[ 93.406727] audit: type=1400 audit(1745485124.688:6): avc: denied { checkpoint_restore } for pid=217 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:19806' (ECDSA) to the list of known hosts. 2025/04/24 08:58:52 fuzzer started 2025/04/24 08:58:52 dialing manager at localhost:37747 syzkaller login: [ 101.338219] cgroup: Unknown subsys name 'net' [ 101.486516] cgroup: Unknown subsys name 'cpuset' [ 101.542574] cgroup: Unknown subsys name 'rlimit' 2025/04/24 08:59:07 syscalls: 2214 2025/04/24 08:59:07 code coverage: enabled 2025/04/24 08:59:07 comparison tracing: enabled 2025/04/24 08:59:07 extra coverage: enabled 2025/04/24 08:59:07 setuid sandbox: enabled 2025/04/24 08:59:07 namespace sandbox: enabled 2025/04/24 08:59:07 Android sandbox: enabled 2025/04/24 08:59:07 fault injection: enabled 2025/04/24 08:59:07 leak checking: enabled 2025/04/24 08:59:07 net packet injection: enabled 2025/04/24 08:59:07 net device setup: enabled 2025/04/24 08:59:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/24 08:59:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/24 08:59:07 USB emulation: enabled 2025/04/24 08:59:07 hci packet injection: enabled 2025/04/24 08:59:07 wifi device emulation: enabled 2025/04/24 08:59:07 802.15.4 emulation: enabled 2025/04/24 08:59:07 fetching corpus: 0, signal 0/0 (executing program) 2025/04/24 08:59:09 starting 8 fuzzer processes 08:59:09 executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10401, 0xc8, 0x15}, 0x18) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x7f, 0x1, 0x1f, 0xfffffffd, 0x7]}, &(0x7f0000000100)=0x54) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f00000001c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000200)={0x7fff, {{0xa, 0x4e22, 0x1, @mcast2, 0x1}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x7, @mcast1, 0x167}}, {{0xa, 0x4e23, 0x10000, @empty, 0xfff}}]}, 0x190) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000540)=""/36, 0x24}], 0x2, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000700)=""/66, 0x42}], 0x1, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/87, 0x57}], 0x2, &(0x7f0000001940)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/220, 0xdc}, {&(0x7f0000001b80)=""/176, 0xb0}, {&(0x7f0000001c40)=""/80, 0x50}, {&(0x7f0000001cc0)=""/84, 0x54}, {&(0x7f0000001d40)=""/170, 0xaa}], 0x5, &(0x7f0000001e80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000001f40)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000001fc0)=""/208, 0xd0}, {&(0x7f00000020c0)=""/23, 0x17}, {&(0x7f0000002100)=""/194, 0xc2}], 0x3}}], 0x5, 0x10001, &(0x7f0000002380)={0x0, 0x3938700}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000023c0)={{{@in, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000024c0)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002500)=@IORING_OP_NOP={0x0, 0x3}, 0xae1a) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000002540)={0x0, 0x46, "53bf39d51134e4863e21425e7353ec2a303543ebc8318766391e7ff6e169b84080e9538ed64e5b1ed70fa58fb481a8fb7dbf10e32e5680e33403f14cd1fc7bde95794bbefd8e"}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x14, 0x0, 0x485f59f6c0e66cd0, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008850}, 0x20014015) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpeername$netlink(r4, &(0x7f00000026c0), &(0x7f0000002700)=0xc) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000002740)) accept4(0xffffffffffffffff, &(0x7f0000002780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000002800)=0x80, 0x80800) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r6, @in_args={0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x38, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x65af, 0x5f}}}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@chsw_timing={0x68, 0x4, {0x0, 0x4}}, @peer_mgmt={0x75, 0x4, {0x1, 0x8, @void, @void, @void}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x11) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000002bc0)={0x3, {0x13, 0x2, 0x5, 0x80, 0x9}}) 08:59:09 executing program 1: fcntl$setsig(0xffffffffffffffff, 0xa, 0x1) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000000)=""/75) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x7, 0x7f, 0x3}) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)={0x2, 0xf8, 0x3886}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x5004000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x3a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$FIONCLEX(r1, 0x5450) ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f00000002c0)={0x5, 0x20, 0x3f, 0x8d, 0x5, 0x80}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000d80)={{r3}, {@val, @max}}) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) getresgid(&(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000e80)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x5}, 0x99) dup2(r3, r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ec0)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@multicast1}}, &(0x7f0000000fc0)=0xe8) fchown(0xffffffffffffffff, r6, 0x0) 08:59:09 executing program 2: sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000894}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x900, 0x0, 0x0, {0xc}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x34) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0xd, 0xa, 0xb01, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000441}, 0x4048005) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/sunrpc', 0x1c0c00, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x63}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40048}, 0x40000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r1) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000009c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)={0x2f0, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5694}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb808}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1c3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4d69}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5f1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}]}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff11}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xf99, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x22}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x19}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000a00)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e24}}, @tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x3}}, @l2={0x1f, 0x6, @any, 0x8000, 0x1}, 0xe6c6, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a40)='batadv_slave_1\x00', 0x6, 0x9, 0xff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000ec0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={0x1e4, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_FRAME_MATCH={0x41, 0x5b, "20b6049d6cb3de1ffb4f77d3ac1fd0a3f8962986c509704ca79ac5e4ada2df63007ff079311a1057f1a3b8268103f0fbd4992e31c4ca467da32c41de9e"}, @NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "1f77b6e8ebbaed70a521ff72a7a990ebffeb5c6a1ecf4189b37c4ce3f65db3be639d7f58d2ce5a3392a1"}, @NL80211_ATTR_FRAME_MATCH={0x70, 0x5b, "ce93634906c58a749672c0353fa40720db14b9be8e2bbe91d5583457b096b28c2df563899977cd62631abe73112e62286f2d24c797a4c2a207494236afe9b72732aa5cbcd89d252b83ce95b6c16d515a8dee117067255f7fee301c39b079d0d7bf8fe89d598b929622f1f3a5"}, @NL80211_ATTR_FRAME_MATCH={0xd8, 0x5b, "47ae5898c40f9763222ce9f7a4974f4cdf40768475a9e231e1f8d56adc2463e318f1d301ff228678111d9446abc84ef8dd70b77164bb45919592ccc0e37371cdd186be3313802e0a1441db569c7d8401275d4d05d4ebbd21a89ede4fcf55110f147f61095ae19435aa33d4ab1dc0551665d38cce146306a7acf9c7586de1b8a06281102972081b58fa67a4f004cef75dcdcb618e1c4869a25c633e0bd73f04341ba8e7f644a5be0d95ca5bddff4958942c0f653d71ca406671909492db7143332aebe4199310cbe24cf20e3785984b17d35aa176"}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20040040}, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000f00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f0}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000f40)='\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x118, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4008021}, 0x4000800) 08:59:09 executing program 3: setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@multicast2, 0x4e22, 0x7, 0x4e24, 0x6, 0x2, 0x80, 0x30, 0x2e, 0x0, 0xee00}, {0xb5cb, 0xffff, 0x6, 0x80000000, 0x5, 0x101, 0x3, 0x3f}, {0xc0b, 0xffffffffffff8001, 0x400, 0x967}, 0x6, 0x0, 0x1, 0x1, 0x1}, {{@in=@multicast2, 0x4d4, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x3, 0x1, 0x1f, 0x8, 0x0, 0x4}}, 0xe8) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80102, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@empty, @empty, @private0, 0x8, 0x5, 0x3ff, 0x500, 0x1, 0x10}) r1 = timerfd_create(0x0, 0x0) getsockname(r0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000240)=0x80) r2 = socket$inet6(0xa, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_bond\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e23, 0x3, 0x2, 0xa0, 0x80, 0x29, r3, 0xee00}, {0x9, 0x100000001, 0x0, 0x187e, 0x1, 0x984, 0x401, 0x100000000000}, {0x400, 0x9, 0xba, 0x20000000000000}, 0xb5, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d6, 0xff}, 0xa, @in=@remote, 0x3503, 0x1, 0x3, 0x1, 0x8, 0x5, 0x8000}}, 0xe8) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000003c0)={0x0, 0x2710}, 0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x480520, 0x0) r5 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x201, 0x140) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000480)) r7 = dup2(r5, r1) pread64(r7, &(0x7f00000004c0)=""/13, 0xd, 0xff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x65}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe6}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={r3, @multicast2, @rand_addr=0x64010101}, 0xc) r9 = accept$inet6(r7, &(0x7f00000006c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000700)=0x1c) setsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f0000000740)={@local, r3}, 0x14) [ 118.179563] audit: type=1400 audit(1745485149.462:7): avc: denied { execmem } for pid=280 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:59:09 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x200, 0x3, 0xebcdaa00c76f9a70, 0x3, 0x2, [{0x7, 0x7, 0x3, '\x00', 0x2000}, {0x100000001, 0x0, 0xa0e6}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@local, @private=0xa010101}, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001b00)={'ip6gre0\x00', &(0x7f0000001a80)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x9, 0x2, 0x0, @mcast2, @remote, 0x1, 0x1, 0x81, 0xffff}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001b40)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000001c40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001c80)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000001d80)=0xe8) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001f00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0xf4, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4880}, 0x40080) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001fc0)={'ip6tnl0\x00', &(0x7f0000001f40)={'syztnl2\x00', r2, 0x2, 0x0, 0x5, 0x2, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4ef606d5d70ce256, 0x8000, 0x4, 0xe4a}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000002000)={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x1, 0x5, 0x6, 0x100, 0x1be, 0x7000008, r6}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000002080)={'veth0_to_team\x00', {0x2, 0x0, @multicast1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000021c0)={'erspan0\x00', &(0x7f00000020c0)={'tunl0\x00', r4, 0x10, 0x1, 0xd43, 0x81, {{0x2d, 0x4, 0x1, 0x7, 0xb4, 0x64, 0x5, 0x81, 0x29, 0x0, @remote, @remote, {[@generic={0x83, 0xf, "1e8ed683f0785d02be99c485c3"}, @rr={0x7, 0x17, 0x56, [@private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x14}]}, @noop, @lsrr={0x83, 0x1f, 0x50, [@rand_addr=0x64010100, @broadcast, @loopback, @remote, @local, @rand_addr=0x64010100, @rand_addr=0x64010101]}, @noop, @rr={0x7, 0x17, 0xf, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @local, @remote, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x3d, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x10001}, {@loopback, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0xb36}]}, @lsrr={0x83, 0x13, 0xec, [@local, @multicast1, @private=0xa010101, @private=0xa010102]}]}}}}}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000002200)={'batadv_slave_1\x00', {0x2, 0x0, @multicast2}}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002240)={'batadv0\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000002280)={{{@in=@loopback, @in6=@local, 0x4e24, 0x2, 0x4e23, 0xd9, 0x2, 0x80, 0x20, 0x3c, r8, 0xffffffffffffffff}, {0x4, 0x7fffffff, 0x7, 0x2, 0x401, 0x6, 0x3f, 0x40}, {0x6, 0x3, 0x0, 0x4}, 0x93a6, 0x6e6bb6, 0x1, 0x1, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4d3, 0x32}, 0x2, @in=@loopback, 0x3506, 0x3, 0x2, 0x3, 0x9, 0x4, 0x3}}, 0xe8) ioctl$TIOCGSOFTCAR(r7, 0x5419, &(0x7f0000002380)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000400}, 0x80) 08:59:09 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}, @NFTA_RULE_USERDATA={0x62, 0x7, 0x1, 0x0, "9f57ed3dfed0ea7c76be37b068c1f07a17215da25a4bd0419c1de6b2fe7fa250d4ab0c779d78b2eecf81ed3393a866509aa32333c0926fae276b1c3d3abf528bd1f58c9ddddfe0d10271424931340649c6c2f32d5575333a09832d4f7f8e"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000011}, 0x4050) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000240)={0x2, 0x11}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000280)) r2 = perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0xff, 0x4a, 0x0, 0x81, 0x0, 0x3, 0x40, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf18, 0x2, @perf_bp={&(0x7f00000002c0), 0xe}, 0x40000, 0x5, 0x83, 0x6, 0xfff, 0x4c6, 0x401, 0x0, 0x10001, 0x0, 0x9}, 0x0, 0x6, r1, 0x9) open_by_handle_at(r2, &(0x7f0000000380)=@ceph_nfs_confh={0x10, 0x2, {0xfffffffffffffff8, 0x10000}}, 0x200) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/mei_me', 0x100, 0x100) fsync(r2) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2401c811}, 0x840) r4 = signalfd(r3, &(0x7f0000000500)={[0x7]}, 0x8) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000540)={0x0, 0x3, 0x2, 0x400}) accept(r4, 0x0, &(0x7f0000000580)) ppoll(&(0x7f00000005c0)=[{r3, 0x2201}], 0x1, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0xc30]}, 0x8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000006c0), &(0x7f0000000700)=0x8) bind$802154_raw(r5, &(0x7f0000000740)={0x24, @none={0x0, 0xffff}}, 0x14) ioctl$int_in(r1, 0x5421, &(0x7f0000000780)=0x6) 08:59:09 executing program 6: ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/144) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x400080, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000100)={0x3, 0x3, 0x4, 0x7f, 0xffff, 0x8}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000540)={0x3, 0x1, 0x19, 0x1e, 0x2e, &(0x7f0000000140)}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}}, 0x8005) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x1a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r2, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x28c1, 0x4b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x77cc2e04}}, './file0\x00'}) ioctl$TIOCSCTTY(r3, 0x540e, 0x1f) r4 = syz_open_dev$mouse(&(0x7f0000000840), 0x4, 0x400000) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000d40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f00000008c0)={0x430, 0x3f4, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x2, 0x33, [0x2, 0x7, 0x338b, 0x5, 0x80, 0x20, 0x200, 0x8, 0x1f, 0x8, 0x3, 0x7, 0x4, 0x9000000, 0x41aa, 0x1400000, 0x0, 0x6, 0x3, 0x3, 0x1, 0x1c0000, 0x1, 0x4, 0x80000000, 0x3ff, 0x862, 0x7, 0x8, 0x1, 0x25d, 0x6b6, 0x44c3, 0x1, 0x5, 0xfffffa13, 0xfff, 0x1f, 0x2, 0x401, 0xf8, 0x1ff, 0x6, 0x39, 0x3ed05c53, 0x0, 0x2, 0x7, 0x81, 0x4, 0x7fff, 0x80, 0x8, 0x8, 0x4, 0x1, 0x7, 0xfffffffa, 0xdf, 0x1, 0x5212f175, 0x62, 0x9, 0x80000000], [0xfffff3b8, 0x7, 0x400, 0x4, 0x101, 0x2, 0x7, 0xfff, 0x1000, 0x3, 0x1, 0x3, 0x2, 0x3, 0x264b, 0x4, 0x1, 0x4, 0x3, 0x7, 0x1, 0xfffffffe, 0x0, 0x7, 0x7, 0x7fff, 0x10001, 0xffff8000, 0xf4, 0xffffffc1, 0x100, 0x5, 0x8, 0x4, 0x0, 0x0, 0x3, 0x4, 0xfff, 0x0, 0x7fffffff, 0xb5, 0x8001, 0x3ff, 0x8, 0x7, 0x8, 0x3ff, 0x8, 0x0, 0x63, 0x2, 0x10000, 0xda9d, 0x7, 0x14, 0x2, 0x101, 0xfffffffd, 0xfff, 0x1f, 0x7, 0x4, 0x1ff], [0x80000000, 0x4, 0x81, 0x28f1, 0xffffffff, 0x7fffffff, 0x5, 0x200, 0x5, 0x0, 0x2, 0x0, 0x6, 0x1ff, 0x2f, 0x1, 0x4, 0x3f, 0x5, 0x757, 0x7, 0x4, 0x7, 0xffffffff, 0x5, 0x20, 0x4, 0x8, 0x2, 0x2, 0x2, 0x0, 0xffffff77, 0x2, 0x4, 0x4, 0x1, 0x6, 0x7, 0x9, 0x2, 0x5ae9, 0x522b, 0x5, 0x0, 0x10001, 0x200, 0x2, 0x6, 0x401, 0x5, 0x80, 0x2, 0x6, 0x8000, 0x9, 0x3, 0x6, 0x1, 0x7ff, 0x1, 0x3ff, 0x1000, 0x6], [0x5, 0x7, 0xd666, 0x8001, 0x3ec6, 0x9, 0x4, 0x7, 0x9, 0x8, 0x7, 0x2269e04d, 0x3, 0x2, 0x1f, 0x1f, 0x1392b7fd, 0x231a, 0xff, 0x7fff, 0x2, 0xfa11, 0x2, 0x7c3b, 0x2, 0x7fffffff, 0x200, 0x5, 0xfffffffb, 0x0, 0xffffff80, 0xc67, 0x5, 0x3, 0x2, 0x2, 0x9, 0x800, 0x3, 0x401, 0x1, 0x7, 0x2, 0x1, 0x6, 0x0, 0x2, 0x0, 0x4, 0x3, 0x3, 0x7fff, 0x9, 0x10000, 0xed6, 0x3b, 0x8, 0x200, 0x6a, 0x4, 0x1ff, 0x9b3, 0x3, 0x80000000], 0xd, ['nl80211\x00', './\xff\\\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0xc4}, 0x40c0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8080, 0x0) ioctl$SG_EMULATED_HOST(r5, 0x2203, &(0x7f0000000dc0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) syncfs(r6) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x64, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000880}, 0x2000c000) accept4$unix(r3, &(0x7f0000000f80)=@abs, &(0x7f0000001000)=0x6e, 0x800) process_mrelease(r4, 0x0) 08:59:09 executing program 7: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xa000]}, 0x8) socketpair(0xf, 0x2, 0x34d8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r4 = dup3(r1, r3, 0x80000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000000c0)=""/181) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r6, &(0x7f00000001c0)={0x7, 0x21, 0x1}, 0x7) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000200)='lazytime\x00', 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000240)={0x3, 0x12, "57f5f5f2e010222ad40db16ba0b279973e2f"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000280)="eea01f7614273740b85a5a2fb67ddcbd81453ea570ce657bf7ee3de2f6abaf1f70e460757fb6e5d258827db9ae44ca5f255453891562f52d762b7c0ef672a0139631d24bbca8880b471c570d7c19cf43fba0426f1f3175c9b04dec386b018065d1ae1abb98e024e9582158f2acd23b9f73f3d41f078e217227c6dc16b9873c071df4c5f07b1648b67e0f96b01cad7e9f46236987f45afb27966c10dd08bfb0b1ce304e29c13678213e2f560b18bf5865793be70c39c6142d58b1224b29c148dd400a8fffe6e1") ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000380)={0x0, "64bbdd79d1a0bbeb32d12bc04b8c3797"}) r8 = accept4(r4, &(0x7f0000001380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001400)=0x80, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000001440)={'ipvs\x00'}, &(0x7f0000001480)=0x1e) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000014c0), 0x20681) readahead(r10, 0x7, 0xffffffff80000000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) ioctl$int_out(r2, 0x5460, &(0x7f0000001500)) close_range(r0, r9, 0x0) [ 119.710623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.713711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.715928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.721486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.724852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.726763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.730033] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.733029] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.762048] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.764610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.767802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.769772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.777188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.780492] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.782385] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.785887] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.788380] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.789619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.801529] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.814461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.839741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.843551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.846479] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.850342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.852736] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.871996] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.891571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.895916] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.900504] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.910911] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.924440] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.928610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.931359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.937098] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.938930] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.943502] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.951208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.957773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.960525] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.998972] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.784097] Bluetooth: hci1: command tx timeout [ 121.847309] Bluetooth: hci3: command tx timeout [ 121.848497] Bluetooth: hci0: command tx timeout [ 121.912364] Bluetooth: hci5: command tx timeout [ 121.913952] Bluetooth: hci2: command tx timeout [ 122.039323] Bluetooth: hci4: command tx timeout [ 122.040672] Bluetooth: hci6: command tx timeout [ 122.105591] Bluetooth: hci7: command tx timeout [ 123.831341] Bluetooth: hci1: command tx timeout [ 123.895734] Bluetooth: hci0: command tx timeout [ 123.896369] Bluetooth: hci3: command tx timeout [ 123.959323] Bluetooth: hci2: command tx timeout [ 123.960058] Bluetooth: hci5: command tx timeout [ 124.088747] Bluetooth: hci4: command tx timeout [ 124.089511] Bluetooth: hci6: command tx timeout [ 124.151500] Bluetooth: hci7: command tx timeout [ 125.881349] Bluetooth: hci1: command tx timeout [ 125.943374] Bluetooth: hci3: command tx timeout [ 125.943977] Bluetooth: hci0: command tx timeout [ 126.007317] Bluetooth: hci5: command tx timeout [ 126.007976] Bluetooth: hci2: command tx timeout [ 126.135796] Bluetooth: hci4: command tx timeout [ 126.136484] Bluetooth: hci6: command tx timeout [ 126.199602] Bluetooth: hci7: command tx timeout [ 127.927648] Bluetooth: hci1: command tx timeout [ 127.992812] Bluetooth: hci3: command tx timeout [ 127.993505] Bluetooth: hci0: command tx timeout [ 128.055273] Bluetooth: hci5: command tx timeout [ 128.055902] Bluetooth: hci2: command tx timeout [ 128.183344] Bluetooth: hci6: command tx timeout [ 128.183936] Bluetooth: hci4: command tx timeout [ 128.247299] Bluetooth: hci7: command tx timeout [ 179.788699] syz-executor.2 (289) used greatest stack depth: 24152 bytes left [ 182.533109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.538058] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.539804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.546066] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.549048] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.747146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.750258] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.752347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.757027] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.759832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.770641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.773787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.775385] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.794102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.796574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.876881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.886647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.895087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.904890] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.925495] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.943923] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.973629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.974762] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.982352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.988730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.992914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.997645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.043108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.043805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.065716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.136712] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.142038] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.144525] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.152068] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.155210] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 183.286181] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.299717] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.308583] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.332721] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.338714] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 184.567337] Bluetooth: hci0: command tx timeout [ 184.823425] Bluetooth: hci1: command tx timeout [ 184.823841] Bluetooth: hci2: command tx timeout [ 185.143377] Bluetooth: hci3: command tx timeout [ 185.143740] Bluetooth: hci4: command tx timeout [ 185.336287] Bluetooth: hci5: command tx timeout [ 185.527677] Bluetooth: hci6: command tx timeout [ 185.527717] Bluetooth: hci7: command tx timeout [ 186.616591] Bluetooth: hci0: command tx timeout [ 186.871308] Bluetooth: hci2: command tx timeout [ 186.872328] Bluetooth: hci1: command tx timeout [ 187.191341] Bluetooth: hci3: command tx timeout [ 187.192571] Bluetooth: hci4: command tx timeout [ 187.383352] Bluetooth: hci5: command tx timeout [ 187.575437] Bluetooth: hci7: command tx timeout [ 187.576340] Bluetooth: hci6: command tx timeout [ 188.663285] Bluetooth: hci0: command tx timeout [ 188.921525] Bluetooth: hci1: command tx timeout [ 188.921814] Bluetooth: hci2: command tx timeout [ 189.239787] Bluetooth: hci4: command tx timeout [ 189.240528] Bluetooth: hci3: command tx timeout [ 189.431286] Bluetooth: hci5: command tx timeout [ 189.623552] Bluetooth: hci6: command tx timeout [ 189.623713] Bluetooth: hci7: command tx timeout [ 190.711494] Bluetooth: hci0: command tx timeout [ 190.967495] Bluetooth: hci1: command tx timeout [ 190.967574] Bluetooth: hci2: command tx timeout [ 191.288306] Bluetooth: hci3: command tx timeout [ 191.288900] Bluetooth: hci4: command tx timeout [ 191.479579] Bluetooth: hci5: command tx timeout [ 191.671311] Bluetooth: hci6: command tx timeout [ 191.671340] Bluetooth: hci7: command tx timeout [ 245.383435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.397694] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.400076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.405774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.408524] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.509387] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.511614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.517631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.522778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.525743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.598339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.600857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.606613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.627064] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.632120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.659494] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.667627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.669337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.714581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.749419] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.863342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.868076] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.871484] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.873015] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.889786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.899067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.908895] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.912959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.914662] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.916444] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.919583] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.925361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.926599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.942859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.956297] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 245.976515] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 245.986622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 245.987668] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.054891] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.102740] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.480264] Bluetooth: hci0: command tx timeout [ 247.544130] Bluetooth: hci1: command tx timeout [ 247.673322] Bluetooth: hci2: command tx timeout [ 247.863859] Bluetooth: hci3: command tx timeout [ 248.055366] Bluetooth: hci4: command tx timeout [ 248.055848] Bluetooth: hci5: command tx timeout [ 248.119446] Bluetooth: hci6: command tx timeout [ 248.183288] Bluetooth: hci7: command tx timeout [ 249.528465] Bluetooth: hci0: command tx timeout [ 249.592281] Bluetooth: hci1: command tx timeout [ 249.722252] Bluetooth: hci2: command tx timeout [ 249.911274] Bluetooth: hci3: command tx timeout [ 250.103578] Bluetooth: hci4: command tx timeout [ 250.103626] Bluetooth: hci5: command tx timeout [ 250.167571] Bluetooth: hci6: command tx timeout [ 250.231459] Bluetooth: hci7: command tx timeout [ 251.575705] Bluetooth: hci0: command tx timeout [ 251.640262] Bluetooth: hci1: command tx timeout [ 251.767382] Bluetooth: hci2: command tx timeout [ 251.961403] Bluetooth: hci3: command tx timeout [ 252.152276] Bluetooth: hci4: command tx timeout [ 252.152440] Bluetooth: hci5: command tx timeout [ 252.215416] Bluetooth: hci6: command tx timeout [ 252.280375] Bluetooth: hci7: command tx timeout [ 253.624063] Bluetooth: hci0: command tx timeout [ 253.688326] Bluetooth: hci1: command tx timeout [ 253.817240] Bluetooth: hci2: command tx timeout [ 254.007245] Bluetooth: hci3: command tx timeout [ 254.199380] Bluetooth: hci4: command tx timeout [ 254.199425] Bluetooth: hci5: command tx timeout [ 254.263414] Bluetooth: hci6: command tx timeout [ 254.329512] Bluetooth: hci7: command tx timeout [ 308.361443] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.367186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.370935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.378405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.381943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.426099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.430705] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.435905] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.445821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.452859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.488411] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.492534] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.494069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.502824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.505216] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.614806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.634837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.642556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.666557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.680936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.781079] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.806033] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.809710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.821028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.825647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.841635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.856562] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.858786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.863602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.866080] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.868244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.871950] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.873530] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.909671] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.926468] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.970714] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.997712] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.041682] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.095737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.108131] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.456451] Bluetooth: hci0: command tx timeout [ 310.520269] Bluetooth: hci1: command tx timeout [ 310.585261] Bluetooth: hci2: command tx timeout [ 310.775311] Bluetooth: hci3: command tx timeout [ 310.967349] Bluetooth: hci4: command tx timeout [ 311.031321] Bluetooth: hci6: command tx timeout [ 311.031709] Bluetooth: hci5: command tx timeout [ 311.223305] Bluetooth: hci7: command tx timeout [ 312.503346] Bluetooth: hci0: command tx timeout [ 312.567570] Bluetooth: hci1: command tx timeout [ 312.633208] Bluetooth: hci2: command tx timeout [ 312.823394] Bluetooth: hci3: command tx timeout [ 313.015289] Bluetooth: hci4: command tx timeout [ 313.079280] Bluetooth: hci5: command tx timeout [ 313.079338] Bluetooth: hci6: command tx timeout [ 313.272476] Bluetooth: hci7: command tx timeout [ 314.551287] Bluetooth: hci0: command tx timeout [ 314.617222] Bluetooth: hci1: command tx timeout [ 314.679282] Bluetooth: hci2: command tx timeout [ 314.872223] Bluetooth: hci3: command tx timeout [ 315.063475] Bluetooth: hci4: command tx timeout [ 315.127547] Bluetooth: hci5: command tx timeout [ 315.127818] Bluetooth: hci6: command tx timeout [ 315.320430] Bluetooth: hci7: command tx timeout [ 316.599298] Bluetooth: hci0: command tx timeout [ 316.665242] Bluetooth: hci1: command tx timeout [ 316.727620] Bluetooth: hci2: command tx timeout [ 316.919817] Bluetooth: hci3: command tx timeout [ 317.111538] Bluetooth: hci4: command tx timeout [ 317.175401] Bluetooth: hci5: command tx timeout [ 317.178551] Bluetooth: hci6: command tx timeout [ 317.369313] Bluetooth: hci7: command tx timeout [ 371.206825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.210574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.212711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.217810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.221343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.301606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.305679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.313033] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.337271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.348759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.411409] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.429769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.436130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.460460] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.475603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.546333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.549077] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.554960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.557334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.560918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.567034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.586591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.591554] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.597575] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.607617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.745371] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 371.752501] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.754601] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 371.765758] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.774378] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 371.777773] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.798859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 371.812141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 371.814741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.821554] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.833498] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.834960] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.845736] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.878462] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.908888] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.240604] Bluetooth: hci0: command tx timeout [ 373.431334] Bluetooth: hci1: command tx timeout [ 373.496402] Bluetooth: hci2: command tx timeout [ 373.687612] Bluetooth: hci3: command tx timeout [ 373.688664] Bluetooth: hci4: command tx timeout [ 373.943479] Bluetooth: hci5: command tx timeout [ 373.944728] Bluetooth: hci6: command tx timeout [ 374.071396] Bluetooth: hci7: command tx timeout [ 375.288639] Bluetooth: hci0: command tx timeout [ 375.479419] Bluetooth: hci1: command tx timeout [ 375.543874] Bluetooth: hci2: command tx timeout [ 375.737226] Bluetooth: hci4: command tx timeout [ 375.737840] Bluetooth: hci3: command tx timeout [ 375.991698] Bluetooth: hci6: command tx timeout [ 375.993027] Bluetooth: hci5: command tx timeout [ 376.120482] Bluetooth: hci7: command tx timeout [ 377.336655] Bluetooth: hci0: command tx timeout [ 377.528210] Bluetooth: hci1: command tx timeout [ 377.591299] Bluetooth: hci2: command tx timeout [ 377.785242] Bluetooth: hci3: command tx timeout [ 377.785875] Bluetooth: hci4: command tx timeout [ 378.039452] Bluetooth: hci5: command tx timeout [ 378.040105] Bluetooth: hci6: command tx timeout [ 378.168405] Bluetooth: hci7: command tx timeout [ 379.383613] Bluetooth: hci0: command tx timeout [ 379.575973] Bluetooth: hci1: command tx timeout [ 379.639248] Bluetooth: hci2: command tx timeout [ 379.831353] Bluetooth: hci4: command tx timeout [ 379.832009] Bluetooth: hci3: command tx timeout [ 380.088345] Bluetooth: hci6: command tx timeout [ 380.088991] Bluetooth: hci5: command tx timeout [ 380.216282] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:04:11 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888015967c38 RCX=ffffffff81b7632b RDX=ffff88800db90000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff888015967ae0 RSP=ffff8880159679e0 R8 =0000000000000000 R9 =ffffed100126c06d R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=ffff888015967ca0 R14=ffff888009293dd0 R15=ffff888015967c8c RIP=ffffffff8172ed30 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564e000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f89a418a269 CR3=0000000024d38000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff8880e574e000 RCX=ffffffff867837b2 RDX=ffff888016e30000 RSI=0000000000000001 RDI=ffff88806cf08a38 RBP=ffff888016e28000 RSP=ffff88806cf089a8 R8 =ffffffff867837b6 R9 =0000000000000001 R10=000000000003b074 R11=0000000000000003 R12=0000000000000001 R13=ffff88806cf08a70 R14=ffff888016e2ff58 R15=ffff88806cf08a28 RIP=ffffffff815a7904 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574e000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdd5a4bb59e CR3=00000000310c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000