[ OK ] Finished Update UTMP about System Runlevel Changes. [ 85.088851] audit: type=1400 audit(1745968203.379:6): avc: denied { checkpoint_restore } for pid=217 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:15752' (ECDSA) to the list of known hosts. 2025/04/29 23:10:11 fuzzer started 2025/04/29 23:10:11 dialing manager at localhost:46073 syzkaller login: [ 93.659904] cgroup: Unknown subsys name 'net' [ 93.789314] cgroup: Unknown subsys name 'cpuset' [ 93.834995] cgroup: Unknown subsys name 'rlimit' 2025/04/29 23:10:30 syscalls: 2214 2025/04/29 23:10:30 code coverage: enabled 2025/04/29 23:10:30 comparison tracing: enabled 2025/04/29 23:10:30 extra coverage: enabled 2025/04/29 23:10:30 setuid sandbox: enabled 2025/04/29 23:10:30 namespace sandbox: enabled 2025/04/29 23:10:30 Android sandbox: enabled 2025/04/29 23:10:30 fault injection: enabled 2025/04/29 23:10:30 leak checking: enabled 2025/04/29 23:10:30 net packet injection: enabled 2025/04/29 23:10:30 net device setup: enabled 2025/04/29 23:10:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/29 23:10:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/29 23:10:30 USB emulation: enabled 2025/04/29 23:10:30 hci packet injection: enabled 2025/04/29 23:10:30 wifi device emulation: enabled 2025/04/29 23:10:30 802.15.4 emulation: enabled 2025/04/29 23:10:30 fetching corpus: 0, signal 0/0 (executing program) 2025/04/29 23:10:32 starting 8 fuzzer processes 23:10:32 executing program 0: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x5, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0xd28c637085ab021f) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0xfff8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x3c}}, 0x8801) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x1f, 0x20, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x40, 0x3, 0xacb6}}) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3fb, 0x0, 0x70bd26, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x5200010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x531c}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044090) r2 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x500) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4b00000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xf1}, {0x8, 0x15, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x810) fsetxattr$security_capability(r2, &(0x7f0000000840), &(0x7f0000000880)=@v1={0x1000000, [{0x6, 0x3b86}]}, 0xc, 0x1) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000008c0)=@gcm_256={{0x303}, "8212c7fabbd18468", "311028b3deded1e03868a341b3ee53bd97cba61f8571e7c12b0e55cd4cd29a0f", "85e03b1b", "2dd2840952675d4d"}, 0x38) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000900)={0x0, 0x5}) r4 = openat2(r3, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x840, 0x0, 0xc}, 0x18) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, 0xc, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x5) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x7f22f4470d9c3138}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000084}, 0x14) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000001480)) 23:10:32 executing program 1: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xc084}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) poll(&(0x7f00000003c0)=[{r0, 0x320c}, {r0, 0x8040}, {r0, 0x94a0}], 0x3, 0x5) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040844}, 0x200048c0) r3 = accept(r0, &(0x7f0000000780)=@sco, &(0x7f0000000800)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x88, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "dc3e36b45e7b7138a00d6b4180"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d3a88c7c72"}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r5 = signalfd4(r3, &(0x7f0000000a00)={[0x85b0]}, 0x8, 0xc0800) epoll_pwait(r5, &(0x7f0000000a40)=[{}, {}], 0x2, 0x6, &(0x7f0000000a80)={[0x7]}, 0x8) pipe2(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8000) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000bc0), &(0x7f0000000c00)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000c80)={0x6, &(0x7f0000000c40)=[{0x9, 0x7f, 0x80, 0x80000001}, {0xdb, 0x4, 0x9, 0x2}, {0x0, 0x20, 0x7f, 0xff}, {0x200, 0xea, 0x5, 0x1}, {0xd2, 0x0, 0x8, 0x5f6538ed}, {0x9, 0xff, 0x6, 0x6}]}) getpeername(r6, &(0x7f0000000cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000d40)=0x80) sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x88, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x64}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="327764b10d46"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c77148b4bbb9"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="83c1ac695e23"}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 23:10:32 executing program 2: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x20, {{0xa, 0x4e22, 0x0, @loopback, 0x1}}}, 0x88) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)={0x3a, 0x1, '\x00', [@ra={0x5, 0x2, 0x9f}, @enc_lim={0x4, 0x1, 0x8b}, @pad1]}, 0x18) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x1, '\x00', {}, 0x2}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x90ed, {{0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45bb}}}, 0x88) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000002c0)=0x3f) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000300)=0xff) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000340)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000380)="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") r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000480)) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2808200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x3fa, 0x800, 0x70bd2c, 0x25dfdbfb, {0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f00000005c0)) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) fsmount(r5, 0x1, 0x1) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000680)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000ac0)={0x1, 'ip6tnl0\x00', {}, 0xc9}) [ 114.082229] audit: type=1400 audit(1745968232.372:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:10:32 executing program 3: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000040)={{}, 0x0, 0x18, @unused=[0xfff, 0x6, 0x1ff], @subvolid=0x9}) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000001440)={0x3, 0x1, 0x9, 0x10, 0xcf, &(0x7f0000001040)}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001480)={"0e9ac71a80c908d8af41cb933c036b06", 0x0, 0x0, {0x7fffffff, 0x8001}, {0x7, 0x3ff}, 0x401, [0x4, 0x5ce582d2, 0x1, 0x8, 0x9, 0xfffffffffffffffd, 0x6, 0x7, 0x38e, 0x101, 0x8, 0x3ff, 0x2, 0xfffffffffffffff7, 0x9, 0xfffffffffffeffff]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000001580)=r1) r2 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsn(&(0x7f0000001600), 0x5, 0x181000) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r5 = accept4$inet6(r4, 0x0, &(0x7f0000001740), 0x80000) lseek(r5, 0x100000001, 0x0) r6 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) fcntl$setsig(r6, 0xa, 0x9) r7 = creat(&(0x7f0000001780)='./file0\x00', 0x128) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f00000017c0)) wait4(0xffffffffffffffff, &(0x7f0000001800), 0x2, &(0x7f0000001840)) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0xac, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdb51}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8001}, 0x2000001) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0xbc, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x28}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x34a3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20080000}, 0x20000004) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001c00), 0x41, 0x0) write$tun(r8, &(0x7f0000001c40)={@void, @val={0x0, 0x3, 0x95, 0x9, 0x1}, @ipv4=@generic={{0x3f, 0x4, 0x1, 0x4, 0x1cd, 0x66, 0x0, 0x3f, 0x8, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xa3, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @lsrr={0x83, 0x27, 0xf0, [@private=0xa010101, @loopback, @loopback, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @multicast1, @multicast2]}, @rr={0x7, 0x7, 0xfe, [@loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0xb1, 0x3, 0x9, [{@remote, 0x6}, {@empty, 0xe44f}, {@empty, 0x7fffffff}, {@broadcast, 0x1000}, {@private=0xa010102, 0x9}, {@private=0xa010102, 0x400}, {@rand_addr=0x64010100, 0x6}]}, @noop, @generic={0x7, 0xf, "570fb3be3491bbd8286b2016f9"}, @timestamp_prespec={0x44, 0x4c, 0xfc, 0x3, 0x0, [{@multicast2}, {@remote, 0x1ff}, {@local, 0x4}, {@local, 0x20}, {@multicast1, 0x8}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffa9b8}, {@local, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}]}]}}, "2055d2d7af13f580a07838da1490d0cc6fc27361e696c019ac333d9c32e54705ac1ebc6778c415e6caf94662348117e2a2b03990d493272895cf638ec866bdc1fe26ba98fe4e6521223f6828f5831151e44fadfb62c9d7e37eaa1993b0fa9774fcb3e733f4b81a2ef08b917f1cb871e54c2ea3d05011b3deb79ccaab8cd909cf1d3fa1aeea2157ace19ec68f5807b5cbe8be55ccf1922e5971a38aec88e08a34525e41250500c8bbc1558101e78cc62a838f9e0aba4cecf3876dda580fb669c058522b9d7c62463143295774d50d7c2efc"}}, 0x1d7) 23:10:32 executing program 4: ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x104}, {0xffffffffffffffff, 0xa400}], 0x2, &(0x7f0000000040), &(0x7f0000000080)={[0xfe09]}, 0x8) ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f00000000c0)) ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000140)={0x53, 0x7, 0x2, 0xa6, 0x9, 0x81}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000bc0)=0x4, 0x4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x3, 0x6, 0x401, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000d00), 0x40000, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000d40)=0x7, 0x4) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000d80)={0x3, 0xfa, "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"}) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000e80)) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) fcntl$addseals(r0, 0x409, 0xd) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x1}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x78, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0xa36, 0xf289, 0x1f, 0x40]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xc8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2a}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x56c}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}]}, 0x78}}, 0x8000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001240), 0x440, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001280)=""/4096) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002280)={{0x1, 0x1, 0x18, r1, {0xebf6}}, './file0\x00'}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000022c0)={'ah\x00'}, &(0x7f0000002300)=0x1e) 23:10:32 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) r1 = epoll_create1(0x80000) copy_file_range(r0, 0x0, r1, &(0x7f0000000100), 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}) sched_getattr(0xffffffffffffffff, &(0x7f0000000180)={0x38}, 0x38, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000001c0)=0x1, 0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'ip6erspan0\x00'}) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000280)=0x5, 0x4) r3 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000300)={'veth0', 0x32, 0x38}, 0x8) connect$netlink(r0, &(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)=0x0) io_cancel(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000400)="61f18294bc4c52e5c3eaf5a28a5eee78f681427297800adcf12e47ae974d55456501bfda45ecfe1e3bf67dda8f10d661e2096e69362023aef82dd7eb57d847745a6fe99b9b6e9b60577946623add193cdbfa48a65105f3586fa6dbb573c8fa072072164189af68f3830ece6c2fc1c83d4f50a6ed4656343ca9b76d77c948b73160d83560c14708067ad74597b530bc673ca354091cce097e", 0x98, 0x9, 0x0, 0x2}, &(0x7f0000000500)) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x20000044) 23:10:32 executing program 6: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001080)={&(0x7f0000000080)=""/4096, 0x1000}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000010c0), 0x6540, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000001140)={{r0}, 0x6, &(0x7f0000001100)=[0x100000001, 0x401, 0xfaa, 0xa1, 0x7, 0x3], 0x1000, 0x4, [0x7fffffff, 0x3, 0x101, 0x8]}) r2 = accept$packet(r0, &(0x7f00000011c0)={0x11, 0x0, 0x0}, &(0x7f0000001200)=0x14) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x6) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001280), r1) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000012c0)={@multicast1, @private, 0x0}, &(0x7f0000001300)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000014c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x110, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40010}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001780)={{r1}, r6, 0x2, @inherit={0x68, &(0x7f0000001700)={0x0, 0x4, 0xfffffffffffffffa, 0x1, {0x8, 0x80, 0x10000, 0xfff, 0x623}, [0x9, 0x0, 0xc4ef, 0x90d]}}, @subvolid=0x7}) syz_genetlink_get_family_id$devlink(&(0x7f0000002780), r1) clock_gettime(0x0, &(0x7f00000073c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000027c0)=""/101, 0x65}, {&(0x7f0000002840)=""/223, 0xdf}, {&(0x7f0000002940)=""/78, 0x4e}, {&(0x7f00000029c0)=""/199, 0xc7}], 0x4, &(0x7f0000002b00)=""/129, 0x81}, 0x3}, {{&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002c40)=""/76, 0x4c}, {&(0x7f0000002cc0)=""/46, 0x2e}, {&(0x7f0000002d00)=""/138, 0x8a}, {&(0x7f0000002dc0)=""/136, 0x88}, {&(0x7f0000002e80)=""/144, 0x90}, {&(0x7f0000002f40)=""/252, 0xfc}, {&(0x7f0000003040)=""/201, 0xc9}], 0x7, &(0x7f00000031c0)=""/208, 0xd0}, 0x400}, {{&(0x7f00000032c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003340)=""/235, 0xeb}, {&(0x7f0000003440)=""/226, 0xe2}, {&(0x7f0000003540)=""/93, 0x5d}, {&(0x7f00000035c0)=""/135, 0x87}], 0x4, &(0x7f00000036c0)=""/174, 0xae}, 0x8}, {{&(0x7f0000003780)=@nfc, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003800)=""/154, 0x9a}, {&(0x7f00000038c0)=""/191, 0xbf}, {&(0x7f0000003980)=""/28, 0x1c}, {&(0x7f00000039c0)}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/190, 0xbe}, {&(0x7f0000004ac0)=""/12, 0xc}, {&(0x7f0000004b00)=""/190, 0xbe}, {&(0x7f0000004bc0)=""/105, 0x69}], 0x9, &(0x7f0000004d00)=""/4096, 0x1000}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000005d00)=""/110, 0x6e}, {&(0x7f0000005d80)=""/194, 0xc2}, {&(0x7f0000005e80)=""/36, 0x24}], 0x3, &(0x7f0000005f00)=""/4, 0x4}, 0x2}, {{&(0x7f0000005f40)=@nfc, 0x80, &(0x7f0000007180)=[{&(0x7f0000005fc0)=""/239, 0xef}, {&(0x7f00000060c0)}, {&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000007100)=""/107, 0x6b}], 0x4, &(0x7f00000071c0)=""/75, 0x4b}, 0xb7}], 0x6, 0x162, &(0x7f0000007400)={r7, r8+10000000}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007480), r1) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000007540)={&(0x7f0000007440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000007500)={&(0x7f00000074c0)={0x14, r11, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xb511082541674b09) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000007580)='sched\x00') ioctl$CDROMREADMODE1(r12, 0x530d, &(0x7f00000075c0)={0x3, 0x1f, 0x0, 0xe0, 0x4, 0xc0}) getsockopt$WPAN_SECURITY(r10, 0x0, 0x1, &(0x7f0000008040), &(0x7f0000008080)=0x4) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000008180)={&(0x7f00000080c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000008140)={&(0x7f0000008100)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffe07b}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 23:10:32 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x92, 0x780) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7) ioctl$KDSETLED(r0, 0x4b32, 0x3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000000) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000180)={0xb000001a}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x2]}, 0x8, 0x800) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x3) ioctl$TIOCSIG(r1, 0x40045436, 0x3c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f0000000240)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000cc0)={0x6a28, 0x8, 0x7, 0x401, 0x7, "0043f59e28154a08f149796f207bcd4e3cbcb6"}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000d00)) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000d80)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ec0), r1) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000001040)={'ip6tnl0\x00', &(0x7f0000000fc0)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x9, 0x8, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7, 0x7800, 0x6b59, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000001140)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0xac3200}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000014}, 0x80) [ 115.436692] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.438254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.440885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.444340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.448027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.476096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.493839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.503578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.506810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.510312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.516771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.520245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.521514] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.535858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.539356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.540907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.542456] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.545651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.557742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.561724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.563456] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.564848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.566147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.568747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.571811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.577306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.584147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.586204] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.588390] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.622600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.629365] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.629994] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.632693] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.656297] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.658498] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.665278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.670888] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.680946] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.738204] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.748579] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 117.513230] Bluetooth: hci0: command tx timeout [ 117.639453] Bluetooth: hci1: command tx timeout [ 117.640295] Bluetooth: hci2: command tx timeout [ 117.703184] Bluetooth: hci5: command tx timeout [ 117.703870] Bluetooth: hci3: command tx timeout [ 117.767991] Bluetooth: hci4: command tx timeout [ 117.769014] Bluetooth: hci6: command tx timeout [ 117.832269] Bluetooth: hci7: command tx timeout [ 119.560539] Bluetooth: hci0: command tx timeout [ 119.687192] Bluetooth: hci2: command tx timeout [ 119.688307] Bluetooth: hci1: command tx timeout [ 119.752708] Bluetooth: hci3: command tx timeout [ 119.753151] Bluetooth: hci5: command tx timeout [ 119.815142] Bluetooth: hci6: command tx timeout [ 119.816722] Bluetooth: hci4: command tx timeout [ 119.879419] Bluetooth: hci7: command tx timeout [ 121.607345] Bluetooth: hci0: command tx timeout [ 121.735465] Bluetooth: hci2: command tx timeout [ 121.735920] Bluetooth: hci1: command tx timeout [ 121.799159] Bluetooth: hci3: command tx timeout [ 121.799192] Bluetooth: hci5: command tx timeout [ 121.865135] Bluetooth: hci4: command tx timeout [ 121.865158] Bluetooth: hci6: command tx timeout [ 121.927390] Bluetooth: hci7: command tx timeout [ 123.655186] Bluetooth: hci0: command tx timeout [ 123.783519] Bluetooth: hci2: command tx timeout [ 123.784579] Bluetooth: hci1: command tx timeout [ 123.847622] Bluetooth: hci5: command tx timeout [ 123.848740] Bluetooth: hci3: command tx timeout [ 123.911733] Bluetooth: hci4: command tx timeout [ 123.913352] Bluetooth: hci6: command tx timeout [ 123.976206] Bluetooth: hci7: command tx timeout [ 177.947539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.949023] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.951954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.954139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.956802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.959699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.969708] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.971821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.976395] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.988542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.014620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.024654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.032660] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.038810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.040777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.045647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.048842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.071363] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.072588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.076898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.078463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.080401] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.082774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.086220] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.087563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.099986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.101558] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.110818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.118567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.125944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.142398] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.173718] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.197106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.201886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.203758] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.208609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.219921] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.230855] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.244368] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.246775] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.039205] Bluetooth: hci1: command tx timeout [ 180.039483] Bluetooth: hci0: command tx timeout [ 180.103350] Bluetooth: hci2: command tx timeout [ 180.167169] Bluetooth: hci4: command tx timeout [ 180.167399] Bluetooth: hci3: command tx timeout [ 180.231425] Bluetooth: hci5: command tx timeout [ 180.295422] Bluetooth: hci7: command tx timeout [ 180.295465] Bluetooth: hci6: command tx timeout [ 182.087169] Bluetooth: hci1: command tx timeout [ 182.088155] Bluetooth: hci0: command tx timeout [ 182.151201] Bluetooth: hci2: command tx timeout [ 182.215383] Bluetooth: hci3: command tx timeout [ 182.216963] Bluetooth: hci4: command tx timeout [ 182.279161] Bluetooth: hci5: command tx timeout [ 182.343152] Bluetooth: hci7: command tx timeout [ 182.344350] Bluetooth: hci6: command tx timeout [ 184.135158] Bluetooth: hci0: command tx timeout [ 184.135633] Bluetooth: hci1: command tx timeout [ 184.200319] Bluetooth: hci2: command tx timeout [ 184.263491] Bluetooth: hci4: command tx timeout [ 184.263998] Bluetooth: hci3: command tx timeout [ 184.327353] Bluetooth: hci5: command tx timeout [ 184.392385] Bluetooth: hci6: command tx timeout [ 184.392768] Bluetooth: hci7: command tx timeout [ 186.183151] Bluetooth: hci1: command tx timeout [ 186.183240] Bluetooth: hci0: command tx timeout [ 186.247191] Bluetooth: hci2: command tx timeout [ 186.311163] Bluetooth: hci3: command tx timeout [ 186.311589] Bluetooth: hci4: command tx timeout [ 186.376184] Bluetooth: hci5: command tx timeout [ 186.439219] Bluetooth: hci7: command tx timeout [ 186.440464] Bluetooth: hci6: command tx timeout [ 240.088906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.093223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.095875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.105961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.111871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.235488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.245926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.253817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.266870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.273270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.429704] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.438450] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.450901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.471283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.481341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.543015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.552333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.569698] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.577385] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.604327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.608875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.617519] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.620733] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.623571] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.635861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.656438] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.658465] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.660466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.664346] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.671287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.676865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.679785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.687766] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.698704] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.706725] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.711019] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.713395] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.719320] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.803645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.828087] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.183312] Bluetooth: hci0: command tx timeout [ 242.311421] Bluetooth: hci1: command tx timeout [ 242.567164] Bluetooth: hci2: command tx timeout [ 242.759406] Bluetooth: hci3: command tx timeout [ 242.825159] Bluetooth: hci5: command tx timeout [ 242.887430] Bluetooth: hci7: command tx timeout [ 242.887469] Bluetooth: hci4: command tx timeout [ 242.951253] Bluetooth: hci6: command tx timeout [ 244.231382] Bluetooth: hci0: command tx timeout [ 244.361087] Bluetooth: hci1: command tx timeout [ 244.615323] Bluetooth: hci2: command tx timeout [ 244.807419] Bluetooth: hci3: command tx timeout [ 244.871391] Bluetooth: hci5: command tx timeout [ 244.935470] Bluetooth: hci7: command tx timeout [ 244.937490] Bluetooth: hci4: command tx timeout [ 244.999144] Bluetooth: hci6: command tx timeout [ 246.280811] Bluetooth: hci0: command tx timeout [ 246.408127] Bluetooth: hci1: command tx timeout [ 246.664124] Bluetooth: hci2: command tx timeout [ 246.857089] Bluetooth: hci3: command tx timeout [ 246.920287] Bluetooth: hci5: command tx timeout [ 246.985512] Bluetooth: hci4: command tx timeout [ 246.985960] Bluetooth: hci7: command tx timeout [ 247.048155] Bluetooth: hci6: command tx timeout [ 248.328224] Bluetooth: hci0: command tx timeout [ 248.457281] Bluetooth: hci1: command tx timeout [ 248.712225] Bluetooth: hci2: command tx timeout [ 248.904243] Bluetooth: hci3: command tx timeout [ 248.970175] Bluetooth: hci5: command tx timeout [ 249.032480] Bluetooth: hci7: command tx timeout [ 249.032504] Bluetooth: hci4: command tx timeout [ 249.095323] Bluetooth: hci6: command tx timeout [ 302.305865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.310654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.315689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.327390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.334764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.429252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.444921] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.456335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.474397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.487689] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.574251] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.581126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.597415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.619262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.635545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.637470] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.644580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.649743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.658953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.662787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.686335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.703813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.710735] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.720574] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.728413] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.732800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.757644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.803361] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.866667] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.873763] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.916257] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.924621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.929596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.939880] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.945749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.951759] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.964752] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.015710] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.027816] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.086020] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.392022] Bluetooth: hci0: command tx timeout [ 304.519162] Bluetooth: hci1: command tx timeout [ 304.775190] Bluetooth: hci4: command tx timeout [ 304.776239] Bluetooth: hci2: command tx timeout [ 304.840387] Bluetooth: hci3: command tx timeout [ 305.031189] Bluetooth: hci5: command tx timeout [ 305.096124] Bluetooth: hci6: command tx timeout [ 305.224159] Bluetooth: hci7: command tx timeout [ 306.439160] Bluetooth: hci0: command tx timeout [ 306.567176] Bluetooth: hci1: command tx timeout [ 306.825145] Bluetooth: hci2: command tx timeout [ 306.825265] Bluetooth: hci4: command tx timeout [ 306.887246] Bluetooth: hci3: command tx timeout [ 307.079124] Bluetooth: hci5: command tx timeout [ 307.145118] Bluetooth: hci6: command tx timeout [ 307.272380] Bluetooth: hci7: command tx timeout [ 308.487478] Bluetooth: hci0: command tx timeout [ 308.616316] Bluetooth: hci1: command tx timeout [ 308.871413] Bluetooth: hci2: command tx timeout [ 308.871881] Bluetooth: hci4: command tx timeout [ 308.935441] Bluetooth: hci3: command tx timeout [ 309.127157] Bluetooth: hci5: command tx timeout [ 309.191368] Bluetooth: hci6: command tx timeout [ 309.319290] Bluetooth: hci7: command tx timeout [ 310.535139] Bluetooth: hci0: command tx timeout [ 310.663198] Bluetooth: hci1: command tx timeout [ 310.919138] Bluetooth: hci4: command tx timeout [ 310.919174] Bluetooth: hci2: command tx timeout [ 310.984431] Bluetooth: hci3: command tx timeout [ 311.176145] Bluetooth: hci5: command tx timeout [ 311.241106] Bluetooth: hci6: command tx timeout [ 311.368101] Bluetooth: hci7: command tx timeout [ 364.826014] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.831870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.836598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.844623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.848908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.901635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.906537] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.909037] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.915605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.919572] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.980327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.984586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.987612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.991727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.995365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.013400] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.016733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.020360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.034101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.037099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.080542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.094165] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.103652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.125518] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.139386] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.187590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.201699] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.239216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.241025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.250207] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.261589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.275689] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.281585] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.287531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.289039] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.294716] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.313547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.352235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.380839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.415535] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.919550] Bluetooth: hci0: command tx timeout [ 366.985140] Bluetooth: hci1: command tx timeout [ 367.111147] Bluetooth: hci3: command tx timeout [ 367.175256] Bluetooth: hci4: command tx timeout [ 367.175508] Bluetooth: hci2: command tx timeout [ 367.369188] Bluetooth: hci5: command tx timeout [ 367.431318] Bluetooth: hci7: command tx timeout [ 367.495211] Bluetooth: hci6: command tx timeout [ 368.967299] Bluetooth: hci0: command tx timeout [ 369.034099] Bluetooth: hci1: command tx timeout [ 369.160149] Bluetooth: hci3: command tx timeout [ 369.223144] Bluetooth: hci2: command tx timeout [ 369.226848] Bluetooth: hci4: command tx timeout [ 369.415134] Bluetooth: hci5: command tx timeout [ 369.479198] Bluetooth: hci7: command tx timeout [ 369.543486] Bluetooth: hci6: command tx timeout [ 371.015191] Bluetooth: hci0: command tx timeout [ 371.079418] Bluetooth: hci1: command tx timeout [ 371.207631] Bluetooth: hci3: command tx timeout [ 371.271266] Bluetooth: hci4: command tx timeout [ 371.271695] Bluetooth: hci2: command tx timeout [ 371.463496] Bluetooth: hci5: command tx timeout [ 371.527604] Bluetooth: hci7: command tx timeout [ 371.591683] Bluetooth: hci6: command tx timeout [ 373.063166] Bluetooth: hci0: command tx timeout [ 373.127332] Bluetooth: hci1: command tx timeout [ 373.255223] Bluetooth: hci3: command tx timeout [ 373.319965] Bluetooth: hci2: command tx timeout [ 373.320037] Bluetooth: hci4: command tx timeout [ 373.511631] Bluetooth: hci5: command tx timeout [ 373.576125] Bluetooth: hci7: command tx timeout [ 373.641354] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 23:15:39 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88806ce28080 RCX=ffffffff8151ca14 RDX=ffffed100d9c5011 RSI=0000000000000004 RDI=ffff88806ce28080 RBP=1ffff1100d9c11b3 RSP=ffff88806ce08d90 R8 =0000000000000001 R9 =ffffed100d9c5010 R10=ffff88806ce28083 R11=ffff88806ce37018 R12=ffff88806ce28088 R13=ffff88806ce28090 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8151ca19 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5648000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6551588090 CR3=0000000028ef5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888037878700 RCX=ffffffff8140c6be RDX=ffff8880371c3780 RSI=ffffffff8140c73b RDI=ffff888037878758 RBP=0000000000000000 RSP=ffff8880374dfd98 R8 =0000000000000001 R9 =ffffed1001198e00 R10=0000000000000000 R11=ffff8880181d2498 R12=0000000000000088 R13=ffff888037878708 R14=ffff888037878700 R15=ffff888008cd6000 RIP=ffffffff8140c73f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5748000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbecd5326f4 CR3=000000001cbe2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fbecd54147000007fbecd540f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000