Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:27966' (ECDSA) to the list of known hosts. 2025/04/27 16:33:29 fuzzer started 2025/04/27 16:33:29 dialing manager at localhost:46629 syzkaller login: [ 94.775501] cgroup: Unknown subsys name 'net' [ 94.922556] cgroup: Unknown subsys name 'cpuset' [ 94.973421] cgroup: Unknown subsys name 'rlimit' 2025/04/27 16:33:46 syscalls: 2214 2025/04/27 16:33:46 code coverage: enabled 2025/04/27 16:33:46 comparison tracing: enabled 2025/04/27 16:33:46 extra coverage: enabled 2025/04/27 16:33:46 setuid sandbox: enabled 2025/04/27 16:33:46 namespace sandbox: enabled 2025/04/27 16:33:46 Android sandbox: enabled 2025/04/27 16:33:46 fault injection: enabled 2025/04/27 16:33:46 leak checking: enabled 2025/04/27 16:33:46 net packet injection: enabled 2025/04/27 16:33:46 net device setup: enabled 2025/04/27 16:33:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 16:33:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 16:33:46 USB emulation: enabled 2025/04/27 16:33:46 hci packet injection: enabled 2025/04/27 16:33:46 wifi device emulation: enabled 2025/04/27 16:33:46 802.15.4 emulation: enabled 2025/04/27 16:33:46 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 16:33:47 starting 8 fuzzer processes 16:33:47 executing program 0: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x30}, 0x4004014) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x16, 0x1}, {0x36}, {0x9, 0x1}, {0x4, 0x1}, {0x4b}, {0x18}, {0x36, 0x1}, {0x1}, {0xb}, {0x18, 0x1}, {0x18}, {0xb, 0x1}, {0x18}, {0x36, 0x1}, {0x48}, {0xc}, {0x36, 0x1}, {0x36}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x3}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0xc}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xeb}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x5f}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x4051) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r3 = fspick(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0) r4 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x200c82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000500)=0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x50, r3, 0xe3e9e000) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000680)={&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000580)=""/239, 0xef}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x19c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x662}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$KDSKBLED(r0, 0x4b65, 0x5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r4) fcntl$setpipe(r4, 0x407, 0x8) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0xcbbf5ed325586a5e}, 0x800) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000b00)) 16:33:47 executing program 1: ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000200)=""/227, 0xe3}, {&(0x7f0000000300)=""/51, 0x33}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/188, 0xbc}], 0x6}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000001900)=[{&(0x7f0000000540)=""/224, 0xe0}, {&(0x7f0000000640)=""/176, 0xb0}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/84, 0x54}, {&(0x7f0000001780)=""/135, 0x87}, {&(0x7f0000001840)=""/157, 0x9d}], 0x6, &(0x7f0000001980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xc0}}], 0x2, 0x2, &(0x7f0000001ac0)={0x0, 0x989680}) close_range(r7, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r9, {r1, r10}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0xa000, &(0x7f0000001c00)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r10}}, {@privport}, {@access_user}, {@debug={'debug', 0x3d, 0x5}}], [{@dont_measure}, {@uid_eq={'uid', 0x3d, r12}}, {@fowner_gt={'fowner>', 0xee01}}, {@seclabel}, {@appraise_type}, {@dont_appraise}, {@measure}]}}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, 0x464, 0x110, 0x70bd2b, 0x25dfdbfe, "a97edfe5090342630dc01bcc5e1a60b889", ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44020) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000001e00)={'raw\x00', 0x2, [{}, {}]}, 0x48) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000001e80)=0x401) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r13, 0x406, r0) getsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000001ec0), &(0x7f0000001f00)=0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000001f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount$9p_fd(0x0, &(0x7f0000002180)='./file0\x00', &(0x7f00000021c0), 0x1000400, &(0x7f0000002200)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r1}}, {@noextend}, {@msize={'msize', 0x3d, 0xfffffffffffffff7}}, {@afid={'afid', 0x3d, 0x7}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@debug={'debug', 0x3d, 0x40}}, {@privport}], [{@dont_appraise}]}}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x94}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x93}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff801}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) recvmmsg$unix(r6, &(0x7f0000002b40)=[{{&(0x7f0000002440)=@abs, 0x6e, &(0x7f0000002840)=[{&(0x7f00000024c0)=""/188, 0xbc}, {&(0x7f0000002580)=""/177, 0xb1}, {&(0x7f0000002640)=""/61, 0x3d}, {&(0x7f0000002680)=""/197, 0xc5}, {&(0x7f0000002780)=""/191, 0xbf}], 0x5, &(0x7f00000028c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002940), 0x6e, &(0x7f0000002a80)=[{&(0x7f00000029c0)=""/140, 0x8c}], 0x1, &(0x7f0000002ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x2, 0x0, &(0x7f0000002bc0)={0x77359400}) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000002c00)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000002d00)=0xe8) ioctl$TUNSETOWNER(r4, 0x400454cc, r14) 16:33:47 executing program 2: read(0xffffffffffffffff, &(0x7f0000000000)=""/174, 0xae) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x6}) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000100)={0x7, 0x2, 0xff, 0x8, 0xb0, 0xa6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000b80)={0x4, 0x401, 0x2, {0x81, 0x5}, 0xda4a7442, 0x2}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000c00)={0x8, 'veth0_to_team\x00', {'veth0\x00'}, 0x6}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000c40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffeff}}, './file0\x00'}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000d40)=@get={0x1, &(0x7f0000000c80)=""/155, 0x81}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000d80)={0x3a, 0x2, 0x2, 0x4, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}, 0x18) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000dc0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000e00)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000e80)={'veth0_to_bridge\x00', {0x2, 0x0, @multicast2}}) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000ec0), &(0x7f0000000f00)=0x10) r2 = dup2(r0, 0xffffffffffffffff) ioctl$KDMKTONE(r2, 0x4b30, 0x9d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x828, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}}, 0x40) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000001040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'geneve1\x00'}) 16:33:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"b5c82960b4850347df4d247747eaa0e3", 0x0, 0x0, {0xf, 0x8001}, {0x101}, 0x8, [0xa3a, 0x2, 0x0, 0xfffffffffffffffe, 0xd3ce, 0x8, 0x4, 0x8, 0x0, 0x4b, 0x3f, 0x9, 0x8, 0x400, 0x1000, 0x5]}) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)={'c', ' *:* ', 'rw\x00'}, 0x9) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f0000000240)) getgid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x220040, 0x2) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb475, 0x18}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_DISABLE_HT={0x4}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac12, 0xfac0d, 0xfac06]}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x4, {0x7ff, 0x6, 0x3, 0x43a}}}]}, 0x7c}}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) flock(r2, 0x2) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x611, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x44000}, 0x81) r3 = fcntl$dupfd(r1, 0x0, r0) getsockname$inet(r3, &(0x7f0000000580)={0x2, 0x0, @dev}, &(0x7f00000005c0)=0x10) fcntl$setsig(r3, 0xa, 0x2c) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000600)) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000007c0)=@req3={0x6, 0x7, 0xfff, 0xeaf, 0x3, 0x401, 0x6}, 0x1c) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) [ 112.612181] audit: type=1400 audit(1745771627.886:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:33:47 executing program 6: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) pread64(r0, &(0x7f0000000040)=""/16, 0x10, 0x5e15) ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x2, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7f}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x81, 0x3, 0x8, 0x6, 0x0, 0x2, 0x200, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbd04, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x2000, 0x1, 0x3, 0x9, 0x800, 0x31e9, 0xff, 0x0, 0x800, 0x0, 0x7}, r1, 0xc, r1, 0x8) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)={0x2, 0xffffffffffffffc1, 0x7, 0x729b, 0x4, [{0x81, 0x3, 0x2, '\x00', 0x1080}, {0x3, 0xffffffffffffc1fc, 0x5, '\x00', 0x581}, {0xffffffff, 0x7, 0x2, '\x00', 0x100b}, {0x7, 0x9, 0x56e, '\x00', 0x1000}]}) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000400)=@ccm_128={{0x303}, "6da1619329c57583", "abf29b1db8939b79c62ee270bb78a895", "19144077", "af7df3d954dc2b81"}, 0x28) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000500)={0x1, 0x6, 0xbe, &(0x7f0000000440)=""/190}) r4 = dup3(r0, r0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000540)={[{0x2b, 'memory'}, {0x2d, 'net'}, {0x2b, 'devices'}, {0x2b, 'cpuacct'}]}, 0x1f) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000580)=0x5) r5 = openat(r4, &(0x7f00000005c0)='./file0\x00', 0x200000, 0x39) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0xb, 0x6, 0x701, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x101}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x808000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8801) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x2) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000780)) ioctl$FITHAW(r3, 0xc0045878) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) 16:33:47 executing program 4: ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/cpuidle', 0x80000, 0x10) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x101, 0x3, 0x1ff, 0x8f2, 0x3}}) fremovexattr(r0, &(0x7f00000000c0)=@random={'security.', ']&)(+%\xac)}$*9$\x00'}) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x4e22, 0x8c89, 0x4e24, 0x0, 0x2, 0x80, 0x80, 0x5c, 0x0, 0xee01}, {0x7, 0x3, 0x3800000000, 0x80000001, 0xc0, 0x100000001, 0xffffffffffffffe0, 0xff}, {0x0, 0x8, 0x1, 0x3f}, 0x9, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@remote, 0x4d4, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x34ff, 0x0, 0x0, 0x4, 0x3, 0x9, 0x1}}, 0xe8) r2 = pidfd_getfd(r0, r1, 0x0) ioctl$TIOCNXCL(r2, 0x540d) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000300)='./file0\x00', 0x4000, 0x100, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x1}, [{0x2, 0x7, r3}, {0x2, 0x3, 0xffffffffffffffff}], {0x4, 0x1}, [{0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x1, r4}, {0x8, 0x7, 0xffffffffffffffff}], {0x10, 0x3}, {0x20, 0x4}}, 0x4c, 0x1) r5 = openat$cgroup_devices(r0, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000500)={0x0, 0x1, r5}) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000540), 0x402100, 0x0) ioctl(r6, 0x800, &(0x7f0000000580)="0ecc7d2fc9b747fd56afb97c7b2463384a853c198b3b6831b14385ffc151c8b0148929ef8b328e1c28958d2f69de54d00eb97c150387fdc57b76901f7b59ecff5e58ea2e73f3d9a40be46a08573d505c3ef443ef4c64e2f3e854bac24f700a4851dbeb58f909babf4d382b6476e099404e78c0e01fc95338d8b76420885316858471ae15a2b458ed0cf31dae5a86d703437a8f5dc10d6d33ba9fbadccf8dde0c41d4fe128bb9510e776abb09717f3821c044d857fb354e00301b17ae9c1739ad8b09c5401fe37b1d23a024e9e3b9") ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000680)={0x8, 0x9, 0x0, 0x8, 0x2, 0x100}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000740)={r7, 0x1, 0x2}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x0, 0x9, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x4, 0x1ff, 0x4, 0x20, 0x0, 0x6]}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040810) 16:33:47 executing program 5: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x800080, 0x81, 0x4}, 0x18) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000080)={0x6, 0x3a}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') lremovexattr(&(0x7f0000000140)='\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x102) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0xd, 0x1, {{0x40, 0x0, 0x4}, 0x29bf5b02}}, 0x18) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000240)={0x4, "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"}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000780)={{'\x00', 0x1}, {0x1000}, 0x180, 0x0, 0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)="51f8e3e72ce87ce0cb9eeff244d0f63b69e737b26fb661cd515238cc6a99db4b05fc38a724621a7f00dba733a8e5f8f8cb392ed31b5cb84ee81c513a6f3d47102b5919e84e4b20506463b1efa4e8333f93d8281c4827b19704f7581c1f785603c88aee9ff090b29838210b939a50723725ae85b5d3981a3a14eed78b417f28a54dc6e304b7052e6335b3cd0c2387c6be8a6f72412547a738ee", 0x99, 0x0, &(0x7f00000005c0)={0x2, 0x16a, {0x1, 0xc, 0x88, "4f9aa37a8af280be091ee3dc9893309a43b35b27c7d5e91b9bebf38e50a6b765814d44b4a7d24547124c38e74715ca82d66f9ca0e66c9f6797868e8a0717f2f36403405174306f0d168386614394f0dde623a514236d281fc027cbf781ea69c80c2015b14ad1a4cb3dd791858deaa79c12e0ce212b5064e4cb25b97943e1d90020b3fde5547e46e7", 0xd5, "ff97513f459ee4c8db7a2e21b3bf60f3bdf7b09cd881bd4bfaf020271b2daeba88b22a275f62891f9294e040b632fbb6d7e13f9fa5ed7498f115ecf0fbbe4e47f418ea43081162d9fd270182d93de14d0f5685b0018a95214c973f5d275eb5594ff5cc5d26a827e66430cab55c8d07472ac3f8df65bb2317ef71b0e86f8e1f7ba4c3bf7925ff574f5c4920933e51b8cece01822c38979cc77cd9cc3fdff38b47e35ef8eb1aaa92ffb0375c9fe30f0e6ce5e4651956974edb6db5b7f9f2f2b96ea89a25384a45fb1b45bc8395f261bbacdf6c1a139b"}, 0x48, "a7db6a2eb2d6c95817bc280f05be7c61f1e866720509899e20bc86a6c66c079ffa5a960f16999d88084660725a416a49525890216a5ab88da761837b5db0ddca99341cb511271323"}, 0x1be}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000800)=0x6, 0x4) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x80000000) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000840)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x5, 0x10000, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x28, 0x10, 0x100, 0xffffffff}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000a00)={&(0x7f0000000940), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x44041) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs2/custom1\x00', 0x400, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = pidfd_getfd(r0, r1, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000d80)={0x80000000, 0x1, 0x6aad, 0xfff, 0x15, "62cdd680305514ff6617beb4158f0f255ac902"}) 16:33:47 executing program 7: sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0xc, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0xffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) bind$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) r1 = syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0x290100) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000280)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c500, 0x0) fcntl$getflags(r2, 0x409) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000300)={r2, 0xc6, 0x2, 0x4}) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x278, 0x0, 0x2, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7f}, @CTA_EXPECT_NAT={0xf8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0xe0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xbc, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x28}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x22}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x5}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc010}, 0x804) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/class/tty', 0x185802, 0x20) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pipe(&(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x3c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x40010) renameat2(r0, &(0x7f0000002080)='./file0\x00', r1, &(0x7f00000020c0)='./file0\x00', 0x4) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000002140)) [ 114.091088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.096139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.099376] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.110380] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.116486] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.175893] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.180563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.188143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.197643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.203206] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.215436] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.220883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.226275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.231846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.250347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.253325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.257687] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.274237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.276853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.279183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.281180] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.286534] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.289112] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.292438] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.294841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.296661] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.297437] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.301788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.306072] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.307814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.308831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.314855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.319143] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.321430] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.323604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.332766] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.343017] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.346240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.406278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.436765] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.167033] Bluetooth: hci0: command tx timeout [ 116.357096] Bluetooth: hci7: command tx timeout [ 116.357938] Bluetooth: hci2: command tx timeout [ 116.421398] Bluetooth: hci4: command tx timeout [ 116.422075] Bluetooth: hci1: command tx timeout [ 116.422639] Bluetooth: hci6: command tx timeout [ 116.486353] Bluetooth: hci3: command tx timeout [ 116.549293] Bluetooth: hci5: command tx timeout [ 118.215995] Bluetooth: hci0: command tx timeout [ 118.405164] Bluetooth: hci2: command tx timeout [ 118.405774] Bluetooth: hci7: command tx timeout [ 118.469261] Bluetooth: hci6: command tx timeout [ 118.469921] Bluetooth: hci4: command tx timeout [ 118.470307] Bluetooth: hci1: command tx timeout [ 118.533286] Bluetooth: hci3: command tx timeout [ 118.597075] Bluetooth: hci5: command tx timeout [ 120.261079] Bluetooth: hci0: command tx timeout [ 120.453123] Bluetooth: hci7: command tx timeout [ 120.453632] Bluetooth: hci2: command tx timeout [ 120.517407] Bluetooth: hci1: command tx timeout [ 120.517904] Bluetooth: hci4: command tx timeout [ 120.518687] Bluetooth: hci6: command tx timeout [ 120.581175] Bluetooth: hci3: command tx timeout [ 120.645084] Bluetooth: hci5: command tx timeout [ 122.309081] Bluetooth: hci0: command tx timeout [ 122.501061] Bluetooth: hci2: command tx timeout [ 122.502918] Bluetooth: hci7: command tx timeout [ 122.565355] Bluetooth: hci6: command tx timeout [ 122.565824] Bluetooth: hci4: command tx timeout [ 122.565865] Bluetooth: hci1: command tx timeout [ 122.631057] Bluetooth: hci3: command tx timeout [ 122.695995] Bluetooth: hci5: command tx timeout [ 176.382103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.386242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.393437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.401203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.406289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.466589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.471799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.473908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.480041] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.484021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.531529] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.553857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.557570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.562204] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.567539] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.569286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.572248] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.577180] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.579118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.582871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.592508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.596456] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.601107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.602083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.612462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.631218] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.635139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.653774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.662510] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.683143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.691714] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.694182] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.709218] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.710179] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.720519] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.721670] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.752120] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.764859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.773510] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.774282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.437996] Bluetooth: hci0: command tx timeout [ 178.566995] Bluetooth: hci1: command tx timeout [ 178.694074] Bluetooth: hci2: command tx timeout [ 178.757208] Bluetooth: hci3: command tx timeout [ 178.821081] Bluetooth: hci4: command tx timeout [ 178.821823] Bluetooth: hci7: command tx timeout [ 178.821920] Bluetooth: hci5: command tx timeout [ 178.886043] Bluetooth: hci6: command tx timeout [ 180.487021] Bluetooth: hci0: command tx timeout [ 180.614017] Bluetooth: hci1: command tx timeout [ 180.741032] Bluetooth: hci2: command tx timeout [ 180.805305] Bluetooth: hci3: command tx timeout [ 180.870985] Bluetooth: hci4: command tx timeout [ 180.871034] Bluetooth: hci5: command tx timeout [ 180.871414] Bluetooth: hci7: command tx timeout [ 180.933022] Bluetooth: hci6: command tx timeout [ 182.534089] Bluetooth: hci0: command tx timeout [ 182.661032] Bluetooth: hci1: command tx timeout [ 182.789016] Bluetooth: hci2: command tx timeout [ 182.853294] Bluetooth: hci3: command tx timeout [ 182.917132] Bluetooth: hci7: command tx timeout [ 182.918215] Bluetooth: hci5: command tx timeout [ 182.918669] Bluetooth: hci4: command tx timeout [ 182.981242] Bluetooth: hci6: command tx timeout [ 184.581267] Bluetooth: hci0: command tx timeout [ 184.709149] Bluetooth: hci1: command tx timeout [ 184.837034] Bluetooth: hci2: command tx timeout [ 184.902045] Bluetooth: hci3: command tx timeout [ 184.965057] Bluetooth: hci4: command tx timeout [ 184.965084] Bluetooth: hci5: command tx timeout [ 184.965493] Bluetooth: hci7: command tx timeout [ 185.029020] Bluetooth: hci6: command tx timeout [ 238.622831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.625433] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.629460] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.638664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.645973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.816633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.819511] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.822361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.828095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.830771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.875531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.878387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.886667] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.914617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.918642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.969528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.983183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.984166] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.994429] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.997802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.004301] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.004488] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.011712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.013904] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.015894] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.026501] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.032456] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.066410] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.067096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.069934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.091261] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.101393] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.130202] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.133823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.135304] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.143122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.166443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.168721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.172391] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.183094] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.709390] Bluetooth: hci0: command tx timeout [ 240.904192] Bluetooth: hci1: command tx timeout [ 240.965173] Bluetooth: hci2: command tx timeout [ 241.093239] Bluetooth: hci5: command tx timeout [ 241.157042] Bluetooth: hci4: command tx timeout [ 241.223990] Bluetooth: hci3: command tx timeout [ 241.285050] Bluetooth: hci6: command tx timeout [ 241.285090] Bluetooth: hci7: command tx timeout [ 242.759989] Bluetooth: hci0: command tx timeout [ 242.950022] Bluetooth: hci1: command tx timeout [ 243.013027] Bluetooth: hci2: command tx timeout [ 243.142101] Bluetooth: hci5: command tx timeout [ 243.205018] Bluetooth: hci4: command tx timeout [ 243.270176] Bluetooth: hci3: command tx timeout [ 243.335008] Bluetooth: hci6: command tx timeout [ 243.335037] Bluetooth: hci7: command tx timeout [ 244.806206] Bluetooth: hci0: command tx timeout [ 244.997206] Bluetooth: hci1: command tx timeout [ 245.061053] Bluetooth: hci2: command tx timeout [ 245.189027] Bluetooth: hci5: command tx timeout [ 245.253173] Bluetooth: hci4: command tx timeout [ 245.317038] Bluetooth: hci3: command tx timeout [ 245.381102] Bluetooth: hci6: command tx timeout [ 245.382049] Bluetooth: hci7: command tx timeout [ 246.854148] Bluetooth: hci0: command tx timeout [ 247.045231] Bluetooth: hci1: command tx timeout [ 247.110033] Bluetooth: hci2: command tx timeout [ 247.238757] Bluetooth: hci5: command tx timeout [ 247.301088] Bluetooth: hci4: command tx timeout [ 247.365053] Bluetooth: hci3: command tx timeout [ 247.429045] Bluetooth: hci7: command tx timeout [ 247.429414] Bluetooth: hci6: command tx timeout [ 301.082329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.088312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.091564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.098910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.103750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.209896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.222769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.228178] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.252432] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.259514] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.478796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.483454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.488498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.507559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.516899] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.550386] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.554155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.557190] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.566535] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.574505] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.599439] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.618736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.623472] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.625391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.631773] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.635672] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.665759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.667588] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.689637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.695998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.717847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.730340] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.733698] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.772467] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.777178] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.783873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.788721] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.791820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.828527] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.834659] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.174039] Bluetooth: hci0: command tx timeout [ 303.301242] Bluetooth: hci1: command tx timeout [ 303.621153] Bluetooth: hci4: command tx timeout [ 303.622337] Bluetooth: hci2: command tx timeout [ 303.813196] Bluetooth: hci3: command tx timeout [ 303.815653] Bluetooth: hci5: command tx timeout [ 303.878306] Bluetooth: hci6: command tx timeout [ 303.941090] Bluetooth: hci7: command tx timeout [ 305.221194] Bluetooth: hci0: command tx timeout [ 305.350097] Bluetooth: hci1: command tx timeout [ 305.669579] Bluetooth: hci2: command tx timeout [ 305.670578] Bluetooth: hci4: command tx timeout [ 305.864013] Bluetooth: hci3: command tx timeout [ 305.864707] Bluetooth: hci5: command tx timeout [ 305.926307] Bluetooth: hci6: command tx timeout [ 305.990013] Bluetooth: hci7: command tx timeout [ 307.269008] Bluetooth: hci0: command tx timeout [ 307.397401] Bluetooth: hci1: command tx timeout [ 307.718249] Bluetooth: hci2: command tx timeout [ 307.718738] Bluetooth: hci4: command tx timeout [ 307.910755] Bluetooth: hci3: command tx timeout [ 307.911642] Bluetooth: hci5: command tx timeout [ 307.973041] Bluetooth: hci6: command tx timeout [ 308.037235] Bluetooth: hci7: command tx timeout [ 309.317337] Bluetooth: hci0: command tx timeout [ 309.445046] Bluetooth: hci1: command tx timeout [ 309.766329] Bluetooth: hci4: command tx timeout [ 309.766825] Bluetooth: hci2: command tx timeout [ 309.958291] Bluetooth: hci5: command tx timeout [ 309.958787] Bluetooth: hci3: command tx timeout [ 310.021294] Bluetooth: hci6: command tx timeout [ 310.085067] Bluetooth: hci7: command tx timeout [ 363.223289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.227452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.231449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.239752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.244268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.478361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.483613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.491212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.493756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.501701] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.505643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.509297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.512712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.529386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.551093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.599349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.610769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.645003] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.665235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.671889] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.672277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.696473] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.698866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.701644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.705674] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.710667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.734891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.747743] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.759820] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.761759] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.770702] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.777105] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.780873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.804888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.816204] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.826595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.835808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.881740] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.883527] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.890764] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.317048] Bluetooth: hci0: command tx timeout [ 365.573340] Bluetooth: hci1: command tx timeout [ 365.637027] Bluetooth: hci2: command tx timeout [ 365.829044] Bluetooth: hci3: command tx timeout [ 365.957037] Bluetooth: hci4: command tx timeout [ 366.021237] Bluetooth: hci6: command tx timeout [ 366.086386] Bluetooth: hci7: command tx timeout [ 366.215007] Bluetooth: hci5: command tx timeout [ 367.367016] Bluetooth: hci0: command tx timeout [ 367.621132] Bluetooth: hci1: command tx timeout [ 367.686028] Bluetooth: hci2: command tx timeout [ 367.877025] Bluetooth: hci3: command tx timeout [ 368.006057] Bluetooth: hci4: command tx timeout [ 368.070083] Bluetooth: hci6: command tx timeout [ 368.133026] Bluetooth: hci7: command tx timeout [ 368.262562] Bluetooth: hci5: command tx timeout [ 369.413183] Bluetooth: hci0: command tx timeout [ 369.670316] Bluetooth: hci1: command tx timeout [ 369.734033] Bluetooth: hci2: command tx timeout [ 369.926045] Bluetooth: hci3: command tx timeout [ 370.054048] Bluetooth: hci4: command tx timeout [ 370.119514] Bluetooth: hci6: command tx timeout [ 370.181020] Bluetooth: hci7: command tx timeout [ 370.309373] Bluetooth: hci5: command tx timeout [ 371.462008] Bluetooth: hci0: command tx timeout [ 371.718014] Bluetooth: hci1: command tx timeout [ 371.782125] Bluetooth: hci2: command tx timeout [ 371.974584] Bluetooth: hci3: command tx timeout [ 372.103178] Bluetooth: hci4: command tx timeout [ 372.166139] Bluetooth: hci6: command tx timeout [ 372.229357] Bluetooth: hci7: command tx timeout [ 372.358028] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 16:38:58 Registers: info registers vcpu 0 RAX=ffff88800eb4f5f8 RBX=ffff88800eb4f690 RCX=ffff88800eb4f4fc RDX=0000000000000000 RSI=ffffffff85c1bac0 RDI=ffff88800f2a03fc RBP=dffffc0000000000 RSP=ffff88800eb4f5a8 R8 =0000000000000001 R9 =ffff88800eb4f638 R10=000000000003b0c2 R11=00000000000043a2 R12=ffffed1001d69ec1 R13=ffffed1001d69ec0 R14=ffff88800eb4f640 R15=ffff88800eb4f5f8 RIP=ffffffff8135327a RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f38990ef368 CR3=00000000168fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88802ae9ff28 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81350bc2 RDI=ffffffff85c1bac0 RBP=ffffffff85c1bac0 RSP=ffff88802ae9f5a8 R8 =0000000000000001 R9 =ffff88802ae9f6a0 R10=000000000003b0c2 R11=00000000000083d7 R12=ffffffff81350bc2 R13=ffff88802ae9f6a8 R14=ffff88802ae9ff18 R15=ffff88802ae9f660 RIP=ffffffff8151813c RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f47d7d59260 CR3=000000000cea8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000