Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:19653' (ECDSA) to the list of known hosts. 2025/04/23 02:31:02 fuzzer started 2025/04/23 02:31:02 dialing manager at localhost:42253 syzkaller login: [ 101.119962] cgroup: Unknown subsys name 'net' [ 101.252247] cgroup: Unknown subsys name 'cpuset' [ 101.292626] cgroup: Unknown subsys name 'rlimit' 2025/04/23 02:31:26 syscalls: 2214 2025/04/23 02:31:26 code coverage: enabled 2025/04/23 02:31:26 comparison tracing: enabled 2025/04/23 02:31:26 extra coverage: enabled 2025/04/23 02:31:26 setuid sandbox: enabled 2025/04/23 02:31:26 namespace sandbox: enabled 2025/04/23 02:31:26 Android sandbox: enabled 2025/04/23 02:31:26 fault injection: enabled 2025/04/23 02:31:26 leak checking: enabled 2025/04/23 02:31:26 net packet injection: enabled 2025/04/23 02:31:26 net device setup: enabled 2025/04/23 02:31:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/23 02:31:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/23 02:31:26 USB emulation: enabled 2025/04/23 02:31:26 hci packet injection: enabled 2025/04/23 02:31:26 wifi device emulation: enabled 2025/04/23 02:31:26 802.15.4 emulation: enabled 2025/04/23 02:31:26 fetching corpus: 0, signal 0/0 (executing program) 2025/04/23 02:31:28 starting 8 fuzzer processes 02:31:28 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x37f1, 0x1}, 0xe) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/164, 0xa4}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2, 0x7, 0x3, 0x4) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240), 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x4, 0x400, 0x1, 0x3, 0x0, 0x8}, {0x51c, 0x7, 0x247, 0x3221, 0x0, 0x80000000}], ['\x00', '\x00', '\x00', '\x00']}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl2\x00', r3, 0x4, 0xff, 0x7f, 0x828, 0x10, @empty, @local, 0x7800, 0x1, 0x2173, 0x15b4}}) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000700)={'filter\x00', 0x57, "5931951cdeab6bfbab70e521286e8b6a0508634c300f7f7c2ba5f39e5e4c9dc38f85c2aa5667e2f858afe8799600fa339caaa2cf1218bd650bd7473d20c8ec102daa5cf4961edc900adc9e19c289ce50fccf63c501aec8"}, &(0x7f0000000780)=0x7b) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x33, &(0x7f00000007c0), &(0x7f0000000800)=0x4) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xc002000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}]}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4084) r5 = openat$incfs(r1, &(0x7f0000000a40)='.pending_reads\x00', 0x40400, 0x4c) ioctl$sock_proto_private(r5, 0x89e5, &(0x7f0000000a80)="41d28c5aa5cedf802d3a3f3b66bac5e6bea4") socketpair(0x1a, 0xa, 0x2, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r6, {0x7fffffff}}, './file0\x00'}) ioctl(r5, 0x6, &(0x7f0000000b40)="784b1d120f4334429aef8754b286c61a25f8a2186ed100818f9f1a04de63a1bba472b45b06628949019bf1f2af5e26a541ee84bcadfcc2c0a2ecc21a833c8ae0e7d36dd4fd") ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000bc0)={0x0, 0x80000000, 0x0, [0x5, 0x8, 0x100000001, 0xfffffffffffffff8, 0x9], [0x7ff, 0x280000000000000, 0x5, 0x9, 0xdf4, 0x10001, 0x6, 0xff, 0x0, 0x3, 0xfff, 0xffff, 0x7ff, 0xb6e, 0x8001, 0x7fff, 0x58eb, 0x10001, 0x2, 0x40, 0xfffffffffffffff8, 0x6, 0x6, 0x20, 0x101, 0x5, 0xfffffffffffffffa, 0x1f, 0x4, 0x4, 0x7, 0x64647595, 0x3a5, 0x80000001, 0x3, 0x6, 0xce91, 0x6, 0x2, 0x30000000000, 0x100000001, 0x6, 0x31, 0x0, 0x8669, 0xf0, 0x80000000, 0x8, 0x9, 0x69d6, 0x9, 0x0, 0x92, 0x7, 0x5, 0x800, 0x5, 0x7, 0x0, 0x4, 0x5, 0x7ad, 0xd6, 0x101, 0x3, 0x100000000, 0x7, 0x17e8, 0x1f, 0x3, 0x3ff, 0xfffffffffffffff8, 0x678a, 0x67, 0xffffffffffff8000, 0x6, 0xffffffffffffffff, 0x3db, 0x9, 0x6, 0x9, 0x8, 0x8, 0xe9, 0x0, 0x8a0, 0x0, 0x8, 0x3c65, 0x0, 0xfff, 0x9, 0x2, 0x7, 0x7, 0x66, 0x15fe, 0xfffffffeffffffff, 0x101, 0x0, 0x8, 0x6, 0x1f, 0x3, 0x1000, 0x6, 0x2, 0x2, 0x7, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x400, 0x101, 0x20, 0x8000, 0x2, 0xfffffffffffff477, 0xfffffffffffffff9, 0x29]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001000)={r7, 0xb4, 0x2, 0x1}) accept4(0xffffffffffffffff, &(0x7f0000002680)=@rc={0x1f, @none}, &(0x7f0000002700)=0x80, 0x800) 02:31:28 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x800, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, @out_args}, './file1\x00'}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000000c0)={0x5, {0x28, 0x1, 0x4a369ddf, 0x1, 0x8}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = accept4(r3, &(0x7f0000000100)=@ax25={{0x3, @default}, [@netrom, @remote, @null, @bcast, @null, @netrom, @null, @rose]}, &(0x7f0000000180)=0x80, 0x80000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x80, 0x80, 0xfffff000, 0x1, {{0x9, 0x4, 0x1, 0x1b, 0x24, 0x67, 0x0, 0xcc, 0x4, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, {[@generic={0x88, 0xe, "1c7912a73fd17b95c10dadfe"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x3f, 0xffffff13, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x10, 0x8, 0x1, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa410084}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1b4, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x2) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000740)={0x0, 0x3, 0x7, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r9, 0x6a5, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x320d}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x1) sendto(r3, &(0x7f00000008c0)="87bcda9e36062ee734efdb1b63f7451bf1b062d61e7be683e987b82fb8ec81b9f7212f8e8a3ff3d93c94b12078a1756ce6028ae271b8661d03d1a733bcb0765a59b5078e98bd729d76a59d99d5d57a744700de6cf4249cd468091209039b3f89cb5dfc0026be", 0x66, 0x90, &(0x7f0000000940)=@generic={0x2, "6886661e992aaaf919cf1bcfffb8dc40234bac8a4d0f90b734aa71f4ce8d4be522c70382aa8bf428cbca95f9ee8d88d4c2366fadf4762c0f654cdec75a7a073c55098e0386220598a5cc2b2249dec665e965fbbf84e4dc07fa44314fc68bb23a36efac2feaf1e0fe7bb96f062a4ba388447856b8c6e065362be3bf0556b7"}, 0x80) r10 = open(&(0x7f00000009c0)='./file1\x00', 0x800, 0x100) bind$inet(r10, &(0x7f0000000a00)={0x2, 0x4e20, @remote}, 0x10) 02:31:28 executing program 1: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x6, "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"}) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000240)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r5}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xf8, 0x8000804}}], 0x1, 0x24004011) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x738d198e}}, './file0\x00'}) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000580)={'virt_wifi0', 0x32, 0x33}, 0xd) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000005c0)) ioctl$TCSBRKP(r6, 0x5425, 0x5068) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000680)={0x1, 0x48, '\x00', 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x400, 0x9) bind(r4, &(0x7f0000000740)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x20040000) 02:31:28 executing program 3: ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000100)) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x10}}}}, [@NL80211_ATTR_IE={0xd5, 0x2a, [@ht={0x2d, 0x1a, {0x10, 0x0, 0x0, 0x0, {0x727, 0x6, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x3, 0x7}}, @challenge={0x10, 0x1, 0x79}, @perr={0x84, 0xb0, {0x1a, 0xc, [@not_ext={{}, @broadcast, 0x6}, @not_ext={{}, @device_b, 0x4, "", 0x33}, @not_ext={{}, @broadcast, 0x5, "", 0x5}, @not_ext={{}, @broadcast, 0x4, "", 0x12}, @not_ext={{}, @device_a, 0xfffffff9, "", 0x2}, @not_ext={{}, @device_a, 0x7, "", 0x11}, @ext={{}, @device_a, 0x1f, @broadcast, 0x42}, @not_ext={{}, @device_a, 0x5, "", 0x3c}, @not_ext={{}, @device_a, 0x81, "", 0x7}, @ext={{}, @device_a, 0x0, @device_a, 0x2b}, @ext={{}, @broadcast, 0x4, @device_a, 0x3c}, @not_ext={{}, @device_b, 0x5, "", 0x2b}]}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040011}, 0x40044) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x18}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x140) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r3, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x8000, 0x0) fcntl$notify(r4, 0x402, 0x20) r5 = socket(0x3c0749d42345970d, 0x2, 0x7) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) clone3(&(0x7f0000000a00)={0x8000400, &(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000900), {0x10}, &(0x7f0000000940)=""/28, 0x1c, &(0x7f0000000980)=""/48, &(0x7f00000009c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa, {r4}}, 0x58) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000a80)={r6, 0x0, 0x4f0c4b2b}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000ac0)=0x0) fcntl$lock(r5, 0x7, &(0x7f0000000b00)={0x1, 0x2, 0x9, 0x200, r7}) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1a0, 0x0, 0x4, 0x70bd28, 0x8, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xea, 0xa8, @random="ccbfbcf098e158064d6dac543f99516d7b62fc5e887ef17df68faa474b740c0810aa3eb837477e60ac54ac213e83ffc15bc8830b8b5044739523860a440185bfe8bc0039baa31dd51711df34d1ba67638961e4137eefef62202fe0f661928fccb564cc42e86eba376028832bd49bcf2a42c0f031c718efe61bf23d5d74d970286abd218fd6343d5a4c473075282392130595d61de05eb5d9ba7f308b1277bd3255eb1952eb2da0f3b147565c49b0ae0365e7d8b13b0a9a8ce7bf9ce12490e31ab5f53b875ad186a08d7cb4188394b43e5e301ef5fdf7745a6d59776d577421f66256ba5ad45d"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc810}, 0x4000004) [ 126.733763] audit: type=1400 audit(1745375488.816:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:31:28 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x48000) r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x105400, 0x88) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000000180)=""/209, 0xd1}], 0x2, &(0x7f00000002c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}], 0x1, 0x2000, &(0x7f0000000440)={r2, r3+60000000}) fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f0000000480)) openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x2840, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000500)=""/232, 0xe8, 0x3, 0x0) r10 = open(&(0x7f0000000600)='./file0\x00', 0x400000, 0x80) setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000640)={{{@in=@local, @in=@broadcast, 0x4e22, 0x54, 0x4e23, 0x101, 0x2, 0xa0, 0x0, 0x32, 0x0, r6}, {0x80, 0x1b, 0x0, 0x5b52, 0x80, 0x4, 0x877, 0x2}, {0x7ff, 0x5, 0x7ff, 0x6}, 0x1, 0x6e6bb6, 0x1, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3502, 0x0, 0x2, 0x7, 0x9, 0x8, 0x93}}, 0xe8) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000740)={0x1537, 0x401}) ioctl$CDROMRESUME(r10, 0x5302) ioctl$SNAPSHOT_UNFREEZE(r9, 0x3302) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000780)) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x11c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x91}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) r11 = memfd_secret(0x0) r12 = ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) preadv2(r12, &(0x7f0000000b80)=[{&(0x7f0000000a00)=""/96, 0x60}, {&(0x7f0000000a80)=""/249, 0xf9}], 0x2, 0x2, 0x80000000, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c00)={0x200, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9a}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xdb07}, {0xc, 0x90, 0xfffffffffffffff8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x100000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x100000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x10000}, {0xc, 0x90, 0x10001}}]}, 0x200}, 0x1, 0x0, 0x0, 0x41}, 0x4000840) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000e80)) 02:31:28 executing program 5: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0xffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000000c0)={0x101, 0x3, 0x5, 0x1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/clocksource', 0x216280, 0xb4) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000140)={0x2, 0x7f, 0x6, 0x1}) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000180)) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xb6, 0xa8, @random="7baebceb364d72f7b75fe7caf130d1147a76def793bd353fe5099d11801c88cf8d96051975abc19bdea056baf426a7c14529d4bf1d4587b6ffae51d7ee8b1f6c5d8e9008cfdaa8852c053d3fb33b2e82054272a271d3f825ecc5c842f35a1f655f2d4145ea9f4cb276b17faa9c32e627c940ad2427cc28c03ecbcd25fc033f1ea5248db4db709044d09dcf9298deff3ca5b5ac93aa46575adefad69a5432817e167b58b304acf02465b10b39eaea20c8194b"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x212000, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x2010, r3, 0x124fc000) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x4800) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000480)={&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000440)}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000500)={r4, r6, 0x1aca}) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f0000000540)="7fb12916e4b7e120c337207a5c8ec864ff1021c551dc6ab305766b0fea4335a139bd91ee51b659aad95b74c4caddb1cb0bfb774342e6bc62933f56a90f041d7d09a740b42dae9511bc37e65704b858d3dc1d76593a725f2d4faee9f731fea75f405880977d7747818a30b2fa35f68a759e9ab0469095cf9ed0cf7cded4b2e412c104f316ee45ddffbbc71ca695902bdfa0157272b9541b68d7deb6c4cd20d8e77bab5b100056f21aec3f4022e57a0d35c505f613c5f05990c4f843") setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000600)=@ccm_128={{0x304}, "2e1f31aa109afd94", "6c768372ad3f38be0ea6c7a40494c428", "1387196d", "291fe9f3faf07c6b"}, 0x28) finit_module(r5, &(0x7f0000000640)='{)\x00', 0x2) r7 = syz_open_dev$vcsa(&(0x7f0000000680), 0x6, 0x101000) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) 02:31:28 executing program 6: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000000)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1010000, &(0x7f0000000100)={'trans=unix,', {[{@cachetag={'cachetag', 0x3d, ']'}}], [{@pcr={'pcr', 0x3d, 0x2c}}, {@subj_role={'subj_role', 0x3d, '-#'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x35, 0x66, 0x36, 0x38, 0x31, 0x34], 0x2d, [0x35, 0x64, 0x37, 0x65], 0x2d, [0x33, 0x32, 0x62, 0x64], 0x2d, [0x31, 0x62, 0x39, 0x51], 0x2d, [0x6a, 0x37, 0x37, 0x61, 0x62, 0x36, 0x63, 0x36]}}}, {@seclabel}, {@appraise_type}]}}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x1400) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x101000, 0x0, 0x2}, 0x18) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3f7, 0x8, 0x70bd2a, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x50) r1 = memfd_create(&(0x7f0000000580)='seclabel', 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000005c0)) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000740)) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}}, 0x880) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x4000, 0x0) setsockopt$inet_int(r4, 0x0, 0xa, &(0x7f00000008c0)=0x1, 0x4) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000900)={'\x00', 0x4}) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000009c0)={0x0, @isdn={0x22, 0x40, 0x81, 0x3, 0x2}, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @vsock={0x28, 0x0, 0x0, @host}, 0x8, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000980)='caif0\x00', 0x6, 0xbdc, 0xfffb}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/schedstat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000a80)={0xec7, 0x10001, 0x0, 'queue1\x00', 0x800}) 02:31:28 executing program 7: r0 = socket(0x1a, 0x80000, 0x9) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x1, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x8) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffa, 0x18242) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000280)={0x21, 0x22, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @ra={0x5, 0x2, 0x3fb}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @calipso={0x7, 0x28, {0x30f143402fe906d2, 0x8, 0xfe, 0x9, [0x0, 0x2, 0x80, 0x5]}}, @enc_lim={0x4, 0x1, 0xfe}, @pad1, @generic={0x2d, 0xc1, "54a689160e8dfef8de08cadc4277e8464f17e56ecacc90e927a50b024993239d472eb50020c4767778fe919c5c3d495ae88c97761c77d5f4c353f5daf4b36ad361c0596dbd03b26c4a11b55e0c8cc78a5eb20655ae51efca9712ecfeba9239b1a76f9b2ace5d5625f177927fba9ee45442b2f582a7206bfca9851c0bafc1b096982608b8420f695e5c5d6c9c9e05254351a7949079df483c0e01b76b791128563c1cfbe2e4c564bba241729e471891c28806c0a79a25929a5fe937c80ec06b555d"}, @pad1]}, 0x120) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000003c0)) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000400)={0x1, 0x81, 0xffff, 0x9}) fsetxattr$security_evm(r2, &(0x7f0000000440), &(0x7f0000000480)=@ng={0x4, 0xe, "188353468a9925"}, 0x9, 0x2) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f00000004c0)) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000580)=0x6e) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000005c0)={0x0, 'batadv_slave_1\x00', {0x4}, 0xc4}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000740)) r6 = accept$inet(r2, &(0x7f00000033c0)={0x2, 0x0, @local}, &(0x7f0000003400)=0x10) accept4(r6, &(0x7f0000003440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000034c0)=0x80, 0x80000) recvmmsg(r7, &(0x7f0000004700)=[{{&(0x7f0000003500)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003580)=""/105, 0x69}, {&(0x7f0000003600)=""/114, 0x72}, {&(0x7f0000003680)=""/142, 0x8e}, {&(0x7f0000003740)=""/59, 0x3b}, {&(0x7f0000003780)=""/175, 0xaf}, {&(0x7f0000003840)=""/151, 0x97}, {&(0x7f0000003900)=""/43, 0x2b}], 0x7, &(0x7f00000039c0)=""/76, 0x4c}, 0xfffff59e}, {{&(0x7f0000003a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003ac0)=""/204, 0xcc}], 0x1, &(0x7f0000003c00)=""/233, 0xe9}, 0x9}, {{&(0x7f0000003d00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000003d80)=""/150, 0x96}, {&(0x7f0000003e40)=""/114, 0x72}, {&(0x7f0000003ec0)}, {&(0x7f0000003f00)=""/83, 0x53}, {&(0x7f0000003f80)=""/4, 0x4}, {&(0x7f0000003fc0)=""/132, 0x84}, {&(0x7f0000004080)=""/173, 0xad}], 0x7, &(0x7f00000041c0)=""/174, 0xae}, 0x8}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000004280)=""/252, 0xfc}, {&(0x7f0000004380)=""/122, 0x7a}, {&(0x7f0000004400)=""/132, 0x84}, {&(0x7f00000044c0)=""/99, 0x63}], 0x4, &(0x7f0000004580)=""/71, 0x47}, 0x3}, {{&(0x7f0000004600)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004680)}], 0x1}}], 0x5, 0x100, &(0x7f0000004840)={0x77359400}) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000004980)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004940)={&(0x7f00000048c0)={0x6c, 0x0, 0x208, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4800}, 0x20820) [ 128.273865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.279117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.283826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.296892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.307293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.322710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.325987] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.338146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.359798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.365601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.367928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.372610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.376770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.378894] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.390370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.393653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.398899] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.402824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.412008] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.417411] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.421457] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.425728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.451722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.455611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.461323] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.473163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.479582] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.481628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.485468] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.487719] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.501138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.505408] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.506845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.512485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.526500] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.530434] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.538552] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.542515] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.556313] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.556335] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.342776] Bluetooth: hci0: command tx timeout [ 130.470263] Bluetooth: hci1: command tx timeout [ 130.534216] Bluetooth: hci3: command tx timeout [ 130.534833] Bluetooth: hci2: command tx timeout [ 130.598384] Bluetooth: hci5: command tx timeout [ 130.598988] Bluetooth: hci4: command tx timeout [ 130.662433] Bluetooth: hci6: command tx timeout [ 130.663255] Bluetooth: hci7: command tx timeout [ 132.390760] Bluetooth: hci0: command tx timeout [ 132.519338] Bluetooth: hci1: command tx timeout [ 132.583103] Bluetooth: hci3: command tx timeout [ 132.583591] Bluetooth: hci2: command tx timeout [ 132.646193] Bluetooth: hci4: command tx timeout [ 132.646655] Bluetooth: hci5: command tx timeout [ 132.710144] Bluetooth: hci6: command tx timeout [ 132.710631] Bluetooth: hci7: command tx timeout [ 134.440083] Bluetooth: hci0: command tx timeout [ 134.568056] Bluetooth: hci1: command tx timeout [ 134.630105] Bluetooth: hci2: command tx timeout [ 134.630541] Bluetooth: hci3: command tx timeout [ 134.694365] Bluetooth: hci5: command tx timeout [ 134.694793] Bluetooth: hci4: command tx timeout [ 134.758104] Bluetooth: hci7: command tx timeout [ 134.758542] Bluetooth: hci6: command tx timeout [ 136.486276] Bluetooth: hci0: command tx timeout [ 136.614354] Bluetooth: hci1: command tx timeout [ 136.678114] Bluetooth: hci3: command tx timeout [ 136.678578] Bluetooth: hci2: command tx timeout [ 136.742383] Bluetooth: hci4: command tx timeout [ 136.742822] Bluetooth: hci5: command tx timeout [ 136.806175] Bluetooth: hci6: command tx timeout [ 136.806606] Bluetooth: hci7: command tx timeout [ 188.083369] syz-executor.0 (282) used greatest stack depth: 24616 bytes left [ 190.593363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.597109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.599926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.608804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.614002] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.617608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.622518] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.630825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.644682] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.652628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.804535] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.813583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.836402] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.845420] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.851470] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.855510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.856937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.861732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.885512] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.893683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.898605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.904325] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.913322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.932977] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.940539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.946143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.991108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.994004] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.006327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.047734] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.194726] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.229664] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.232342] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.236892] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.259323] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.267509] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.289540] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.293340] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.374721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.405781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 192.678874] Bluetooth: hci0: command tx timeout [ 192.742204] Bluetooth: hci1: command tx timeout [ 192.935348] Bluetooth: hci2: command tx timeout [ 193.000681] Bluetooth: hci3: command tx timeout [ 193.126512] Bluetooth: hci5: command tx timeout [ 193.126532] Bluetooth: hci4: command tx timeout [ 193.383188] Bluetooth: hci6: command tx timeout [ 193.510216] Bluetooth: hci7: command tx timeout [ 194.726187] Bluetooth: hci0: command tx timeout [ 194.790623] Bluetooth: hci1: command tx timeout [ 194.982386] Bluetooth: hci2: command tx timeout [ 195.046093] Bluetooth: hci3: command tx timeout [ 195.175065] Bluetooth: hci5: command tx timeout [ 195.175088] Bluetooth: hci4: command tx timeout [ 195.430103] Bluetooth: hci6: command tx timeout [ 195.558767] Bluetooth: hci7: command tx timeout [ 196.774116] Bluetooth: hci0: command tx timeout [ 196.838920] Bluetooth: hci1: command tx timeout [ 197.030102] Bluetooth: hci2: command tx timeout [ 197.095075] Bluetooth: hci3: command tx timeout [ 197.223112] Bluetooth: hci4: command tx timeout [ 197.223164] Bluetooth: hci5: command tx timeout [ 197.479249] Bluetooth: hci6: command tx timeout [ 197.608172] Bluetooth: hci7: command tx timeout [ 198.823098] Bluetooth: hci0: command tx timeout [ 198.886090] Bluetooth: hci1: command tx timeout [ 199.081079] Bluetooth: hci2: command tx timeout [ 199.142438] Bluetooth: hci3: command tx timeout [ 199.270155] Bluetooth: hci4: command tx timeout [ 199.270633] Bluetooth: hci5: command tx timeout [ 199.526223] Bluetooth: hci6: command tx timeout [ 199.654400] Bluetooth: hci7: command tx timeout [ 253.056456] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.061342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.068871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.080163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.086783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.128395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.135576] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.138560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.148283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.152771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.245166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.249473] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.255472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.271656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.301251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.306710] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.316379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.319449] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.323785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.333807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.336642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.375769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.376954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.399287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.403361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.439613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.451814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.456800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.464787] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.467420] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.471805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.473914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.475595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.535794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.535839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.544000] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.548884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.552231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.571754] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.583502] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.144083] Bluetooth: hci0: command tx timeout [ 255.206366] Bluetooth: hci1: command tx timeout [ 255.399173] Bluetooth: hci2: command tx timeout [ 255.526180] Bluetooth: hci4: command tx timeout [ 255.532406] Bluetooth: hci3: command tx timeout [ 255.654520] Bluetooth: hci6: command tx timeout [ 255.656079] Bluetooth: hci5: command tx timeout [ 255.718349] Bluetooth: hci7: command tx timeout [ 257.190317] Bluetooth: hci0: command tx timeout [ 257.256067] Bluetooth: hci1: command tx timeout [ 257.446082] Bluetooth: hci2: command tx timeout [ 257.576063] Bluetooth: hci3: command tx timeout [ 257.576279] Bluetooth: hci4: command tx timeout [ 257.702255] Bluetooth: hci6: command tx timeout [ 257.702449] Bluetooth: hci5: command tx timeout [ 257.766122] Bluetooth: hci7: command tx timeout [ 259.238088] Bluetooth: hci0: command tx timeout [ 259.302442] Bluetooth: hci1: command tx timeout [ 259.494255] Bluetooth: hci2: command tx timeout [ 259.622160] Bluetooth: hci4: command tx timeout [ 259.622191] Bluetooth: hci3: command tx timeout [ 259.750836] Bluetooth: hci6: command tx timeout [ 259.751083] Bluetooth: hci5: command tx timeout [ 259.814604] Bluetooth: hci7: command tx timeout [ 261.286119] Bluetooth: hci0: command tx timeout [ 261.350402] Bluetooth: hci1: command tx timeout [ 261.542106] Bluetooth: hci2: command tx timeout [ 261.670333] Bluetooth: hci3: command tx timeout [ 261.673177] Bluetooth: hci4: command tx timeout [ 261.798495] Bluetooth: hci5: command tx timeout [ 261.799079] Bluetooth: hci6: command tx timeout [ 261.862269] Bluetooth: hci7: command tx timeout [ 315.209126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.224959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.229157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.232599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.235694] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.242759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.247202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.255861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.260388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.264806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.499912] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.507575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.513542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.518326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.523932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.537327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.555911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.562332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.568228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.572796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.585785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.592569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.606185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.666283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.673509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.679196] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.683158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.691973] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.696071] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.708525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.904244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.919789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.975246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.982602] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.009406] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.031264] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.034758] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.079658] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.145473] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.194547] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.286187] Bluetooth: hci1: command tx timeout [ 317.287218] Bluetooth: hci0: command tx timeout [ 317.671141] Bluetooth: hci3: command tx timeout [ 317.735068] Bluetooth: hci2: command tx timeout [ 317.798102] Bluetooth: hci4: command tx timeout [ 317.926103] Bluetooth: hci5: command tx timeout [ 318.184081] Bluetooth: hci7: command tx timeout [ 318.311111] Bluetooth: hci6: command tx timeout [ 319.334079] Bluetooth: hci1: command tx timeout [ 319.336051] Bluetooth: hci0: command tx timeout [ 319.718086] Bluetooth: hci3: command tx timeout [ 319.783459] Bluetooth: hci2: command tx timeout [ 319.846075] Bluetooth: hci4: command tx timeout [ 319.974123] Bluetooth: hci5: command tx timeout [ 320.231146] Bluetooth: hci7: command tx timeout [ 320.358069] Bluetooth: hci6: command tx timeout [ 321.383098] Bluetooth: hci0: command tx timeout [ 321.383582] Bluetooth: hci1: command tx timeout [ 321.768198] Bluetooth: hci3: command tx timeout [ 321.830242] Bluetooth: hci2: command tx timeout [ 321.895117] Bluetooth: hci4: command tx timeout [ 322.023242] Bluetooth: hci5: command tx timeout [ 322.280080] Bluetooth: hci7: command tx timeout [ 322.407372] Bluetooth: hci6: command tx timeout [ 323.430522] Bluetooth: hci0: command tx timeout [ 323.430965] Bluetooth: hci1: command tx timeout [ 323.815051] Bluetooth: hci3: command tx timeout [ 323.878102] Bluetooth: hci2: command tx timeout [ 323.942473] Bluetooth: hci4: command tx timeout [ 324.070108] Bluetooth: hci5: command tx timeout [ 324.326322] Bluetooth: hci7: command tx timeout [ 324.454343] Bluetooth: hci6: command tx timeout [ 377.479277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.485854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.493796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.508898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.514470] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.724614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.733422] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.742048] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.755388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.758670] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.769954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.774462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.782935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.783501] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.788631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.808176] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.835129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.841505] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.849583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.859325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.899770] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.903819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.922706] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.926251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.928788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.936575] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.941399] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.944697] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.961664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.984542] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.046674] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.065576] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.080577] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.088233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 378.094437] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 378.096467] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.115512] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.118899] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.130477] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.149500] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 379.559381] Bluetooth: hci0: command tx timeout [ 379.945081] Bluetooth: hci1: command tx timeout [ 380.007123] Bluetooth: hci5: command tx timeout [ 380.070151] Bluetooth: hci3: command tx timeout [ 380.070968] Bluetooth: hci2: command tx timeout [ 380.262334] Bluetooth: hci4: command tx timeout [ 380.326195] Bluetooth: hci7: command tx timeout [ 380.327831] Bluetooth: hci6: command tx timeout [ 381.606361] Bluetooth: hci0: command tx timeout [ 381.990125] Bluetooth: hci1: command tx timeout [ 382.054283] Bluetooth: hci5: command tx timeout [ 382.119047] Bluetooth: hci2: command tx timeout [ 382.119530] Bluetooth: hci3: command tx timeout [ 382.310249] Bluetooth: hci4: command tx timeout [ 382.374822] Bluetooth: hci6: command tx timeout [ 382.375964] Bluetooth: hci7: command tx timeout [ 383.654128] Bluetooth: hci0: command tx timeout [ 384.038100] Bluetooth: hci1: command tx timeout [ 384.102293] Bluetooth: hci5: command tx timeout [ 384.166159] Bluetooth: hci3: command tx timeout [ 384.166653] Bluetooth: hci2: command tx timeout [ 384.359040] Bluetooth: hci4: command tx timeout [ 384.423062] Bluetooth: hci7: command tx timeout [ 384.423565] Bluetooth: hci6: command tx timeout [ 385.702099] Bluetooth: hci0: command tx timeout [ 386.086308] Bluetooth: hci1: command tx timeout [ 386.150215] Bluetooth: hci5: command tx timeout [ 386.214148] Bluetooth: hci3: command tx timeout [ 386.214635] Bluetooth: hci2: command tx timeout [ 386.407101] Bluetooth: hci4: command tx timeout [ 386.470234] Bluetooth: hci6: command tx timeout [ 386.470860] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 02:36:31 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff819ade25 RDI=ffffed1001af61c9 RBP=ffff88800d7b0e48 RSP=ffff888033e4fd10 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=ffffffff819ade25 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81add549 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2e7621f540 00000000 00000000 GS =0000 ffff8880e564d000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555c6b61fa8 CR3=000000001adf6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000ff000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81a6fde9 RBX=ffffffff864d9d20 RCX=ffffffff81a6fdc7 RDX=0000000000000000 RSI=ffffffff86856182 RDI=ffffffff864d9d1c RBP=ffffffff864d9d1c RSP=ffff88802f477738 R8 =ffffffff86856182 R9 =0000000000000001 R10=000000000003b0b4 R11=00000000000231b9 R12=ffffffff864d9d1c R13=ffffffff864d9d1c R14=ffffffff864d9d1c R15=dffffc0000000000 RIP=ffffffff8134feef RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574d000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6dc06508b0 CR3=000000000f65e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000