Warning: Permanently added '[localhost]:45002' (ECDSA) to the list of known hosts. 2025/04/26 08:18:35 fuzzer started 2025/04/26 08:18:35 dialing manager at localhost:46629 syzkaller login: [ 95.011997] cgroup: Unknown subsys name 'net' [ 95.157032] cgroup: Unknown subsys name 'cpuset' [ 95.204684] cgroup: Unknown subsys name 'rlimit' 2025/04/26 08:18:52 syscalls: 2214 2025/04/26 08:18:52 code coverage: enabled 2025/04/26 08:18:52 comparison tracing: enabled 2025/04/26 08:18:52 extra coverage: enabled 2025/04/26 08:18:52 setuid sandbox: enabled 2025/04/26 08:18:52 namespace sandbox: enabled 2025/04/26 08:18:52 Android sandbox: enabled 2025/04/26 08:18:52 fault injection: enabled 2025/04/26 08:18:52 leak checking: enabled 2025/04/26 08:18:52 net packet injection: enabled 2025/04/26 08:18:52 net device setup: enabled 2025/04/26 08:18:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/26 08:18:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/26 08:18:52 USB emulation: enabled 2025/04/26 08:18:52 hci packet injection: enabled 2025/04/26 08:18:52 wifi device emulation: enabled 2025/04/26 08:18:52 802.15.4 emulation: enabled 2025/04/26 08:18:52 fetching corpus: 0, signal 0/0 (executing program) 2025/04/26 08:18:54 starting 8 fuzzer processes 08:18:54 executing program 1: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x9d0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0xe2ef, 0x67ede0f3b2f5698e) write$P9_RSTAT(r2, &(0x7f0000000140)={0x5e, 0x7d, 0x1, {0x0, 0x57, 0x2, 0xcf38, {0x4, 0x1, 0x6}, 0x1800000, 0x7ba, 0x200, 0x7f, 0x5, '#[-)-', 0x2, '&$', 0xe, 'devices.allow\x00', 0xf, '/proc/slabinfo\x00'}}, 0x5e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xfd) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040890}, 0x2000c850) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5a3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_int(r0, &(0x7f0000000440)=0x4, 0x12) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000480)={0x38, 0x4, 0x9, 0x0, 0x5, 0xffffff85}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) dup(r1) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000540)) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000580)={[0x6]}, 0x8) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x151}, 0x24000004) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) fsetxattr$trusted_overlay_upper(r2, &(0x7f00000007c0), &(0x7f0000000800)={0x0, 0xfb, 0x93, 0x3, 0x1c, "baa9698af572df5a382fee4bc92929c9", "f3d5103cb797a54b479207b40dc9bb206e63f9d17e07aac772757029a6258319f46811fa82e2dbe8e24453f62a2764fc707d36fbc5a99b564be390c0c98b4ee9e441a9bc2c5ba87780a42e7cb76d82737e4b1611f17bdff6030aac2a407bdd551bdea36c93f5ad3b6167ddcfd5ca7bb20942d8eae74cf59a82986872de3b"}, 0x93, 0x2) 08:18:54 executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc8, 0x9}}, './file0\x00'}) getdents64(r0, &(0x7f0000000040)=""/198, 0xc6) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)={{0x0, 0x100, 0x1, 0x2, 0x2, 0x81, 0x800, 0xf91, 0x8000, 0x30d, 0x7, 0x2, 0x7, 0x1, 0xffffffff}, 0x8, [0x0]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/237, 0xed, 0x0, &(0x7f00000002c0)=""/88, 0x58}, &(0x7f0000000380)=0x40) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '&%'}, {0x20, '(}'}, {}, {0x20, '%'}, {0x20, '%+,$'}, {}, {0x20, '}'}, {0x20, '@+('}, {0x20, '.^:}%:'}, {0x20, '$\xa2&'}], 0xa, "3f961d1f700baea0b8502461d7df457accaba1dd5b13dd8901f1945c83141dbd4bb6258897f5732f782107d98804bf91b739206df864c806014e0e2c7e00f040fb6613b3d9b265cafa12d58390d9dcee971f518b8b9b8033d9c075cb"}, 0x87) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) accept(r2, &(0x7f0000000480)=@l2tp, &(0x7f0000000500)=0x80) r3 = openat$incfs(r0, &(0x7f0000000540)='.log\x00', 0x200000, 0x40) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000580)) syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x3ff000000000, 0x1, &(0x7f0000000700)=[{&(0x7f0000000680)="e272d66dcbf0da9d58de930a0bbbc56d3729c099d0273f79c21709f8ad0d082c59a420d9722e0e4cc1e8b371b99aa8c31be523dbaefe5e15e2f1d48432192f7f97007dff39fa549c3c2abafa3e45b2dc65dc7f67031302949e7463c7054b9294088afe268963bf4bc79ac202665894428917047884bcd195a0dab0e187218c76", 0x80, 0x7}], 0x22800, &(0x7f0000000740)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}], [{@measure}]}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/bus/auxiliary', 0x101402, 0x40) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f00000007c0)={0x0, 0xfff00000000000, 0x37}) r5 = syz_io_uring_complete(0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000800)={'dummy0\x00', @local}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000840)={0x2, [0x2, 0x3], 0x3}, 0x10) ioctl$CDROMSUBCHNL(r5, 0x530b, &(0x7f0000000880)={0x0, 0x9, 0x1, 0x9, 0x35, 0x1, @lba=0x1, @lba=0xfffff801}) syz_open_dev$vcsn(&(0x7f00000008c0), 0x33, 0x101040) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000900)={0x0, "432b6c910ebcf41a06273e6259c80040"}) 08:18:54 executing program 2: msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0xfffffffffffffff9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x2, 'virt_wifi0\x00', {0x7}, 0x5}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/92, 0x5c) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x20}, 0x1, 0x0, 0x0, 0x40890}, 0x841) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000240)=0x28) syz_io_uring_setup(0x411d, &(0x7f0000000280)={0x0, 0x302, 0x8, 0x0, 0x3a4, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80) r2 = syz_open_dev$mouse(&(0x7f00000004c0), 0x3defc21, 0x200) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x9c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0xc0d0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r0) accept$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000980)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001d80)={&(0x7f0000000800), 0xc, &(0x7f0000001d40)={&(0x7f00000009c0)={0x1344, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x11cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.]}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/mouse#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff192f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "959fa09f31be52b69c0ebf4ade71fd50517aa06a71a2a5add767823a493b711c556b14aa14f574a1df85c714396c3df2b0c0e2f082b5a7cd9e8f21a37e937c067196b8d98a013e95eac1e286c4abbd6bc800aa95f57296f43c253798b6a97cf00fdf851e94240485eeeea3372f1f4b60e8603678332f51ae4d105e66c4"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.+@]}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':#:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@.[\\){/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'-,\x95\\\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8929}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/bsg\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth1_to_hsr\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '!-.*@\\&#/$\\\xbf*./!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x100}]}, 0x1344}, 0x1, 0x0, 0x0, 0x44}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r2) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, r7, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) [ 113.553087] audit: type=1400 audit(1745655534.461:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:18:54 executing program 3: r0 = epoll_create(0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) getsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0xa837, 0x6, 0x8}) r3 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000180)=0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c001, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x40c0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x43}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000003c0)={@private1, 0x25}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x1, 0x9, 0x6}) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000440)="256fa18e3d59a4dcb22c48f831c6c22e32ae70a978914da5") ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000480)={0x0, 0xdce000000000}) ioctl$TIOCSBRK(r6, 0x5427) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000004c0)=0x5, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000500)={'TPROXY\x00'}, &(0x7f0000000540)=0x1e) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000003800)={'icmp6\x00'}, &(0x7f0000003840)=0x1e) 08:18:54 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008850) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x401}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80000001}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x800}, @ETHTOOL_A_RINGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x40000840) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$update(0x2, r3, &(0x7f00000003c0)="442b1babf319a9d092dc42fc0338f1dd44b0", 0x12) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000400)={0xf545, 0x6, 0x7f, 0xc5, 0x10001}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002900)='net/ipv6_route\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000881) r5 = add_key$keyring(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$negate(0xd, r3, 0x3f, r5) write$9p(r4, &(0x7f0000002ac0)="2ad1810036ec82de497f7b20c93e28b5762be3f77da7c872382b5939a84652758cfcbe3dd8d4ad0442de3f6d5f0a479cc6122a2e8f1b4630cfc12e79549ad7265d6ecd3fac4ea8801121f024b23fed933e1214ff7a577506ca2418eff7e242694affe067b05c303ef02258e01edec790fdb84ffcda3be67fc88eeb6e707f72ac1d47723bc31e09ae80f251a85b35ce99cfafdcf9246ebc6de83e45e1ab8c642a", 0xa0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7a}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000090}, 0x24000010) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), r4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x904}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x2c, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdb}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x49}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4040015) write$P9_RCREATE(r2, &(0x7f0000002f40)={0x18, 0x73, 0x2, {{0x2, 0x1, 0x5}, 0xffffffff}}, 0x18) 08:18:54 executing program 6: write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x8, 0x1, 0x4}}, 0x14) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="ab01af228e9ca553d6fd5e162064ce59", 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x4e21, @rand_addr=0x64010102}, {0x6, @multicast}, 0x42, {0x2, 0x4e23, @multicast1}, 'ip6tnl0\x00'}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0xbe29b094559c7dd5, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000240)) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000280)="1b0eaa06725337efbc74a52f3a6df178a56083f6b48d71a4990152625bc0175455ebdee19928fe70b26b75cc61f37467b217b0d407c5594966ef8ce0dafdcb2809fb6917599ab5fa662c46239899e47667d65c5da4102b22c310a55e6498dfb9b7150a4e62e3e446ce14e4b6f9b353b5a4d03e626e511f820d85cfd5f10f1acc6c1f89ced6eee3c337bf92620019c3cdca6cf8ac4ad7cae50376ddcfcf907503a88e881c5b3bfe2369d682ccfed348415d5fae664aacdb30477db84034059c") setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois\x00', 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x5, 0x1, 0x900, 0x0, 0x0, {0x0, 0x0, 0x7}, [""]}, 0x14}}, 0x5) write(r2, &(0x7f00000004c0)="0713877036bca8308de24d8433737846a7cc2c9615c96d5b4f420866edfb6edd46b12beb99ea2e0445f6b5cfcc801963a16b9529f8dcb0ab2e314ee9c1326971500b3690953b58654db9795d0eff80f99c30213c37ccc670c72ed6bf8ead1f591db7abea14a408d640b6a0019bf85c30310dc2018e9947734a58413561bcc84523aa185f11a974361202f237de6eddffb1a520efeadb8dde2b1bc721ffe199323f38004e4f0ecdc066452e61ffdb37", 0xaf) connect(r2, &(0x7f0000000580)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/diskstats\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000640)={{0x0, 0x400, 0x4, 0x8, 0x3ff, 0x2, 0xbdc8, 0x3f, 0x6, 0x8, 0x7, 0x101, 0x1, 0x2a8a, 0x1}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000001640)={0x0, @adiantum, 0x0, @desc3}) 08:18:54 executing program 7: ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80000000, 0x8, 0x36, 0xc00, 0x9, 0x0, r0}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0x8, 0x80801) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000240)={0x1, 0x7}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000280)={{0x0, 0x400000000000, 0x17, 0x80000000, 0x2, 0x9, 0xffffffff80000000, 0x10001, 0x1000, 0x3, 0x0, 0x0, 0x5, 0x30000000000, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) exit_group(0xa42) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000340)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000380)={0x3a, 0x10, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x9, 0x0, [0x20, 0xffffffff00000000, 0x80000000]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x7f, 0x4, [0x7fffffff, 0xffffffff00000001, 0x6, 0x10001, 0x559, 0x3ff, 0x7f]}}, @hao={0xc9, 0x10, @remote}]}, 0x90) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000440)={0x0, 0x7, 0x5}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1824000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xec, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x28}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x613}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) clock_gettime(0x0, &(0x7f0000006180)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000005fc0)=[{{&(0x7f0000000a00), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b00)=""/79, 0x4f}, {&(0x7f0000000b80)=""/44, 0x2c}], 0x3}}, {{&(0x7f0000000c00), 0x6e, &(0x7f0000002000)=[{&(0x7f0000000c80)=""/209, 0xd1}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/140, 0x8c}, {&(0x7f0000001e40)=""/183, 0xb7}, {&(0x7f0000001f00)=""/226, 0xe2}], 0x5, &(0x7f0000002080)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000020c0), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002140)=""/192, 0xc0}, {&(0x7f0000002200)=""/154, 0x9a}], 0x2, &(0x7f0000002300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002340)=@abs, 0x6e, &(0x7f00000033c0)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003400)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003440), 0x6e, &(0x7f0000005840)=[{&(0x7f00000034c0)=""/66, 0x42}, {&(0x7f0000003540)=""/129, 0x81}, {&(0x7f0000003600)=""/245, 0xf5}, {&(0x7f0000003700)=""/74, 0x4a}, {&(0x7f0000003780)=""/56, 0x38}, {&(0x7f00000037c0)=""/69, 0x45}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/4096, 0x1000}], 0x8, &(0x7f00000058c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000005a00), 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000005a80)=""/52, 0x34}, {&(0x7f0000005ac0)=""/156, 0x9c}, {&(0x7f0000005b80)=""/223, 0xdf}, {&(0x7f0000005c80)=""/28, 0x1c}, {&(0x7f0000005cc0)=""/164, 0xa4}, {&(0x7f0000005d80)=""/25, 0x19}], 0x6}}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000005e40)=""/131, 0x83}], 0x1, &(0x7f0000005f40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x7, 0x20, &(0x7f00000061c0)={r3, r4+10000000}) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000006200)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006280), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000062c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000006400)={&(0x7f0000006240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006300)={0xac, r8, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "53695340da05eb3b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f0168a1e806ff9e9de360e074936b5a6085d7399ecb35d8e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f0ce3ac76a545edc"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="808b2ccf8f71cc49a3bbb0cbc60bb64a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="450e40c99593332fbf4e0c95876520dd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ab2d4a05a44ea714"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c06befcfe14f056fa5f2e24a50a5eac1"}]}]}, 0xac}}, 0x20000080) 08:18:55 executing program 4: semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000000)=""/206) r0 = semget(0x0, 0x4, 0x20) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/24) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x6, @none, 0x40, 0x1}, 0xe) r1 = semget$private(0x0, 0x2, 0x10) semctl$SEM_INFO(r1, 0x4, 0x13, &(0x7f0000000180)=""/227) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000002c0)=""/169) r3 = semget(0x1, 0x3, 0x200) semctl$SEM_STAT_ANY(r3, 0x1, 0x14, &(0x7f0000000380)=""/231) r4 = semget$private(0x0, 0x1, 0x470) semctl$IPC_INFO(r4, 0x2, 0x3, &(0x7f0000000480)=""/161) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000540)={@loopback, 0x1, 0x0, 0xff, 0x1, 0x0, 0xa19}, &(0x7f0000000580)=0x20) r5 = semget$private(0x0, 0x4, 0x10) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f00000005c0)=""/220) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000006c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000008c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000ac0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "cfd4268bedea57"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001ac0)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "4c0ec0d9d9e96c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000006c7c0)={0xffffffff80000000, [{r6}, {0x0, r7}, {}, {}, {r8, r9}], 0xc, "d35fe486296497"}) [ 115.039910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.046700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.050681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.057755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.063682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.116433] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.119554] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.121659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.129623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.133548] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.138029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.143285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.157912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.187552] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.200281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.206670] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.208730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.211347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.216566] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.218310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.220753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.238572] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.256378] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.270556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.284602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.284610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.302413] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.315457] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.321094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.325423] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.331147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.338405] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.347199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.367440] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.372248] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.457763] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.465511] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.469386] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.480262] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.497688] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 117.122655] Bluetooth: hci0: command tx timeout [ 117.186199] Bluetooth: hci2: command tx timeout [ 117.314675] Bluetooth: hci4: command tx timeout [ 117.315520] Bluetooth: hci1: command tx timeout [ 117.378087] Bluetooth: hci3: command tx timeout [ 117.443059] Bluetooth: hci5: command tx timeout [ 117.443777] Bluetooth: hci6: command tx timeout [ 117.570155] Bluetooth: hci7: command tx timeout [ 119.169911] Bluetooth: hci0: command tx timeout [ 119.233984] Bluetooth: hci2: command tx timeout [ 119.362216] Bluetooth: hci1: command tx timeout [ 119.362702] Bluetooth: hci4: command tx timeout [ 119.426070] Bluetooth: hci3: command tx timeout [ 119.490022] Bluetooth: hci6: command tx timeout [ 119.491367] Bluetooth: hci5: command tx timeout [ 119.618113] Bluetooth: hci7: command tx timeout [ 121.218078] Bluetooth: hci0: command tx timeout [ 121.282064] Bluetooth: hci2: command tx timeout [ 121.409972] Bluetooth: hci4: command tx timeout [ 121.410008] Bluetooth: hci1: command tx timeout [ 121.475153] Bluetooth: hci3: command tx timeout [ 121.540140] Bluetooth: hci5: command tx timeout [ 121.540200] Bluetooth: hci6: command tx timeout [ 121.667131] Bluetooth: hci7: command tx timeout [ 123.265924] Bluetooth: hci0: command tx timeout [ 123.330404] Bluetooth: hci2: command tx timeout [ 123.458062] Bluetooth: hci1: command tx timeout [ 123.459329] Bluetooth: hci4: command tx timeout [ 123.522151] Bluetooth: hci3: command tx timeout [ 123.586014] Bluetooth: hci5: command tx timeout [ 123.587277] Bluetooth: hci6: command tx timeout [ 123.715911] Bluetooth: hci7: command tx timeout [ 175.215699] syz-executor.6 (286) used greatest stack depth: 24512 bytes left [ 177.253448] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.260548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.262904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.268716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.272570] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.429010] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.431036] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.439495] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.440454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.443306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.446953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.451989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.457571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.459766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.468037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.526250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.529936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.531946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.536983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.541139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.542567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.554997] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.559176] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.561017] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.567353] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.570959] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.572805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.579141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.635982] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.646208] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.646541] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.660731] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.670284] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.674889] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.690319] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.707426] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.736789] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.755627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.766999] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.774116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.332696] Bluetooth: hci0: command tx timeout [ 179.521950] Bluetooth: hci2: command tx timeout [ 179.523228] Bluetooth: hci1: command tx timeout [ 179.649928] Bluetooth: hci3: command tx timeout [ 179.649975] Bluetooth: hci4: command tx timeout [ 179.714903] Bluetooth: hci5: command tx timeout [ 179.841949] Bluetooth: hci7: command tx timeout [ 179.841999] Bluetooth: hci6: command tx timeout [ 181.378074] Bluetooth: hci0: command tx timeout [ 181.572208] Bluetooth: hci2: command tx timeout [ 181.572442] Bluetooth: hci1: command tx timeout [ 181.698102] Bluetooth: hci4: command tx timeout [ 181.698194] Bluetooth: hci3: command tx timeout [ 181.761967] Bluetooth: hci5: command tx timeout [ 181.890048] Bluetooth: hci7: command tx timeout [ 181.890074] Bluetooth: hci6: command tx timeout [ 183.425951] Bluetooth: hci0: command tx timeout [ 183.618095] Bluetooth: hci1: command tx timeout [ 183.618180] Bluetooth: hci2: command tx timeout [ 183.746058] Bluetooth: hci4: command tx timeout [ 183.746258] Bluetooth: hci3: command tx timeout [ 183.810269] Bluetooth: hci5: command tx timeout [ 183.937945] Bluetooth: hci6: command tx timeout [ 183.938173] Bluetooth: hci7: command tx timeout [ 185.474924] Bluetooth: hci0: command tx timeout [ 185.665973] Bluetooth: hci2: command tx timeout [ 185.666077] Bluetooth: hci1: command tx timeout [ 185.794350] Bluetooth: hci4: command tx timeout [ 185.795198] Bluetooth: hci3: command tx timeout [ 185.858223] Bluetooth: hci5: command tx timeout [ 185.986559] Bluetooth: hci7: command tx timeout [ 185.987447] Bluetooth: hci6: command tx timeout [ 239.567346] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.568776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.570017] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.574395] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.576282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.628711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.650215] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.657596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.668423] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.687257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.697966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.702449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.704470] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.713604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.715370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.830791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.879640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.889710] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.927145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.934965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.976112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.035757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.037719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.067029] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.074533] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.078448] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.083344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.107193] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.110720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.118065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.131200] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.174710] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.177677] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.204034] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.242751] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.331621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.336561] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.342033] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.356876] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.394216] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.602997] Bluetooth: hci0: command tx timeout [ 241.730220] Bluetooth: hci2: command tx timeout [ 241.794075] Bluetooth: hci1: command tx timeout [ 241.986094] Bluetooth: hci3: command tx timeout [ 242.241952] Bluetooth: hci5: command tx timeout [ 242.305938] Bluetooth: hci4: command tx timeout [ 242.371893] Bluetooth: hci6: command tx timeout [ 242.498223] Bluetooth: hci7: command tx timeout [ 243.651925] Bluetooth: hci0: command tx timeout [ 243.779088] Bluetooth: hci2: command tx timeout [ 243.841875] Bluetooth: hci1: command tx timeout [ 244.036000] Bluetooth: hci3: command tx timeout [ 244.292638] Bluetooth: hci5: command tx timeout [ 244.355857] Bluetooth: hci4: command tx timeout [ 244.418108] Bluetooth: hci6: command tx timeout [ 244.546073] Bluetooth: hci7: command tx timeout [ 245.698897] Bluetooth: hci0: command tx timeout [ 245.826856] Bluetooth: hci2: command tx timeout [ 245.891002] Bluetooth: hci1: command tx timeout [ 246.083500] Bluetooth: hci3: command tx timeout [ 246.339101] Bluetooth: hci5: command tx timeout [ 246.402901] Bluetooth: hci4: command tx timeout [ 246.466127] Bluetooth: hci6: command tx timeout [ 246.595174] Bluetooth: hci7: command tx timeout [ 247.745929] Bluetooth: hci0: command tx timeout [ 247.873896] Bluetooth: hci2: command tx timeout [ 247.939876] Bluetooth: hci1: command tx timeout [ 248.129942] Bluetooth: hci3: command tx timeout [ 248.386692] Bluetooth: hci5: command tx timeout [ 248.451199] Bluetooth: hci4: command tx timeout [ 248.514052] Bluetooth: hci6: command tx timeout [ 248.643226] Bluetooth: hci7: command tx timeout [ 302.166614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.173419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.177884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.184973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.190086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.238229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.241453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.245447] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.250708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.256017] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.288336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.299508] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.305677] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.319487] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.326015] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.362278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.365719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.367967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.373672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.377219] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.429520] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.435957] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.439086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.456517] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.491029] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.493739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.496613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.502130] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.510117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.515300] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.582245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.596350] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.597184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.606495] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.612413] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.628342] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.643354] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.647714] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.670167] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.688689] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.258906] Bluetooth: hci0: command tx timeout [ 304.323203] Bluetooth: hci1: command tx timeout [ 304.388103] Bluetooth: hci2: command tx timeout [ 304.450908] Bluetooth: hci3: command tx timeout [ 304.577996] Bluetooth: hci5: command tx timeout [ 304.579729] Bluetooth: hci4: command tx timeout [ 304.770042] Bluetooth: hci7: command tx timeout [ 304.771230] Bluetooth: hci6: command tx timeout [ 306.305959] Bluetooth: hci0: command tx timeout [ 306.370054] Bluetooth: hci1: command tx timeout [ 306.433941] Bluetooth: hci2: command tx timeout [ 306.497881] Bluetooth: hci3: command tx timeout [ 306.626087] Bluetooth: hci4: command tx timeout [ 306.626590] Bluetooth: hci5: command tx timeout [ 306.819132] Bluetooth: hci7: command tx timeout [ 306.819632] Bluetooth: hci6: command tx timeout [ 308.354167] Bluetooth: hci0: command tx timeout [ 308.418038] Bluetooth: hci1: command tx timeout [ 308.482203] Bluetooth: hci2: command tx timeout [ 308.546846] Bluetooth: hci3: command tx timeout [ 308.674222] Bluetooth: hci4: command tx timeout [ 308.674727] Bluetooth: hci5: command tx timeout [ 308.866371] Bluetooth: hci6: command tx timeout [ 308.866913] Bluetooth: hci7: command tx timeout [ 310.402949] Bluetooth: hci0: command tx timeout [ 310.466255] Bluetooth: hci1: command tx timeout [ 310.531111] Bluetooth: hci2: command tx timeout [ 310.594057] Bluetooth: hci3: command tx timeout [ 310.722089] Bluetooth: hci5: command tx timeout [ 310.722587] Bluetooth: hci4: command tx timeout [ 310.913952] Bluetooth: hci7: command tx timeout [ 310.914457] Bluetooth: hci6: command tx timeout [ 365.274984] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.279608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.282405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.296534] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.313247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.349523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.367454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.372606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.380353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.383735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.413366] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.420795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.427183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.440748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.444653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.491288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.498114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.503501] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.532616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.536610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.556742] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.568282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.570449] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.576008] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.604848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.617115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.629955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.640342] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.649228] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.654113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.658549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.658773] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.665034] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.667697] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.671316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.673662] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.703184] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.706127] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.715357] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.741276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.362750] Bluetooth: hci0: command tx timeout [ 367.426358] Bluetooth: hci1: command tx timeout [ 367.490934] Bluetooth: hci2: command tx timeout [ 367.620457] Bluetooth: hci3: command tx timeout [ 367.746024] Bluetooth: hci7: command tx timeout [ 367.747428] Bluetooth: hci5: command tx timeout [ 367.810869] Bluetooth: hci4: command tx timeout [ 367.812015] Bluetooth: hci6: command tx timeout [ 369.410863] Bluetooth: hci0: command tx timeout [ 369.473929] Bluetooth: hci1: command tx timeout [ 369.539873] Bluetooth: hci2: command tx timeout [ 369.668049] Bluetooth: hci3: command tx timeout [ 369.794191] Bluetooth: hci5: command tx timeout [ 369.794695] Bluetooth: hci7: command tx timeout [ 369.858237] Bluetooth: hci4: command tx timeout [ 369.858699] Bluetooth: hci6: command tx timeout [ 371.459877] Bluetooth: hci0: command tx timeout [ 371.522202] Bluetooth: hci1: command tx timeout [ 371.586872] Bluetooth: hci2: command tx timeout [ 371.715897] Bluetooth: hci3: command tx timeout [ 371.843221] Bluetooth: hci7: command tx timeout [ 371.845099] Bluetooth: hci5: command tx timeout [ 371.905988] Bluetooth: hci4: command tx timeout [ 371.906801] Bluetooth: hci6: command tx timeout [ 373.505897] Bluetooth: hci0: command tx timeout [ 373.569895] Bluetooth: hci1: command tx timeout [ 373.633897] Bluetooth: hci2: command tx timeout [ 373.762798] Bluetooth: hci3: command tx timeout [ 373.890791] Bluetooth: hci7: command tx timeout [ 373.891262] Bluetooth: hci5: command tx timeout [ 373.953909] Bluetooth: hci6: command tx timeout [ 373.954353] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 08:24:03 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff813508dd RDI=fffffbfff0b83758 RBP=ffffffff85c1bac0 RSP=ffff88800960f7e0 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b0c2 R11=000000000000b29b R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88800960f8c8 RIP=ffffffff81518542 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe0600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffa2809e260 CR3=000000002e216000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=cd376a77b24a5de5 RDX=1ffff11005fb0edd RSI=000000000652fa0a RDI=ffff88806cf31850 RBP=ffff88802fd876e0 RSP=ffff88802fd87618 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=00000000000231ac R12=ffff88802fd876e8 R13=ffff88802fd876d0 R14=ffff888031e6d340 R15=ffff88802fd87688 RIP=ffffffff81350904 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005618351a04c8 CR3=0000000025c4e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000