x7f0000000100)=0x2, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = syz_open_pts(r0, 0x800) r3 = socket$inet6(0xa, 0x80000, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000280)={r3}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x10000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'batadv0\x00', &(0x7f0000000400)=@ethtool_link_settings={0x4c, 0x5, 0x2, 0xb8, 0x0, 0x4, 0x28, 0x81, 0x1c, 0x9, [0xf, 0x10, 0x95, 0x80, 0x10001, 0x3, 0x0, 0x4], [0x1, 0x8001]}}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000d80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f00000004c0)={0x85c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x160, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x158, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "3b67a3473f7c4d67db1abc3eb44fa2df3d7c11cd1f4b998096e04409e87cebf44a235e16cd356a2855a1b7bd73ec87f085b7820a2713ecb56d618b11ff1ac9ca672425e3f9daf376e38147f74728d6d1d80f4af1ef1b1f52fbb0f61acc2095c01c256ff081bc28402d05a971f2afffc8e33cefece62dd614fc173947b92aa16239363dfbb73087761bbc0eb4439fa5358bdbb866f1295463847046bc870d1625628f1f7e47735f8fd7d9c0c58d66222074ae50d5e1e61a08d4f93fae516776110d62d8700aeaebdd697e2f685d6a420dd54f5af76ef85fa06d5d0752f9b9de46bb704a3fd898fdfc7d4fb76d8fa9c0a80934d33c80d2d4ff48429af8271ff4"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x40}]}, @NL80211_ATTR_NAN_FUNC={0x408, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "00e9fb09cf41"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x96, 0xb, "d16733b604032b425ea29842a3bcad094a674c2caf37f6559c8fc2ef9d6716b3d57ec9d62f786f8cd18cdfb49750277b782c1fbccb69f24d0029fa5524267fd41d3aeb89618ef170455fa0c22650a97bb0875e67984ecad951000109e6c404adc2d78fdaef70b2376505aace8044c8457a1973377a79bc26a625435dd28839a72db6496455e785c6acae9ae5d543fad8e365"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xff}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "52d0aba4e0f3"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x102, 0xb, "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"}, @NL80211_NAN_FUNC_SRF={0x138, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xff}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x108, 0xe, 0x0, 0x1, [{0x103, 0x0, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xf2}]}, @NL80211_ATTR_NAN_FUNC={0x2c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "87be030f4a26"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x81, 0xb, "e560a5022c54d4582af7f789ebe140babf59fa869032cd39cadb3943e77ffa54b405464947eae9ea5472be0c4ce92ee9769fb3760e477f6c93ece66a734f992a367f023d9d8667c24790c05fdd4761caf9a900b1621354c6044b66d86e7bf83d8d4b77523d816742141a38a6e5f7e21e0b8db63a69fd4177b49f55f61d"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xd8, 0xd, 0x0, 0x1, [{0x92, 0x0, "52944d79966372bdf85d349bfa5fac1bc5c9f0202ac1fe21685029a090991cdbc2eec2aab630de80ec70691f9219db60abd22e5988ba212b729142f93c6ec2ace63dc3db8beae6cbb0151ab13f74237539d43d10d1559e62aa154bdbca241a0775b77ba26f47ce95ef7a9dd98c70e4b8ab325dfe9f8586f3870b5d913af674583bc00b32d242aafd3babef6fc864"}, {0x39, 0x0, "1a2f24c83e1a1dc40cc32d1d64f0d5f7f4e1dae447830471cfc125e245fed6527306e5fddacf94cce15814360062d25c9a3dab5564"}, {0x4}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x154, 0xd, 0x0, 0x1, [{0x94, 0x0, "39ed02cf72d5d21a147c372cf97a42be21b4a024756ba8cba55fa62b242857f723872ff02fffc972164763741320f8c74d58a097b0af6b2c726f996dae6c0bfc24b602f501cb2aec68d70932b91ffe6556167acd5b15917057c796f8971d09a8ce03d955c7b0e4279d059e641d1313505d88631f159e9884e1de4c6b69b28831afa7aa54eeabdb81b026628bb67df785"}, {0xbb, 0x0, "93e83f30a2767325481508f025e3faf9fa1172c9d6119bc2e8026092f8b8c27a30c98d3f7a3ba58d68481db81bdf62cb716d88eabb83c07641a363fd4bba8b6a1916a634566132525ced9abc8ef2e25d7b0cba3251a81de869e69c8b3d352684a9959cf503711c828942d30939f0b175afa519532fa421af04af917c1a2dbc8eccd058aa464970f7d4b386a6a0aef5d87ab1f1128f48917f96e664440db61866cfb340815ec6cf070006633a9cf1cacd2fb1a8c9f8d65c"}]}]}]}, 0x85c}, 0x1, 0x0, 0x0, 0x400d5}, 0x200080c) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000dc0)={0x0, 0x4, [0x8, 0x20, 0x2, 0x1, 0x4d, 0x20]}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000e40)={{0x0, 0x9}, 0x100, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000f80)={0x76f, 0x7, 0x8, {0x8, 0xf0000000}, 0x2a7, 0x2}) fcntl$getown(r3, 0x9) fsmount(r1, 0x0, 0x5) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x7c, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) 05:40:55 executing program 1: setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x3ff, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040)=0x6, 0x4) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x9) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x55, &(0x7f0000000100)=0x2) r1 = open$dir(&(0x7f0000000140)='./file1\x00', 0xa0802, 0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r3 = accept4(r0, &(0x7f00000001c0)=@isdn, &(0x7f0000000240)=0x80, 0x80000) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x8000000) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x5, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x5f}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x440400c5) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000480)) link(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000540)=@generic={0x2, 0x8, 0xeae}) mount$9p_virtio(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', &(0x7f0000000600), 0x800000, &(0x7f0000000640)={'trans=virtio,', {[{@loose}, {@nodevmap}, {@dfltuid}, {@version_L}, {@cachetag={'cachetag', 0x3d, '*}[]/'}}, {@mmap}, {@mmap}], [{@subj_user={'subj_user', 0x3d, '\x98]^*'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x1c'}}, {@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@uid_lt={'uid<', 0xee01}}, {@seclabel}]}}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20040000) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0xd4, 0x1000, 0xffffffffffffffff}, &(0x7f0000000840)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000880)=0x8) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1e4, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000000}, 0xc094) r4 = openat$cgroup_ro(r0, &(0x7f0000000b80)='net_prio.prioidx\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) 05:40:55 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x8, 0x7, 0x2, 0x6, 0xc, 0x0, 0x6, 0x7ff, 0xfffffffd, 0x20, 0x1f, 0x71, 0x0, 0x8000}}) r0 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000001000), &(0x7f0000001040)=0xc) write$binfmt_aout(r0, &(0x7f0000001080)={{0x10b, 0xae, 0x7f, 0x359, 0xa5, 0x7a, 0x85, 0x9}, "", ['\x00', '\x00', '\x00']}, 0x320) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) process_mrelease(r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001400)={0x0, 0x3, 0xffffffffffffffff, 0x1ff, 0x80000}) fchdir(r2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001440)={{0x1, 0x1, 0x18, r1, {0x6579}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xdd2d}}, './file0/file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000014c0)={{0x40, 0x4}, 0x0, 0x6, 0x0, {0x5, 0x80}, 0x6, 0xb10e}) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000001640)={0x1, 'veth0_vlan\x00', {}, 0x6}) r4 = signalfd4(r3, &(0x7f0000001680)={[0xffffffff]}, 0x8, 0x100800) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f00000016c0)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001700), 0x8a000, 0x0) ioctl$TIOCCBRK(r5, 0x5428) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001780)={{0x1, 0x1, 0x18, r1}, './file0/file0/file0\x00'}) 05:40:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}]}, 0x64}}, 0x24000040) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xa257}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000003c0)={0x2, 'dummy0\x00', {0x4}, 0x3f}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xa081, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) write$binfmt_aout(r5, &(0x7f0000000480)={{0x108, 0x0, 0xff, 0x102, 0x3db, 0x1, 0x9b, 0x4}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x61e) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000ac0)=""/170) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x45) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x68, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000080) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000f00)="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") ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001000)) r7 = signalfd(r0, &(0x7f0000003500)={[0x684eca45]}, 0x8) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000003600)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfe}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 05:40:55 executing program 4: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000180)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000200)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000240)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000280)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000002c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000300)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000340)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000380)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000003c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000400)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000440)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000480)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000004c0)) [ 94.016772] audit: type=1400 audit(1737438055.968:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:40:55 executing program 5: shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/37) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/104) r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/163) clock_gettime(0x0, &(0x7f0000004880)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000046c0)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)=""/123, 0x7b}], 0x1, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/72, 0x48}], 0x1, &(0x7f00000003c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)=""/75, 0x4b}, {&(0x7f0000000600)=""/121, 0x79}], 0x2, &(0x7f00000006c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/123, 0x7b}, {&(0x7f0000000780)=""/221, 0xdd}], 0x2, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x90}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/124, 0x7c}], 0x5, &(0x7f0000002c80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000002dc0), 0x6e, &(0x7f0000004480)=[{&(0x7f0000002e40)=""/234, 0xea}, {&(0x7f0000002f40)=""/238, 0xee}, {&(0x7f0000003040)=""/3, 0x3}, {&(0x7f0000003080)=""/232, 0xe8}, {&(0x7f0000003180)=""/250, 0xfa}, {&(0x7f0000003280)=""/147, 0x93}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/14, 0xe}, {&(0x7f0000004380)=""/104, 0x68}, {&(0x7f0000004400)=""/69, 0x45}], 0xa}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000004540)=""/3, 0x3}, {&(0x7f0000004580)=""/52, 0x34}], 0x2, &(0x7f0000004600)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}], 0x7, 0x2082, &(0x7f00000048c0)={r1, r2+10000000}) r9 = getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000004940)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000004980)={{0x2, 0xee01, r4, 0xffffffffffffffff, r9, 0x80, 0x400}, 0x8, 0x10000, 0x4, 0x4, r10, 0xffffffffffffffff, 0x4}) r11 = shmget(0x2, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_INFO(r11, 0x3, &(0x7f0000004a00)=""/121) r12 = shmget(0x3, 0x8000, 0x20, &(0x7f0000ff8000/0x8000)=nil) shmat(r12, &(0x7f0000ffb000/0x1000)=nil, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004b00)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000004a80)="f2a2ad23ef362e3e9ec3e4e78fb7edcf4e7595c6809c6139421b2308b20db96851c7044d1eee688f38faebaf66afb9d22d32cefba05cc20a05ee8eb203bf5ee68fc6c7da3e2d6462e2c09859c11e56c1f85a03693e3884f1528c5e8a46ceb731bd3a147231931a9a0f207e", 0x6b, r3}, 0x68) shmctl$IPC_INFO(r12, 0x3, &(0x7f0000004b80)=""/27) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffe000/0x2000)=nil) stat(&(0x7f0000004bc0)='./file0\x00', &(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r11, 0x1, &(0x7f0000004c80)={{0x2, r6, r7, r8, r13, 0x108, 0xe0f}, 0x4, 0x9, 0x800, 0x6, 0xffffffffffffffff, r5, 0x8}) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x30, 0xffffffffffffffff, 0x3) 05:40:56 executing program 6: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28048004}, 0x20000080) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x101400, 0x102) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}}, 0x4000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xc000, 0x86) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000440)={0x0, 0x7, 0x80000, 0x1}) execve(&(0x7f0000000840)='./file0\x00', &(0x7f0000000940)=[&(0x7f0000000880)='IPVS\x00', &(0x7f00000008c0)='syz1\x00', &(0x7f0000000900)='#\x00'], &(0x7f0000000a80)=[&(0x7f0000000980)='\x00', &(0x7f00000009c0)='\'\x00', &(0x7f0000000a00)='IPVS\x00', &(0x7f0000000a40)='[\x00']) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/schedstat\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r1) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r5, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}]]}, 0x34}, 0x1, 0x0, 0x0, 0x6000040}, 0x4004) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c40), 0x4000, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r1) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x14c, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x14c}}, 0x40d0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f00000011c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000000f80)={0x1e8, 0x1, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT={0x140, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000082}, 0x4000080) fcntl$setsig(r6, 0xa, 0x27) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000001240)={r8, 0xffffffffffffffff, 0x1}) 05:40:56 executing program 7: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x7ff, 0x6, 0x5, 0x17, "2e326472a8115d88"}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0xad, 0x3f, 0x9, 0x800, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000100)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x10, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000180)={0x0, 0x25, 0xbe39}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000580)={0x8, 0x8, 0x5, 0x2, 0xff, 0x40, 0x9032}, 0xc) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x800001, &(0x7f00000006c0)={[{@name={'name', 0x3d, '(]#'}}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@clone_children}], [{@uid_eq}, {@uid_lt={'uid<', r2}}, {@pcr={'pcr', 0x3d, 0x23}}]}) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000b40)={0x4, 0x1f, &(0x7f0000000740)}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000b80)) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000bc0)=0x469) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/module/nf_conntrack_sip', 0x400000, 0x8) r4 = syz_open_dev$hidraw(&(0x7f0000000c40), 0x5, 0x22041) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000c80)={0xc}) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000cc0)="ce4ed14f7cb864e941a549b3282e86663fee33195838238928817787305c8b27", 0x20) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000d40)={0x2, 0xffffffff, 0x10001, 0x8001, 0x10000, 0x2, 0x4, 0x3, 0x1, 0x4, 0x6, 0xff, 0x2, 0x7}) [ 95.461510] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.462306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.462939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.468090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.468301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.471436] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.471632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.478770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.480766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.483086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.486906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.487627] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.488347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.492094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.496755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.497051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.498021] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.498382] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.532318] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.543859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.546422] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.548103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.548965] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.549337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.577032] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.587076] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.590077] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.598996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.606985] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.609291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.666609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.691040] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.700007] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.721358] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.729618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.730619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.751847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.758841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.765109] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.771841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.775924] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.776333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.780215] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.796013] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.796498] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.819875] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.822712] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.823116] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.543456] Bluetooth: hci1: command tx timeout [ 97.543783] Bluetooth: hci2: command tx timeout [ 97.543908] Bluetooth: hci0: command tx timeout [ 97.606982] Bluetooth: hci3: command tx timeout [ 97.670810] Bluetooth: hci4: command tx timeout [ 97.862940] Bluetooth: hci7: command tx timeout [ 97.863382] Bluetooth: hci5: command tx timeout [ 97.863528] Bluetooth: hci6: command tx timeout [ 99.591052] Bluetooth: hci0: command tx timeout [ 99.591156] Bluetooth: hci2: command tx timeout [ 99.591252] Bluetooth: hci1: command tx timeout [ 99.654778] Bluetooth: hci3: command tx timeout [ 99.718776] Bluetooth: hci4: command tx timeout [ 99.911620] Bluetooth: hci6: command tx timeout [ 99.911743] Bluetooth: hci5: command tx timeout [ 99.911827] Bluetooth: hci7: command tx timeout [ 101.638896] Bluetooth: hci1: command tx timeout [ 101.639051] Bluetooth: hci2: command tx timeout [ 101.639136] Bluetooth: hci0: command tx timeout [ 101.702846] Bluetooth: hci3: command tx timeout [ 101.766802] Bluetooth: hci4: command tx timeout [ 101.958977] Bluetooth: hci7: command tx timeout [ 101.959324] Bluetooth: hci5: command tx timeout [ 101.959439] Bluetooth: hci6: command tx timeout [ 103.686943] Bluetooth: hci0: command tx timeout [ 103.687093] Bluetooth: hci2: command tx timeout [ 103.687239] Bluetooth: hci1: command tx timeout [ 103.750800] Bluetooth: hci3: command tx timeout [ 103.815087] Bluetooth: hci4: command tx timeout [ 104.006929] Bluetooth: hci6: command tx timeout [ 104.007215] Bluetooth: hci5: command tx timeout [ 104.007294] Bluetooth: hci7: command tx timeout [ 158.311436] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.313844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.316505] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.323451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.328820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.333044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.372271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.377593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.380630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.388857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.393307] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.395588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.436110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.441061] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.445031] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.450045] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.453319] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.456150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.540494] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.555254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.556044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.572880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.582124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.588093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.594011] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.595058] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.605038] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.613745] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 158.616533] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.619291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.623896] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.636704] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.637063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 158.639469] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.645909] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.646820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 158.649472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.661234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.670551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.671587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.672785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.677629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.681084] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 158.681892] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 158.687325] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.693620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.697431] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.709196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 160.390738] Bluetooth: hci0: command tx timeout [ 160.519899] Bluetooth: hci2: command tx timeout [ 160.519942] Bluetooth: hci1: command tx timeout [ 160.774797] Bluetooth: hci5: command tx timeout [ 160.774858] Bluetooth: hci4: command tx timeout [ 160.838953] Bluetooth: hci6: command tx timeout [ 160.839024] Bluetooth: hci7: command tx timeout [ 160.839617] Bluetooth: hci3: command tx timeout [ 162.439122] Bluetooth: hci0: command tx timeout [ 162.568768] Bluetooth: hci2: command tx timeout [ 162.568789] Bluetooth: hci1: command tx timeout [ 162.822804] Bluetooth: hci5: command tx timeout [ 162.823706] Bluetooth: hci4: command tx timeout [ 162.888692] Bluetooth: hci6: command tx timeout [ 162.888774] Bluetooth: hci3: command tx timeout [ 162.888825] Bluetooth: hci7: command tx timeout [ 164.486869] Bluetooth: hci0: command tx timeout [ 164.614880] Bluetooth: hci1: command tx timeout [ 164.614915] Bluetooth: hci2: command tx timeout [ 164.870898] Bluetooth: hci4: command tx timeout [ 164.871107] Bluetooth: hci5: command tx timeout [ 164.935987] Bluetooth: hci7: command tx timeout [ 164.936174] Bluetooth: hci3: command tx timeout [ 164.936339] Bluetooth: hci6: command tx timeout [ 166.534782] Bluetooth: hci0: command tx timeout [ 166.662720] Bluetooth: hci1: command tx timeout [ 166.665699] Bluetooth: hci2: command tx timeout [ 166.918889] Bluetooth: hci5: command tx timeout [ 166.918912] Bluetooth: hci4: command tx timeout [ 166.983787] Bluetooth: hci6: command tx timeout [ 166.983823] Bluetooth: hci3: command tx timeout [ 166.983913] Bluetooth: hci7: command tx timeout [ 219.860533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.863570] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.864473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.867560] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.873338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.875448] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.923106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.930032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.935874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.940026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.944986] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.950134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.014432] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.015959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.020338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.025994] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.032014] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.037868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.126870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.133042] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.151157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.151397] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.157276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.162330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.165133] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.178013] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.179466] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.187859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.192389] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.194585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.198617] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.204083] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.205851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.207064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.208349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.214092] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.218586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.220145] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.222032] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.225832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.225905] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.229070] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.237979] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.240071] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.241339] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.276350] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.276831] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.331544] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.894926] Bluetooth: hci0: command tx timeout [ 222.022767] Bluetooth: hci1: command tx timeout [ 222.086774] Bluetooth: hci2: command tx timeout [ 222.280770] Bluetooth: hci3: command tx timeout [ 222.281259] Bluetooth: hci6: command tx timeout [ 222.342726] Bluetooth: hci4: command tx timeout [ 222.409718] Bluetooth: hci7: command tx timeout [ 222.409976] Bluetooth: hci5: command tx timeout [ 223.942721] Bluetooth: hci0: command tx timeout [ 224.071745] Bluetooth: hci1: command tx timeout [ 224.134736] Bluetooth: hci2: command tx timeout [ 224.328227] Bluetooth: hci3: command tx timeout [ 224.329194] Bluetooth: hci6: command tx timeout [ 224.391908] Bluetooth: hci4: command tx timeout [ 224.454709] Bluetooth: hci5: command tx timeout [ 224.455321] Bluetooth: hci7: command tx timeout [ 225.992016] Bluetooth: hci0: command tx timeout [ 226.120688] Bluetooth: hci1: command tx timeout [ 226.183838] Bluetooth: hci2: command tx timeout [ 226.375718] Bluetooth: hci6: command tx timeout [ 226.376304] Bluetooth: hci3: command tx timeout [ 226.439734] Bluetooth: hci4: command tx timeout [ 226.502869] Bluetooth: hci5: command tx timeout [ 226.503508] Bluetooth: hci7: command tx timeout [ 228.039830] Bluetooth: hci0: command tx timeout [ 228.167748] Bluetooth: hci1: command tx timeout [ 228.232110] Bluetooth: hci2: command tx timeout [ 228.424688] Bluetooth: hci3: command tx timeout [ 228.424785] Bluetooth: hci6: command tx timeout [ 228.487654] Bluetooth: hci4: command tx timeout [ 228.553376] Bluetooth: hci7: command tx timeout [ 228.553494] Bluetooth: hci5: command tx timeout [ 282.392075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.398867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.401891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.410839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.418967] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.423415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.520201] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.524435] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.526547] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.531871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.535758] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.537741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.613495] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.618504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.633067] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.659906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.678374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.689952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.691511] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.700146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.702534] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.725736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.729213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.732226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.737059] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.737426] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.749027] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.756276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.759021] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.761291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.889047] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.892571] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.894908] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.909422] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.911158] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.912516] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.919966] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.921731] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.924120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.990228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.008940] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 283.010159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.321639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 283.340054] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 283.358075] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 283.385780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 283.422463] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 283.431559] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.487712] Bluetooth: hci0: command tx timeout [ 284.615702] Bluetooth: hci1: command tx timeout [ 284.806759] Bluetooth: hci4: command tx timeout [ 284.870724] Bluetooth: hci3: command tx timeout [ 284.872655] Bluetooth: hci2: command tx timeout [ 285.127688] Bluetooth: hci6: command tx timeout [ 285.254714] Bluetooth: hci5: command tx timeout [ 285.511772] Bluetooth: hci7: command tx timeout [ 286.535103] Bluetooth: hci0: command tx timeout [ 286.662780] Bluetooth: hci1: command tx timeout [ 286.854770] Bluetooth: hci4: command tx timeout [ 286.918817] Bluetooth: hci2: command tx timeout [ 286.918831] Bluetooth: hci3: command tx timeout [ 287.174873] Bluetooth: hci6: command tx timeout [ 287.303729] Bluetooth: hci5: command tx timeout [ 287.559685] Bluetooth: hci7: command tx timeout [ 288.583735] Bluetooth: hci0: command tx timeout [ 288.710738] Bluetooth: hci1: command tx timeout [ 288.903758] Bluetooth: hci4: command tx timeout [ 288.966719] Bluetooth: hci3: command tx timeout [ 288.967718] Bluetooth: hci2: command tx timeout [ 289.223674] Bluetooth: hci6: command tx timeout [ 289.351018] Bluetooth: hci5: command tx timeout [ 289.606706] Bluetooth: hci7: command tx timeout [ 290.630684] Bluetooth: hci0: command tx timeout [ 290.759649] Bluetooth: hci1: command tx timeout [ 290.950781] Bluetooth: hci4: command tx timeout [ 291.014975] Bluetooth: hci2: command tx timeout [ 291.015106] Bluetooth: hci3: command tx timeout [ 291.270763] Bluetooth: hci6: command tx timeout [ 291.400310] Bluetooth: hci5: command tx timeout [ 291.654721] Bluetooth: hci7: command tx timeout [ 345.052281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.062222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.063454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.070010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.083679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.087434] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.087570] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.088925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.092782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.096816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.100139] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.102011] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.195499] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.201337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.203225] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.207139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.215004] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.221629] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.225775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.231019] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.232278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.249115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.251998] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.255171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.327519] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.338281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.343855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.362467] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.379818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.382361] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.386722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.391050] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.396802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.399981] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.400315] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.405089] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.416519] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.416772] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.417747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.443506] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.445224] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.446242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.453852] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.457434] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.460101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.462819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.464959] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.468328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.142690] Bluetooth: hci0: command tx timeout [ 347.142709] Bluetooth: hci1: command tx timeout [ 347.270703] Bluetooth: hci2: command tx timeout [ 347.334679] Bluetooth: hci3: command tx timeout [ 347.526946] Bluetooth: hci6: command tx timeout [ 347.527390] Bluetooth: hci4: command tx timeout [ 347.527396] Bluetooth: hci5: command tx timeout [ 347.590829] Bluetooth: hci7: command tx timeout [ 349.190876] Bluetooth: hci1: command tx timeout [ 349.191024] Bluetooth: hci0: command tx timeout [ 349.319331] Bluetooth: hci2: command tx timeout [ 349.384637] Bluetooth: hci3: command tx timeout [ 349.574686] Bluetooth: hci4: command tx timeout [ 349.574776] Bluetooth: hci5: command tx timeout [ 349.574862] Bluetooth: hci6: command tx timeout [ 349.638753] Bluetooth: hci7: command tx timeout [ 351.238775] Bluetooth: hci1: command tx timeout [ 351.238875] Bluetooth: hci0: command tx timeout [ 351.366668] Bluetooth: hci2: command tx timeout [ 351.430878] Bluetooth: hci3: command tx timeout [ 351.623792] Bluetooth: hci6: command tx timeout [ 351.623993] Bluetooth: hci5: command tx timeout [ 351.624080] Bluetooth: hci4: command tx timeout [ 351.687629] Bluetooth: hci7: command tx timeout [ 353.286690] Bluetooth: hci0: command tx timeout [ 353.287288] Bluetooth: hci1: command tx timeout [ 353.415738] Bluetooth: hci2: command tx timeout [ 353.478749] Bluetooth: hci3: command tx timeout [ 353.670768] Bluetooth: hci4: command tx timeout [ 353.670863] Bluetooth: hci5: command tx timeout [ 353.670947] Bluetooth: hci6: command tx timeout [ 353.734702] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 05:46:00 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84a0d494 RDX=ffff888009739bc0 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff88803a257c88 R8 =0000000000000001 R9 =fffffbfff0fe19e4 R10=0000000000000001 R11=0000000000000000 R12=ffff8880330c660c R13=0000000000000000 R14=ffff888016acbae0 R15=00007f70542defff RIP=ffffffff84a0d496 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f70542db540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005602a68b2868 CR3=0000000037ca4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000016 RCX=ffffffff814f3dee RDX=fffffbfff0fe19e5 RSI=0000000000000008 RDI=ffffffff87f0cf20 RBP=ffff888015ee0a78 RSP=ffff88802ebefc00 R8 =0000000000000000 R9 =fffffbfff0fe19e4 R10=ffffffff87f0cf27 R11=0000000000000000 R12=ffff888015ee0000 R13=0000000000000000 R14=ffffffff86406170 R15=0000000000000000 RIP=ffffffff814f3df6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa244083008 CR3=000000000beae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000