Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:54899' (ECDSA) to the list of known hosts. 2025/04/26 19:11:30 fuzzer started 2025/04/26 19:11:30 dialing manager at localhost:46629 syzkaller login: [ 93.463948] cgroup: Unknown subsys name 'net' [ 93.605186] cgroup: Unknown subsys name 'cpuset' [ 93.654330] cgroup: Unknown subsys name 'rlimit' 2025/04/26 19:11:46 syscalls: 2214 2025/04/26 19:11:46 code coverage: enabled 2025/04/26 19:11:46 comparison tracing: enabled 2025/04/26 19:11:46 extra coverage: enabled 2025/04/26 19:11:46 setuid sandbox: enabled 2025/04/26 19:11:46 namespace sandbox: enabled 2025/04/26 19:11:46 Android sandbox: enabled 2025/04/26 19:11:46 fault injection: enabled 2025/04/26 19:11:46 leak checking: enabled 2025/04/26 19:11:46 net packet injection: enabled 2025/04/26 19:11:46 net device setup: enabled 2025/04/26 19:11:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/26 19:11:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/26 19:11:46 USB emulation: enabled 2025/04/26 19:11:46 hci packet injection: enabled 2025/04/26 19:11:46 wifi device emulation: enabled 2025/04/26 19:11:46 802.15.4 emulation: enabled 2025/04/26 19:11:46 fetching corpus: 0, signal 0/0 (executing program) 2025/04/26 19:11:49 starting 8 fuzzer processes 19:11:49 executing program 1: fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000040)=0x1) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x20, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180), 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x42c, 0x3f4, 0x200, 0x70bd2d, 0x25dfdbfc, {0x6, 0x2, 0xe, [0x100, 0xed0, 0x108, 0x1, 0x3ff, 0x6bf, 0x1000, 0xffffff7c, 0x1, 0x9, 0x8, 0x7, 0x6, 0x3ff, 0x6, 0xfffffe01, 0x7, 0x7f, 0x3f, 0xffffffff, 0x401, 0xffffffff, 0x0, 0x6, 0x800, 0x8, 0x3f, 0xa08, 0x3, 0x40, 0x2, 0xfffffffd, 0x9, 0x7, 0x7fff, 0x932, 0x7, 0x9, 0xfffffffd, 0x1f, 0xfffffe00, 0xffffffcd, 0x62493fc5, 0x8000, 0x10000, 0xeee6, 0x2, 0x2, 0x8, 0x0, 0x7912, 0x6, 0x56, 0x3, 0x3e75, 0x0, 0x80, 0x8000, 0x9, 0xffffffff, 0x6, 0x1, 0x7, 0x1ab], [0x4, 0x5df4, 0x7ff, 0x2, 0x1, 0x3, 0x2, 0xfffffeff, 0x3, 0x6c8d, 0x5d, 0x8, 0x8001, 0x1800000, 0x401, 0x0, 0x8, 0x0, 0xff, 0xcf, 0x2, 0x82, 0x0, 0x65e99173, 0xffffffc0, 0xffff0000, 0x7, 0x3, 0x4, 0x5, 0x80000001, 0xbf, 0x0, 0x8000, 0x40, 0x9, 0x200, 0x1, 0x2, 0x8001, 0x1000000, 0x8, 0x7, 0xfffffc01, 0x9, 0x6, 0x18000000, 0xfff, 0x401, 0x2, 0x800, 0xffff0001, 0xfff, 0x2, 0x6, 0x4, 0x4db4, 0xaf57, 0x2, 0x5, 0x64c4, 0x7, 0x81], [0x3, 0x40, 0x8, 0x5, 0x1f, 0x8, 0x0, 0x0, 0x2, 0x99b9, 0x1, 0x8, 0x16, 0x9, 0x7, 0x5497, 0x1, 0x4, 0x7, 0xbe86, 0x5, 0x3, 0x4, 0x4, 0x80, 0xb5, 0x3, 0x4, 0x0, 0x5, 0x0, 0x7, 0x8, 0x1, 0x412, 0x7fffffff, 0x1, 0xb6aa, 0x79, 0xfffffffc, 0x80000000, 0x8001, 0x0, 0x1, 0x8, 0x8, 0x8, 0xfffffffc, 0x10000, 0x3, 0x80, 0x8, 0x5d7a, 0x4, 0x8, 0x38000, 0x1, 0x3, 0x4907, 0x80, 0x4, 0x6d, 0x4, 0x6], [0xfffffffb, 0x0, 0x2, 0x3, 0x2, 0x7f, 0xff, 0x1, 0x4, 0x6, 0x9, 0x0, 0x2, 0x1, 0x7, 0x7, 0x6, 0x8001, 0x9, 0x40000000, 0x4, 0x7, 0x6, 0x0, 0x101, 0x7, 0x0, 0x10000, 0xe51f, 0x6, 0x0, 0x80000001, 0x9, 0xd4fa, 0x3, 0x6, 0x1, 0x0, 0x962, 0x5, 0x3, 0x8da, 0xffff7dc0, 0x7, 0x20, 0x1, 0x8, 0x4, 0x6, 0x1, 0x20, 0x4, 0x360, 0x3, 0x0, 0x2992, 0xda, 0x5, 0x3, 0x7ff, 0x113, 0x8, 0x3, 0xfffffffb], 0xa, [':/\x00', '\x00', '\x00', '\xc8\x00', '[\x00', '\x00']}, ["", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x40004}, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000680)=0x1, 0x4) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000006c0)={0x8}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x80001, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc811}, 0x20008000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x21, 0x70bd28, 0x3, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000009c0)={0x3, &(0x7f0000000980)=[{0x7, 0x0, 0x1, 0xa000000}, {0x7, 0x9, 0x2, 0x2}, {0xc02, 0xff, 0xff, 0x4297}]}) copy_file_range(r2, 0x0, r0, 0x0, 0xffff, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000a00), &(0x7f0000000a40)={'L+', 0xffff}, 0x16, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000a80)={{0x1, 0x3, 0x5, 0x2, 0x665}}) r3 = signalfd4(r2, &(0x7f0000000ac0)={[0x3]}, 0x8, 0x80800) r4 = socket(0xf, 0x80000, 0x1f) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008051) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000c80)) 19:11:49 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) ioctl$FIONCLEX(r0, 0x5450) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2080) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1076d6aa6953278, 0x0) preadv2(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/36, 0x24}], 0x2, 0x5, 0x6, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x2, 0x55e, {{0x29, 0x4, 0x3, 0x6, 0xa4, 0x65, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @timestamp={0x44, 0xc, 0xf4, 0x0, 0x4, [0x1, 0x1ef5]}, @ssrr={0x89, 0x1f, 0xb9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @rand_addr=0x64010101, @private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x17, 0x38, [@dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @rr={0x7, 0x1b, 0x6b, [@private=0xa010100, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote]}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x7, [{@multicast2, 0x3}, {@multicast2, 0x3}]}, @lsrr={0x83, 0x1b, 0xca, [@dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010102, @rand_addr=0x64010100]}]}}}}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x160, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x48015}, 0x8000) r5 = memfd_secret(0x80000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0x2a9}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r7, 0x4, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xd3, 0x7, 0x8000, 0xfff}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$CDROMRESET(r6, 0x5312) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000008c0)={0x69, 0x4}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r8, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x5d2ebf7df7beb703}, 0x4004) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x80, 0x0) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 19:11:49 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_tables_names\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x14) r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000240)={{r4}, "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"}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x6c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0x4d}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x8800) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3a}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x840) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000016c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001500)={0x158, r5, 0x408, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x19}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1d8}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x80000001}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x60a2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x240}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001700)={'veth1_to_team\x00', {0x2, 0x0, @initdev}}) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x804) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000001840)={'gre0\x00'}) r7 = syz_open_dev$vcsn(&(0x7f0000001880), 0x1, 0x80b81) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, 0x7, 0x1, 0x403, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48044}, 0x4040000) r8 = openat$cgroup_ro(r7, &(0x7f00000019c0)='memory.swap.current\x00', 0x0, 0x0) fsetxattr$security_capability(r8, &(0x7f0000001a00), &(0x7f0000001a40)=@v1={0x1000000, [{0x9, 0x101}]}, 0xc, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 19:11:49 executing program 3: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x3, 0x0, @c}, 0x29, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r2, r3) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/58, 0x3a, 0x4120, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @local, 0x8}, 0x1c) keyctl$revoke(0x3, r0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r4, 0x100, 0x3ff, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x8100}, {r5, 0x200a}, {r6, 0x100}, {r7, 0x230}, {0xffffffffffffffff, 0x82}], 0x5, &(0x7f00000005c0)={r8, r9+10000000}, &(0x7f0000000600)={[0x5]}, 0x8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x109120, 0x0) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@private2, @in6=@mcast2, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0xa0, 0x21, r1, r11}, {0x100000000, 0x3, 0x6, 0x61c, 0x200, 0x93, 0xfffffffffffffffe, 0x6}, {0x8, 0x0, 0xcc, 0xe8}, 0xffff0001, 0x6e6bbc, 0x2, 0x1, 0x4}, {{@in=@multicast1, 0x4d6, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3501, 0x0, 0x1, 0x7c, 0x7, 0x6, 0x10000}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r7, {r11, r12}}, './file0\x00'}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000980)={{0x1, 0x0, r12, r13, r3, 0x145, 0x401}, 0x0, 0x0, 0x6, 0x10000, 0x100, 0x66e5, 0x2, 0x100, 0x200, 0xffff}) ioctl$CDROMPAUSE(r10, 0x5301) ioctl$sock_inet_SIOCGIFBRDADDR(r10, 0x8919, &(0x7f0000000a00)={'veth1_macvtap\x00', {0x2, 0x0, @multicast2}}) [ 111.500865] audit: type=1400 audit(1745694709.233:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:11:49 executing program 4: ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000040)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004044}, 0x889c) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r0, 0x8, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040081}, 0x20040080) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, r0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x18}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x200, 0x18d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x40004) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x44}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000800)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x20, 0xac, "cef647d7c284517c7a08df5affab2bee5ecb9386d9f2c6a6d24d3be0"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5bf}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8001) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200480c0}, 0x40040) 19:11:49 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000000)={'\x00', 0xf4b, 0x3, 0x10000}) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x3f, 0x131000) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000000c0)={0x1, 0x49a, @status={[0x4, 0x23, 0x1, 0x7, 0x5, 0x5]}, [0x7, 0x7f, 0x40, 0xa6ca, 0x0, 0x7, 0x100, 0x2, 0x40, 0x7, 0x200, 0x80000001, 0x1, 0x7, 0x2, 0x1ff, 0x3, 0xb7ba, 0xdf9, 0x4, 0x0, 0x1f, 0xbb, 0x4, 0xce4, 0x4000000000000, 0x77f6, 0x1ff, 0xf6, 0x2, 0xfffffffffffffff7, 0xb94b, 0x8000, 0x7, 0x45, 0x2, 0x10000, 0x2, 0x5, 0xffffffffffffff7f, 0x1f, 0x40, 0xce89, 0x2, 0x7, 0x1, 0x8, 0xe4, 0x1ff, 0x0, 0x4, 0x8000, 0x9, 0x5, 0x7ff, 0x401, 0xffffffff7fffffff, 0x6, 0x0, 0x8, 0x6, 0x7f, 0x0, 0xff]}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = open$dir(&(0x7f0000000c00)='\x00', 0x2002, 0x4) r3 = dup2(r2, r1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r4 = socket$inet6(0xa, 0x5, 0x80000001) r5 = inotify_init() ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000c40)={r5, 0x2, 0x4, 0x100}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x854}, 0x40) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000e00)={0x0, 0x100000000, 0x2}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x3, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x10001}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x42d823a3efb9c26b}, 0x10) r8 = fcntl$dupfd(r1, 0x406, r5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000001300)={0x1, 0x80, 0x5, 0x2, 0x8, 0x76, 0x0, 0xfffffffffffffc00, 0x18800, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x100000001}, 0x102, 0x2, 0x100, 0x8, 0x7, 0x100, 0x7f, 0x0, 0x1, 0x0, 0x1ff}) r9 = accept4$inet6(r1, &(0x7f0000001380)={0xa, 0x0, 0x0, @dev}, &(0x7f00000013c0)=0x1c, 0x80000) getsockopt$bt_hci(r9, 0x0, 0x2, &(0x7f0000001400)=""/100, &(0x7f0000001480)=0x64) 19:11:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x6, 0x100401) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={0x0, 0x2, 0x1, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000006c0)={{r3}, r4, 0x2, @inherit={0x70, &(0x7f0000000240)={0x0, 0x5, 0x6, 0x8, {0xe, 0x10001, 0x7f, 0x8, 0x4a88}, [0x2, 0x2, 0x8, 0x1, 0x8]}}, @devid=r5}) r6 = openat$incfs(r3, &(0x7f00000016c0)='.log\x00', 0x400401, 0x42) write$tcp_congestion(r6, &(0x7f0000001700)='lp\x00', 0x3) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000001740)={0x8, 0xb6f5, 0x4, 0x0, 0x0, [{{r1}, 0x8}, {{r6}, 0xfffffffffffffff9}, {{r3}, 0xb2}, {{}, 0x10001}]}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x78, 0x1, 0x1, 0x5, 0x0, 0x0, {0x5}, [@CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000844}, 0x4800) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$trusted_overlay_origin(r7, &(0x7f0000001940), &(0x7f0000001980), 0x2, 0x3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000019c0)) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f0000001a00)) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x10, 0x3f8, 0x100, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x200080c6) r9 = fcntl$dupfd(r8, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80), 0x8000, &(0x7f0000001c00)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {}, 0x2c, {[{@mmap}], [{@euid_eq={'euid', 0x3d, r2}}]}}) 19:11:49 executing program 7: msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x2, "ebd8331615095fd2d9a7ab293c"}, 0x15, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x194, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x42c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x92}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcd9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4e5d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe4d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe1d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc7}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x24044015}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000003c0)={'filter\x00', 0x0, [0x0, 0xa6, 0x8, 0x2]}, &(0x7f0000000440)=0x54) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mknodat$null(r2, &(0x7f00000006c0)='./file0\x00', 0x2, 0x103) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000700)) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000740)=0x5) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x8, 0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000c00)={@local, 0x68}) ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f0000000c40)) r5 = signalfd(0xffffffffffffffff, &(0x7f00000016c0)={[0xffffffff00000000]}, 0x8) write$P9_RCLUNK(r5, &(0x7f0000001700)={0x7, 0x79, 0x2}, 0x7) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) [ 113.028884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.031973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.034655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.040543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.046395] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.101964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.104979] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.113068] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.123324] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.131273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.216839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.220131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.236244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.238038] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.240237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.251335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.255154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.257129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.260122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.265244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.270844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.275438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.288066] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.290696] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.294822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.297893] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.299759] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.305990] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.341918] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.348370] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.354026] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.355659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.357840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.408420] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.409791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.423462] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.425115] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.429018] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.432990] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.435945] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.100199] Bluetooth: hci0: command tx timeout [ 115.165057] Bluetooth: hci1: command tx timeout [ 115.355914] Bluetooth: hci2: command tx timeout [ 115.420223] Bluetooth: hci4: command tx timeout [ 115.420258] Bluetooth: hci5: command tx timeout [ 115.420872] Bluetooth: hci3: command tx timeout [ 115.483801] Bluetooth: hci7: command tx timeout [ 115.484498] Bluetooth: hci6: command tx timeout [ 117.147653] Bluetooth: hci0: command tx timeout [ 117.211646] Bluetooth: hci1: command tx timeout [ 117.404653] Bluetooth: hci2: command tx timeout [ 117.468693] Bluetooth: hci5: command tx timeout [ 117.469138] Bluetooth: hci4: command tx timeout [ 117.470099] Bluetooth: hci3: command tx timeout [ 117.531681] Bluetooth: hci7: command tx timeout [ 117.533383] Bluetooth: hci6: command tx timeout [ 119.196941] Bluetooth: hci0: command tx timeout [ 119.260666] Bluetooth: hci1: command tx timeout [ 119.452780] Bluetooth: hci2: command tx timeout [ 119.516973] Bluetooth: hci3: command tx timeout [ 119.517416] Bluetooth: hci4: command tx timeout [ 119.518637] Bluetooth: hci5: command tx timeout [ 119.581043] Bluetooth: hci6: command tx timeout [ 119.581491] Bluetooth: hci7: command tx timeout [ 121.244684] Bluetooth: hci0: command tx timeout [ 121.308835] Bluetooth: hci1: command tx timeout [ 121.500929] Bluetooth: hci2: command tx timeout [ 121.563922] Bluetooth: hci3: command tx timeout [ 121.564389] Bluetooth: hci4: command tx timeout [ 121.565684] Bluetooth: hci5: command tx timeout [ 121.628776] Bluetooth: hci7: command tx timeout [ 121.629224] Bluetooth: hci6: command tx timeout [ 173.778511] syz-executor.6 (289) used greatest stack depth: 23928 bytes left [ 175.538097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.542630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.547368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.554246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.564925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.618885] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.627461] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.631468] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.642369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.649881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.757473] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.763179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.765239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.777298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.785837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.799172] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.802535] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.805042] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.810468] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.813816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.950719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.961257] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.991829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.025845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.031061] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.035246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.041303] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.044390] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.047136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.048526] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.055111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.064128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.076165] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.077751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.079231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.095765] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.105397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.135836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.245600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.295451] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.627795] Bluetooth: hci0: command tx timeout [ 177.691837] Bluetooth: hci1: command tx timeout [ 177.948050] Bluetooth: hci2: command tx timeout [ 177.949182] Bluetooth: hci3: command tx timeout [ 178.203671] Bluetooth: hci4: command tx timeout [ 178.332196] Bluetooth: hci6: command tx timeout [ 178.396736] Bluetooth: hci5: command tx timeout [ 178.397686] Bluetooth: hci7: command tx timeout [ 179.675665] Bluetooth: hci0: command tx timeout [ 179.740283] Bluetooth: hci1: command tx timeout [ 179.996137] Bluetooth: hci2: command tx timeout [ 179.997437] Bluetooth: hci3: command tx timeout [ 180.252297] Bluetooth: hci4: command tx timeout [ 180.381086] Bluetooth: hci6: command tx timeout [ 180.443707] Bluetooth: hci5: command tx timeout [ 180.444395] Bluetooth: hci7: command tx timeout [ 181.724110] Bluetooth: hci0: command tx timeout [ 181.787707] Bluetooth: hci1: command tx timeout [ 182.043737] Bluetooth: hci2: command tx timeout [ 182.045029] Bluetooth: hci3: command tx timeout [ 182.299791] Bluetooth: hci4: command tx timeout [ 182.429776] Bluetooth: hci6: command tx timeout [ 182.492314] Bluetooth: hci5: command tx timeout [ 182.493276] Bluetooth: hci7: command tx timeout [ 183.771640] Bluetooth: hci0: command tx timeout [ 183.837995] Bluetooth: hci1: command tx timeout [ 184.093020] Bluetooth: hci3: command tx timeout [ 184.093534] Bluetooth: hci2: command tx timeout [ 184.349765] Bluetooth: hci4: command tx timeout [ 184.475658] Bluetooth: hci6: command tx timeout [ 184.539650] Bluetooth: hci5: command tx timeout [ 184.540133] Bluetooth: hci7: command tx timeout [ 238.830898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.833679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.835840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.841791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.845268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.222131] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.225387] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.227485] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.233947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.238034] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.280931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.288649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.293928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.302005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.306317] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.422665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.429620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.442250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.471426] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.473270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.474534] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.477652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.480060] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.481659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.511075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.538414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.612003] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.623163] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.630949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.635719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.651405] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.666224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.668988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.716043] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.746166] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.877366] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.896005] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.917637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.007136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.024940] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.924079] Bluetooth: hci0: command tx timeout [ 241.307677] Bluetooth: hci1: command tx timeout [ 241.371934] Bluetooth: hci2: command tx timeout [ 241.627821] Bluetooth: hci3: command tx timeout [ 241.628879] Bluetooth: hci4: command tx timeout [ 241.755773] Bluetooth: hci5: command tx timeout [ 241.883792] Bluetooth: hci6: command tx timeout [ 242.076427] Bluetooth: hci7: command tx timeout [ 242.974029] Bluetooth: hci0: command tx timeout [ 243.355781] Bluetooth: hci1: command tx timeout [ 243.421180] Bluetooth: hci2: command tx timeout [ 243.675713] Bluetooth: hci3: command tx timeout [ 243.676391] Bluetooth: hci4: command tx timeout [ 243.803669] Bluetooth: hci5: command tx timeout [ 243.931786] Bluetooth: hci6: command tx timeout [ 244.123665] Bluetooth: hci7: command tx timeout [ 245.019676] Bluetooth: hci0: command tx timeout [ 245.403872] Bluetooth: hci1: command tx timeout [ 245.467665] Bluetooth: hci2: command tx timeout [ 245.723722] Bluetooth: hci4: command tx timeout [ 245.724183] Bluetooth: hci3: command tx timeout [ 245.851796] Bluetooth: hci5: command tx timeout [ 245.981612] Bluetooth: hci6: command tx timeout [ 246.171662] Bluetooth: hci7: command tx timeout [ 247.067655] Bluetooth: hci0: command tx timeout [ 247.451681] Bluetooth: hci1: command tx timeout [ 247.515862] Bluetooth: hci2: command tx timeout [ 247.771984] Bluetooth: hci4: command tx timeout [ 247.772451] Bluetooth: hci3: command tx timeout [ 247.899627] Bluetooth: hci5: command tx timeout [ 248.027642] Bluetooth: hci6: command tx timeout [ 248.219845] Bluetooth: hci7: command tx timeout [ 301.560985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.567135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.573060] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.583516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.590415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.698752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.702917] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.707429] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.713332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.717809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.765463] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.771498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.786203] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.800489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.814989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.858725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.877190] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.882757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.901229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.922693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.356910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.380067] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.382209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.385185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.411904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.435115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.439522] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.469919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.484131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.492161] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.497916] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.500908] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.514326] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.519792] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.552355] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.561504] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.593115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.612254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.614232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.639365] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.643655] Bluetooth: hci0: command tx timeout [ 303.771671] Bluetooth: hci1: command tx timeout [ 303.901616] Bluetooth: hci2: command tx timeout [ 304.091639] Bluetooth: hci3: command tx timeout [ 304.603692] Bluetooth: hci4: command tx timeout [ 304.668142] Bluetooth: hci7: command tx timeout [ 304.731653] Bluetooth: hci5: command tx timeout [ 304.796391] Bluetooth: hci6: command tx timeout [ 305.691655] Bluetooth: hci0: command tx timeout [ 305.820598] Bluetooth: hci1: command tx timeout [ 305.947623] Bluetooth: hci2: command tx timeout [ 306.139813] Bluetooth: hci3: command tx timeout [ 306.651671] Bluetooth: hci4: command tx timeout [ 306.717433] Bluetooth: hci7: command tx timeout [ 306.780026] Bluetooth: hci5: command tx timeout [ 306.843994] Bluetooth: hci6: command tx timeout [ 307.740425] Bluetooth: hci0: command tx timeout [ 307.868209] Bluetooth: hci1: command tx timeout [ 307.996772] Bluetooth: hci2: command tx timeout [ 308.188200] Bluetooth: hci3: command tx timeout [ 308.699704] Bluetooth: hci4: command tx timeout [ 308.763712] Bluetooth: hci7: command tx timeout [ 308.828660] Bluetooth: hci5: command tx timeout [ 308.891744] Bluetooth: hci6: command tx timeout [ 309.788627] Bluetooth: hci0: command tx timeout [ 309.915710] Bluetooth: hci1: command tx timeout [ 310.044293] Bluetooth: hci2: command tx timeout [ 310.235763] Bluetooth: hci3: command tx timeout [ 310.747657] Bluetooth: hci4: command tx timeout [ 310.811954] Bluetooth: hci7: command tx timeout [ 310.875821] Bluetooth: hci5: command tx timeout [ 310.939638] Bluetooth: hci6: command tx timeout [ 364.270706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.273831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.278324] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.293183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.305493] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.527518] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.530375] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.534036] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.545719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.550354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.749280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.757627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.778303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.780240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.799856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.808299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.813009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.820172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.825328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.831210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.840198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.864158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.874425] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.881920] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.884101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.902754] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.928117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.938701] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.940945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.968061] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.983157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.988479] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.992058] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.007820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.012315] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.262173] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.279044] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.305963] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.315222] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.320464] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.363889] Bluetooth: hci0: command tx timeout [ 366.620335] Bluetooth: hci1: command tx timeout [ 366.940821] Bluetooth: hci2: command tx timeout [ 367.020278] Bluetooth: hci4: command tx timeout [ 367.131967] Bluetooth: hci5: command tx timeout [ 367.132821] Bluetooth: hci6: command tx timeout [ 367.196826] Bluetooth: hci3: command tx timeout [ 367.387716] Bluetooth: hci7: command tx timeout [ 368.412677] Bluetooth: hci0: command tx timeout [ 368.668876] Bluetooth: hci1: command tx timeout [ 368.990705] Bluetooth: hci2: command tx timeout [ 369.054665] Bluetooth: hci4: command tx timeout [ 369.179710] Bluetooth: hci6: command tx timeout [ 369.183005] Bluetooth: hci5: command tx timeout [ 369.243708] Bluetooth: hci3: command tx timeout [ 369.435615] Bluetooth: hci7: command tx timeout [ 370.459733] Bluetooth: hci0: command tx timeout [ 370.715732] Bluetooth: hci1: command tx timeout [ 371.035640] Bluetooth: hci2: command tx timeout [ 371.102102] Bluetooth: hci4: command tx timeout [ 371.227757] Bluetooth: hci5: command tx timeout [ 371.227783] Bluetooth: hci6: command tx timeout [ 371.292083] Bluetooth: hci3: command tx timeout [ 371.484288] Bluetooth: hci7: command tx timeout [ 372.508245] Bluetooth: hci0: command tx timeout [ 372.763997] Bluetooth: hci1: command tx timeout [ 373.084961] Bluetooth: hci2: command tx timeout [ 373.149633] Bluetooth: hci4: command tx timeout [ 373.275647] Bluetooth: hci5: command tx timeout [ 373.276636] Bluetooth: hci6: command tx timeout [ 373.340006] Bluetooth: hci3: command tx timeout [ 373.532140] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 19:16:59 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff867abdac RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff8880375d7848 RSP=ffff8880375d7730 R8 =ffffffff867abdb0 R9 =ffff8880375d7830 R10=000000000003b0c2 R11=0000000000006b5c R12=ffff8880375d7850 R13=ffff8880375d7838 R14=ffff8880375d77f0 R15=ffff8880375d77f0 RIP=ffffffff813514d7 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa35b041620 CR3=0000000025b46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81adc62f RBX=ffffffff816002b0 RCX=ffff88802ec0776c RDX=1ffff11005d80f0e RSI=ffffffff81adc62f RDI=ffff88802ec078e0 RBP=ffff88802ec078b0 RSP=ffff88802ec07810 R8 =ffffffff8685ea0c R9 =ffff88802ec07858 R10=000000000003b0c2 R11=0000000000024809 R12=ffff88802ec078e0 R13=0000000000000000 R14=ffff888018811bc0 R15=ffff888037b4f500 RIP=ffffffff816002b4 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056394913e008 CR3=000000001a510000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000