Warning: Permanently added '[localhost]:11476' (ECDSA) to the list of known hosts. 2025/01/22 09:32:45 fuzzer started 2025/01/22 09:32:45 dialing manager at localhost:44689 syzkaller login: [ 76.038303] cgroup: Unknown subsys name 'net' [ 76.109016] cgroup: Unknown subsys name 'cpuset' [ 76.126472] cgroup: Unknown subsys name 'rlimit' [ 81.523343] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 91.943062] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 09:33:02 syscalls: 2217 2025/01/22 09:33:02 code coverage: enabled 2025/01/22 09:33:02 comparison tracing: enabled 2025/01/22 09:33:02 extra coverage: enabled 2025/01/22 09:33:02 setuid sandbox: enabled 2025/01/22 09:33:02 namespace sandbox: enabled 2025/01/22 09:33:02 Android sandbox: enabled 2025/01/22 09:33:02 fault injection: enabled 2025/01/22 09:33:02 leak checking: enabled 2025/01/22 09:33:02 net packet injection: enabled 2025/01/22 09:33:02 net device setup: enabled 2025/01/22 09:33:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 09:33:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 09:33:02 USB emulation: enabled 2025/01/22 09:33:02 hci packet injection: enabled 2025/01/22 09:33:02 wifi device emulation: enabled 2025/01/22 09:33:02 802.15.4 emulation: enabled 2025/01/22 09:33:02 fetching corpus: 50, signal 8858/9892 (executing program) 2025/01/22 09:33:02 fetching corpus: 59, signal 8959/10976 (executing program) 2025/01/22 09:33:02 fetching corpus: 59, signal 8959/11964 (executing program) 2025/01/22 09:33:02 fetching corpus: 59, signal 8959/12995 (executing program) 2025/01/22 09:33:02 fetching corpus: 59, signal 8959/14010 (executing program) 2025/01/22 09:33:02 fetching corpus: 59, signal 8959/15045 (executing program) 2025/01/22 09:33:02 fetching corpus: 59, signal 8959/16053 (executing program) 2025/01/22 09:33:02 fetching corpus: 59, signal 8959/17047 (executing program) 2025/01/22 09:33:02 fetching corpus: 59, signal 8959/18074 (executing program) 2025/01/22 09:33:02 fetching corpus: 59, signal 8959/18140 (executing program) 2025/01/22 09:33:02 fetching corpus: 59, signal 8959/18140 (executing program) 2025/01/22 09:33:05 starting 8 fuzzer processes 09:33:05 executing program 0: semctl$GETVAL(0xffffffffffffffff, 0x3, 0xc, &(0x7f0000000000)=""/216) semctl$GETVAL(0xffffffffffffffff, 0x4, 0xc, &(0x7f0000000100)=""/43) r0 = semget(0x0, 0x0, 0x1) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000140)=""/146) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000200)=""/108) r1 = semget(0x0, 0x0, 0x28) semctl$SEM_STAT_ANY(r1, 0x4, 0x14, &(0x7f0000000280)=""/158) r2 = semget$private(0x0, 0x3, 0x80) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000340)=""/127) semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f00000003c0)=""/81) r3 = semget(0x2, 0x3, 0x201) semctl$GETNCNT(r3, 0x1, 0xe, &(0x7f0000000440)=""/4096) r4 = semget(0x2, 0x1, 0x412) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000001440)=""/81) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000014c0)=""/36) r5 = semget$private(0x0, 0x0, 0x20) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000001500)=""/188) semctl$SETVAL(r4, 0x3, 0x10, &(0x7f00000015c0)=0x2) 09:33:05 executing program 1: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x8010, 0xffffffffffffffff, 0x6fca0000) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) copy_file_range(r2, &(0x7f00000000c0)=0x8, r0, &(0x7f0000000100)=0xffffffffffffffff, 0x4, 0x0) r3 = pidfd_open(0xffffffffffffffff, 0x0) readahead(r3, 0x8001, 0x3) sendmsg$AUDIT_USER(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x3ed, 0x10, 0x70bd2b, 0x25dfdbfe, "157d868182e3444d4b8066d1c8dab62c02af2f66b97980bc923e033530ac14a7d7640dce4f0281b78ff15f858f63820274b278a13403ebfa09b0109a167bf514503621eadee5136f3849b3cf4ff5c48297", ["", "", "", ""]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x44840) r4 = pidfd_getfd(r3, r3, 0x0) sendto(r4, &(0x7f0000000280)="5e9860deebdbd57be77884431ec029dc", 0x10, 0x4010, &(0x7f00000002c0)=@ethernet={0x1, @remote}, 0x80) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x62}, @void, @val={0xc, 0x99, {0x20, 0x26}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48894) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) accept$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x2, 0x10000, 0x10, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x3, 0x200}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x8, 0x700, 0x2, 0x0, {{0x1a, 0x4, 0x2, 0x30, 0x68, 0x67, 0x0, 0x3f, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp={0x44, 0x28, 0x87, 0x0, 0xe, [0x5, 0x8, 0x0, 0x9, 0x2, 0xc2, 0x12b32744, 0x5f3daa2e, 0x3]}, @ssrr={0x89, 0x13, 0xd0, [@rand_addr=0x64010102, @remote, @private=0xa010102, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xaf, [@dev={0xac, 0x14, 0x14, 0x14}, @remote]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x124, r7, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x10010) ioctl$FICLONE(r3, 0x40049409, r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) 09:33:05 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x4, 0x8000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2018}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x521040, 0x0) recvmsg$unix(r1, &(0x7f0000001940)={&(0x7f0000000140), 0x6e, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/218, 0xda}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/55, 0x37}, {&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f00000004c0)=""/217, 0xd9}, {&(0x7f00000005c0)=""/189, 0xbd}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}, 0x2002) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001980), 0x20000, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f00000019c0)={0x3f, 0x9}) r9 = syz_open_dev$mouse(&(0x7f0000001a00), 0x3ff, 0x400000) ioctl$F2FS_IOC_RESIZE_FS(r9, 0x4008f510, &(0x7f0000001a40)=0x280000000000) r10 = openat$incfs(r4, &(0x7f0000001a80)='.log\x00', 0xa4042, 0xc) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000001b00)={0x2, &(0x7f0000001ac0)=[{0x800, 0x5, 0xcb, 0x8000}, {0x7, 0x4, 0x80, 0x100}]}, 0x10) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x800015}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x28, 0xc, 0x6, 0x0, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x40801) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r8, {0xfffffff9}}, './file0\x00'}) mknodat$null(r11, &(0x7f0000001c80)='./file0\x00', 0x8000, 0x103) r12 = dup2(r9, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE_wg(r12, 0x1, 0x19, &(0x7f0000001cc0)='wg1\x00', 0x4) fremovexattr(r2, &(0x7f0000001d00)=@known='trusted.overlay.origin\x00') r13 = dup2(r7, r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000001d40)={'batadv_slave_1\x00'}) 09:33:05 executing program 3: r0 = syz_io_uring_setup(0xe46, &(0x7f0000000000)={0x0, 0x1d32, 0x4, 0x0, 0x1b0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x3935, &(0x7f0000000100)={0x0, 0x26f5, 0x4, 0x0, 0x3ae}, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x6000, @fd=r4, 0x100000001, 0x9, 0x100, 0x1, 0x0, {0x3}}, 0xf8a) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x184, r6, 0x8611d6b81c74b2cc, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000008c0)={'ip_vti0\x00', &(0x7f0000000840)={'syztnl0\x00', r8, 0x8, 0x80, 0x72, 0x7fffffff, {{0x15, 0x4, 0x3, 0x6, 0x54, 0x67, 0x0, 0x20, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, {[@cipso={0x86, 0x20, 0x1, [{0x6, 0x4, "cf8b"}, {0x7, 0xa, "2eefaefb8318cc3b"}, {0x2, 0x7, "ea172cba9b"}, {0x6, 0x2}, {0x6, 0x3, "c0"}]}, @ssrr={0x89, 0x1f, 0xd6, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a40)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f0000000b40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000d40)=0xe8) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000d80)={@initdev, @dev, 0x0}, &(0x7f0000000dc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f0000000fc0)=0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000001200)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001000)={0x1ac, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001240), 0x442600, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r14, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001480)={&(0x7f00000012c0)={0x1b4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) recvmmsg$unix(r4, &(0x7f0000006f40)=[{{&(0x7f0000001540), 0x6e, &(0x7f0000001700)=[{&(0x7f00000015c0)=""/152, 0x98}, {&(0x7f0000001680)=""/114, 0x72}], 0x2, &(0x7f0000001740)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001800), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001880)=""/32, 0x20}, {&(0x7f00000018c0)=""/57, 0x39}, {&(0x7f0000001900)=""/33, 0x21}, {&(0x7f0000001940)=""/227, 0xe3}, {&(0x7f0000001a40)=""/91, 0x5b}], 0x5, &(0x7f0000001b40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000001bc0), 0x6e, &(0x7f00000030c0)=[{&(0x7f0000001c40)=""/62, 0x3e}, {&(0x7f0000001c80)=""/219, 0xdb}, {&(0x7f0000001d80)=""/2, 0x2}, {&(0x7f0000001dc0)=""/53, 0x35}, {&(0x7f0000001e00)=""/247, 0xf7}, {&(0x7f0000001f00)=""/165, 0xa5}, {&(0x7f0000001fc0)=""/188, 0xbc}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/8, 0x8}], 0x9, &(0x7f0000003180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x60}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003600)=[{&(0x7f0000003280)=""/99, 0x63}, {&(0x7f0000003300)=""/187, 0xbb}, {&(0x7f00000033c0)=""/158, 0x9e}, {&(0x7f0000003480)=""/158, 0x9e}, {&(0x7f0000003540)=""/141, 0x8d}], 0x5}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000003840)=[{&(0x7f0000003700)=""/49, 0x31}, {&(0x7f0000003740)=""/35, 0x23}, {&(0x7f0000003780)}, {&(0x7f00000037c0)=""/79, 0x4f}], 0x4}}, {{&(0x7f0000003880)=@abs, 0x6e, &(0x7f0000005a80)=[{&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/70, 0x46}, {&(0x7f0000004980)=""/21, 0x15}, {&(0x7f00000049c0)=""/103, 0x67}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/5, 0x5}], 0x6, &(0x7f0000005b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006ec0)=[{&(0x7f0000005bc0)=""/4096, 0x1000}, {&(0x7f0000006bc0)=""/229, 0xe5}, {&(0x7f0000006cc0)=""/217, 0xd9}, {&(0x7f0000006dc0)=""/149, 0x95}, {&(0x7f0000006e80)=""/29, 0x1d}], 0x5}}], 0x7, 0x1, &(0x7f0000007100)={0x77359400}) fsetxattr$security_capability(r0, &(0x7f0000001500), &(0x7f0000007140)=@v3={0x3000000, [{0xffffffff, 0x3}, {0x8001, 0x8}], r15}, 0x18, 0x2) [ 96.205260] audit: type=1400 audit(1737538385.960:7): avc: denied { execmem } for pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:33:05 executing program 4: r0 = getpgrp(0x0) rt_tgsigqueueinfo(0x0, r0, 0x16, &(0x7f0000000000)={0xe, 0x1b7, 0x7}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$getsig(0x4202, r1, 0xffffffff, &(0x7f0000000100)) waitid(0x0, r0, &(0x7f0000000180), 0x4, &(0x7f0000000200)) pidfd_send_signal(0xffffffffffffffff, 0x3b, &(0x7f00000002c0)={0x31, 0x3, 0x8001}, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x4, &(0x7f00000003c0)) write$binfmt_aout(r2, &(0x7f0000000480)={{0x107, 0x4, 0xfa, 0xc6, 0x10a, 0x3ff, 0x1ca, 0x4}, "b9593bec6139f91d3762bfbd9834c48dc7c3fcbf5e92839a2db1071ba0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x63d) waitid(0x2, r0, 0x0, 0x1000000, 0x0) pidfd_send_signal(r2, 0x1d, &(0x7f0000000ac0)={0x2f, 0x4, 0x5ff8af8f}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000b40), &(0x7f0000000b80)=0x28) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000bc0)=0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000c00), 0x8, 0x0) sched_getparam(r0, &(0x7f0000000c80)) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000cc0)) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40004) prctl$PR_SET_PTRACER(0x59616d61, r3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000e00)=0x0) rt_sigqueueinfo(r4, 0x2a, &(0x7f0000000e40)={0x37, 0x9, 0x80}) 09:33:06 executing program 5: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000080), &(0x7f00000000c0)={[0x1f]}, 0x8) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100)="f9d15a650e8f0580fbf899c4950d23", 0xf, 0x4, &(0x7f0000000140)={0x77359400}) io_getevents(0x0, 0x0, 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000200)={0x0, 0x989680}) clock_getres(0x1, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000280)={0xff4, 0x90000000000000, 0x5, 0xfffffffffffffffd, 0x5, 0x2, 0x7, 0x2}, &(0x7f00000002c0)={0x0, 0x4, 0x4, 0x3616e6be, 0x3f, 0x6, 0x100, 0x80}, &(0x7f0000000300)={0xfffffffffffffffc, 0x9, 0x0, 0x3, 0x4, 0xbe50, 0xffffffffffffff2a, 0x5}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) io_getevents(0x0, 0x9, 0x3, &(0x7f0000000400)=[{}, {}, {}], &(0x7f0000000480)={0x77359400}) r0 = semget$private(0x0, 0x131bbe5c84e507ab, 0x200) semtimedop(r0, &(0x7f00000004c0)=[{0x2, 0x0, 0x1800}, {0x4, 0x4, 0x1000}, {0x0, 0x40, 0x1800}, {0x1, 0xfff}, {0x1, 0x200, 0x2000}, {0x3, 0x3, 0x800}, {0x1, 0x6, 0x1800}, {0x1, 0x5, 0x800}, {0x3, 0xae, 0x800}, {0x7, 0x3ff, 0x1000}], 0xa, &(0x7f0000000500)={0x77359400}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000540)=""/183, 0xb7, 0x9a7e, 0x0) r1 = semget(0x2, 0x4, 0x4) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000600)=[0xfffd, 0x400, 0x1, 0x84a, 0x6, 0x3e, 0xf23c, 0x3, 0x0]) r2 = syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x7, 0x3, &(0x7f0000000cc0)=[{&(0x7f0000000b80)="4b630faeb3012191cf0f733184f96344b41a236444c974529a24bc26ebca792cc270ec0d26fbc918b349d4cec9130ef961ff843751d098eadf44b7fd8524cfa946b84735da9e4c68de5c14245af22b8529c6cef33c095297a95b3064ecb20e7036561d65f3f3", 0x66, 0x6e79}, {&(0x7f0000000c00)="8dcfa66780ad648a9ec36ead67ae232b31ca4002637c87b268c106bb6450b7d32caeaa590d7e55e6381e444c60f9ba09640c81c2b9e023e37bd7ba5abd7ea6600600ed10a762950a2e03c580088e530aa66035b3b7b6", 0x56, 0x80}, {&(0x7f0000000c80)="70378215ba87a00245deb3669bece60ea5f1b8ca1e2ed93a860d81b1026b488a", 0x20, 0xfffffffffffff801}], 0x1400, &(0x7f0000000d40)={[{@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@tz_utc}, {@shortname_win95}, {@numtail}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x3a}}, {@euid_eq}, {@appraise}]}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @local}, &(0x7f0000000e80)=0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ec0), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000f00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ppoll(&(0x7f0000000f40)=[{r2, 0x400}, {r3, 0x9024}, {r4, 0x1101}, {r5, 0x200}, {0xffffffffffffffff, 0xa080}], 0x5, &(0x7f0000000f80)={0x0, 0x3938700}, &(0x7f0000000fc0), 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000001000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_pwait2(r6, &(0x7f0000001040)=[{}], 0x1, &(0x7f0000001080), &(0x7f00000010c0)={[0xa6f]}, 0x8) r7 = fcntl$dupfd(r3, 0x0, r6) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r6) 09:33:06 executing program 6: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x30, 0x50, 0x35, 0x31, 0x65, 0x36, 0x30, 0x30, 0x35, 0x31, 0x65, 0x61, 0x66, 0x66, 0x64, 0x33]}, &(0x7f0000000080)={0x0, "4a52fe05d6158e4ecb73aa3dd09035b42cde9e919737ce5be640683427759665e807b3f6151499112c76aba3aadc2b1fbe39f8ef038ff416edad2a65e4fe5520", 0x36}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000100)={@id={0x2, 0x0, @b}, 0x21, r0, '\x00', @c}) r1 = request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='fscrypt:', r0) keyctl$get_persistent(0x16, 0x0, r1) r2 = request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='logon\x00', r1) r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "c8c41b48baf39fb5b5a50d1fd29fedc7f89c7fbd786bbf13deaf3520f71b2e03742c8e275061bae137254c997a316302c36bdd41941f92a1a80e0a9b194616a9"}, 0x48, r0) r4 = add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)={0x0, 0x0, @d}, 0x18, r1) keyctl$get_keyring_id(0x0, r4, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000004c0)='id_legacy\x00', 0x0) keyctl$unlink(0x9, r4, r1) keyctl$clear(0x7, r1) r5 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc2}, &(0x7f0000000600)={0x0, "fd64614f2282ed11b8e86e817aaab3037003809f55e0dd15d3279a97dfd6846afd3aee96e41b67313de37ae014852367976aaad0af104f1b13e27ba2bd9a6dc3", 0x3f}, 0x48, r2) keyctl$search(0xa, r4, &(0x7f0000000500)='syzkaller\x00', &(0x7f0000000540)={'syz', 0x0}, r5) keyctl$setperm(0x5, r0, 0x200) r6 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc1}, &(0x7f0000000700)={0x0, "a89d7e3d71943fe54cd3572aafd56fbc1571ee2719925ca5f73999bba4e038367d6373378c6a3cc3eed9a3070bee4f1846f172afa2a47424ea09bb453ed3de18", 0x1a}, 0x48, r0) keyctl$update(0x2, r6, &(0x7f0000000780)="c00bf6c23396d777f9620f22a549703b8d01e2b5db74250242ca3ab2fa12988aa1150adb81b53df584caa821d1b1ee0ab682de95cb85c51c8f468b9c2c14956510495a3ce67a90db4b9ba4de5bc7581f5060cf59766c81517468255e5c28bf14c5b3e107899737e7947aaeeaa8dfe2ebe8b6e8625281c13b8d6fa2c2c3b9f9c974b2d6c655ed578f0c000fb9b6c44630277c8dce3445116ddcd15c1fb470534af4fc3ec77fdbc5bb56f34578945e9e87c765e25cd5c1cbc5227a0ea6fc634ddfdf828981974ea6dda8085a8fe0e1a2f1b30f491a74", 0xd5) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @auto=[0x33, 0x38, 0x61, 0x37, 0x32, 0x65, 0x34, 0x65, 0x63, 0x65, 0x35, 0x33, 0x61, 0x34, 0x30, 0x61]}, &(0x7f0000000900)={0x0, "3c3602adf7a229776f5961035ccd7ac1c761a456b2193fb9f0a7e9b6f0448fb3c48d79af119c6ff06cb7b646a91529fcc5779ddc8ddbf9779dc9d8513ef1e1c1", 0x39}, 0x48, r6) r7 = add_key(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)="ee22011c94395ef0503b59138a", 0xd, r3) keyctl$KEYCTL_MOVE(0x1e, r7, 0x0, r0, 0x0) 09:33:06 executing program 7: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) socketpair(0x15, 0x80000, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x3b1e, 0x5}, 0x100, './file0\x00'}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'btrfs.', '\x00'}) setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x2) utimensat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r2 = syz_io_uring_setup(0x5a77, &(0x7f0000000380)={0x0, 0xca35, 0x0, 0x1, 0x3d9}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000480)={0x0, "5db189ca21f2bff9bf8dcac4c24a842a"}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x68, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x29}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000015c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3f) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001a80)={0x64, 0x0, &(0x7f00000019c0)=[@decrefs={0x40046307, 0x1}, @exit_looper, @exit_looper, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x1}, @dead_binder_done, @release={0x40046306, 0x3}, @free_buffer={0x40086303, r3}, @exit_looper, @increfs_done={0x40106308, 0x3}], 0x3b, 0x0, &(0x7f0000001a40)="2a4c284aeb70857285b296ff80c43f4da765bea68aa6fa40b8de2165b3ef0ec23972d5e6dd33d7726c988b8441d7db8cf8c8840308d1fb3c69e722"}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001ac0)={0x1, 0x8, 0x3, 0x0, 0x1}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001b00), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x100010, r4, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001b80)={@private2, 0x0}, &(0x7f0000001bc0)=0x14) getpeername$packet(r1, &(0x7f0000001c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001c40)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000001c80)={@ipv4, 0x0}, &(0x7f0000001cc0)=0x14) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000002300)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000022c0)={&(0x7f0000001d00)={0x5b4, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd471}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x45c}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x20, 0x3, 0x9}, {0xeee, 0x9, 0x20, 0x5}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x1, 0x80, 0x58, 0xd5f5}, {0x9, 0x2, 0x19, 0xf17}, {0xff, 0xeb, 0x9, 0x7}, {0x1, 0xff, 0x20, 0x3}, {0x6, 0x5, 0x2, 0x1}, {0x6, 0x8, 0x58, 0x9}, {0x8000, 0x4, 0x1, 0xd12}, {0x0, 0x3f, 0x5, 0xcf}, {0x7, 0x20, 0x3, 0x4}]}}}]}}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x40010}, 0x24000080) [ 97.867227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.868078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.870135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.871879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.878699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.878935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.885004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.890310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.890896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.891115] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.897997] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.904584] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.905974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.907787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.910145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.914398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.918088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.933625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.938209] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.939306] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.940299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.944009] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.946222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.947317] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.948157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.954433] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.962841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.963398] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.967345] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.977017] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.979833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.981815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.982180] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.999236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.001192] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.003408] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.005662] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.006006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.008901] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 98.012410] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.017336] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.020139] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.021714] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.021953] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.022145] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 98.024445] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.026150] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 98.031183] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 99.933989] Bluetooth: hci0: command tx timeout [ 99.997634] Bluetooth: hci2: command tx timeout [ 99.998004] Bluetooth: hci1: command tx timeout [ 100.062117] Bluetooth: hci7: command tx timeout [ 100.062354] Bluetooth: hci3: command tx timeout [ 100.062832] Bluetooth: hci6: command tx timeout [ 100.062889] Bluetooth: hci4: command tx timeout [ 100.063034] Bluetooth: hci5: command tx timeout [ 101.983542] Bluetooth: hci0: command tx timeout [ 102.045748] Bluetooth: hci2: command tx timeout [ 102.046599] Bluetooth: hci1: command tx timeout [ 102.109778] Bluetooth: hci5: command tx timeout [ 102.109896] Bluetooth: hci4: command tx timeout [ 102.110042] Bluetooth: hci3: command tx timeout [ 102.110124] Bluetooth: hci6: command tx timeout [ 102.110201] Bluetooth: hci7: command tx timeout [ 104.030601] Bluetooth: hci0: command tx timeout [ 104.104349] Bluetooth: hci1: command tx timeout [ 104.104463] Bluetooth: hci2: command tx timeout [ 104.165855] Bluetooth: hci7: command tx timeout [ 104.165964] Bluetooth: hci6: command tx timeout [ 104.166071] Bluetooth: hci3: command tx timeout [ 104.166148] Bluetooth: hci4: command tx timeout [ 104.166224] Bluetooth: hci5: command tx timeout [ 106.077600] Bluetooth: hci0: command tx timeout [ 106.141616] Bluetooth: hci2: command tx timeout [ 106.142395] Bluetooth: hci1: command tx timeout [ 106.206771] Bluetooth: hci5: command tx timeout [ 106.208457] Bluetooth: hci4: command tx timeout [ 106.208535] Bluetooth: hci3: command tx timeout [ 106.208603] Bluetooth: hci6: command tx timeout [ 106.208621] Bluetooth: hci7: command tx timeout [ 157.851258] syz-executor.2 (283) used greatest stack depth: 23552 bytes left [ 160.687908] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.689031] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.694367] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.698582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.700131] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.700889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.830884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.840594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.842079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.845024] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.849794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.852230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.853111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.857699] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.859932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.874673] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.882651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.884340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.885745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.903942] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.914705] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.917672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.919332] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.941781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.942397] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.944643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.945246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 160.956845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 160.957258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.959419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.972646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.975065] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.975314] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.976729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.990892] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 160.992650] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 160.997006] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.006066] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.006694] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.007423] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.012061] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.014235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 161.015007] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.026708] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 161.030847] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.032456] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 161.033785] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 161.037401] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 162.717593] Bluetooth: hci0: command tx timeout [ 162.973808] Bluetooth: hci4: command tx timeout [ 163.101684] Bluetooth: hci6: command tx timeout [ 163.102610] Bluetooth: hci7: command tx timeout [ 163.102853] Bluetooth: hci3: command tx timeout [ 163.165692] Bluetooth: hci2: command tx timeout [ 163.166114] Bluetooth: hci1: command tx timeout [ 163.166290] Bluetooth: hci5: command tx timeout [ 164.766994] Bluetooth: hci0: command tx timeout [ 165.023206] Bluetooth: hci4: command tx timeout [ 165.152713] Bluetooth: hci7: command tx timeout [ 165.152865] Bluetooth: hci3: command tx timeout [ 165.152973] Bluetooth: hci6: command tx timeout [ 165.213661] Bluetooth: hci5: command tx timeout [ 165.214619] Bluetooth: hci2: command tx timeout [ 165.214653] Bluetooth: hci1: command tx timeout [ 166.814877] Bluetooth: hci0: command tx timeout [ 167.070651] Bluetooth: hci4: command tx timeout [ 167.198637] Bluetooth: hci6: command tx timeout [ 167.198692] Bluetooth: hci3: command tx timeout [ 167.198783] Bluetooth: hci7: command tx timeout [ 167.261785] Bluetooth: hci2: command tx timeout [ 167.261888] Bluetooth: hci5: command tx timeout [ 167.263573] Bluetooth: hci1: command tx timeout [ 168.861633] Bluetooth: hci0: command tx timeout [ 169.117894] Bluetooth: hci4: command tx timeout [ 169.247054] Bluetooth: hci7: command tx timeout [ 169.248539] Bluetooth: hci6: command tx timeout [ 169.248625] Bluetooth: hci3: command tx timeout [ 169.309732] Bluetooth: hci1: command tx timeout [ 169.309975] Bluetooth: hci5: command tx timeout [ 169.310062] Bluetooth: hci2: command tx timeout [ 223.015884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.018563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.019926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.028849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.034325] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.036962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.207101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.212257] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.217804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.228822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.238958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.240350] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.244606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.249092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.250845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.253837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.271952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.273630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.295694] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.297428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.299088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.323610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.331196] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.335793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.398090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.400341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.402848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.408382] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.411799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.413329] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.526929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.533600] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.537840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.544173] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.548960] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 223.560735] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 223.569832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.575335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.577605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.579025] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.583024] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.584728] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.586647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.589672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.591220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.601991] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.607802] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.609235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 225.117600] Bluetooth: hci0: command tx timeout [ 225.310114] Bluetooth: hci2: command tx timeout [ 225.310148] Bluetooth: hci1: command tx timeout [ 225.437575] Bluetooth: hci3: command tx timeout [ 225.565623] Bluetooth: hci4: command tx timeout [ 225.629601] Bluetooth: hci7: command tx timeout [ 225.693792] Bluetooth: hci5: command tx timeout [ 225.757732] Bluetooth: hci6: command tx timeout [ 227.167498] Bluetooth: hci0: command tx timeout [ 227.357617] Bluetooth: hci2: command tx timeout [ 227.358275] Bluetooth: hci1: command tx timeout [ 227.485634] Bluetooth: hci3: command tx timeout [ 227.614579] Bluetooth: hci4: command tx timeout [ 227.677580] Bluetooth: hci7: command tx timeout [ 227.742562] Bluetooth: hci5: command tx timeout [ 227.806661] Bluetooth: hci6: command tx timeout [ 229.214737] Bluetooth: hci0: command tx timeout [ 229.405745] Bluetooth: hci1: command tx timeout [ 229.406794] Bluetooth: hci2: command tx timeout [ 229.533861] Bluetooth: hci3: command tx timeout [ 229.661584] Bluetooth: hci4: command tx timeout [ 229.727579] Bluetooth: hci7: command tx timeout [ 229.789643] Bluetooth: hci5: command tx timeout [ 229.853790] Bluetooth: hci6: command tx timeout [ 231.261732] Bluetooth: hci0: command tx timeout [ 231.455366] Bluetooth: hci2: command tx timeout [ 231.455730] Bluetooth: hci1: command tx timeout [ 231.581730] Bluetooth: hci3: command tx timeout [ 231.711534] Bluetooth: hci4: command tx timeout [ 231.773586] Bluetooth: hci7: command tx timeout [ 231.843538] Bluetooth: hci5: command tx timeout [ 231.901670] Bluetooth: hci6: command tx timeout [ 285.430570] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.444694] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.447424] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.453113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.456856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.458174] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.617864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.618420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.622278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.622632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.623113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.626114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.627942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.629823] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.631258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.637715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.640904] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.642091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.777483] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.784011] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.787768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.830746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.833128] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.834987] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.883597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.891751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.893908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.901864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.905285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.908772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.954405] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.982642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 286.010027] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.014532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 286.019665] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.020950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 286.023754] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 286.024933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 286.030945] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.034908] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.046351] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.049748] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 286.050965] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 286.121855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.135967] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.162235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.172925] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 286.199863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.518589] Bluetooth: hci0: command tx timeout [ 287.709605] Bluetooth: hci1: command tx timeout [ 287.710681] Bluetooth: hci2: command tx timeout [ 287.901611] Bluetooth: hci3: command tx timeout [ 287.966623] Bluetooth: hci4: command tx timeout [ 288.093582] Bluetooth: hci6: command tx timeout [ 288.094691] Bluetooth: hci7: command tx timeout [ 288.350550] Bluetooth: hci5: command tx timeout [ 289.566529] Bluetooth: hci0: command tx timeout [ 289.758599] Bluetooth: hci2: command tx timeout [ 289.758673] Bluetooth: hci1: command tx timeout [ 289.949663] Bluetooth: hci3: command tx timeout [ 290.014540] Bluetooth: hci4: command tx timeout [ 290.141591] Bluetooth: hci7: command tx timeout [ 290.142298] Bluetooth: hci6: command tx timeout [ 290.398569] Bluetooth: hci5: command tx timeout [ 291.614610] Bluetooth: hci0: command tx timeout [ 291.806385] Bluetooth: hci2: command tx timeout [ 291.806420] Bluetooth: hci1: command tx timeout [ 291.997797] Bluetooth: hci3: command tx timeout [ 292.061554] Bluetooth: hci4: command tx timeout [ 292.189566] Bluetooth: hci6: command tx timeout [ 292.192501] Bluetooth: hci7: command tx timeout [ 292.445668] Bluetooth: hci5: command tx timeout [ 293.661593] Bluetooth: hci0: command tx timeout [ 293.853612] Bluetooth: hci1: command tx timeout [ 293.854346] Bluetooth: hci2: command tx timeout [ 294.045629] Bluetooth: hci3: command tx timeout [ 294.109544] Bluetooth: hci4: command tx timeout [ 294.240560] Bluetooth: hci7: command tx timeout [ 294.240613] Bluetooth: hci6: command tx timeout [ 294.493695] Bluetooth: hci5: command tx timeout [ 347.815080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.816558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.819096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.822308] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.825222] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.828059] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.940645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.943229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.944528] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.950223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.952339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.954108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.017226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.021854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.024583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.038754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.042349] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 348.043591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.147206] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.152862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.155745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.171907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.173737] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.175361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.224309] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.231743] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.234177] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.237235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.247722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.253079] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.269207] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.271930] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 348.273400] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.311612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.318817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.329936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.340040] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.350723] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.354948] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 348.358585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.385352] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 348.400586] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 348.430324] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.531965] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 348.532239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 348.537193] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.541309] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 348.543124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.853564] Bluetooth: hci0: command tx timeout [ 349.981690] Bluetooth: hci1: command tx timeout [ 350.111104] Bluetooth: hci2: command tx timeout [ 350.238985] Bluetooth: hci3: command tx timeout [ 350.368557] Bluetooth: hci5: command tx timeout [ 350.431522] Bluetooth: hci4: command tx timeout [ 350.621902] Bluetooth: hci6: command tx timeout [ 350.686571] Bluetooth: hci7: command tx timeout [ 351.901855] Bluetooth: hci0: command tx timeout [ 352.030482] Bluetooth: hci1: command tx timeout [ 352.158505] Bluetooth: hci2: command tx timeout [ 352.285562] Bluetooth: hci3: command tx timeout [ 352.413597] Bluetooth: hci5: command tx timeout [ 352.477589] Bluetooth: hci4: command tx timeout [ 352.669713] Bluetooth: hci6: command tx timeout [ 352.733575] Bluetooth: hci7: command tx timeout [ 353.950472] Bluetooth: hci0: command tx timeout [ 354.077695] Bluetooth: hci1: command tx timeout [ 354.205608] Bluetooth: hci2: command tx timeout [ 354.334498] Bluetooth: hci3: command tx timeout [ 354.461821] Bluetooth: hci5: command tx timeout [ 354.525557] Bluetooth: hci4: command tx timeout [ 354.717568] Bluetooth: hci6: command tx timeout [ 354.781770] Bluetooth: hci7: command tx timeout [ 355.997505] Bluetooth: hci0: command tx timeout [ 356.125568] Bluetooth: hci1: command tx timeout [ 356.253585] Bluetooth: hci2: command tx timeout [ 356.381670] Bluetooth: hci3: command tx timeout [ 356.509670] Bluetooth: hci5: command tx timeout [ 356.573652] Bluetooth: hci4: command tx timeout [ 356.766789] Bluetooth: hci6: command tx timeout [ 356.829526] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:38:14 Registers: info registers vcpu 0 RAX=ffffffff87f17368 RBX=0000000000020000 RCX=0000000000000004 RDX=ffff8880095ec1f0 RSI=0000000000000008 RDI=ffffffff87f1742c RBP=ffff8880095ec1d0 RSP=ffff88800960fa68 R8 =0000000000000000 R9 =fffffbfff0fe19e7 R10=ffffffff87f0cf3f R11=ffffffff85c24b40 R12=ffff8880095eb780 R13=ffffffff85c18be0 R14=0000000000000000 R15=0000000000022000 RIP=ffffffff814fd6cb RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4846d39710 CR3=0000000038f56000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ff0000000000000000000000ff00 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88802a9e7b28 RCX=ffffffff86855e01 RDX=1ffff1100553cf66 RSI=ffffffff84a8812f RDI=ffff88802a9e7b30 RBP=0000000000000007 RSP=ffff88802a9e7a40 R8 =ffffffff86855eec R9 =ffff88802a9e7aa0 R10=000000000003ab7c R11=0000000000025a20 R12=ffff88802a9e7b28 R13=0000000000000000 R14=ffff888029d21bc0 R15=ffff8880136de8c0 RIP=ffffffff815ec47e RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f35850cb540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f35852664a1 CR3=000000002f9da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ff000000ffff0000000000000000 XMM02=ffffffffffffffffffff0f0e0d0c0b0a XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000