Warning: Permanently added '[localhost]:14045' (ECDSA) to the list of known hosts. 2025/04/30 18:12:59 fuzzer started 2025/04/30 18:13:00 dialing manager at localhost:46073 syzkaller login: [ 104.359733] cgroup: Unknown subsys name 'net' [ 104.463341] cgroup: Unknown subsys name 'cpuset' [ 104.493623] cgroup: Unknown subsys name 'rlimit' 2025/04/30 18:13:19 syscalls: 209 2025/04/30 18:13:19 code coverage: enabled 2025/04/30 18:13:19 comparison tracing: enabled 2025/04/30 18:13:19 extra coverage: enabled 2025/04/30 18:13:19 setuid sandbox: enabled 2025/04/30 18:13:19 namespace sandbox: enabled 2025/04/30 18:13:19 Android sandbox: enabled 2025/04/30 18:13:19 fault injection: enabled 2025/04/30 18:13:19 leak checking: enabled 2025/04/30 18:13:19 net packet injection: enabled 2025/04/30 18:13:19 net device setup: enabled 2025/04/30 18:13:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/30 18:13:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/30 18:13:19 USB emulation: enabled 2025/04/30 18:13:19 hci packet injection: enabled 2025/04/30 18:13:19 wifi device emulation: enabled 2025/04/30 18:13:19 802.15.4 emulation: enabled 2025/04/30 18:13:19 fetching corpus: 0, signal 0/0 (executing program) 2025/04/30 18:13:20 starting 8 fuzzer processes 18:13:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x21}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x4890) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffc}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x805}, 0x44000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x24004041) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004e00)={'ip6tnl0\x00', &(0x7f0000004d80)={'ip6_vti0\x00', 0x0, 0x29, 0x7c, 0x81, 0x2, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x7800, 0x80a8, 0x40, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004f00)={'syztnl2\x00', &(0x7f0000004e40)={'tunl0\x00', 0x0, 0x7, 0x7800, 0x423e, 0x6, {{0x26, 0x4, 0x1, 0x1, 0x98, 0x66, 0x0, 0x81, 0x4, 0x0, @remote, @private=0xa010101, {[@end, @ssrr={0x89, 0x1f, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @broadcast, @empty, @local, @remote]}, @timestamp_prespec={0x44, 0x34, 0xe9, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x780b3168}, {@local, 0x1ff}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x1}, {@multicast1, 0x80}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x8}]}, @ssrr={0x89, 0x23, 0x84, [@private=0xa010100, @multicast2, @loopback, @private=0xa010100, @loopback, @empty, @private=0xa010101, @empty]}, @noop, @timestamp_addr={0x44, 0xc, 0xb4, 0x1, 0x2, [{@multicast1, 0x10000}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000004f40)={@private0, 0x0}, &(0x7f0000004f80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004fc0)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000005000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005040)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000052c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005280)={&(0x7f0000005080)={0x1f0, r4, 0xa00, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4040085}, 0x804) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000005300), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000005340)=[@sack_perm, @sack_perm, @window={0x3, 0xe55, 0x9}], 0x3) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000053c0), r3) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005440)={&(0x7f0000005400)={0x30, r10, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000005700)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f00000056c0)={&(0x7f0000005540)={0x168, r11, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200800}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x291}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff08}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x1) 18:13:20 executing program 2: ioctl$sock_bt_hci(0xffffffffffffffff, 0xc0000026, &(0x7f0000000000)="069b163744e1d93607976f27f4972a55ded3005919c6225913f3c5f5696288fb2cb7f62527ab2a41370685df0a37cfef5a70333ec158da2d9774722b7609b3e96f960ec252da955491d5287eb82ff089859595e1f6c0737d2c963aa05549ea90f02b65d0368eacf4513b893e2e3c26033612ca154b0006a374b75094e1921a17d2b72bb7372549235aa58911f861d973c14e3d0c8ae32488062324425210ce9ec1e7cfa8d9c11f348e845a07425e63ba20aeab6d8d0d672be97fb666baf701b453c131f88eb39cf5b7d551970fafc44db9419b5f82b36d85150e0aaa5c8509") setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {r1, r2}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x3, r5, 0x8000, 0x80000}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x7fff}}, './file0\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000340)) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {r6, r2}}, './file0\x00'}) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fff, r9, &(0x7f0000000400)="ed2b21e98747458b51064f2b915c4a57faaf59e6c7f63b7b8aa9551f0368b4bf7473f979d9fe6f662b92a36e25469336cf5a26e071af7c2af5353aac31d29786492af45abc99b3e46583124a63e973703d3799ffb665612811fcfaa30591d12323a0db909971afe98fd0a52cea0b0477e531b00697", 0x75, 0x0, 0x0, 0x0, r8}, &(0x7f00000004c0)) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, r10, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) socket$inet6(0xa, 0x80005, 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 18:13:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c000}, 0x5000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000240)) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000848}, 0x2404c880) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x66c0, 0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x7f, 0x0, 0x3, r5}, &(0x7f0000000400)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r3) recvmmsg(r1, &(0x7f0000002c80)=[{{&(0x7f0000001fc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002040)=""/117, 0x75}, {&(0x7f00000020c0)=""/91, 0x5b}, {&(0x7f0000002140)=""/52, 0x34}, {&(0x7f0000002180)=""/80, 0x50}, {&(0x7f0000002200)=""/176, 0xb0}, {&(0x7f00000022c0)=""/86, 0x56}, {&(0x7f0000002340)=""/98, 0x62}, {&(0x7f00000023c0)=""/181, 0xb5}, {&(0x7f0000002480)=""/213, 0xd5}, {&(0x7f0000002580)=""/83, 0x53}], 0xa, &(0x7f00000026c0)=""/228, 0xe4}, 0xb99}, {{&(0x7f00000027c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002840)=""/228, 0xe4}], 0x1}, 0x8}, {{&(0x7f0000002980)=@nfc, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002a00)=""/16, 0x10}], 0x1, &(0x7f0000002a80)=""/201, 0xc9}, 0x8}, {{&(0x7f0000002b80)=@isdn, 0x80, &(0x7f0000002c00), 0x0, &(0x7f0000002c40)=""/6, 0x6}, 0xfff}], 0x4, 0x101, &(0x7f0000002d80)={0x0, 0x3938700}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002dc0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000003040)={'syztnl1\x00', &(0x7f0000002f80)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x7, 0xfffffffd, {{0x1f, 0x4, 0x0, 0x9, 0x7c, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast2, @loopback, {[@generic={0x7, 0xb, "d4c1688d69287135ed"}, @generic={0x86, 0xc, "19c42f5e7087ffc23213"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x13, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @remote, @loopback]}, @end, @rr={0x7, 0x2b, 0xa5, [@dev={0xac, 0x14, 0x14, 0xf}, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x32}, @remote]}]}}}}}) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000003080)={@local, 0x0}, &(0x7f00000030c0)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000003340)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003300)={&(0x7f0000003100)={0x1d4, r6, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x2000000}, 0x40001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000003380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000003580)={{r1}, r11, 0x12, @unused=[0xd62, 0x5, 0x10000, 0x2], @subvolid=0xc7}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000045c0), r1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000004680)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004640)={&(0x7f0000004600)={0x14, r12, 0x100, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008014}, 0x80) [ 125.221970] audit: type=1400 audit(1746036801.046:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:13:21 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)="8107b69111aaa370a005ef23cf822e2ecfde29bbd0e1479543842ba03ce7f958ae8ed50e8884749bc10d3c5d55ef27578f61c5c2f9f9c59b860659f43fdce56b560011f1d5b0002b6d87d8203f63b95c779504cc5fb742e9e5b06eeaa7a3506b793befa846849ae1797e9138005905a1f8f35e4fe7553bafd73153394f05afdc7b3131e1a124c6b380ed8c882adad8b5500148f578f42cc32c73a1af226e368f25") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0x0}}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000200)=0x200, 0x4) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000280)=0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x400000, 0x2c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {r2, r3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) socketpair(0x1d, 0x80000, 0x80000001, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r10, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x4001) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_DEL_PMK(r9, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, r11, 0x701, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x69}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4054) r12 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18}, './file0\x00'}) 18:13:21 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"ea535a0a863585459f7b3be368c3c6e5", 0x0, 0x0, {0x9}, {0x7f, 0x9}, 0x8000, [0x80, 0x9, 0x7, 0x1, 0xd72b, 0x800, 0x751d, 0x2, 0xfffffffffffff800, 0xc4, 0x100000000, 0x0, 0xffffffff, 0x5e, 0x6, 0x7]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"e6508ae00471130e4e2cdc88f5375182", r2, r3, {0x1f, 0x1}, {0x4, 0x3}, 0xfffffffffffffffd, [0x3, 0x9, 0x0, 0x1, 0x2, 0x9, 0xffffffff, 0x4, 0x9, 0x6, 0x80000001, 0x7f, 0x4, 0x9, 0x100000000]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=[{0xb80d, 0x7f, 0x2, 0x4}, {0xff9a, 0xfb, 0x20, 0x80000001}, {0x3, 0x3f, 0x2, 0xff}, {0x1000, 0x1, 0x4, 0x4}]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000540)={{r1, 0x80, 0xb5, 0x5, 0x100, 0x54, 0xfffffffffffffff8, 0x20, 0x10001, 0x8432, 0x800, 0x7f39, 0x7ff, 0x7, 0x5}, 0x8, [0x0]}) r5 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x2000000000, 0x802) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0x2, 0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {r5}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {r4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000780)={{0x1, 0x1, 0x18, r6, {0x3ff, 0xfffffff8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000800)=@gcm_256={{0x182}, "c42b8112eceeb8b2", "ee1b279ddfe5626cce30b76429224b1875974f6a63c477d61e35a58056813e55", "59af12da", "ef8717c5d76d0bde"}, 0x38) sendmsg$DEVLINK_CMD_SB_POOL_SET(r10, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x94, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x7fff}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r11, 0xc0189374, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 18:13:21 executing program 5: msgctl$IPC_RMID(0x0, 0x0) r0 = shmget(0x1, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/104}, 0x70, 0x1, 0x800) r1 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x6000) shmget(0x0, 0x3000, 0xca900aa984c60848, &(0x7f0000ffc000/0x3000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x1, 0x7f, 0x10, 0x80000000}, {0x0, 0x20, 0x36, 0x3}]}) r2 = msgget$private(0x0, 0x5a0) msgsnd(r2, &(0x7f0000000140)={0x1, "77c2ec396271e03c4d8e7ef2a93e2052ced8e5de36cf2bdae921b1108b3180da8c5f4c0fcb1a8f09cba81b726892ab56e7e6d1cf07ea91340b74cb8a98ffd7af91d5bff51e6deb4a69f9ff879b05cfc76b2bcc5f058a1e215a4521f0458ffe06533d16c09900ad07025c87ad578b7b11fda72f318c8b071b84165fcbf3dbdb4327829af45a29a13856a953cb4728d43d41f477525c82bc045e07daefd28d728c935be5c10124aa2872f5b4ed7acbf5328f8e18c1308cacf778a171b0cd8d31f6cc100bcfa71117890760adfaf4108ef2490ff5f9f6f9424a54447c86287214e204e5"}, 0xea, 0x0) msgctl$IPC_RMID(r2, 0x0) msgrcv(r2, &(0x7f0000000240)={0x0, ""/83}, 0x5b, 0x2, 0x1000) r3 = getegid() getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000380)={{0x0, 0x0, r3, 0xffffffffffffffff, r6, 0x148, 0x268e}, 0x0, 0x0, 0x6, 0x6d, 0x1, 0x1, 0x5f, 0x101, 0x2, 0x1000}) r7 = getegid() getgroups(0x4, &(0x7f0000000400)=[r5, r3, 0xffffffffffffffff, 0xee00]) getgroups(0x6, &(0x7f0000000440)=[r5, r5, r6, r4, r3, r4]) getgroups(0x8, &(0x7f0000000480)=[r4, r4, r6, r5, r7, r8, 0x0, r9]) 18:13:21 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffd}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000002c0)=0x9, 0x4) setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000300)="8bf2f5b5211064d9a2b771487b35bb405d9f7a1b25140090e1ed140419494d004a42642c112f535d8cd77194d944d749964afd74d3436b4fa57455b516ec7f987e10831c4335a683b1a03b8908540bf67d872cc1f16bdf7b3d9db95ddad0027f9ae63938eb1340acc6ac0e40d850f904b3a586d95380cb40fa613656f4d9608d3f4bf0bf24bb416671eaadb67314d993952610f8a3d0e93907b044da0e9777ed0063e945b3c952392bfd89a1e0865cfb8e0cc8da0dfc60295dceb5dfc8c97adb069e64e6c36a07aebfb25c370cc8545b", 0xd0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0x3ff}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000480)='scalable\x00', 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000580)) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000780)) socketpair(0x23, 0x6, 0xfffffffa, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, r7, {0xee01}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0xe1, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1, 0x8000, 0x80, 0x0, 0xffffffff}}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000900)=[@sack_perm, @sack_perm, @sack_perm, @mss={0x2, 0x24cf6078}, @mss={0x2, 0x6}, @window={0x3, 0x81}, @mss={0x2, 0x10001}, @timestamp], 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 18:13:21 executing program 7: io_setup(0x7f, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)={&(0x7f00000000c0), 0x8}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x10000}}, './file0\x00'}) clock_gettime(0x0, &(0x7f00000033c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000032c0)=[{{&(0x7f0000000180)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x2, &(0x7f0000000380)=""/72, 0x48}, 0x3}, {{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/65, 0x41}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/177, 0xb1}, {&(0x7f0000000640)=""/194, 0xc2}], 0x4}}, {{&(0x7f0000000780)=@x25, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000800)=""/87, 0x57}, {&(0x7f0000000880)=""/5, 0x5}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/14, 0xe}, {&(0x7f00000009c0)=""/148, 0x94}, {&(0x7f0000000a80)=""/155, 0x9b}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/230, 0xe6}, {&(0x7f0000001c80)=""/206, 0xce}], 0xa, &(0x7f0000001e40)=""/172, 0xac}, 0x3}, {{&(0x7f0000001f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003200)=[{&(0x7f0000001f80)=""/145, 0x91}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/214, 0xd6}, {&(0x7f0000003140)=""/175, 0xaf}], 0x4, &(0x7f0000003240)=""/66, 0x42}, 0x17}], 0x4, 0x22, &(0x7f0000003400)={r2, r3+10000000}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000003440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_pgetevents(r0, 0x101, 0x6, &(0x7f0000003480)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000003580)={&(0x7f0000003540)={[0x100]}, 0x8}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000035c0), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000003600)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000003640)={{0x1, 0x1, 0x18, r5, {0x90000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000003680)={{0x1, 0x1, 0x18, r6, {r6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f00000036c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) io_setup(0x0, &(0x7f0000003700)=0x0) io_cancel(r10, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x8, 0x5, r6, &(0x7f0000003740)="d57ec9fb07e12c3c6d969b31ec29634c0d7ebec1d9d3013b606ff78f894cd4e074991a356dfcfe9fd7249fe76f65870a824f30e61aec6e1107c5b98cb575dabc4ac48021bee1e6cf7de473a34d03b126da40d3dafd5579f5715ed95c943576c7180ad9cf119ce27c7359d4c2712d81a7666d2341146ee66ce24c6a25f4237ccb5a7ba7c31077a99777aa781e6fc5f56d615b0ac82ca5fb4a0ebbc6d03e60c17a55", 0xa1, 0x1000, 0x0, 0x3, r7}, &(0x7f0000003840)) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f0000003880), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000038c0)={{0x1, 0x1, 0x18, r9, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f0000003900)={{0x1, 0x1, 0x18, r12, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000003940)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000005900)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r13, &(0x7f0000005c40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005c00)={&(0x7f00000059c0)={0x21c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) [ 126.566316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.568955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.571413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.580705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.587854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.671040] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.682026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.683646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.687696] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.696424] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.724346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.725715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.737633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.738926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.742568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.743984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.746303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.753420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.754671] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.760143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.761415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.763193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.769804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.774953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.788396] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 126.800068] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 126.801477] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 126.804000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.807775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.817558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.822460] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.825462] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 126.826526] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 126.833671] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 126.842185] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 126.843617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 126.852647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.857455] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 126.875262] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.900600] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.623790] Bluetooth: hci0: command tx timeout [ 128.751206] Bluetooth: hci1: command tx timeout [ 128.815256] Bluetooth: hci3: command tx timeout [ 128.881184] Bluetooth: hci4: command tx timeout [ 128.881255] Bluetooth: hci2: command tx timeout [ 128.943285] Bluetooth: hci7: command tx timeout [ 128.944212] Bluetooth: hci6: command tx timeout [ 128.944819] Bluetooth: hci5: command tx timeout [ 130.672353] Bluetooth: hci0: command tx timeout [ 130.799221] Bluetooth: hci1: command tx timeout [ 130.863226] Bluetooth: hci3: command tx timeout [ 130.927509] Bluetooth: hci4: command tx timeout [ 130.928026] Bluetooth: hci2: command tx timeout [ 130.991250] Bluetooth: hci5: command tx timeout [ 130.991766] Bluetooth: hci6: command tx timeout [ 130.992294] Bluetooth: hci7: command tx timeout [ 132.720275] Bluetooth: hci0: command tx timeout [ 132.847544] Bluetooth: hci1: command tx timeout [ 132.911429] Bluetooth: hci3: command tx timeout [ 132.975722] Bluetooth: hci4: command tx timeout [ 132.977259] Bluetooth: hci2: command tx timeout [ 133.040274] Bluetooth: hci6: command tx timeout [ 133.041775] Bluetooth: hci7: command tx timeout [ 133.043072] Bluetooth: hci5: command tx timeout [ 134.767527] Bluetooth: hci0: command tx timeout [ 134.895562] Bluetooth: hci1: command tx timeout [ 134.959485] Bluetooth: hci3: command tx timeout [ 135.026169] Bluetooth: hci4: command tx timeout [ 135.027190] Bluetooth: hci2: command tx timeout [ 135.087329] Bluetooth: hci6: command tx timeout [ 135.087385] Bluetooth: hci7: command tx timeout [ 135.088313] Bluetooth: hci5: command tx timeout [ 187.302798] syz-executor.2 (280) used greatest stack depth: 24744 bytes left [ 189.585050] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.592499] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.603400] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.613303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.643032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.644639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.646806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.655648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.667911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.675158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.697399] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.713289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.718798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.723404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.726729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.754872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.756728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.763449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.764904] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.766404] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.777291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.780988] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.795157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.798821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.800197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.853725] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.859342] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.862520] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.868695] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 189.877900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.879735] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.886697] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 189.892732] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.899931] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.901170] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.903804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.907797] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.915508] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.951605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.954394] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.727315] Bluetooth: hci0: command tx timeout [ 191.791305] Bluetooth: hci2: command tx timeout [ 191.791574] Bluetooth: hci1: command tx timeout [ 191.919271] Bluetooth: hci4: command tx timeout [ 191.929233] Bluetooth: hci3: command tx timeout [ 191.983279] Bluetooth: hci5: command tx timeout [ 191.988328] Bluetooth: hci6: command tx timeout [ 192.051661] Bluetooth: hci7: command tx timeout [ 193.777343] Bluetooth: hci0: command tx timeout [ 193.839280] Bluetooth: hci1: command tx timeout [ 193.840261] Bluetooth: hci2: command tx timeout [ 193.968138] Bluetooth: hci3: command tx timeout [ 193.968627] Bluetooth: hci4: command tx timeout [ 194.031256] Bluetooth: hci5: command tx timeout [ 194.031757] Bluetooth: hci6: command tx timeout [ 194.097199] Bluetooth: hci7: command tx timeout [ 195.823613] Bluetooth: hci0: command tx timeout [ 195.888233] Bluetooth: hci2: command tx timeout [ 195.888712] Bluetooth: hci1: command tx timeout [ 196.015645] Bluetooth: hci3: command tx timeout [ 196.017087] Bluetooth: hci4: command tx timeout [ 196.079398] Bluetooth: hci5: command tx timeout [ 196.080852] Bluetooth: hci6: command tx timeout [ 196.143694] Bluetooth: hci7: command tx timeout [ 197.872185] Bluetooth: hci0: command tx timeout [ 197.935606] Bluetooth: hci1: command tx timeout [ 197.937269] Bluetooth: hci2: command tx timeout [ 198.064369] Bluetooth: hci4: command tx timeout [ 198.064855] Bluetooth: hci3: command tx timeout [ 198.127208] Bluetooth: hci5: command tx timeout [ 198.127713] Bluetooth: hci6: command tx timeout [ 198.192207] Bluetooth: hci7: command tx timeout [ 251.982005] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.036865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.038949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.048759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.056761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.100067] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.108768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.110067] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.118011] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.121447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.162971] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.168932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.171242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.179173] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.188452] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.253383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.287580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.298527] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.307936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.318355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.392980] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.394370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.400800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.416319] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.422548] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.431830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.435506] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.447380] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.462412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.475251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.591666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.606303] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.632299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.658258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.679440] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.841337] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.881717] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.902469] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.947606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.973415] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.128549] Bluetooth: hci0: command tx timeout [ 254.191211] Bluetooth: hci1: command tx timeout [ 254.258348] Bluetooth: hci2: command tx timeout [ 254.448292] Bluetooth: hci3: command tx timeout [ 254.575237] Bluetooth: hci6: command tx timeout [ 254.576775] Bluetooth: hci4: command tx timeout [ 254.767356] Bluetooth: hci5: command tx timeout [ 255.087495] Bluetooth: hci7: command tx timeout [ 256.175230] Bluetooth: hci0: command tx timeout [ 256.241166] Bluetooth: hci1: command tx timeout [ 256.305027] Bluetooth: hci2: command tx timeout [ 256.495249] Bluetooth: hci3: command tx timeout [ 256.623522] Bluetooth: hci4: command tx timeout [ 256.624061] Bluetooth: hci6: command tx timeout [ 256.815203] Bluetooth: hci5: command tx timeout [ 257.135202] Bluetooth: hci7: command tx timeout [ 258.223317] Bluetooth: hci0: command tx timeout [ 258.288394] Bluetooth: hci1: command tx timeout [ 258.351341] Bluetooth: hci2: command tx timeout [ 258.543921] Bluetooth: hci3: command tx timeout [ 258.671492] Bluetooth: hci6: command tx timeout [ 258.673138] Bluetooth: hci4: command tx timeout [ 258.863432] Bluetooth: hci5: command tx timeout [ 259.183417] Bluetooth: hci7: command tx timeout [ 260.271292] Bluetooth: hci0: command tx timeout [ 260.336244] Bluetooth: hci1: command tx timeout [ 260.399176] Bluetooth: hci2: command tx timeout [ 260.591220] Bluetooth: hci3: command tx timeout [ 260.719212] Bluetooth: hci6: command tx timeout [ 260.720794] Bluetooth: hci4: command tx timeout [ 260.911316] Bluetooth: hci5: command tx timeout [ 261.232364] Bluetooth: hci7: command tx timeout [ 314.760968] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.765154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.767346] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.768632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.770220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.789686] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.789706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.792824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.795951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.804638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.835189] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.839521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.842464] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.850417] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.857033] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.879073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.886288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.890851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.892486] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.896059] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.900493] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.901915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.905508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.910032] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.923458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.972462] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.986419] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 314.988386] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.994764] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.008213] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.025379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.027764] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.036171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.039206] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.056690] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.093736] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.102446] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.115054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.145373] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.150040] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.847268] Bluetooth: hci0: command tx timeout [ 316.847337] Bluetooth: hci1: command tx timeout [ 316.911492] Bluetooth: hci2: command tx timeout [ 316.975481] Bluetooth: hci3: command tx timeout [ 316.975777] Bluetooth: hci4: command tx timeout [ 317.167302] Bluetooth: hci5: command tx timeout [ 317.233310] Bluetooth: hci6: command tx timeout [ 317.295385] Bluetooth: hci7: command tx timeout [ 318.896293] Bluetooth: hci1: command tx timeout [ 318.896419] Bluetooth: hci0: command tx timeout [ 318.959430] Bluetooth: hci2: command tx timeout [ 319.024146] Bluetooth: hci3: command tx timeout [ 319.024783] Bluetooth: hci4: command tx timeout [ 319.215990] Bluetooth: hci5: command tx timeout [ 319.279274] Bluetooth: hci6: command tx timeout [ 319.344167] Bluetooth: hci7: command tx timeout [ 320.943180] Bluetooth: hci0: command tx timeout [ 320.945125] Bluetooth: hci1: command tx timeout [ 321.009293] Bluetooth: hci2: command tx timeout [ 321.071237] Bluetooth: hci4: command tx timeout [ 321.071268] Bluetooth: hci3: command tx timeout [ 321.265177] Bluetooth: hci5: command tx timeout [ 321.330144] Bluetooth: hci6: command tx timeout [ 321.391180] Bluetooth: hci7: command tx timeout [ 322.992199] Bluetooth: hci1: command tx timeout [ 322.992610] Bluetooth: hci0: command tx timeout [ 323.056304] Bluetooth: hci2: command tx timeout [ 323.119508] Bluetooth: hci3: command tx timeout [ 323.119528] Bluetooth: hci4: command tx timeout [ 323.311211] Bluetooth: hci5: command tx timeout [ 323.375168] Bluetooth: hci6: command tx timeout [ 323.439561] Bluetooth: hci7: command tx timeout [ 377.351253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.353314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.359185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.366259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.371404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.478708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.482080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.483791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.487016] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.490207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.576985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.582763] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.585437] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.599723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.609453] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.689745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.692187] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.693815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.695294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.696894] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.710255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.716213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.719445] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.722486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.730302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.736732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.747822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 377.760051] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.763602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.767726] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 377.774375] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 377.780388] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 377.790563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.792883] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 377.800633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.803452] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.811650] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 377.820516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 377.832267] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 377.837509] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 379.440202] Bluetooth: hci0: command tx timeout [ 379.567532] Bluetooth: hci1: command tx timeout [ 379.696431] Bluetooth: hci3: command tx timeout [ 379.823270] Bluetooth: hci4: command tx timeout [ 379.823292] Bluetooth: hci2: command tx timeout [ 379.888262] Bluetooth: hci5: command tx timeout [ 379.951456] Bluetooth: hci6: command tx timeout [ 380.017970] Bluetooth: hci7: command tx timeout [ 381.488630] Bluetooth: hci0: command tx timeout [ 381.616522] Bluetooth: hci1: command tx timeout [ 381.745491] Bluetooth: hci3: command tx timeout [ 381.871320] Bluetooth: hci2: command tx timeout [ 381.872251] Bluetooth: hci4: command tx timeout [ 381.935249] Bluetooth: hci5: command tx timeout [ 381.999708] Bluetooth: hci6: command tx timeout [ 382.063183] Bluetooth: hci7: command tx timeout [ 383.535209] Bluetooth: hci0: command tx timeout [ 383.663560] Bluetooth: hci1: command tx timeout [ 383.791200] Bluetooth: hci3: command tx timeout [ 383.919491] Bluetooth: hci4: command tx timeout [ 383.920362] Bluetooth: hci2: command tx timeout [ 383.983368] Bluetooth: hci5: command tx timeout [ 384.047212] Bluetooth: hci6: command tx timeout [ 384.111537] Bluetooth: hci7: command tx timeout [ 385.584197] Bluetooth: hci0: command tx timeout [ 385.711363] Bluetooth: hci1: command tx timeout [ 385.839173] Bluetooth: hci3: command tx timeout [ 385.967200] Bluetooth: hci4: command tx timeout [ 385.968167] Bluetooth: hci2: command tx timeout [ 386.031397] Bluetooth: hci5: command tx timeout [ 386.095579] Bluetooth: hci6: command tx timeout [ 386.159229] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:18:28 Registers: info registers vcpu 0 RAX=000000000000000b RBX=0000000057aea602 RCX=ffff88800946c6d0 RDX=000000000000000b RSI=0000000039fd8c2e RDI=ffffffff8100148a RBP=0000000000000001 RSP=ffff88806ce08b48 R8 =0000000069516105 R9 =ffff88806c9a6020 R10=0000000000000001 R11=0000000000000000 R12=0000000000da0010 R13=0000000000000000 R14=ffff88806ce08bb0 R15=000000000000000b RIP=ffffffff82599c9c RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f76f4f27540 00000000 00000000 GS =0000 ffff8880e5648000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f76f5401000 CR3=000000002bc6e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000000000766e65 XMM04=6c665f7465735f5854435f43414d4800 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800a6e2640 RBX=ffff88802db87f30 RCX=ffff88806cf089cc RDX=0000000000000002 RSI=ffffffff85c1bac0 RDI=ffff88800a6e2640 RBP=ffffffff85c1bac0 RSP=ffff88806cf089c0 R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b124 R11=000000000002606d R12=ffffffff81350bc2 R13=0000000000000206 R14=ffff88800a6e1bc0 R15=0000000000000002 RIP=ffffffff815182db RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa6d6da9540 00000000 00000000 GS =0000 ffff8880e5748000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff319aae58 CR3=00000000345bc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000