Warning: Permanently added '[localhost]:22021' (ECDSA) to the list of known hosts. 2025/01/27 08:25:19 fuzzer started 2025/01/27 08:25:20 dialing manager at localhost:40883 syzkaller login: [ 68.027683] cgroup: Unknown subsys name 'net' [ 68.147659] cgroup: Unknown subsys name 'cpuset' [ 68.186875] cgroup: Unknown subsys name 'rlimit' [ 75.472395] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/27 08:25:39 syscalls: 2217 2025/01/27 08:25:39 code coverage: enabled 2025/01/27 08:25:39 comparison tracing: enabled 2025/01/27 08:25:39 extra coverage: enabled 2025/01/27 08:25:39 setuid sandbox: enabled 2025/01/27 08:25:39 namespace sandbox: enabled 2025/01/27 08:25:39 Android sandbox: enabled 2025/01/27 08:25:39 fault injection: enabled 2025/01/27 08:25:39 leak checking: enabled 2025/01/27 08:25:39 net packet injection: enabled 2025/01/27 08:25:39 net device setup: enabled 2025/01/27 08:25:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/27 08:25:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/27 08:25:39 USB emulation: enabled 2025/01/27 08:25:39 hci packet injection: enabled 2025/01/27 08:25:39 wifi device emulation: enabled 2025/01/27 08:25:39 802.15.4 emulation: enabled 2025/01/27 08:25:39 fetching corpus: 50, signal 8488/9899 (executing program) 2025/01/27 08:25:39 fetching corpus: 100, signal 10788/13319 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/14657 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/15897 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/17157 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/18394 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/19624 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/20860 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/22142 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/23427 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/24666 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/25934 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/27175 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/28438 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/29208 (executing program) 2025/01/27 08:25:39 fetching corpus: 112, signal 10897/29208 (executing program) 2025/01/27 08:25:42 starting 8 fuzzer processes 08:25:42 executing program 0: semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000000)=""/33) r0 = semget$private(0x0, 0x3, 0x490) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x1, 0x1a8, 0x8, 0xf801]) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/53) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f00000000c0)=""/216) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f00000001c0)=0x1) r1 = semget$private(0x0, 0x1, 0x401) semop(r1, &(0x7f0000000200)=[{0x1, 0xfeff, 0x800}, {0x0, 0x3, 0x1000}, {0x4, 0x1, 0x1800}, {0x2, 0x2, 0x1000}, {0x3, 0x1, 0x2000}, {0x1, 0x7}], 0x6) semop(r1, &(0x7f0000000240)=[{0x4, 0x4, 0x800}, {0x3, 0xfbff, 0x1800}, {0x2, 0x2}, {0x0, 0x8a39, 0x800}, {0x0, 0x1f, 0x1800}, {0x0, 0x3ff}, {0x1, 0x8, 0x800}, {0x4, 0x7, 0x1800}], 0x8) semtimedop(r0, &(0x7f0000000280)=[{0x4, 0x9ff, 0x1000}, {0x4, 0x100, 0x800}, {0x3, 0x9, 0x1000}, {0x2, 0x800, 0x800}], 0x4, &(0x7f00000002c0)={0x0, 0x3938700}) r2 = semget(0x1, 0x2, 0x20) semctl$GETPID(r2, 0x4, 0xb, &(0x7f0000000300)=""/217) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f0000000400)=""/176) r3 = semget$private(0x0, 0x0, 0x420) semctl$GETPID(r3, 0x3, 0xb, &(0x7f00000004c0)=""/227) semctl$GETPID(r0, 0x1, 0xb, &(0x7f00000005c0)=""/27) recvmsg$unix(0xffffffffffffffff, &(0x7f00000039c0)={&(0x7f0000000600), 0x6e, &(0x7f00000038c0)=[{&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/225, 0xe1}, {&(0x7f0000002800)=""/17, 0x11}, {&(0x7f0000002840)=""/39, 0x27}, {&(0x7f0000002880)=""/50, 0x32}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x8, &(0x7f0000003940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x40002100) getresgid(&(0x7f0000003a00)=0x0, &(0x7f0000003a40), &(0x7f0000003a80)) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000003b80)={{0x3, r4, r5, 0xee00, 0x0, 0x1a, 0x1}, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}) 08:25:42 executing program 1: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003680)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f00000000c0)=""/249, 0xf9}, {&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/36, 0x24}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/178, 0xb2}], 0x8, &(0x7f0000000600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/187, 0xbb}, {&(0x7f0000000800)=""/39, 0x27}, {&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000900)=""/54, 0x36}, {&(0x7f0000000940)=""/195, 0xc3}], 0x5}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/218, 0xda}, {&(0x7f0000000bc0)=""/64, 0x40}], 0x2, &(0x7f0000000c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000cc0), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000d40)=""/179, 0xb3}, {&(0x7f0000000e00)=""/127, 0x7f}, {&(0x7f0000000e80)=""/182, 0xb6}, {&(0x7f0000000f40)=""/198, 0xc6}, {&(0x7f0000001040)=""/235, 0xeb}, {&(0x7f0000001140)=""/63, 0x3f}, {&(0x7f0000001180)=""/207, 0xcf}, {&(0x7f0000001280)=""/196, 0xc4}], 0x8, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001480)=@abs, 0x6e, &(0x7f0000003640)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/189, 0xbd}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/103, 0x67}], 0x4}}], 0x5, 0x12001, &(0x7f00000037c0)) fstat(0xffffffffffffffff, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000003880)={0xa0, 0x19, 0x2, {0x204, {0x40, 0x2, 0x2}, 0x20, r4, r7, 0x21a, 0x3ff, 0x3, 0x7ff, 0x4, 0x2, 0x2, 0x2, 0x2, 0x2, 0x3f, 0x7, 0xffffffffffffffe1, 0x4, 0x800}}, 0xa0) pipe2$9p(&(0x7f0000003940), 0x81000) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000003980), 0x20000, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f00000039c0)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000003a80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r10 = syz_open_dev$mouse(&(0x7f0000003ac0), 0x7, 0x2aa942) perf_event_open$cgroup(&(0x7f0000003a00)={0x5, 0x80, 0x8, 0x7, 0xff, 0x0, 0x0, 0xed, 0x40000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x7}, 0x810, 0x4, 0xfffffeff, 0x2, 0x7, 0x2e1e3a9, 0x7, 0x0, 0xf7, 0x0, 0x3}, r9, 0x6, r10, 0xd) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000003b00)=[r3], 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000003b40)) r11 = syz_io_uring_complete(0x0) write$P9_RLERROR(r11, &(0x7f0000003b80)={0x12, 0x7, 0x2, {0x9, '\'!-){^.^\\'}}, 0x12) r12 = open_tree(r3, &(0x7f0000003c80)='./file0\x00', 0x1000) io_submit(0x0, 0x1, &(0x7f0000003d00)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x4d23340320b75932, 0x62e, r5, &(0x7f0000003bc0)="c4a74c790915ef6f470e7b3e8ac9a95ef38eb9797b887d02330a45de53d3fdb2cc471c2f0f62947886bd766f421230f5378253b15ce9a89ed9bb16477b6b7ff1d6cd5aaae740c876ffc98785b4b4b8ddf2fc94f73d25aada34c64cc27517b6588bce1870d7d904111843007d4fad3e926c5b7bc758c343b1603212be0cd506904d3c46b9e1a2cac2", 0x88, 0x30000000000000, 0x0, 0x2, r12}]) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r12, 0xce9db000) getresuid(&(0x7f0000004280)=0x0, &(0x7f00000042c0), &(0x7f0000004300)) syz_mount_image$ext4(&(0x7f0000003d40)='ext3\x00', &(0x7f0000003d80)='./file0\x00', 0x2, 0x2, &(0x7f0000003f40)=[{&(0x7f0000003dc0)="430d3d062e3a6891538ab7d327e3ddf3c28e339d84463c171299e7755e7bd95595db212816f7b47215133de5c3e60eee7863ea05e79d9e881a2ca693c1917274053793fbc3924fc3a17d07efcd542ab68072dc2d31c2534b4434656a838d0ab16b526ac2729f6ef5f84cad9c4e8afcfca85532a9df67c4b5f17eb9e0457b50ab80efa5454bc9de72cafeca803db6c15548388644cabf2cca64b3a69191dc36cfc733588ccc988df19069c20a29702fb9f157e9b5436fce5c14b105167bd181bcc32c113771f58afd8beb0290dbf46a9c058029668672019208068fcc913b33b737b770", 0xe3, 0x2}, {&(0x7f0000003ec0)="8039d1f404899a9ed8d26be6ed87b64095d56b122bbf0fb0371ce3f7f4a59eb18df5e0b2b96d9934bdca2dd8ecc83e86652cc615d4ab42a39ca6306c6f0131c25af28ab80241c090fcb65588268491c92dcd07b985c1d99fbb224d808fcd", 0x5e, 0x9}], 0x11000, &(0x7f0000004340)={[{@orlov}, {@minixdf}, {@block_validity}, {@quota}, {@nobarrier}], [{@euid_gt={'euid>', r13}}, {@dont_appraise}]}) 08:25:42 executing program 2: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) r0 = getgid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x5}, [{0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x0, r0}, {0x8, 0x1, 0xee01}, {0x8, 0x1, r2}], {0x10, 0x4}, {0x20, 0x2}}, 0x4c, 0x2) r3 = getegid() setregid(r3, r0) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x40, &(0x7f00000003c0)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, '\''}}, {@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@version_u}, {@debug}], [{@fowner_lt={'fowner<', r1}}, {@uid_gt={'uid>', r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_role={'subj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}]}}) getpeername$unix(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) setxattr$incfs_metadata(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)="49266112b654d91dbf2c87871e2d23df38c5f93dcbfc6829afbc4590ad5a27135469bedf2058fe8d4b999d0ef58e16f28810fa9e70b8a2b843fc6ba17a127662273add6d867ad9a6cea2915ff5b81eca185644b02ac0107ca1f6aab0481a21fb545819e95e109b0f8b759a874988fb852368c13a5d95492c6bd9f651ee2495e9e8f12ca321c47a0c0c8037762e", 0x8d, 0x3) lsetxattr$security_ima(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)=@sha1={0x1, "2e7d5790dc98ef6973c2b203e134e790738a984d"}, 0x15, 0x3) mknod$loop(&(0x7f0000000800)='./file0\x00', 0x100, 0x0) clock_gettime(0x0, &(0x7f0000002ec0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000008c0)}], 0x1, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002d80)=[{&(0x7f0000000ac0)=""/142, 0x8e}, {&(0x7f0000000b80)=""/177, 0xb1}, {&(0x7f0000000c40)=""/80, 0x50}, {&(0x7f0000000cc0)=""/127, 0x7f}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/29, 0x1d}], 0x7, &(0x7f0000002e00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x2, 0x2000, &(0x7f0000002f00)={r6, r7+10000000}) r10 = semget$private(0x0, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) semctl$IPC_SET(r10, 0x0, 0x1, &(0x7f0000003000)={{0x3, 0xee01, r2, r11, r4, 0x40, 0x5}, 0x9, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xff}) mount$tmpfs(0x0, &(0x7f0000003080)='./file0\x00', &(0x7f00000030c0), 0xc0000, &(0x7f0000003100)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36, 0x6d, 0x67, 0x6d]}}, {@huge_within_size}, {@gid={'gid', 0x3d, r8}}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x6b, 0x34]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x31, 0x70, 0x90]}}], [{@dont_appraise}, {@hash}, {@smackfsroot}]}) sendmsg$AUDIT_MAKE_EQUIV(r9, &(0x7f0000003240)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0xa0940026}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x28, 0x3f7, 0x800, 0x70bd26, 0x3f, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}}, 0x1) 08:25:42 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x420100, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffff, 0x6, 0x9}) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000100)=0x9) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20a00, 0x402e02ffa5f25bc1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x7ff]}, 0x8, 0x80000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f00000001c0)=0x2) r5 = dup(r0) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, 0x1e, 0x100, 0x70bd26, 0x25dfdbfe, {0x16}, [@typed={0x61, 0x80, 0x0, 0x0, @binary="9289028ef557d772ffa793c3be0494016fc2b85c2268792e6bfc1ad903e27b6c8c337984591ed345a19da4e1285bffd99c6816af015e66d4339d7eecd80dc4853b30a094cc76a78642ff23ca8c7886aa7ecafda0cb77a9d372b447c112"}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000440)={0x8, 0x80000001, 0x0, 'queue0\x00', 0x401}) lsetxattr$security_evm(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540), &(0x7f0000000580)=@sha1={0x1, "177aef8b8849283041be9716a1aa922dc0b5b435"}, 0x15, 0x3) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r5) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x40) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f0000000740)=0x20) 08:25:42 executing program 5: socketpair(0x27, 0x800, 0x216b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000080)="0bd42f8770072c448d6babe5745152b8c13a5ecb66aa4852c5e1ef98dc9f36454c3dae8ec5e9ac071e40f1ad1536336a3b54b58fa1bf15ee0a4b7555d2d513d368d9d39a25d0fb1e58eb35324b075994f19e886f6b99796d55b07c77282254e79ffe817cc1c247a1be2eaa729e9aca71966d30a49cab01d373f27695232e8568f409f31a8f4eba4159125f80aafd1590c03fd382c0621bcfc6ba03d4f4185c158cd0464921234a0a9ecee5e7eaa43ef3c3f58525e6f251324e340110115d193c5e21056ee4625160bf886acd2c90be74e63b2be678948c4b74ea717d7b43f30d79389b1532494112e27a588939cba05022b3d0", 0xf3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_mount_image$nfs4(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, 0x1, &(0x7f0000000380)=[{&(0x7f00000002c0)="4c041f996ff2e5cfe8dc9c88d2eb0cc10e7c766dc15a39cfd3967c105c7591ac0f1840c0142b8f9b891819bec066ca9c3c9f82f63a10a5e226979ce01adc54ad97f487dc0a53c1e3f779231613f04a18e9f588db1eba21cf83f43d90d732ea25c5dead84691e56f42aceebdbe3eaa87a0a9243f3da4c99acede272dfec70c6edbfd427a74765f3b32c3071ae7a646e48feb848aaeb4c59e67cd66f11efbbabd83ad0a5c2ac853e20c6d0dc4315ddf2c79472c00cba1cf7504608548111a7", 0xbe, 0xfffffffffffffffe}], 0x1140402, &(0x7f00000003c0)={[{}, {':\xc5\']%'}, {'.'}, {}, {}, {'%){&'}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\\*['}}, {@obj_type}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[}'}}, {@smackfsdef}, {@dont_measure}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x8200, 0x4) renameat2(r4, &(0x7f00000004c0)='./file0\x00', r3, &(0x7f0000000500)='./file0\x00', 0x2) ioctl$FIONCLEX(r2, 0x5450) openat(r2, &(0x7f0000000540)='./file0\x00', 0x212080, 0x100) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, {0xef98}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) fdatasync(r5) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000600)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) sync_file_range(r2, 0x7ff, 0x1, 0x1) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x105800, 0x1, 0x8}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000740)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x6, 0x7, {{0x15, 0x4, 0x1, 0x32, 0x54, 0x65, 0x0, 0xc8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x5e, [@remote, @rand_addr=0x64010102]}, @end, @noop, @timestamp={0x44, 0x2c, 0xbf, 0x0, 0x1, [0x3, 0xfef3, 0x5, 0x3, 0xe45, 0x2, 0x6, 0x400, 0x5, 0x1]}, @end]}}}}}) 08:25:42 executing program 4: sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x35}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3f, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x9]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7f}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x69}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x40080) r0 = socket(0x5, 0x3, 0x1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x47548e48, 0x3, 0x1f, 0x9}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40440d0}, 0x20000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4008004) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000380)=0x4, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x28, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40080) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000540)={'lo\x00', {0x2, 0x0, @multicast2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x0, 0x9, {{0x1c, 0x4, 0x3, 0x1, 0x70, 0x66, 0x0, 0x81, 0x2d, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x20, 0x11, 0x0, 0xf, [0x4, 0x8f, 0x3, 0x7fd, 0xcc5, 0x80, 0xff]}, @rr={0x7, 0x17, 0xbf, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local]}, @timestamp_prespec={0x44, 0x24, 0x73, 0x3, 0x9, [{@multicast2, 0x3}, {@rand_addr=0x64010100}, {@rand_addr=0x64010100, 0x3}, {@private=0xa010101}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x71a2d090, 0x2a, @mcast2, @mcast2, 0x8, 0x8, 0x1, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x3, 0x0, 0x28, @private2, @mcast2, 0x7, 0x80, 0x9, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x2f, 0x9f, 0x7, 0xedb22f1, 0x54, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x700, 0x80, 0x9, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x1, 0x9, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @remote, 0x7, 0xf847, 0x8, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000c00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x184, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x440c1}, 0x8000) r8 = accept$inet6(r0, &(0x7f0000000c40)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000c80)=0x1c) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r8, 0x89f4, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'syztnl0\x00', r2, 0x2f, 0x81, 0x0, 0xfff, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x7, 0x80, 0x20, 0xc0000}}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, 0x3, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x80) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000e80)={r4, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000ec0)={'gre0\x00'}) 08:25:42 executing program 7: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x2, 0x0, 0xff, 0x4, 0x1a, "046aeea0697c5634"}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x3, 0x3, 0x12, 0x81, 0x62, "cedb7bceb5d8f8aac268c99924bf5a7ddc66027bf79f884abb25a5e130b159839195e5f05f7d43b9d0ac39c7614a1e856fbef9aa1011fd1894ffd07da7742a7259c9bc7b8079ef10d1c4a6c650e22e7f022bb445e823dede94bae04c2e70af07fd31"}, 0x6b, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmsg$sock(r2, &(0x7f0000000440)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x4, @local, 'veth1_virt_wifi\x00'}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0xffffd6db}}, @timestamping={{0x14, 0x1, 0x25, 0x68}}, @mark={{0x14, 0x1, 0x24, 0xffff7fff}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffb09e}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0xf0}, 0x40080) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000480)={0x1, 'veth1_macvtap\x00', {}, 0xfff8}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x404001, 0x0) tee(r0, r5, 0x2, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000500)={r5, 0x3d2f3890, 0x0, 0x63}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r7, {0xfffffff9, 0x80000000}}, './file0\x00'}) r8 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x7f, 0x0, 0x3f, 0x8, 0x0, 0x10001, 0x10602, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7, 0x8}, 0x401, 0x34, 0x401, 0x1, 0x40, 0x4, 0x200, 0x0, 0x2, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x7, r4, 0x1a) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) splice(r8, &(0x7f0000000600)=0x10000, r9, &(0x7f0000000680)=0x400, 0x0, 0x8) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x6, 0x6, 0x200, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 08:25:42 executing program 6: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) pkey_free(r0) r1 = shmget(0x3, 0x1000, 0x4, &(0x7f0000ffa000/0x1000)=nil) pkey_mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2, r0) r2 = shmget(0x3, 0x3000, 0x200, &(0x7f0000fe1000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000e2b000/0x2000)=nil) pkey_mprotect(&(0x7f0000e1f000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) r3 = shmget(0x1, 0x3000, 0x1000, &(0x7f0000c66000/0x3000)=nil) shmat(r3, &(0x7f00003aa000/0xc00000)=nil, 0x3000) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/21) shmat(0x0, &(0x7f000056f000/0x3000)=nil, 0x0) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x2) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000040)=""/214) pkey_alloc(0x0, 0x1) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000c3d000/0x4000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) [ 90.745081] audit: type=1400 audit(1737966342.970:7): avc: denied { execmem } for pid=274 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 92.183915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.188304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.191682] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.208355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.213037] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.215451] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.234071] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.237412] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.244972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.246483] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.255651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.257465] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.272299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.282191] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.288154] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.291424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.298349] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.309692] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.313184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.318567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.325108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.326280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.328336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.329787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.331360] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.333042] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.337505] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.342032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.376890] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.378600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.380495] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.388226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.392118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.397110] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.398585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.400077] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.402414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.410177] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.411443] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.414271] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.416256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.417574] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.429221] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.430521] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.434275] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.436433] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.439548] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.443177] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.327169] Bluetooth: hci0: command tx timeout [ 94.391143] Bluetooth: hci4: command tx timeout [ 94.392067] Bluetooth: hci1: command tx timeout [ 94.392109] Bluetooth: hci2: command tx timeout [ 94.518910] Bluetooth: hci3: command tx timeout [ 94.518962] Bluetooth: hci5: command tx timeout [ 94.519534] Bluetooth: hci6: command tx timeout [ 94.520499] Bluetooth: hci7: command tx timeout [ 96.375934] Bluetooth: hci0: command tx timeout [ 96.438909] Bluetooth: hci2: command tx timeout [ 96.439566] Bluetooth: hci4: command tx timeout [ 96.440501] Bluetooth: hci1: command tx timeout [ 96.566811] Bluetooth: hci6: command tx timeout [ 96.566867] Bluetooth: hci5: command tx timeout [ 96.567272] Bluetooth: hci7: command tx timeout [ 96.567897] Bluetooth: hci3: command tx timeout [ 98.422879] Bluetooth: hci0: command tx timeout [ 98.487792] Bluetooth: hci1: command tx timeout [ 98.488283] Bluetooth: hci4: command tx timeout [ 98.488772] Bluetooth: hci2: command tx timeout [ 98.614816] Bluetooth: hci7: command tx timeout [ 98.616858] Bluetooth: hci5: command tx timeout [ 98.617346] Bluetooth: hci3: command tx timeout [ 98.617510] Bluetooth: hci6: command tx timeout [ 100.471438] Bluetooth: hci0: command tx timeout [ 100.535108] Bluetooth: hci1: command tx timeout [ 100.535133] Bluetooth: hci2: command tx timeout [ 100.537194] Bluetooth: hci4: command tx timeout [ 100.663154] Bluetooth: hci5: command tx timeout [ 100.664091] Bluetooth: hci6: command tx timeout [ 100.664105] Bluetooth: hci3: command tx timeout [ 100.664159] Bluetooth: hci7: command tx timeout [ 154.432284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.435060] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.437658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.442844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.445406] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.447401] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.500521] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.506091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.509947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.515998] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.520196] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.525496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.578116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.581134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.585085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.587356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.588408] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.592083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.601399] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.607280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.609251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.610077] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.613091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.616934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.629302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.635953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.645288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.647154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.661196] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.666877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.682349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.683758] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.684637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.691570] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.704101] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.704968] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.714085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.723076] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.730178] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.732127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.755725] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.771561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.783141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.791311] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.805232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.834441] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.838068] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.845512] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.471802] Bluetooth: hci0: command tx timeout [ 156.598818] Bluetooth: hci1: command tx timeout [ 156.663892] Bluetooth: hci3: command tx timeout [ 156.663994] Bluetooth: hci2: command tx timeout [ 156.790967] Bluetooth: hci4: command tx timeout [ 156.918888] Bluetooth: hci6: command tx timeout [ 156.919840] Bluetooth: hci7: command tx timeout [ 156.920371] Bluetooth: hci5: command tx timeout [ 158.520737] Bluetooth: hci0: command tx timeout [ 158.647782] Bluetooth: hci1: command tx timeout [ 158.710902] Bluetooth: hci3: command tx timeout [ 158.711016] Bluetooth: hci2: command tx timeout [ 158.839763] Bluetooth: hci4: command tx timeout [ 158.966959] Bluetooth: hci7: command tx timeout [ 158.967732] Bluetooth: hci5: command tx timeout [ 158.968153] Bluetooth: hci6: command tx timeout [ 160.568800] Bluetooth: hci0: command tx timeout [ 160.694850] Bluetooth: hci1: command tx timeout [ 160.758808] Bluetooth: hci3: command tx timeout [ 160.759295] Bluetooth: hci2: command tx timeout [ 160.886763] Bluetooth: hci4: command tx timeout [ 161.015981] Bluetooth: hci6: command tx timeout [ 161.016021] Bluetooth: hci5: command tx timeout [ 161.016661] Bluetooth: hci7: command tx timeout [ 162.614851] Bluetooth: hci0: command tx timeout [ 162.743415] Bluetooth: hci1: command tx timeout [ 162.806884] Bluetooth: hci2: command tx timeout [ 162.806909] Bluetooth: hci3: command tx timeout [ 162.934800] Bluetooth: hci4: command tx timeout [ 163.062917] Bluetooth: hci7: command tx timeout [ 163.063228] Bluetooth: hci6: command tx timeout [ 163.063501] Bluetooth: hci5: command tx timeout [ 216.399762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.425812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.430881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.433373] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.434385] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.436986] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.437843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.439087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.439927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.444801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.454197] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.456649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.539864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.543448] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.544605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.548379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.551584] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.553479] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.580561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.586091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.599194] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.609610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.617150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.626802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.701235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.702636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.703859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.707944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.709366] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.710520] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.846588] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.851152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.852646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.855072] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.858971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.868104] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.894047] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.895070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.921122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.931089] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.939213] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.944200] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.948856] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.950167] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.951100] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.965264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.980029] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.981138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.486829] Bluetooth: hci1: command tx timeout [ 218.487621] Bluetooth: hci0: command tx timeout [ 218.616008] Bluetooth: hci2: command tx timeout [ 218.678826] Bluetooth: hci3: command tx timeout [ 218.742773] Bluetooth: hci4: command tx timeout [ 218.999077] Bluetooth: hci5: command tx timeout [ 219.000456] Bluetooth: hci7: command tx timeout [ 219.126836] Bluetooth: hci6: command tx timeout [ 220.534830] Bluetooth: hci0: command tx timeout [ 220.535339] Bluetooth: hci1: command tx timeout [ 220.662787] Bluetooth: hci2: command tx timeout [ 220.729733] Bluetooth: hci3: command tx timeout [ 220.790758] Bluetooth: hci4: command tx timeout [ 221.048763] Bluetooth: hci7: command tx timeout [ 221.049253] Bluetooth: hci5: command tx timeout [ 221.174806] Bluetooth: hci6: command tx timeout [ 222.582805] Bluetooth: hci0: command tx timeout [ 222.583299] Bluetooth: hci1: command tx timeout [ 222.710827] Bluetooth: hci2: command tx timeout [ 222.774780] Bluetooth: hci3: command tx timeout [ 222.839210] Bluetooth: hci4: command tx timeout [ 223.094779] Bluetooth: hci5: command tx timeout [ 223.095941] Bluetooth: hci7: command tx timeout [ 223.222745] Bluetooth: hci6: command tx timeout [ 224.631124] Bluetooth: hci1: command tx timeout [ 224.631272] Bluetooth: hci0: command tx timeout [ 224.759827] Bluetooth: hci2: command tx timeout [ 224.823739] Bluetooth: hci3: command tx timeout [ 224.887761] Bluetooth: hci4: command tx timeout [ 225.143789] Bluetooth: hci7: command tx timeout [ 225.143944] Bluetooth: hci5: command tx timeout [ 225.271910] Bluetooth: hci6: command tx timeout [ 278.984374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.987151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.990139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.999782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.006282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.008839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.108266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.115437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.118630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.128776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.132638] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.134822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.215788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.218474] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.223585] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.224135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.226849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.228325] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.242368] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.247992] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.249330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.253990] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.256258] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.258549] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.410272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.414846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.425196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.433423] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.436221] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.448377] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.460548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.464533] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.468385] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.475468] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.475969] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.482192] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.492592] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.497598] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.507235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.514280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.517760] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.525988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.530932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.546779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.550051] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.601441] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.609481] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.613120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.078769] Bluetooth: hci0: command tx timeout [ 281.206752] Bluetooth: hci1: command tx timeout [ 281.334860] Bluetooth: hci3: command tx timeout [ 281.398761] Bluetooth: hci2: command tx timeout [ 281.592097] Bluetooth: hci7: command tx timeout [ 281.655050] Bluetooth: hci4: command tx timeout [ 281.719808] Bluetooth: hci6: command tx timeout [ 281.784608] Bluetooth: hci5: command tx timeout [ 283.126848] Bluetooth: hci0: command tx timeout [ 283.255905] Bluetooth: hci1: command tx timeout [ 283.384871] Bluetooth: hci3: command tx timeout [ 283.446956] Bluetooth: hci2: command tx timeout [ 283.638891] Bluetooth: hci7: command tx timeout [ 283.702765] Bluetooth: hci4: command tx timeout [ 283.766786] Bluetooth: hci6: command tx timeout [ 283.830783] Bluetooth: hci5: command tx timeout [ 285.174747] Bluetooth: hci0: command tx timeout [ 285.302830] Bluetooth: hci1: command tx timeout [ 285.430768] Bluetooth: hci3: command tx timeout [ 285.494789] Bluetooth: hci2: command tx timeout [ 285.686787] Bluetooth: hci7: command tx timeout [ 285.750775] Bluetooth: hci4: command tx timeout [ 285.814803] Bluetooth: hci6: command tx timeout [ 285.878803] Bluetooth: hci5: command tx timeout [ 287.222796] Bluetooth: hci0: command tx timeout [ 287.351718] Bluetooth: hci1: command tx timeout [ 287.478863] Bluetooth: hci3: command tx timeout [ 287.543810] Bluetooth: hci2: command tx timeout [ 287.734734] Bluetooth: hci7: command tx timeout [ 287.798733] Bluetooth: hci4: command tx timeout [ 287.862717] Bluetooth: hci6: command tx timeout [ 287.926715] Bluetooth: hci5: command tx timeout [ 341.190858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.193433] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.199464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.211987] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.219614] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.223266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.385271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.389085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.392961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.399232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.408083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.412229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.533321] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.539056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.541797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.549261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.555973] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.570325] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.579034] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.591295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.598858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.602581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.612080] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.646560] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.649298] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.653096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.656931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.670519] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.687102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.706812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.723521] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.729933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.731715] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.735266] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.744010] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.751105] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.756076] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.758076] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.770364] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.840525] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.843617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.845690] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.847313] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.849179] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.851948] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.854596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.855702] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.859128] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.287088] Bluetooth: hci0: command tx timeout [ 343.478790] Bluetooth: hci1: command tx timeout [ 343.671080] Bluetooth: hci2: command tx timeout [ 343.798755] Bluetooth: hci3: command tx timeout [ 343.862890] Bluetooth: hci4: command tx timeout [ 343.927075] Bluetooth: hci6: command tx timeout [ 343.990911] Bluetooth: hci5: command tx timeout [ 343.990936] Bluetooth: hci7: command tx timeout [ 345.336731] Bluetooth: hci0: command tx timeout [ 345.527736] Bluetooth: hci1: command tx timeout [ 345.718817] Bluetooth: hci2: command tx timeout [ 345.846844] Bluetooth: hci3: command tx timeout [ 345.910802] Bluetooth: hci4: command tx timeout [ 345.974765] Bluetooth: hci6: command tx timeout [ 346.038866] Bluetooth: hci7: command tx timeout [ 346.038891] Bluetooth: hci5: command tx timeout [ 347.382749] Bluetooth: hci0: command tx timeout [ 347.574941] Bluetooth: hci1: command tx timeout [ 347.767678] Bluetooth: hci2: command tx timeout [ 347.894801] Bluetooth: hci3: command tx timeout [ 347.958700] Bluetooth: hci4: command tx timeout [ 348.023670] Bluetooth: hci6: command tx timeout [ 348.086903] Bluetooth: hci7: command tx timeout [ 348.086964] Bluetooth: hci5: command tx timeout [ 349.430750] Bluetooth: hci0: command tx timeout [ 349.622877] Bluetooth: hci1: command tx timeout [ 349.817839] Bluetooth: hci2: command tx timeout [ 349.942881] Bluetooth: hci3: command tx timeout [ 350.007899] Bluetooth: hci4: command tx timeout [ 350.072962] Bluetooth: hci6: command tx timeout [ 350.134716] Bluetooth: hci5: command tx timeout [ 350.135838] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 08:30:49 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea00003a1700 RCX=ffffffff8135da10 RDX=ffff888008c4f780 RSI=ffffffff8135d810 RDI=0000777f80000000 RBP=ffff88806ce09e58 RSP=ffff88806ce09d80 R8 =0000000000000001 R9 =ffff88800e66c1c8 R10=0000000000000000 R11=0000000000000000 R12=ffffffff81aeed90 R13=ffffea000038d600 R14=0000000000000000 R15=ffff88800e358c00 RIP=ffffffff81ab977b RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb68aeac8e0 CR3=0000000027dc0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000016 RCX=ffffffff814fe11a RDX=0000000000000004 RSI=0000000000000008 RDI=ffffffff87f0af20 RBP=ffff8880389b2638 RSP=ffff8880388476f0 R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=ffffffff87f0af27 R11=0000000000000000 R12=ffff8880389b1bc0 R13=0000000000000003 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81abd4e8 RFL=00000056 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005592d35da4c8 CR3=000000002af1e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000