Warning: Permanently added '[localhost]:8953' (ECDSA) to the list of known hosts. 2025/05/29 03:39:13 fuzzer started 2025/05/29 03:39:14 dialing manager at localhost:36815 syzkaller login: [ 92.891579] cgroup: Unknown subsys name 'net' [ 93.058731] cgroup: Unknown subsys name 'cpuset' [ 93.108355] cgroup: Unknown subsys name 'rlimit' 2025/05/29 03:39:31 syscalls: 2214 2025/05/29 03:39:31 code coverage: enabled 2025/05/29 03:39:31 comparison tracing: enabled 2025/05/29 03:39:31 extra coverage: enabled 2025/05/29 03:39:31 setuid sandbox: enabled 2025/05/29 03:39:31 namespace sandbox: enabled 2025/05/29 03:39:31 Android sandbox: enabled 2025/05/29 03:39:31 fault injection: enabled 2025/05/29 03:39:31 leak checking: enabled 2025/05/29 03:39:31 net packet injection: enabled 2025/05/29 03:39:31 net device setup: enabled 2025/05/29 03:39:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/29 03:39:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/29 03:39:31 USB emulation: enabled 2025/05/29 03:39:31 hci packet injection: enabled 2025/05/29 03:39:31 wifi device emulation: enabled 2025/05/29 03:39:31 802.15.4 emulation: enabled 2025/05/29 03:39:31 fetching corpus: 0, signal 0/0 (executing program) 2025/05/29 03:39:33 starting 8 fuzzer processes 03:39:33 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x304, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6040}, 0x40) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) r1 = signalfd(r0, &(0x7f0000000240)={[0x3]}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c040}, 0x4800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x724, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}}, 0x8004080) mq_open(&(0x7f00000004c0)='\x8d\xfd\xe1#^;]\\\x00', 0x800, 0x4, &(0x7f0000000500)={0x32, 0x8, 0x8, 0x1e3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000540)={0x6baa, 0x4, 0x0, 'queue0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/rfcomm\x00') sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x41) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r4, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x91}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa8a2d6ef13358510}, 0x60c4084) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000880)="51f52025e1a32f36a19064b3e724e60cefa26a0e8b809a91815eeaf296665099563a1d6a", 0x24) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000900)=""/64) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000940)={0x1, 0x6}, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0xa}}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4051) r6 = syz_open_pts(r3, 0x460003) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000ac0)) 03:39:33 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x1a}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x3047c3bda449c2be, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0xfffffffe}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff92}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_MODES={0x124, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x54, 0x5, "30f26c4a9d7b0909d0f1d86c5c0415ef284bc62de2019a52953099fe257d3832acca31bd64eb447728e8da32d708e9e927d3907ad161ebf0510e53cd3d86249a2983e9df02ccb2c2902543092b381e67"}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "6c8e704219a7104b135d38caec6f4d6dfe35c69ec822bf64518a225506928fd529bcdc0d5d8ead2c15014810c3f43caeee1868798c18a9146712710ad6dcdd207d6f09634fc91ed53c366ef5edd8753cf64e8b79c730c65cddfc2749009950f702917a2b8bee176260b356a3ae494ff7a7131feac33be7a76a76f0f4feadc8dbe4efe2143c8efd0016235d01f47aabd16a1fd9127752da335e11aea6d4e9b61a6b9d1e790d51371cfd3e84cc6c6bb468c1f7fafcc7307f37d1c203a44d82bffd"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x810}, 0x40050) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/bus/usb', 0x8000, 0x22) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8801) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000840)) r5 = dup2(r3, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r5) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x48}}, 0x24040000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc5f}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) 03:39:33 executing program 1: ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'hsr0\x00', {}, 0x1252}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x3, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x401}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xea8a}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8fa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x4040051) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x20}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @remote}, &(0x7f0000000500)=0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000540)={'gretap0\x00', {0x2, 0x0, @multicast2}}) finit_module(r3, &(0x7f0000000580)='*\'\x7f{\x00', 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x101, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="60d96fb84c1a"}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000900), &(0x7f0000000940)=0x30) setresgid(0xee01, 0x0, 0xee01) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000980)='*\'\x7f{\x00', &(0x7f00000009c0)='\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x7c, r5, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cb3e18d302b8370d4a9c1bbd93b3d09b629fef85ac4e5dba"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7e0047f0723d4db39443e62306184904c325942161e86e46"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6cab2c0afe7bc06f7a987b55c1975a02f962d23dc0ac6fbb"}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x20044884}, 0x20008000) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffc0}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 03:39:33 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) write$P9_RWALK(r0, &(0x7f0000000100)={0x57, 0x6f, 0x2, {0x6, [{0x10, 0x2, 0x3}, {0x0, 0x3, 0x2}, {0x1, 0x0, 0x2}, {0x8, 0x1}, {0x40, 0x1, 0x7}, {0x20, 0x1, 0x5}]}}, 0x57) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000180)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x10, 0x3, 0x1}}, 0x14) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000240)) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000280)={0x5, 0x0, 0x41, 0x6}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000002c0)) pause() ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000340)={0x0, 0x3f}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000001380)={0x2, 0x80, 0x3, 0xfa, 0x4, 0x1, 0x0, 0x8, 0x40000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000001340), 0x2}, 0x1804, 0x4, 0x9, 0x8, 0xff, 0x80000000, 0x7, 0x0, 0x7, 0x0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000001400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000001440)={0x6, 0x9, 0x8, 0x3f, 0x1}) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000001ec0)) write$9p(r3, &(0x7f00000022c0)="7c9dd439945d51f3bf9b5227f1b527cf08fe6ba9329160112c9b6a79bdd280422e76e1de875bc399bc085f3181b25a313c7225e3c0d7f7027b983aa21b6713570885907b7aa2d49ce8b6421434b205599838e08a3002669d93e884fe38c26785bff5aefafb", 0x65) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000002340)=""/144) [ 112.014877] audit: type=1400 audit(1748489973.444:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:39:33 executing program 4: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x81, 0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40045}, 0x4004000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x90) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000380)={{0x3b, @multicast1, 0x4e22, 0x3, 'ovf\x00', 0x18, 0xffffffff, 0x47}, {@rand_addr=0x64010101, 0x4e22, 0x10000, 0x9, 0x605}}, 0x44) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000400)) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000017c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001780)={&(0x7f0000000480)={0x12c4, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x30}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf0b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3e1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbeb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x491bd6a6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x1238, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x97, 0x3, "d3115fbc34ed9e634d8c9d3d286886b03047e4a98ee7118961037158d6654d02dc43cfdde8862bf181bb9a06bbe024384317a82073b8031ba8779cc0bdbe010d81725f5685050994a634b81ad739b26d740b481c6dac5f68be14cc12a6f76d98fa27b9b68e98b039f7ad44f4a479e3fee171aa4968ddfa68111f799837a8a6dffae33f01cb90fd20cae8749265c2b57df03edf"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "dee3c2f2a7badc25145a9528d17e369d623349873713fc47bbb7eb9f5a2151"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x68, 0x3, "7c15cd83c6708e71409f48971e2db40d3e34bbf518ce0012f4dcc00189d1e014709d57ed1623e5ab4aa06f59fd472d524958d34ea20d978f90a48a1dda0dc4bed4d466e20777f08a418343173e6d1ea585d95f0700f7a6a4c36eaf6f1075911e824eec7e"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6a785dc8e52fd98b907d97123f3dddb4de0dd257336aaf2e9b316b69e57a1afb1e2abf"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "c160a0aa74e8fe63b07455fd17412a343ae4b4d167fd561a"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "603830d4a9269aa44f37ea5b89ff6026a11b1ae519a167c40b2b47cc6e144784e4bcf2"}}]}]}, 0x12c4}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f0000001840)={0xf0, 0x1, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xad3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_PAYLOAD={0x96, 0xa, "94cb3ee50fda0fc3a79171ea9bceac0f267472f1d4578893202b70edfd2662aa6ee99430503f4aeec315505ed6950262c15d53ce194d08afeec0cd1e1731a7d8dccd9a09b1af99e799a82ba2bf1b7527cf543472a522ed19ec524fefe7cbe470f1f96ab29fb29f832c26c7bd02911f2b7e222ff34149f42d3656ddceda3ee778479e5fb6644fb03d30271c780daec5f79aae"}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8001}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3a}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0xf0}}, 0x20000800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_online_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0xb4}}, 0x50) r3 = open_tree(r0, &(0x7f0000001b40)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000001c00)={0x0, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @multicast1}, 0x2c4, 0x0, 0x0, 0x0, 0x800, &(0x7f0000001bc0)='ip6tnl0\x00', 0xa8, 0x9, 0x800}) setsockopt$inet_buf(r3, 0x0, 0xa, &(0x7f0000001c80)="ccf7364282cf2208c55ce29d2e42809d107e284a", 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000001cc0), 0xffffffffffffffff) r5 = accept(r0, 0x0, &(0x7f0000001d00)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfc000, 0x4f}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x23e}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000001e80), &(0x7f0000001ec0)=0x10) 03:39:33 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x6, 0x4001) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000002f80)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000002f00)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000002800)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/230, 0xe6}, {&(0x7f0000001380)=""/248, 0xf8}, {&(0x7f0000001480)=""/146, 0x92}, {&(0x7f0000001540)=""/190, 0xbe}, {&(0x7f0000001600)=""/8, 0x8}, {&(0x7f0000001640)=""/179, 0xb3}, {&(0x7f0000001700)=""/36, 0x24}, {&(0x7f0000001740)=""/187, 0xbb}, {&(0x7f0000001800)=""/4096, 0x1000}], 0xa, &(0x7f00000028c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}}, {{&(0x7f0000002900), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002980)=""/197, 0xc5}, {&(0x7f0000002a80)=""/21, 0x15}, {&(0x7f0000002ac0)=""/120, 0x78}, {&(0x7f0000002b40)=""/195, 0xc3}, {&(0x7f0000002c40)=""/79, 0x4f}, {&(0x7f0000002cc0)=""/136, 0x88}, {&(0x7f0000002d80)=""/233, 0xe9}], 0x7}}], 0x2, 0x40012041, &(0x7f0000002fc0)={r2, r3+10000000}) getgroups(0x5, &(0x7f0000003000)=[r4, r4, r4, r4, r4]) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000003040)={0x1, 'veth0_to_team\x00', {}, 0x8}) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000003080)={{0x1, 0x1, 0x18, r5, {0xffff5c10}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003100), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x34, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffec57}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044841) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000003280)={'gre0\x00', &(0x7f0000003200)={'gretap0\x00', 0x0, 0x10, 0x20, 0x40, 0x1ff, {{0xd, 0x4, 0x3, 0x16, 0x34, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @remote, {[@timestamp={0x44, 0xc, 0x60, 0x0, 0x2, [0xa0a, 0x776]}, @generic={0x4, 0x12, "49353de7c87498e0a0cff6c18db654a2"}]}}}}}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000032c0), 0x100, 0x0) clock_gettime(0x0, &(0x7f0000003380)={0x0, 0x0}) epoll_pwait2(r8, &(0x7f0000003300)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f00000033c0)={r9, r10+60000000}, &(0x7f0000003400)={[0x7c8]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000003440)='./file0/file0\x00', 0x2, 0x199) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000003480)=""/76, &(0x7f0000003500)=0x4c) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 03:39:33 executing program 6: semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x80, 0x7f, 0x4}) semctl$IPC_RMID(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x400, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffffff89]}, 0x8) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000480)={0x2, 0x0, 0x4, 0x1e, 0x1fd, &(0x7f0000000080)="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"}) ptrace(0xffffffffffffffff, 0xffffffffffffffff) read(r0, &(0x7f00000004c0)=""/147, 0x93) ptrace$setopts(0x4200, 0x0, 0x5, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000580)={{0x40, 0x3f}, 0x1, 0x1, 0x9, {0x9, 0x7}, 0x7, 0x7}) fcntl$getownex(r0, 0x10, &(0x7f0000000600)={0x0, 0x0}) getpgid(r1) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000640)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000680)={0x1, 0x400, 0x0, "cf"}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@local, @in=@initdev}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f00000007c0)=0xe8) ptrace$setregset(0x4205, r1, 0x0, &(0x7f0000000880)={&(0x7f0000000800)="66924c7dcc2b846601ae42fdb622b97571320442bd12b87d159bde9ffb20f5103670c89a715c13742d3594003c2bacafb40dbcd30b48178a8910d293cd6d0ef8614648a7ec3019a6ea0096c5d57aeffd8c03f63553306eafe01f6a55130ce8542ba9eadae5cc", 0x66}) recvfrom(0xffffffffffffffff, &(0x7f00000008c0)=""/140, 0x8c, 0x40000002, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000019c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/36, 0x24, 0x1, &(0x7f00000009c0)=""/4096, 0x1000}, &(0x7f0000001a00)=0x40) prctl$PR_GET_THP_DISABLE(0x2a) 03:39:33 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4c00, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5c00) chown(&(0x7f00000000c0)='./file0\x00', r2, r3) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x400040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d4, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x44}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x22}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}, @NL80211_ATTR_IE={0x18a, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x5, 0x5, @device_a, 0x7d2, @device_a, 0x101, 0x6, @device_b, 0x4611}}, @erp={0x2a, 0x1}, @ibss={0x6, 0x2, 0x3}, @challenge={0x10, 0x1, 0x33}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x81, 0x21}}, @fast_bss_trans={0x37, 0xde, {0x80, 0x5, "82b28bfacede63b77e8d380c1757cdb1", "54626dedb10f0359aa23bab027c418890e7342433a3edd06679e3e3c529d8d62", "0d8f7576602cc316cf3492f78c4613cd5af54494f63591531221826110cbc99d", [{0x3, 0x22, "e02cda812c13090885388aa12f2380f2fcec31cf144d266f37475cd3a2ee745860bd"}, {0x4, 0x26, "387c0d6c31f6835acf3a383124cad33c8354555aba5d3b92526143048a47ddebbd0fd20bd98b"}, {0x2, 0xf, "fb56ee43379dab24fb366a3cf5e79f"}, {0x2, 0x16, "9bfd0698a1cb08ea14e9c51f8223cdffa52201b74360"}, {0x2, 0x15, "b27662476642d96fb007b20e22d366ce96c503c6ce"}]}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x40}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x1f, @not_ext={{}, 0x80, 0x5, @device_b, 0x9, "", 0x10000, 0x81, @device_b, 0x5}}, @tim={0x5, 0x38, {0x20, 0x4f, 0x7, "880e374d3223073cd4f8bc37b37ee72e4069f7f3aeb6773cd35a0225f19dceae5c323428f6a3b02cb8fb2dda3ce70e174434f13877"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000540)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x101002, 0x80, 0x2}, 0x18) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000600)) socketpair(0x25, 0x81004, 0x6ac, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, r7, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x42}, 0x24000014) mknod$loop(&(0x7f0000000880)='./file0\x00', 0x8000, 0x1) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000900)=0x6, 0x1) symlink(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='\x00') write$P9_RLOPEN(r8, &(0x7f00000009c0)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x3}}}, 0x18) [ 113.332206] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.334159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.335766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.341367] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.343764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.377700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.380204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.381913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.387459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.389405] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.533354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.540870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.542585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.549185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.558485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.612549] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.617638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.626914] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.631430] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.640459] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.652375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.663258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.666222] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.689954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.699283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.786447] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.787483] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.797186] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.803237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.803371] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.808009] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.810910] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.823324] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.826896] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.830876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.832400] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.855612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.857198] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.861455] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.880469] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.413634] Bluetooth: hci0: command tx timeout [ 115.413640] Bluetooth: hci1: command tx timeout [ 115.669472] Bluetooth: hci2: command tx timeout [ 115.798090] Bluetooth: hci4: command tx timeout [ 115.798149] Bluetooth: hci3: command tx timeout [ 115.861352] Bluetooth: hci7: command tx timeout [ 115.926298] Bluetooth: hci5: command tx timeout [ 115.989249] Bluetooth: hci6: command tx timeout [ 117.461249] Bluetooth: hci0: command tx timeout [ 117.464077] Bluetooth: hci1: command tx timeout [ 117.717125] Bluetooth: hci2: command tx timeout [ 117.845127] Bluetooth: hci3: command tx timeout [ 117.845208] Bluetooth: hci4: command tx timeout [ 117.910226] Bluetooth: hci7: command tx timeout [ 117.974115] Bluetooth: hci5: command tx timeout [ 118.037387] Bluetooth: hci6: command tx timeout [ 119.510140] Bluetooth: hci1: command tx timeout [ 119.511271] Bluetooth: hci0: command tx timeout [ 119.766832] Bluetooth: hci2: command tx timeout [ 119.893203] Bluetooth: hci4: command tx timeout [ 119.894332] Bluetooth: hci3: command tx timeout [ 119.957674] Bluetooth: hci7: command tx timeout [ 120.021607] Bluetooth: hci5: command tx timeout [ 120.085552] Bluetooth: hci6: command tx timeout [ 121.557584] Bluetooth: hci1: command tx timeout [ 121.558707] Bluetooth: hci0: command tx timeout [ 121.813502] Bluetooth: hci2: command tx timeout [ 121.941870] Bluetooth: hci4: command tx timeout [ 121.942098] Bluetooth: hci3: command tx timeout [ 122.007049] Bluetooth: hci7: command tx timeout [ 122.069271] Bluetooth: hci5: command tx timeout [ 122.133147] Bluetooth: hci6: command tx timeout [ 173.780714] syz-executor.4 (288) used greatest stack depth: 24512 bytes left [ 176.229553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.232432] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.234816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.241381] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.246006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.298896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.302325] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.303667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.310306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.312717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.361269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.363504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.365334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.372803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.395781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.424966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.433554] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.435914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.441806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.450448] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.451418] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.452859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.456972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.459308] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.460773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.463339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.464691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.465902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.467309] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.477326] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.490345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.495534] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.502918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.507279] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.542399] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.582268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.621673] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.679973] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.767160] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.783762] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.325184] Bluetooth: hci0: command tx timeout [ 178.389146] Bluetooth: hci1: command tx timeout [ 178.517287] Bluetooth: hci2: command tx timeout [ 178.581379] Bluetooth: hci4: command tx timeout [ 178.581963] Bluetooth: hci6: command tx timeout [ 178.582580] Bluetooth: hci3: command tx timeout [ 178.646084] Bluetooth: hci5: command tx timeout [ 178.901186] Bluetooth: hci7: command tx timeout [ 180.373413] Bluetooth: hci0: command tx timeout [ 180.437109] Bluetooth: hci1: command tx timeout [ 180.565901] Bluetooth: hci2: command tx timeout [ 180.630349] Bluetooth: hci3: command tx timeout [ 180.630787] Bluetooth: hci4: command tx timeout [ 180.631980] Bluetooth: hci6: command tx timeout [ 180.693135] Bluetooth: hci5: command tx timeout [ 180.949337] Bluetooth: hci7: command tx timeout [ 182.421119] Bluetooth: hci0: command tx timeout [ 182.486090] Bluetooth: hci1: command tx timeout [ 182.614073] Bluetooth: hci2: command tx timeout [ 182.678143] Bluetooth: hci6: command tx timeout [ 182.678578] Bluetooth: hci4: command tx timeout [ 182.678991] Bluetooth: hci3: command tx timeout [ 182.741091] Bluetooth: hci5: command tx timeout [ 182.998260] Bluetooth: hci7: command tx timeout [ 184.469404] Bluetooth: hci0: command tx timeout [ 184.533088] Bluetooth: hci1: command tx timeout [ 184.661110] Bluetooth: hci2: command tx timeout [ 184.725239] Bluetooth: hci3: command tx timeout [ 184.725681] Bluetooth: hci6: command tx timeout [ 184.726383] Bluetooth: hci4: command tx timeout [ 184.789086] Bluetooth: hci5: command tx timeout [ 185.046236] Bluetooth: hci7: command tx timeout [ 238.474165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.477771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.481324] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.483699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.484941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.487616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.490854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.498579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.500714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.507664] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.565751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.568967] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.571668] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.589923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.601771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.711690] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.719573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.738782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.754374] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.766698] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.872265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.880566] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.898912] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.914946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.918550] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.923717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.930191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.936635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.970684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.978301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.005198] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.011478] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.015409] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.017486] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.030382] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.033865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.036768] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.039098] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.126513] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.183702] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.534304] Bluetooth: hci1: command tx timeout [ 240.598222] Bluetooth: hci0: command tx timeout [ 240.725095] Bluetooth: hci3: command tx timeout [ 240.853365] Bluetooth: hci2: command tx timeout [ 241.046064] Bluetooth: hci5: command tx timeout [ 241.109161] Bluetooth: hci7: command tx timeout [ 241.109173] Bluetooth: hci4: command tx timeout [ 241.301977] Bluetooth: hci6: command tx timeout [ 242.583157] Bluetooth: hci1: command tx timeout [ 242.645326] Bluetooth: hci0: command tx timeout [ 242.773362] Bluetooth: hci3: command tx timeout [ 242.901107] Bluetooth: hci2: command tx timeout [ 243.095140] Bluetooth: hci5: command tx timeout [ 243.157761] Bluetooth: hci7: command tx timeout [ 243.157846] Bluetooth: hci4: command tx timeout [ 243.349139] Bluetooth: hci6: command tx timeout [ 244.629546] Bluetooth: hci1: command tx timeout [ 244.693271] Bluetooth: hci0: command tx timeout [ 244.821103] Bluetooth: hci3: command tx timeout [ 244.950420] Bluetooth: hci2: command tx timeout [ 245.141786] Bluetooth: hci5: command tx timeout [ 245.206325] Bluetooth: hci4: command tx timeout [ 245.206347] Bluetooth: hci7: command tx timeout [ 245.397114] Bluetooth: hci6: command tx timeout [ 246.677194] Bluetooth: hci1: command tx timeout [ 246.741096] Bluetooth: hci0: command tx timeout [ 246.871279] Bluetooth: hci3: command tx timeout [ 246.998269] Bluetooth: hci2: command tx timeout [ 247.189289] Bluetooth: hci5: command tx timeout [ 247.253383] Bluetooth: hci7: command tx timeout [ 247.253409] Bluetooth: hci4: command tx timeout [ 247.445094] Bluetooth: hci6: command tx timeout [ 300.860567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.867306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.867643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.871386] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.872790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.876400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.882098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.888008] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.903528] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.919713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.972997] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.987510] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.990293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.992455] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.992659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.000200] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.002171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.004421] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.033757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.043921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.135322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.142877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.162583] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.185158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.207418] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.211840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.227607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.256260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.272368] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.286825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.290730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.314481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.320610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.328527] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.333184] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.364865] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.395543] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.402890] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.424980] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.444226] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.933579] Bluetooth: hci0: command tx timeout [ 302.997643] Bluetooth: hci1: command tx timeout [ 303.061633] Bluetooth: hci3: command tx timeout [ 303.127247] Bluetooth: hci2: command tx timeout [ 303.317819] Bluetooth: hci4: command tx timeout [ 303.445365] Bluetooth: hci6: command tx timeout [ 303.446423] Bluetooth: hci5: command tx timeout [ 303.574245] Bluetooth: hci7: command tx timeout [ 304.981318] Bluetooth: hci0: command tx timeout [ 305.045291] Bluetooth: hci1: command tx timeout [ 305.109340] Bluetooth: hci3: command tx timeout [ 305.173249] Bluetooth: hci2: command tx timeout [ 305.365310] Bluetooth: hci4: command tx timeout [ 305.493543] Bluetooth: hci6: command tx timeout [ 305.494759] Bluetooth: hci5: command tx timeout [ 305.621626] Bluetooth: hci7: command tx timeout [ 307.029308] Bluetooth: hci0: command tx timeout [ 307.093766] Bluetooth: hci1: command tx timeout [ 307.157357] Bluetooth: hci3: command tx timeout [ 307.222908] Bluetooth: hci2: command tx timeout [ 307.413146] Bluetooth: hci4: command tx timeout [ 307.541210] Bluetooth: hci5: command tx timeout [ 307.542155] Bluetooth: hci6: command tx timeout [ 307.669238] Bluetooth: hci7: command tx timeout [ 309.077657] Bluetooth: hci0: command tx timeout [ 309.141174] Bluetooth: hci1: command tx timeout [ 309.207055] Bluetooth: hci3: command tx timeout [ 309.269120] Bluetooth: hci2: command tx timeout [ 309.461110] Bluetooth: hci4: command tx timeout [ 309.589204] Bluetooth: hci5: command tx timeout [ 309.589688] Bluetooth: hci6: command tx timeout [ 309.717414] Bluetooth: hci7: command tx timeout [ 363.176696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.181809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.185137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.193620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.198442] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.431818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.440584] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.449231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.455267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.467837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.471599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.471617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.492861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.499633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.514731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.519583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.525538] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.535665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.537886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.545873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.677904] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.680595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.689853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.700470] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.707536] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.712981] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.721094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.746495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.759096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.768271] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.771265] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.776671] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.782360] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.783681] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.785658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.813098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.815121] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.840807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.869632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.874524] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.269929] Bluetooth: hci0: command tx timeout [ 365.589549] Bluetooth: hci3: command tx timeout [ 365.589629] Bluetooth: hci1: command tx timeout [ 365.653105] Bluetooth: hci2: command tx timeout [ 365.909334] Bluetooth: hci5: command tx timeout [ 365.909631] Bluetooth: hci6: command tx timeout [ 365.910117] Bluetooth: hci4: command tx timeout [ 365.974382] Bluetooth: hci7: command tx timeout [ 367.317405] Bluetooth: hci0: command tx timeout [ 367.638066] Bluetooth: hci1: command tx timeout [ 367.638560] Bluetooth: hci3: command tx timeout [ 367.702100] Bluetooth: hci2: command tx timeout [ 367.957177] Bluetooth: hci4: command tx timeout [ 367.957207] Bluetooth: hci6: command tx timeout [ 367.957705] Bluetooth: hci5: command tx timeout [ 368.021113] Bluetooth: hci7: command tx timeout [ 369.365332] Bluetooth: hci0: command tx timeout [ 369.685167] Bluetooth: hci1: command tx timeout [ 369.685706] Bluetooth: hci3: command tx timeout [ 369.750062] Bluetooth: hci2: command tx timeout [ 370.005104] Bluetooth: hci5: command tx timeout [ 370.006360] Bluetooth: hci6: command tx timeout [ 370.006850] Bluetooth: hci4: command tx timeout [ 370.069114] Bluetooth: hci7: command tx timeout [ 371.413118] Bluetooth: hci0: command tx timeout [ 371.733169] Bluetooth: hci3: command tx timeout [ 371.733699] Bluetooth: hci1: command tx timeout [ 371.797347] Bluetooth: hci2: command tx timeout [ 372.053310] Bluetooth: hci4: command tx timeout [ 372.053831] Bluetooth: hci6: command tx timeout [ 372.055245] Bluetooth: hci5: command tx timeout [ 372.117297] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:44:42 Registers: info registers vcpu 0 RAX=000000000000009b RBX=ffff88802fd69b80 RCX=0000000000000000 RDX=000000000000009b RSI=0000000000000000 RDI=ffffffff85cf76a0 RBP=ffff88802fd6a5d8 RSP=ffff888033a675b0 R8 =0000000000000000 R9 =000000000000009b R10=0000000000000001 R11=0000000000000000 R12=ffff88802fd6a600 R13=0000000000000000 R14=0000000000000001 R15=0000000000040000 RIP=ffffffff81518e48 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc9481ed008 CR3=00000000372b4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=00007ffed1d61de8 RCX=ffffffff86799f96 RDX=ffff888025e58000 RSI=0000000000000001 RDI=ffff88806cf08a88 RBP=ffff888025e50000 RSP=ffff88806cf08a08 R8 =ffffffff86799f9a R9 =0000000000000000 R10=000000000003b6ad R11=0000000000000003 R12=0000000000000001 R13=ffff88806cf08ac0 R14=ffff888025e57f58 R15=ffff88806cf08a78 RIP=ffffffff81353f3e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcaf7b70000 CR3=00000000139c8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000