syzkaller login: [ 100.581979] sshd (233) used greatest stack depth: 25368 bytes left Warning: Permanently added '[localhost]:30483' (ECDSA) to the list of known hosts. 2025/04/29 13:44:45 fuzzer started 2025/04/29 13:44:45 dialing manager at localhost:36753 [ 105.357439] cgroup: Unknown subsys name 'net' [ 105.536198] cgroup: Unknown subsys name 'cpuset' [ 105.575802] cgroup: Unknown subsys name 'rlimit' 2025/04/29 13:45:04 syscalls: 2214 2025/04/29 13:45:04 code coverage: enabled 2025/04/29 13:45:04 comparison tracing: enabled 2025/04/29 13:45:04 extra coverage: enabled 2025/04/29 13:45:04 setuid sandbox: enabled 2025/04/29 13:45:04 namespace sandbox: enabled 2025/04/29 13:45:04 Android sandbox: enabled 2025/04/29 13:45:04 fault injection: enabled 2025/04/29 13:45:04 leak checking: enabled 2025/04/29 13:45:04 net packet injection: enabled 2025/04/29 13:45:04 net device setup: enabled 2025/04/29 13:45:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/29 13:45:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/29 13:45:04 USB emulation: enabled 2025/04/29 13:45:04 hci packet injection: enabled 2025/04/29 13:45:04 wifi device emulation: enabled 2025/04/29 13:45:04 802.15.4 emulation: enabled 2025/04/29 13:45:04 fetching corpus: 0, signal 0/0 (executing program) 2025/04/29 13:45:06 starting 8 fuzzer processes 13:45:06 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=""/146, &(0x7f0000000100)=0x92) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0xa, 0x4e22, 0x7, @mcast2, 0x7}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="9469a50113a95fc3951976d931cd3052acd78d22c40a59877380626aec7ed03b48d781ad93633720b0b0d02116b9a046f3649d9402bdb82eb9ac12d94f272a10329457be0d", 0x45}, {&(0x7f0000000200)="2f196269497431813d09d60230cf1fa5b874b3cee78d4da23461b86bd36c809830dbe10d927d46b1ec6e110006729a3596e03c32e1c11374e159f29f8dc927b145acd157a827f9a161248545aa4acd6648435b", 0x53}], 0x2, &(0x7f00000002c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x182d}}, @rthdr_2292={{0x88, 0x29, 0x39, {0xc, 0xe, 0x0, 0x7f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @empty, @private1, @private0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hopopts={{0xa8, 0x29, 0x36, {0x2f, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x3e, 0x8, [0x0]}}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x7, [0x9, 0x4, 0x4, 0x100000000, 0x1d96e791]}}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x1ff}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x28, {0x2, 0x8, 0x27, 0x5, [0x80, 0xb79, 0xffff, 0x6]}}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x5e, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @local}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x26}}, @dstopts={{0x30, 0x29, 0x37, {0x32, 0x2, '\x00', [@ra={0x5, 0x2, 0x21}, @calipso={0x7, 0x8, {0x1, 0x0, 0x4, 0x9}}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xad}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x2, 0x14, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @empty, @mcast2, @rand_addr=' \x01\x00', @private1, @empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}}}, @dstopts={{0x78, 0x29, 0x37, {0x88, 0xb, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra, @generic={0x0, 0x37, "741c910b8e45a5ff1eb96a52f4b7aed9c9c57459d64a0c0d518ec6f409a643a1bc4b038be5b8ccc27b6025e041c279178bc4453070e977"}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}]}}}], 0x2f8}, 0x20000004) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/module/libahci', 0x400400, 0x2) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000640)={'\x00', 0x1, 0x2, 0xc1}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000006c0)={0x20, {{0xa, 0x4e20, 0x0, @empty, 0x4}}}, 0x88) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000780)=0x10) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000007c0)={0x7, 0xffff, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000800)={@dev={0xfe, 0x80, '\x00', 0x2b}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0xf8, 0x8001, 0x4, 0x580, 0x6, 0x20}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000880)) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000900)={&(0x7f00000008c0)=[0x0, 0x0], 0x2, 0x7ff}) write$tcp_mem(r0, &(0x7f0000000940)={0x1, 0x20, 0xeaa3, 0x20, 0xff}, 0x48) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000009c0)) sendto$inet6(r1, &(0x7f0000000a00)="f5cff2a67ed7efb6fa319e7b11b6d65a2c4244c954a224d211158a059667726285f6a982664e7404614ffaba282826d96b71589b", 0x34, 0x41, &(0x7f0000000a40)={0xa, 0x4e20, 0x7, @private2, 0xfff}, 0x1c) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000a80)={0x0, 0x5, 0x8, 0x1}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000e80)) r3 = openat(r0, &(0x7f0000000ec0)='./file0\x00', 0x40c80, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000f00)=""/64, &(0x7f0000000f40)=0x40) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000f80)) 13:45:06 executing program 3: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000005, r0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) read(r1, &(0x7f0000000000)=""/164, 0xa4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, @in_args={0x1}}, './file0\x00'}) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000100)={{0x7, 0x1f}, 'port1\x00', 0x34, 0x4, 0x8, 0x6, 0x8001, 0x1, 0x7, 0x0, 0x5, 0x6}) msgget(0x1, 0xa0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x0, 0x3, 0x1c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x7, 0x7, 0x9, 0xaa}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000100) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r5, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x64, 0x6}, 0x80) r6 = accept4$bt_l2cap(r2, &(0x7f0000000480)={0x1f, 0x0, @fixed}, &(0x7f00000004c0)=0xe, 0x80400) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000500)=0x800, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f00000005c0)={&(0x7f0000000540)=""/123, 0x7b, 0x0, 0x1}) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000600)={0xfffffffd, 0x7f, 0x7, 0x0, 0x2, 0x9d, 0x7}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000640)={'wg2\x00'}) r7 = openat2(r2, &(0x7f0000000680)='./file1\x00', &(0x7f00000006c0)={0x80000, 0x8, 0x10}, 0x18) write$P9_RAUTH(r7, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x10, 0x3, 0x7}}, 0x14) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000780)=0x1, &(0x7f00000007c0)=0x4) 13:45:06 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x10000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) write$char_usb(r1, &(0x7f0000000180)="af39683655b2b6c802d942a4648df4b449707fb26ab0aa5a8d3f2d81d9b8251871f5de78c354d08fd015cbd2d1778d62092c00c9b8c1c65294ff1a19945eb086cb5a0bb4352792e780255f96d0f728ef608b1d567d28f65159fc9cf6a7f7b5c0c58a56c4fd94bedce377eda181c6dc8c277631fb0a36b72704c44bed95cf817da036bf2a05f8a48b2738cbb2b439612e10639f", 0x93) r2 = accept4$unix(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80800) r3 = fcntl$dupfd(r1, 0x0, r1) poll(&(0x7f0000000300)=[{r1, 0x2000}, {r1, 0x2}, {r1, 0x2298}, {r1, 0x400}, {r2, 0x5502}, {r3, 0x100}, {r1}], 0x7, 0x9) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000000340)=0x40, 0x4) recvmmsg$unix(r3, &(0x7f0000004bc0)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000540)=""/18, 0x12}, {&(0x7f0000000580)=""/56, 0x38}, {&(0x7f00000005c0)=""/56, 0x38}, {&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f00000006c0)=""/54, 0x36}, {&(0x7f0000000700)=""/234, 0xea}, {&(0x7f0000000800)=""/89, 0x59}], 0xa, &(0x7f0000000940)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000002e00)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/223, 0xdf}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)=""/202, 0xca}, {&(0x7f0000001d00)=""/129, 0x81}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x7, &(0x7f0000002e80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002ec0)=""/22, 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000002f40)=""/165, 0xa5}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/158, 0x9e}, {&(0x7f00000040c0)=""/248, 0xf8}, {&(0x7f00000041c0)=""/221, 0xdd}, {&(0x7f00000042c0)=""/41, 0x29}, {&(0x7f0000004300)=""/194, 0xc2}], 0x7, &(0x7f0000004480)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f00000045c0), 0x6e, &(0x7f0000004ac0)=[{&(0x7f0000004640)=""/120, 0x78}, {&(0x7f00000046c0)=""/30, 0x1e}, {&(0x7f0000004700)=""/178, 0xb2}, {&(0x7f00000047c0)=""/150, 0x96}, {&(0x7f0000004880)=""/198, 0xc6}, {&(0x7f0000004980)=""/50, 0x32}, {&(0x7f00000049c0)=""/199, 0xc7}], 0x7, &(0x7f0000004b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x5, 0x41, &(0x7f0000004d00)={0x77359400}) getsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000004d40), &(0x7f0000004d80)=0x4) ioctl(r7, 0x2e2, &(0x7f0000004dc0)="56e7da84f87f7f31dd982c96384f23c96923d56960d6ddcdc855bd65b940270340e3aa2bc1c094bf3b9e89480f462aef41b2a8eb72974569b9b59bacd3da4b1fec021d42cb3cd95f1820b6ca7db89f778bc086c7118c6cc2b35dad9bfd606d92dda7253c56f540ecd3b1fc799da32a81ba9988bd5e") ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000004e80)={0xb49, 0x8, '\x00', 0x1, &(0x7f0000004e40)=[0x0]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000004ec0), r10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000004f40), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000005000)={'ip6gre0\x00', &(0x7f0000004f80)={'ip6gre0\x00', 0x0, 0x2, 0x1, 0x7, 0x568, 0x2, @local, @mcast1, 0x1, 0x17, 0xb5, 0x80000000}}) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000005040)={@empty, @loopback, 0x0}, &(0x7f0000005080)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000005140)={'ip6_vti0\x00', &(0x7f00000050c0)={'syztnl0\x00', 0x0, 0x2f, 0x50, 0x4, 0x81, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x700, 0x0, 0x5, 0x86}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000005200)={'ip6tnl0\x00', &(0x7f0000005180)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x4, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x8, 0x10, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000005240)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000006200)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000061c0)={&(0x7f00000055c0)={0xbdc, r11, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x2a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6e6c, 0x80, 0x1}, {0x2, 0x1, 0xfa, 0x7a73}, {0x4, 0x44, 0x2, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8f7, 0x80, 0x5, 0x7}, {0x3, 0x8, 0x6, 0x8}, {0x0, 0x7f, 0x20, 0x3ff}, {0x6, 0x7, 0x3, 0x7f}, {0x1, 0x3, 0x0, 0x5}, {0x1, 0x80, 0xff, 0x1800}, {0x0, 0xf7, 0x1, 0x9}, {0x5, 0xe8, 0x9f, 0x25e}]}}}]}}, {{0x8, 0x1, r13}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r15}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xba4}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8, 0x40, 0x6, 0xfffffff7}, {0xbb, 0x81, 0x5, 0x3}, {0x5, 0x0, 0x7, 0x8}, {0x2, 0x0, 0x9, 0x3}, {0x1f, 0x0, 0x54, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x395fa85a}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x43ca}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ddb428d}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf2cc}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x50669c4e}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x2, 0xa6, 0x3}]}}}]}}]}, 0xbdc}, 0x1, 0x0, 0x0, 0x80}, 0x2000c081) 13:45:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffffffe) r1 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x103180, 0x44) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0xc6, 0x401}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7e}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffe}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}]}, 0x90}}, 0x48010) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44091}, 0x24008800) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000003c0)=0x2) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000400)={'batadv_slave_1\x00', 0xbcc8}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "09ee3e340aff87876b30d8aa9a315c87"}, @NL80211_ATTR_PMK={0x14, 0xfe, "acaa8a84027f148277bc3d38f71c0ddd"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x81}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r5 = openat$cgroup(r0, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000640)={{r0}, "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"}) r6 = socket(0x18, 0x6, 0x40) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x3c, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000001780)=0x5, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f00000017c0), r0) 13:45:06 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x1, 0x51) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe4, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7759}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000c4}, 0x44) r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@tipc, &(0x7f00000003c0)=0x80) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9be7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000500), &(0x7f0000000540)=0xc) recvmsg$unix(r0, &(0x7f00000007c0)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/84, 0x54}, {&(0x7f0000000700)=""/21, 0x15}], 0x3, &(0x7f0000000780)}, 0x1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000900)={'wg1\x00'}) r5 = accept4(r3, &(0x7f0000000940)=@l2, &(0x7f00000009c0)=0x80, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x8801) mount$bind(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x100010, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x12440, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000c40)={0x2, {0x2, 0xc11b, 0x6, 0x9, 0x200, 0x10}}) socket$netlink(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x48, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x814) [ 125.873082] audit: type=1400 audit(1745934306.699:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:45:06 executing program 5: ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)={{0x10b, 0x7, 0x7, 0x1dd, 0x2f6, 0x600000, 0x381, 0xe7a}, "c83af3a01c69f1e4a85cfb415efa07aae51bf5e104bc4fc7c8f17032934cc0a554e5df44343c3566d36ec55cf56d8062724819dca50563121dfefbf3256b82b4aaeaa9d78c021f7c432cd8f680840720ede812da7713f6730731d682e188bb8a28ac07c1b12be8461c590658c284b99ebdb1a3039578a779f880628f0f8e4f9d3caee4d8c20e4b1ad99eaa393ca12a299fd1b1a9ef538eb67b7f0ff3d1580f098832f0f590f9b8a7a33a6c418569a84164505c299de13efb6a6a143e3bfcece5c8c11f85116260566c93b9fdf8e251f36702a2a895f6d435035f414a663ee1b833d0bcad0d2c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x906) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000009c0)={0x1, 0xffffffff, 0xcb1a, 0x80000001, 0x800, 0x800, 0x8, 0x800, 0x8, 0xfffffffa, 0x27c8ac44, 0x2, 0x3ff, 0x5}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x90000, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xbc, 0x464, 0x200, 0x70bd2c, 0x25dfdbfe, "02e3ecb445a52c207db7d643f7a039357f540a7bd92bb3c00683d79ee54a71391c76270ebd0ede2f760526c166dcdec05bf928fc69e8fe8abc6deefd2f1849d3e03b90bcee0915b20ffed228570939f2360c91ded8948a5979ff2e0465641f1deb6037376f76d007ac1ed41012ab5916bf36f7c33732b718f80566e2d67853e8fbbc8d48b9a64e502dd96719f504fb998dc383c87797b8ee615c545f6095d97a80eb99f8adc987429f6d", ["", "", "", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x408d8}, 0x4040005) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x55}}}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa4}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xa0f}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x4}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_TTL={0x5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040001) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0xa799eb7874685791, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000014) fsetxattr$security_evm(r4, &(0x7f0000000ec0), &(0x7f0000000f00)=@ng={0x4, 0x0, "62d886575837de"}, 0x9, 0x3) r5 = syz_open_dev$vcsn(&(0x7f0000000f40), 0xab, 0x10080) ioctl$CDROM_NEXT_WRITABLE(r5, 0x5394, &(0x7f0000000f80)) fstat(r1, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r6, 0xee00) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x60, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8d}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xed}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4004814) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c890}, 0x804) 13:45:06 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x8000000000000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x0, @multicast2, 0x4e23, 0x2, 'dh\x00', 0x34, 0x5, 0x7b}, 0x2c) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000100)={0x1, 0x9}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) statx(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) recvmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000300), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x38}, 0x40000101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {r2, r5}}, '\x00'}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x2, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x800) fcntl$addseals(r0, 0x409, 0x4) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000600)) ioctl$CDROMMULTISESSION(r4, 0x5310, &(0x7f0000000680)={@lba=0xffff, 0x0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000700)=0x1) recvfrom(r6, &(0x7f0000000740)=""/208, 0xd0, 0x10000, 0x0, 0x0) r8 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f00000008c0)={{r8}, 0x0, 0x4, @inherit={0x68, &(0x7f0000000840)={0x0, 0x4, 0x200, 0x5, {0x0, 0x4, 0x3, 0x4, 0xfff}, [0x8001, 0x67, 0x9c, 0x2]}}, @subvolid=0x4}) 13:45:06 executing program 7: ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0x7fff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x1, 0x8, 0x8}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000080)=0x4) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x600200, 0x2) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) shutdown(r1, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000240)={0xa0, 0x19, 0x1, {0x2100, {0x4, 0x1, 0x7}, 0x2, 0xee00, 0xffffffffffffffff, 0x10001, 0xe51, 0x1, 0x101, 0x6, 0x8, 0x81, 0x1, 0x8, 0x7f, 0x80, 0x0, 0x6, 0x6, 0x8}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x448800, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f00000005c0)=0x2, 0x4) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000600)=0x4000, &(0x7f0000000640)=0x4) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x10000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f00000006c0)={0x25, ""/37}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000700)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000740)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000780)=""/141, &(0x7f0000000840)=0x8d) [ 127.422162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.422879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.424631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.426669] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.430330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.436002] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.437107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.439347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.444150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.446205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.448274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.449869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.451373] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.452582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.453373] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.457970] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.463177] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.465842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.470681] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.473708] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.476813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.480135] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.482065] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.484711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.486741] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.488239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.492136] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.493364] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.493383] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.495610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.497240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.498814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.500805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.502741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.504839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.526161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.543302] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.549051] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.551864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.561132] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.570784] Bluetooth: hci3: command tx timeout [ 129.571417] Bluetooth: hci4: command tx timeout [ 129.572259] Bluetooth: hci6: command tx timeout [ 129.633626] Bluetooth: hci1: command tx timeout [ 129.633660] Bluetooth: hci5: command tx timeout [ 129.634279] Bluetooth: hci2: command tx timeout [ 129.634847] Bluetooth: hci7: command tx timeout [ 129.635370] Bluetooth: hci0: command tx timeout [ 131.617628] Bluetooth: hci6: command tx timeout [ 131.617771] Bluetooth: hci4: command tx timeout [ 131.618190] Bluetooth: hci3: command tx timeout [ 131.681634] Bluetooth: hci0: command tx timeout [ 131.682212] Bluetooth: hci5: command tx timeout [ 131.682248] Bluetooth: hci7: command tx timeout [ 131.682751] Bluetooth: hci2: command tx timeout [ 131.682789] Bluetooth: hci1: command tx timeout [ 133.665601] Bluetooth: hci3: command tx timeout [ 133.665655] Bluetooth: hci4: command tx timeout [ 133.666156] Bluetooth: hci6: command tx timeout [ 133.729700] Bluetooth: hci1: command tx timeout [ 133.730239] Bluetooth: hci2: command tx timeout [ 133.730570] Bluetooth: hci5: command tx timeout [ 133.731189] Bluetooth: hci0: command tx timeout [ 133.731273] Bluetooth: hci7: command tx timeout [ 135.713899] Bluetooth: hci4: command tx timeout [ 135.713975] Bluetooth: hci6: command tx timeout [ 135.715525] Bluetooth: hci3: command tx timeout [ 135.777826] Bluetooth: hci0: command tx timeout [ 135.777905] Bluetooth: hci7: command tx timeout [ 135.778363] Bluetooth: hci2: command tx timeout [ 135.779520] Bluetooth: hci5: command tx timeout [ 135.779561] Bluetooth: hci1: command tx timeout [ 187.565887] syz-executor.3 (283) used greatest stack depth: 25224 bytes left [ 190.135071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.141983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.146236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.156587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.166163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.325712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.328015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.329572] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.347365] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.354617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.402580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.407356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.411755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.414265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.418118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.422772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.428413] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.432075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.447103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.453799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.506884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.512886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.515335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.543193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.555653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.619106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.662703] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.667043] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.679675] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.685378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.831844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.843280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.843606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.857166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.869664] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.899701] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.907010] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.924823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.943784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.006489] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.225827] Bluetooth: hci0: command tx timeout [ 192.419545] Bluetooth: hci1: command tx timeout [ 192.481591] Bluetooth: hci2: command tx timeout [ 192.609696] Bluetooth: hci3: command tx timeout [ 192.673592] Bluetooth: hci4: command tx timeout [ 192.759740] Bluetooth: hci7: command tx timeout [ 193.032598] Bluetooth: hci5: command tx timeout [ 193.121909] Bluetooth: hci6: command tx timeout [ 194.274933] Bluetooth: hci0: command tx timeout [ 194.465555] Bluetooth: hci1: command tx timeout [ 194.529760] Bluetooth: hci2: command tx timeout [ 194.658681] Bluetooth: hci3: command tx timeout [ 194.722799] Bluetooth: hci4: command tx timeout [ 194.785958] Bluetooth: hci7: command tx timeout [ 195.041809] Bluetooth: hci5: command tx timeout [ 195.170781] Bluetooth: hci6: command tx timeout [ 196.323539] Bluetooth: hci0: command tx timeout [ 196.513550] Bluetooth: hci1: command tx timeout [ 196.577558] Bluetooth: hci2: command tx timeout [ 196.706585] Bluetooth: hci3: command tx timeout [ 196.770435] Bluetooth: hci4: command tx timeout [ 196.834508] Bluetooth: hci7: command tx timeout [ 197.089685] Bluetooth: hci5: command tx timeout [ 197.217664] Bluetooth: hci6: command tx timeout [ 198.369568] Bluetooth: hci0: command tx timeout [ 198.561758] Bluetooth: hci1: command tx timeout [ 198.625564] Bluetooth: hci2: command tx timeout [ 198.753537] Bluetooth: hci3: command tx timeout [ 198.817904] Bluetooth: hci4: command tx timeout [ 198.881746] Bluetooth: hci7: command tx timeout [ 199.138665] Bluetooth: hci5: command tx timeout [ 199.266793] Bluetooth: hci6: command tx timeout [ 252.605775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.616479] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.621839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.647405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.659390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.916223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.921336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.929624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.938167] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.942791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.031130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.044108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.050084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.053257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.056713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.058692] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.060815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.063798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.067425] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.071406] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.074886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.082889] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.087189] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.095716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.108175] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.122541] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.128859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.134757] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.153372] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.156526] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.228538] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.261168] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.264808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.299010] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.320831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.324182] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.326773] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.330991] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.333954] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.346629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.689602] Bluetooth: hci0: command tx timeout [ 255.010750] Bluetooth: hci1: command tx timeout [ 255.137614] Bluetooth: hci2: command tx timeout [ 255.138115] Bluetooth: hci3: command tx timeout [ 255.201577] Bluetooth: hci5: command tx timeout [ 255.201608] Bluetooth: hci4: command tx timeout [ 255.394230] Bluetooth: hci6: command tx timeout [ 255.463352] Bluetooth: hci7: command tx timeout [ 256.737600] Bluetooth: hci0: command tx timeout [ 257.058886] Bluetooth: hci1: command tx timeout [ 257.186580] Bluetooth: hci3: command tx timeout [ 257.187141] Bluetooth: hci2: command tx timeout [ 257.250580] Bluetooth: hci4: command tx timeout [ 257.250850] Bluetooth: hci5: command tx timeout [ 257.441833] Bluetooth: hci6: command tx timeout [ 257.505737] Bluetooth: hci7: command tx timeout [ 258.785791] Bluetooth: hci0: command tx timeout [ 259.106783] Bluetooth: hci1: command tx timeout [ 259.235535] Bluetooth: hci2: command tx timeout [ 259.235580] Bluetooth: hci3: command tx timeout [ 259.297845] Bluetooth: hci5: command tx timeout [ 259.300481] Bluetooth: hci4: command tx timeout [ 259.489944] Bluetooth: hci6: command tx timeout [ 259.554595] Bluetooth: hci7: command tx timeout [ 260.834117] Bluetooth: hci0: command tx timeout [ 261.153616] Bluetooth: hci1: command tx timeout [ 261.281548] Bluetooth: hci3: command tx timeout [ 261.282525] Bluetooth: hci2: command tx timeout [ 261.346962] Bluetooth: hci4: command tx timeout [ 261.347001] Bluetooth: hci5: command tx timeout [ 261.537690] Bluetooth: hci6: command tx timeout [ 261.603492] Bluetooth: hci7: command tx timeout [ 315.325159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.327378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.329543] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.345716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.354852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.383787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.386761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.396753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.400342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.403218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.514185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.519637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.537025] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.544658] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.549489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.584175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.594789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.603067] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.622607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.632026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.652967] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.657807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.734919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.737977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.757924] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.760657] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.762770] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.769170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.770423] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.776209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.777961] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.782985] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.787243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.789183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.792372] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.794978] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.797892] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.801659] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 315.802633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.805060] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.409571] Bluetooth: hci0: command tx timeout [ 317.473874] Bluetooth: hci1: command tx timeout [ 317.602712] Bluetooth: hci2: command tx timeout [ 317.729603] Bluetooth: hci3: command tx timeout [ 317.860045] Bluetooth: hci7: command tx timeout [ 317.861216] Bluetooth: hci6: command tx timeout [ 317.922669] Bluetooth: hci5: command tx timeout [ 317.922735] Bluetooth: hci4: command tx timeout [ 319.457843] Bluetooth: hci0: command tx timeout [ 319.521719] Bluetooth: hci1: command tx timeout [ 319.649934] Bluetooth: hci2: command tx timeout [ 319.779787] Bluetooth: hci3: command tx timeout [ 319.905676] Bluetooth: hci6: command tx timeout [ 319.906251] Bluetooth: hci7: command tx timeout [ 319.969822] Bluetooth: hci4: command tx timeout [ 319.970136] Bluetooth: hci5: command tx timeout [ 321.505754] Bluetooth: hci0: command tx timeout [ 321.570561] Bluetooth: hci1: command tx timeout [ 321.699495] Bluetooth: hci2: command tx timeout [ 321.827513] Bluetooth: hci3: command tx timeout [ 321.953686] Bluetooth: hci7: command tx timeout [ 321.954226] Bluetooth: hci6: command tx timeout [ 322.017583] Bluetooth: hci4: command tx timeout [ 322.017647] Bluetooth: hci5: command tx timeout [ 323.553692] Bluetooth: hci0: command tx timeout [ 323.617551] Bluetooth: hci1: command tx timeout [ 323.745551] Bluetooth: hci2: command tx timeout [ 323.873902] Bluetooth: hci3: command tx timeout [ 324.001646] Bluetooth: hci6: command tx timeout [ 324.001677] Bluetooth: hci7: command tx timeout [ 324.065554] Bluetooth: hci5: command tx timeout [ 324.067065] Bluetooth: hci4: command tx timeout [ 377.988317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.998824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.000207] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.012174] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.018855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.167245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.169275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.170992] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.175715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.181655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.184796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.193487] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.195223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.219302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.221832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.238099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.247290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.249562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.260564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.265140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.376284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.388301] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.400355] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.420682] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.427552] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.430550] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.434762] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.442134] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 378.444254] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.448618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 378.451008] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.452093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.455203] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.487205] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.488366] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.490288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.503873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.519578] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.539364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 378.540906] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.065735] Bluetooth: hci0: command tx timeout [ 380.258171] Bluetooth: hci1: command tx timeout [ 380.259278] Bluetooth: hci2: command tx timeout [ 380.321983] Bluetooth: hci3: command tx timeout [ 380.513597] Bluetooth: hci5: command tx timeout [ 380.577630] Bluetooth: hci4: command tx timeout [ 380.644908] Bluetooth: hci7: command tx timeout [ 380.646140] Bluetooth: hci6: command tx timeout [ 382.114238] Bluetooth: hci0: command tx timeout [ 382.306499] Bluetooth: hci1: command tx timeout [ 382.307072] Bluetooth: hci2: command tx timeout [ 382.369915] Bluetooth: hci3: command tx timeout [ 382.563102] Bluetooth: hci5: command tx timeout [ 382.626140] Bluetooth: hci4: command tx timeout [ 382.690575] Bluetooth: hci7: command tx timeout [ 382.691162] Bluetooth: hci6: command tx timeout [ 384.161806] Bluetooth: hci0: command tx timeout [ 384.354026] Bluetooth: hci2: command tx timeout [ 384.354862] Bluetooth: hci1: command tx timeout [ 384.417814] Bluetooth: hci3: command tx timeout [ 384.610479] Bluetooth: hci5: command tx timeout [ 384.673569] Bluetooth: hci4: command tx timeout [ 384.737589] Bluetooth: hci6: command tx timeout [ 384.738120] Bluetooth: hci7: command tx timeout [ 386.209910] Bluetooth: hci0: command tx timeout [ 386.401593] Bluetooth: hci2: command tx timeout [ 386.403072] Bluetooth: hci1: command tx timeout [ 386.466873] Bluetooth: hci3: command tx timeout [ 386.657527] Bluetooth: hci5: command tx timeout [ 386.721562] Bluetooth: hci4: command tx timeout [ 386.785658] Bluetooth: hci7: command tx timeout [ 386.787245] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:50:14 Registers: info registers vcpu 0 RAX=1ffffd40001c0fc1 RBX=8400000000000025 RCX=dffffc0000000000 RDX=ffff888017013780 RSI=ffffffff819ba10a RDI=ffffea0000e07e08 RBP=0000000000000014 RSP=ffff888025ba7860 R8 =0000000000000000 R9 =fffff940001b354e R10=00000000000381f8 R11=0000000000000003 R12=0000000000000001 R13=00007ff3de4ef000 R14=ffff888025ba7ce0 R15=ffff888027251778 RIP=ffffffff819ba128 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5648000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5e8f3f03c0 CR3=0000000033da4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88802e07fe60 RCX=ffffffff815bcfd4 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf31850 RBP=ffff88806cf37d00 RSP=ffff88806cf08d68 R8 =0000000000000000 R9 =fffffbfff0c81ea2 R10=ffffffff8640f517 R11=0000000000000000 R12=0000000000000200 R13=ffff8880e5748000 R14=ffff88806cf37df0 R15=ffff88806cf37da8 RIP=ffffffff815bd281 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5748000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f71884ca028 CR3=00000000326f0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000