Warning: Permanently added '[localhost]:61898' (ECDSA) to the list of known hosts. 2025/05/23 06:15:09 fuzzer started 2025/05/23 06:15:09 dialing manager at localhost:41873 syzkaller login: [ 94.083355] cgroup: Unknown subsys name 'net' [ 94.234511] cgroup: Unknown subsys name 'cpuset' [ 94.282310] cgroup: Unknown subsys name 'rlimit' 2025/05/23 06:15:24 syscalls: 2214 2025/05/23 06:15:24 code coverage: enabled 2025/05/23 06:15:24 comparison tracing: enabled 2025/05/23 06:15:24 extra coverage: enabled 2025/05/23 06:15:24 setuid sandbox: enabled 2025/05/23 06:15:24 namespace sandbox: enabled 2025/05/23 06:15:24 Android sandbox: enabled 2025/05/23 06:15:24 fault injection: enabled 2025/05/23 06:15:24 leak checking: enabled 2025/05/23 06:15:24 net packet injection: enabled 2025/05/23 06:15:24 net device setup: enabled 2025/05/23 06:15:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/23 06:15:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/23 06:15:24 USB emulation: enabled 2025/05/23 06:15:24 hci packet injection: enabled 2025/05/23 06:15:24 wifi device emulation: enabled 2025/05/23 06:15:24 802.15.4 emulation: enabled 2025/05/23 06:15:24 fetching corpus: 0, signal 0/0 (executing program) 2025/05/23 06:15:27 starting 8 fuzzer processes 06:15:27 executing program 0: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@reiserfs_4={0x10, 0x4, {0x8, 0x1, 0x3, 0xfffffff8}}, 0x24181) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x210000, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=""/130, 0x82}) r1 = dup3(r0, r0, 0x80000) r2 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x7, 0x206302) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x112}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, ':!\x00'}, @NFTA_COMPAT_NAME={0x9, 0x1, '.log\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x9, 0x1, '.log\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x71b}}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f00000003c0)="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") sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x10c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x5}, 0x821) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mknodat$loop(r4, &(0x7f0000000700)='./file0\x00', 0x40, 0x0) read$hiddev(r2, &(0x7f0000000740)=""/46, 0x2e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000780)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x1) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x4040000) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x13, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x881) rt_sigaction(0x2f, &(0x7f0000000a40)={&(0x7f00000009c0)="c40215a627c4229d996654c441cdd9f9660f380690feefffff26366666660f3a633d0a0000000b43992e660f5d55d0dee7f3450f1ece400f517000", 0x50000002, &(0x7f0000000a00)="c423fd0e9b0c0000007764fc0f0d5200dbeec4427d9c612d0ffb26c481c65397f2ffffffc4838dce290066440f7d9e0700000026daa3b6db0000", {[0x2]}}, &(0x7f0000000b00)={&(0x7f0000000a80)="640ff3f9c4610156fac48179700e0c65660f541a8f28089fb910d000003f6646dce00fae6c2eddc402053bb4ab000000006666440f380a72d48fe878c23c380c", 0x0, &(0x7f0000000ac0)="420f0d9512d10000ff82f486974c660f38dddec4833579a4e90000002057660f3806244bc481ff2c39c4e265027f00c4a30d5ec4009bc4818d71e269"}, 0x8, &(0x7f0000000b40)) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000000b80)={@lba=0x800, 0x1, 0x3}) 06:15:27 executing program 1: write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x0, 0x1}, 0x8) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x101000, 0x50) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1040) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000d00)={0x0, @dev, @multicast1}, &(0x7f0000000d40)=0xc) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000d80)=0x281e, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x1f, @bearer=@l2={'ib', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20018090) r1 = syz_mount_image$nfs4(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x4ed, 0x2, &(0x7f0000001140)=[{&(0x7f0000000f40)="30d45b993fe817c8e7e9e0d446038adc73a958f855d77e32d181fa32fa6cfe6b6ee8b7c67884d8928928949ea300bdbbc35776d46b67e023fd3a8138c57fd499a72c07ebfe23c8dd5b744cd2d791484c888a93fa38aae6fd1ba455712a8d9ec1a2d23bc82696299489badb7ab69abf8bd7cebec1f56727f0ec42bc444f63f8d1858c5ccd7e943bd90219b86ea68f29a45d2cf37a436f79b276466475cc3585452bd09573ac9f7445e0ac67de5f9be105e42161b039771672957bddc6aa6af5efd7c3111d7d87f0d9bd67bcdf233255", 0xcf, 0x100000001}, {&(0x7f0000001040)="8f6b3a56dba87126340e18960acbf7d95641c5720700ed5bb9fd6bd20dd8c9a532ae39b29e455884fb019aef1861bf84d34499e868019e8111b828b2bae9abb80e975e4b9b7e67963f0a4cc02114234e11f3042e1b112a160ef364f55afbbf844938e231c8dfa02f4efc3b842b11fdc72b25e7e45c34c9e248e81486740b95b0f9ec5613b0d1799a18a2e963cae6c194656aebfadf8ea497b55e52f5e77a8c4083859b48bb1044fd8a5a417c21e546018ff9e047db1f6efc76fc638f079fa7f250d8abf7ccd6ec6af59445a3769264603043cd120dc9ef809299c60206011222d8c92bf947612b940e565be02c6ebbb44b8888f95f", 0xf5, 0x200}], 0x400, &(0x7f0000001180)={[{'#'}, {'bond_slave_0\x00'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@euid_gt}, {@audit}, {@pcr={'pcr', 0x3d, 0x13}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@appraise_type}, {@permit_directio}]}) pipe2$9p(&(0x7f0000001280)={0xffffffffffffffff}, 0x800) splice(r1, &(0x7f0000001240)=0x10001, r2, 0x0, 0xffffffff, 0x9) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000012c0), 0x20000, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x40000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) write$tcp_mem(r3, &(0x7f0000001540)={0x0, 0x20, 0x1, 0x20, 0x8001}, 0x48) sync_file_range(r1, 0x3, 0x1113520000000000, 0x6) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0x84, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x57}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x80000, {0x967e, 0x1, 0x200, 0x1ff}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200, {0x8, 0x8001, 0x0, 0x7f}}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xd407050c, {0x47f, 0x9, 0x81, 0x524}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0xfff, 0x4, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x8, 0x1d}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0xc0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000001740)) write$rfkill(r3, &(0x7f0000001780)={0x5, 0x7, 0x1, 0x1, 0x1}, 0x8) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001800)={0x1d4, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x108, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x45}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2580}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xd460}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x595}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x32bb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd5f7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd98}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0xb0, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe04}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3f}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4014}, 0x40) 06:15:27 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x200) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x2, 0xa}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x24004810) r1 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc2}, &(0x7f0000000700)={0x0, "8d99f82d761a2d5fd8771c58e38c3a774cd7cd8e6d331117014269738b6de547415e7ac9b516cc3e8c4f5141f0a2d3825ca98daccbea6bbf255894088d2847dd", 0x38}, 0x48, 0xfffffffffffffff9) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="da2309c2dcbce29c46373337ff1a6f87ea819ae13ee3b723da256e26437ff2b91b83a58a386efe5c0c4edd02323d6aba5cb3139455ce8e053db0c77ed9f4537518ff93f57c672f83e1e2fbe4ce842d444368db139c18f3791f03b14288f27245f21e8cf08b7dfca508", 0x69, r1) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000780)={0x3f, 0x10001, 0x1ab7, 0x80000000, 0xe6a}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000007c0)='(-*^:\t@,\x00', &(0x7f0000000800)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000840)={0x7ff, 0x0, 'client1\x00', 0xffffffff80000000, "8a1b781287aa514a", "8b8a005ac03bbd960feae75f6e5c6ce1e746bec7c3193c4845d8a3e15890c430", 0x2, 0xff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffff}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6dd}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ac0)='net/snmp6\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2, {0xffffffff}}, './file0\x00'}) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000b40)={0x48000000000, 0x7ff, 0x2, 0x0, 0x0, 0x8}) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000b80)=""/48, &(0x7f0000000bc0)=0x30) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000c00)={0x20000005}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000c40)=""/1, &(0x7f0000000c80)=0x1) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000cc0)=""/141, &(0x7f0000000d80)=0x8d) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000dc0)={0x76400a23, 0x1ff}) 06:15:27 executing program 3: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x68, 0x29, 0x1, {0x0, [{{0x8, 0x1, 0x7}, 0x6, 0x9, 0x7, './file0'}, {{0x0, 0x4, 0x7}, 0x10000, 0x58, 0x7, './file0'}, {{0x2, 0x2}, 0x3227327e, 0x9, 0x7, './file0'}]}}, 0x68) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$hiddev(&(0x7f0000000200), 0x100, 0x2000) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000240)) socketpair(0x15, 0x1, 0x2, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x6, 0x1, 0x5, 0x9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x8, 0x4, 0x1}}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={@private2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x5, 0x3, 0x100, 0x9, 0x40, r4}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000400)=0x4) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000440)=0x2) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x110, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd70f2296c5a29cd6, 0x2012, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000480)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffc) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3) finit_module(r0, &(0x7f00000004c0)='\x00', 0x7) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000000540)={0x3a, @remote, 0x4e23, 0x1, 'lblcr\x00', 0x1, 0x4, 0x34}, 0x2c) unlinkat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x200) [ 112.030258] audit: type=1400 audit(1747980927.786:7): avc: denied { execmem } for pid=277 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:15:27 executing program 4: ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0xeb, 0x0, 0x2}, &(0x7f0000000040)=[{}, {}]) lseek(0xffffffffffffffff, 0x8, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x100]}, 0x8, 0x80800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x28101, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2d, &(0x7f00000001c0)="fb112b43a92f93646b48ba2309aabd1a8d05cb3c1d729818ced6233a373fc69f6e519d4a687e056ec2d74535a232c0871dad70c0d4441318c3bc42b2d3f9920bed7601e32d9a7bba3cdee4d6e30afe2c53fabdc19687890306d641af3902a0b2f037762004f4ca81dc7ceb858bff2e75da5a63d4da43b1a41a0ce1a3321e8ccaa0c748228c3abef3cc7c53", 0x8b) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x24}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x40841) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000400)) fsetxattr(r1, &(0x7f0000000440)=@random={'user.', '/dev/vcs\x00'}, &(0x7f0000000480)='\'\x00', 0x2, 0x2) sendto(r0, &(0x7f00000004c0)="7920aba6d852a2f3a73266a6880c370a94ecef027fdbcd7daea2012064912a7d06c487aa136ed9b557f97bfdd154c89cc861d688a182f83ec3b6064b4ae47f5ad2c66b18", 0x44, 0x4000, &(0x7f0000000540)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80) r2 = openat(r0, &(0x7f00000005c0)='./file0\x00', 0x24000, 0x40) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000640)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @local}, 0x40, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000600)='ipvlan1\x00', 0x81, 0x400, 0x8}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000008) write$P9_RLINK(r0, &(0x7f00000007c0)={0x7, 0x47, 0x1}, 0x7) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000800)=0x2, 0x4) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000840)='./file0\x00', &(0x7f0000000900)={{r3, r4/1000+10000}, {r5, r6/1000+10000}}) write$P9_RATTACH(r2, &(0x7f0000000940)={0x14, 0x69, 0x2, {0x80, 0x1, 0x2}}, 0x14) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000980)={0x6, 0x4be, 0x7f, 0x27, 0x19, "ab574a88f15a2708e4c54c4f9e53d712680172"}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000009c0)) 06:15:27 executing program 5: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x4, 0x3, 0x5}, 0x6}}, 0x18) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x4, 0x1000, 0x7c, &(0x7f0000000040)="6574b62f83353cab3c67fe9b9a66129ac5d6af664d7b92bac13fbfd2d9eaf31d62f6a8220a90bff45e584635922c903f52fbb06563171d092ca0bc20827274fa7eb8ed54ba66d2799532c9d651b2c93519beb84b16e133f7daeea5037c059c2973751859b9375cbb0ba96e8195911d9f12c54496cb51c154adc320b2", 0xdf, 0x0, &(0x7f00000000c0)="7602f16098fcd9d2d3dbc1a0a46201d01b7fc9b070d153dc58cfee2326886fe55043008f98b40864457fdd0411e820f20717fef8017a374b900220bb5d5fe3efcd936b66c55369ba7e91ace6428cb81a3c1b052a6acc20c5b75b8945e9ea6e946ae335063440fb6a2ac852ead33c77ba81aace7eec81047da00e89c3fd15007baf8b34453c558f7b8a2df965e31cb07395b6e2b33bbbc746b599b480a13b41f1e4772df77ec8748252d3b3127788a2013a1ea1e1960c8113e87d7f6805d0ccf04bcb6dca2b9625d8a5a754a445355b1277fbcf14cea8b723a90a6e11d8ac66"}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) close_range(r0, r0, 0x2) r1 = dup(r0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e20, @remote}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x28, {0x2, 0x4e22, @multicast1}, 'ipvlan1\x00'}) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x2000, 0x0) r5 = memfd_create(&(0x7f0000000840)='\x00', 0x0) r6 = socket$unix(0x1, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000880), 0x6000, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r10 = dup2(r1, r0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000940)=0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r13 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000dc0), 0x80, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000005c0)="83da69919c1650481a0420d5bce20d38aff5db45cff761bbeef6e18dd67085da602aaa66f4d43f1e04c125b1a7f26070500001e725d3fe9547dfb28dc76ac471f6be1ceabf155edc68799e9d1d41a6741bdeddda55cd604c8e00644741b3dc72d877ecb1fe9704e5635f100909ab3fbe01aadd277d78a35337bd7a8b70d2ce145f711d3c22460c2417cdf0d6a3d76006234c7544f5189fd671b666f1d7403b442cb8c10e179f7d6352b5e6eb864d72850626f44e437c3d588cba17dcd7b9cb8a2f18eb5aa4f924c18e1b3bef311503ff7ede11050eaa205235787cc8f389acbfe6fe0954efe18c81bb1e8a85171be28b90973db5f4", 0xf5}, {&(0x7f00000006c0)="8a08316e2f51e74492b1d423c4bcf7ababc144d437699be8fc9ad86192164e9bd81d24db321bc6fd054361420b23601b3a7fa3c7cf62289f177b30d5d0c0f404d6604b6b9b9161f5db3335081c65cf69c00f319c6103e17ef2a08c9bd6401adc7c7602629a33422223a6132316ab5ddbd7bbf9ca2a5d6450088e5aa0edb95f4b9afd1391ab44ec30a378d8d4a546ec26a60a708c02f874cf4f7d13ff", 0x9c}], 0x2, &(0x7f0000000980)=[@rights={{0x28, 0x1, 0x1, [r2, r3, r0, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x24, 0x1, 0x1, [r1, r5, r1, r6, r1]}}, @rights={{0x20, 0x1, 0x1, [r7, r8, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r9, r1, r0, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee01}}}], 0x110, 0x40}}, {{&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b40)="b3f54e742cd8630cc0afbb840bb53c30a460fea8a4db3305589837f7c7696b8d6c68d215310b3099ab326a9a83e9bf302fc80e0dd0d8cd78e05f4cbe137f74c6a8d9856de1a5bb001d662da303f0b60268a5bb98195732f70de4c9e28d0d594bd0ff3a6ee32d34604af52d5885ac1c49ef5764df2b9c83617e5b", 0x7a}, {&(0x7f0000000bc0)="08e69e8a15d88ee9e30c621cc953d4b857f216b675d21f507262a0dc9cb327ffa986a5a52ea00d34ea1e23791da3da4919c74646c2206250742c90d14a51beabd170c11f4e8b28823bc7c16fa309778a1667d850d3f4e28b2d7b3579909864ca3d657f9e9223f9ee0f77d214636d1cb340f50031bdc43f00c1615205787edb0ba571357942f8077b94a1cb767f1833634f503faa88c50e6930afc4572c4a4ce501917066ac7c63770d9c4336f5fa3bd9465c0c1a073e122f0e88a79c0ecd9edca50d664352dfb96aacaf8872aa8a", 0xce}, {&(0x7f0000000cc0)="87032048c63fcd2c3fb814af11728f34932fda3d4a018540fd3c6899e6c2575c5dd75ecfd26a36043ac9ada3d2a2fcd6fe0b022fc8f01ea3189c6c899313181cc40e2560f298e68aef6985148e868910e37054d6ecd7198a05bbf8ec5cac22d95b48bd", 0x63}], 0x3, &(0x7f0000001000)=[@rights={{0x28, 0x1, 0x1, [r12, r13, r1, r0, r0, r14]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x68, 0x4009}}], 0x2, 0x4c0d0) 06:15:27 executing program 6: sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40040) r0 = io_uring_setup(0x7e96, &(0x7f0000000100)={0x0, 0x4bd7, 0x10, 0x3, 0x2d9}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xc0902, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x5, 0x55, 0x28, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x80, 0x8001, 0x3}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x858}, 0x2004c010) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000400)) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xa6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x80}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040011}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0xe2}}, './file0\x00'}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x800, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000780)={0x3, 'veth1_to_bridge\x00', {}, 0x81}) r8 = dup(r7) ioctl$TCGETS(r8, 0x5401, &(0x7f00000007c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'sit0\x00', r2, 0x4, 0x20, 0x5, 0x4, 0x14, @loopback, @empty, 0x7f27, 0x10, 0x80000001, 0xcb3}}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048081}, 0x14) 06:15:27 executing program 7: ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000000c0)={0x2, 0x1, 0x82, &(0x7f0000000000)=""/130}) r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0xff, 0x4002) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2) connect(0xffffffffffffffff, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000200)={{0x9, 0x6}, 0x100, './file0\x00'}) r1 = dup3(r0, r0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000340)={0x1, 0x3, 0xffff, 0x9, 0x42}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000380)={'veth1_to_hsr\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000003c0)={0x3, 0x8000}, 0x4) r2 = signalfd(r0, &(0x7f0000000400)={[0x40]}, 0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r1) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7f, @private1, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x11}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}}, 0x80) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r2) getpeername$packet(r1, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000940)={r1, 0x0, 0xffffffff, 0x4}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000cc0)) [ 113.607730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.614649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.620904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.635903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.647821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.724590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.729746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.734673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.750149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.757891] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.828414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.855513] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.869436] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.890824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.908510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.911664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.921833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.938568] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.941367] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.954212] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.974619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.976060] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.987537] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.989332] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.992478] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.996404] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.001811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.005831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.007412] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.014533] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.023135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.054693] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.058195] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.064061] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.085474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.087487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.097867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.114955] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.143808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.151900] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.746002] Bluetooth: hci0: command tx timeout [ 115.872574] Bluetooth: hci1: command tx timeout [ 116.000499] Bluetooth: hci2: command tx timeout [ 116.065221] Bluetooth: hci5: command tx timeout [ 116.128219] Bluetooth: hci3: command tx timeout [ 116.192521] Bluetooth: hci4: command tx timeout [ 116.256209] Bluetooth: hci6: command tx timeout [ 116.257287] Bluetooth: hci7: command tx timeout [ 117.792199] Bluetooth: hci0: command tx timeout [ 117.920280] Bluetooth: hci1: command tx timeout [ 118.048162] Bluetooth: hci2: command tx timeout [ 118.114116] Bluetooth: hci5: command tx timeout [ 118.176266] Bluetooth: hci3: command tx timeout [ 118.241237] Bluetooth: hci4: command tx timeout [ 118.306224] Bluetooth: hci6: command tx timeout [ 118.306694] Bluetooth: hci7: command tx timeout [ 119.840224] Bluetooth: hci0: command tx timeout [ 119.968838] Bluetooth: hci1: command tx timeout [ 120.097555] Bluetooth: hci2: command tx timeout [ 120.162822] Bluetooth: hci5: command tx timeout [ 120.224620] Bluetooth: hci3: command tx timeout [ 120.288750] Bluetooth: hci4: command tx timeout [ 120.352542] Bluetooth: hci6: command tx timeout [ 120.353778] Bluetooth: hci7: command tx timeout [ 121.888357] Bluetooth: hci0: command tx timeout [ 122.017162] Bluetooth: hci1: command tx timeout [ 122.144162] Bluetooth: hci2: command tx timeout [ 122.210306] Bluetooth: hci5: command tx timeout [ 122.273560] Bluetooth: hci3: command tx timeout [ 122.337127] Bluetooth: hci4: command tx timeout [ 122.400372] Bluetooth: hci6: command tx timeout [ 122.400812] Bluetooth: hci7: command tx timeout [ 176.107759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.109291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.110429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.113021] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.114747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.245807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.250385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.257510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.270970] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.274572] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.393485] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.403640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.439482] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.462928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.491819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.518063] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.522810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.524590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.527702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.531814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.537243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.540829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.561111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.580753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.630297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.838574] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.843362] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.851432] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.851487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.911996] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.913674] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.950744] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.957938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.960988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.964218] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.971410] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.975770] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.999309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.052874] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.109226] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.144523] Bluetooth: hci0: command tx timeout [ 178.336195] Bluetooth: hci1: command tx timeout [ 178.657329] Bluetooth: hci3: command tx timeout [ 178.657374] Bluetooth: hci4: command tx timeout [ 178.850425] Bluetooth: hci2: command tx timeout [ 179.104206] Bluetooth: hci6: command tx timeout [ 179.104301] Bluetooth: hci5: command tx timeout [ 179.232167] Bluetooth: hci7: command tx timeout [ 180.194178] Bluetooth: hci0: command tx timeout [ 180.384196] Bluetooth: hci1: command tx timeout [ 180.704506] Bluetooth: hci3: command tx timeout [ 180.706488] Bluetooth: hci4: command tx timeout [ 180.897186] Bluetooth: hci2: command tx timeout [ 181.153562] Bluetooth: hci6: command tx timeout [ 181.155213] Bluetooth: hci5: command tx timeout [ 181.280162] Bluetooth: hci7: command tx timeout [ 182.241172] Bluetooth: hci0: command tx timeout [ 182.433466] Bluetooth: hci1: command tx timeout [ 182.753237] Bluetooth: hci4: command tx timeout [ 182.753727] Bluetooth: hci3: command tx timeout [ 182.944191] Bluetooth: hci2: command tx timeout [ 183.201574] Bluetooth: hci6: command tx timeout [ 183.202037] Bluetooth: hci5: command tx timeout [ 183.328147] Bluetooth: hci7: command tx timeout [ 184.288166] Bluetooth: hci0: command tx timeout [ 184.481157] Bluetooth: hci1: command tx timeout [ 184.800372] Bluetooth: hci3: command tx timeout [ 184.800869] Bluetooth: hci4: command tx timeout [ 184.992150] Bluetooth: hci2: command tx timeout [ 185.249196] Bluetooth: hci5: command tx timeout [ 185.249709] Bluetooth: hci6: command tx timeout [ 185.376145] Bluetooth: hci7: command tx timeout [ 238.379560] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.386957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.388385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.403819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.422696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.446610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.448011] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.449266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.453780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.455661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.506773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.516406] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.525612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.529950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.536524] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.579558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.588569] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.604443] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.611890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.635767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.708846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.720130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.730333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.737562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.740629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.745244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.750930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.755538] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.798187] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.805392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.912789] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.935881] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.964136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.034714] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.074628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.075860] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.078851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.081976] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.084117] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.089885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.480294] Bluetooth: hci1: command tx timeout [ 240.480925] Bluetooth: hci0: command tx timeout [ 240.609130] Bluetooth: hci2: command tx timeout [ 240.672200] Bluetooth: hci3: command tx timeout [ 240.865183] Bluetooth: hci5: command tx timeout [ 240.992415] Bluetooth: hci4: command tx timeout [ 241.120167] Bluetooth: hci7: command tx timeout [ 241.248153] Bluetooth: hci6: command tx timeout [ 242.528557] Bluetooth: hci0: command tx timeout [ 242.529052] Bluetooth: hci1: command tx timeout [ 242.657501] Bluetooth: hci2: command tx timeout [ 242.721176] Bluetooth: hci3: command tx timeout [ 242.913099] Bluetooth: hci5: command tx timeout [ 243.040193] Bluetooth: hci4: command tx timeout [ 243.168452] Bluetooth: hci7: command tx timeout [ 243.297140] Bluetooth: hci6: command tx timeout [ 244.576799] Bluetooth: hci1: command tx timeout [ 244.577681] Bluetooth: hci0: command tx timeout [ 244.705678] Bluetooth: hci2: command tx timeout [ 244.769732] Bluetooth: hci3: command tx timeout [ 244.961281] Bluetooth: hci5: command tx timeout [ 245.089198] Bluetooth: hci4: command tx timeout [ 245.217483] Bluetooth: hci7: command tx timeout [ 245.346770] Bluetooth: hci6: command tx timeout [ 246.624260] Bluetooth: hci0: command tx timeout [ 246.624975] Bluetooth: hci1: command tx timeout [ 246.752209] Bluetooth: hci2: command tx timeout [ 246.817221] Bluetooth: hci3: command tx timeout [ 247.008183] Bluetooth: hci5: command tx timeout [ 247.137147] Bluetooth: hci4: command tx timeout [ 247.265184] Bluetooth: hci7: command tx timeout [ 247.392392] Bluetooth: hci6: command tx timeout [ 300.787967] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.796737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.801763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.812622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.823318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.870120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.876716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.881439] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.893614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.906478] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.932260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.939710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.942802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.950266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.955345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.970794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.972763] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.978365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.981576] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.990551] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.196915] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.202641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.206589] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.217628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.296793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.711480] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.728895] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.765940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.777533] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.786646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.889125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.905128] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.906526] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.965294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.969382] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.984047] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.008747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.012380] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.027520] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.044985] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.881213] Bluetooth: hci0: command tx timeout [ 303.008220] Bluetooth: hci1: command tx timeout [ 303.008246] Bluetooth: hci2: command tx timeout [ 303.072188] Bluetooth: hci3: command tx timeout [ 303.456470] Bluetooth: hci4: command tx timeout [ 303.904507] Bluetooth: hci6: command tx timeout [ 304.160205] Bluetooth: hci5: command tx timeout [ 304.160265] Bluetooth: hci7: command tx timeout [ 304.928183] Bluetooth: hci0: command tx timeout [ 305.057379] Bluetooth: hci2: command tx timeout [ 305.057844] Bluetooth: hci1: command tx timeout [ 305.122405] Bluetooth: hci3: command tx timeout [ 305.504174] Bluetooth: hci4: command tx timeout [ 305.952133] Bluetooth: hci6: command tx timeout [ 306.209188] Bluetooth: hci7: command tx timeout [ 306.209677] Bluetooth: hci5: command tx timeout [ 306.976262] Bluetooth: hci0: command tx timeout [ 307.104551] Bluetooth: hci1: command tx timeout [ 307.105055] Bluetooth: hci2: command tx timeout [ 307.169145] Bluetooth: hci3: command tx timeout [ 307.553347] Bluetooth: hci4: command tx timeout [ 308.001096] Bluetooth: hci6: command tx timeout [ 308.258157] Bluetooth: hci5: command tx timeout [ 308.258646] Bluetooth: hci7: command tx timeout [ 309.027117] Bluetooth: hci0: command tx timeout [ 309.152201] Bluetooth: hci1: command tx timeout [ 309.152705] Bluetooth: hci2: command tx timeout [ 309.219197] Bluetooth: hci3: command tx timeout [ 309.600174] Bluetooth: hci4: command tx timeout [ 310.048417] Bluetooth: hci6: command tx timeout [ 310.304324] Bluetooth: hci7: command tx timeout [ 310.304818] Bluetooth: hci5: command tx timeout [ 363.123787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.129190] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.136030] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.148477] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.155781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.315369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.326368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.330144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.338823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.342584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.511821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.528664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.532558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.544512] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.550701] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.557578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.565377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.570555] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.573440] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.587569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.593739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.595820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.602550] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.614045] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.625609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.628835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.636750] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.639896] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.655334] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.713894] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.879925] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.896646] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.911707] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.941773] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.985595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.986674] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.037643] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.063832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.078604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.090439] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.216173] Bluetooth: hci0: command tx timeout [ 365.408515] Bluetooth: hci1: command tx timeout [ 365.728201] Bluetooth: hci4: command tx timeout [ 365.729009] Bluetooth: hci2: command tx timeout [ 365.792144] Bluetooth: hci5: command tx timeout [ 365.856459] Bluetooth: hci3: command tx timeout [ 366.112207] Bluetooth: hci7: command tx timeout [ 366.176421] Bluetooth: hci6: command tx timeout [ 367.264170] Bluetooth: hci0: command tx timeout [ 367.456129] Bluetooth: hci1: command tx timeout [ 367.776235] Bluetooth: hci4: command tx timeout [ 367.776749] Bluetooth: hci2: command tx timeout [ 367.842102] Bluetooth: hci5: command tx timeout [ 367.904740] Bluetooth: hci3: command tx timeout [ 368.160290] Bluetooth: hci7: command tx timeout [ 368.225152] Bluetooth: hci6: command tx timeout [ 369.312414] Bluetooth: hci0: command tx timeout [ 369.504333] Bluetooth: hci1: command tx timeout [ 369.824174] Bluetooth: hci4: command tx timeout [ 369.824694] Bluetooth: hci2: command tx timeout [ 369.888213] Bluetooth: hci5: command tx timeout [ 369.953102] Bluetooth: hci3: command tx timeout [ 370.208188] Bluetooth: hci7: command tx timeout [ 370.272654] Bluetooth: hci6: command tx timeout [ 371.360167] Bluetooth: hci0: command tx timeout [ 371.552415] Bluetooth: hci1: command tx timeout [ 371.873206] Bluetooth: hci2: command tx timeout [ 371.873705] Bluetooth: hci4: command tx timeout [ 371.936167] Bluetooth: hci5: command tx timeout [ 372.000137] Bluetooth: hci3: command tx timeout [ 372.256192] Bluetooth: hci7: command tx timeout [ 372.320160] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 06:20:37 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff8880e5634000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806ce31850 RBP=ffffffff85c1d1c0 RSP=ffff888036cafd20 R8 =0000000000000000 R9 =0000000000000000 R10=00007f0f80d0f000 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff888016ffd200 RIP=ffffffff815ab84d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5634000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0f80d0f8d0 CR3=0000000036a86000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f0f80cf147000007f0f80cf0f20 XMM02=00007f0f80d299e800007f0f80cf1470 XMM03=00007f0f80cf0f2000007f0f80cf0a20 XMM04=00000000ff0000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000016 RCX=ffffffff818c68d0 RDX=ffff888037093700 RSI=ffffffff818c68df RDI=0000000000000001 RBP=ffff88801624fc40 RSP=ffff88801624fab8 R8 =0000000000000001 R9 =fffff9400002cdb6 R10=0000000000000016 R11=0000000000000001 R12=0000000000000016 R13=0000000000000018 R14=ffff88800bd9d080 R15=dffffc0000000000 RIP=ffffffff81738198 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5734000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4adfe7e770 CR3=0000000029a1c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000