[ 92.482289] audit: type=1400 audit(1748647605.975:6): avc: denied { checkpoint_restore } for pid=221 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:14669' (ECDSA) to the list of known hosts. 2025/05/30 23:26:53 fuzzer started 2025/05/30 23:26:53 dialing manager at localhost:34361 syzkaller login: [ 100.501291] cgroup: Unknown subsys name 'net' [ 100.614897] cgroup: Unknown subsys name 'cpuset' [ 100.652713] cgroup: Unknown subsys name 'rlimit' 2025/05/30 23:27:09 syscalls: 2214 2025/05/30 23:27:09 code coverage: enabled 2025/05/30 23:27:09 comparison tracing: enabled 2025/05/30 23:27:09 extra coverage: enabled 2025/05/30 23:27:09 setuid sandbox: enabled 2025/05/30 23:27:09 namespace sandbox: enabled 2025/05/30 23:27:09 Android sandbox: enabled 2025/05/30 23:27:09 fault injection: enabled 2025/05/30 23:27:09 leak checking: enabled 2025/05/30 23:27:09 net packet injection: enabled 2025/05/30 23:27:09 net device setup: enabled 2025/05/30 23:27:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/30 23:27:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/30 23:27:09 USB emulation: enabled 2025/05/30 23:27:09 hci packet injection: enabled 2025/05/30 23:27:09 wifi device emulation: enabled 2025/05/30 23:27:09 802.15.4 emulation: enabled 2025/05/30 23:27:09 fetching corpus: 0, signal 0/0 (executing program) 2025/05/30 23:27:11 starting 8 fuzzer processes 23:27:11 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)=0x3) r0 = memfd_secret(0x80000) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/187) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000000180)=""/119, 0x77}) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000640)={0x25, 0x1a, &(0x7f0000000240)="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"}) fcntl$getownex(r0, 0x10, &(0x7f0000000680)) r2 = openat$cgroup_procs(r1, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000700)={0x1, 0x100000000}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x10001, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000007c0)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0xfffffffffffffff8, 0x6, 0x5, 0x101, 0x800], 0x4, &(0x7f0000000780)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0xe7, 0x2f, 0x6, 0x30, 0x0, 0x3, 0x3e, 0x400, 0x43, 0x40, 0x38b, 0x3, 0x7, 0x38, 0x1, 0x0, 0x7, 0x3}, [{0x6474e551, 0x7fff, 0x4, 0x100000001, 0x200, 0x3ff, 0xfffffffffffff801, 0x3}], "a108c3524036a158a34bbce2a3bbddc107b6a605eb3a53380799d46bde9fb22d600ab5521b509816323fd8ddbd2c83ec1d0d3157f502e1d31d801a955fe4b23066c5449db0af0c736f1a2f58bfabc1d817ddd85a911ca044d923efc07a445b3d326d6d884dd67a540a3632e00446a99928c4662d8334a65f074e7452c9c425357282ed7d436f5b2cf92619962f2544d2ebc540bb004022fb82d3c338104adca1553754a4bb50e75dba245b4d5dc16d450c91154c275de40815134ddb20354bbb69ee51b21e102565", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa40) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000012c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001300), 0x101, 0x0) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000001340)={0x7584, 0x1, 0x0, [{0x0, 0x7fff, 0x2, 0x9, 0x0, 0x6, 0x7}]}) r5 = open(&(0x7f00000013c0)='./file0\x00', 0x3c9900, 0x21) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x44, 0x453, 0x100, 0x70bd29, 0x25dfdbfd, "375b6af87fe018f998d902dd396d1f1c9ff376800dd12dfe6b192d86b85e075e5a27f9b66db57b12fec45190fa527a9c35", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x1) getsockopt(0xffffffffffffffff, 0x5f0c, 0x800, &(0x7f0000001540)=""/41, &(0x7f0000001580)=0x29) 23:27:11 executing program 1: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49df6148}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6b8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x7c}}, 0x8080) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000180)=0x1e) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00', 0x0, [0x4, 0xfffffffd, 0x9, 0x4, 0x4]}, &(0x7f0000000240)=0x54) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x190, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xffffffff}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x16}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x943}, {0xc, 0x90, 0xb1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xbc0}, {0xc, 0x90, 0x203b}}]}, 0x190}, 0x1, 0x0, 0x0, 0x2b7d52591845f15a}, 0x20004000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0xf88c3, 0x0) r2 = accept4$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, &(0x7f0000000600)=0x10, 0x800) write$P9_RFSYNC(r1, &(0x7f0000000640)={0x7, 0x33, 0x2}, 0x7) r3 = syz_open_dev$loop(&(0x7f0000000680), 0x40, 0x4cc2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000006c0)={{0xa, 0x4e20, 0x0, @local, 0x5}, {0xa, 0x4e24, 0x7f, @private1, 0x8000}, 0x7fff, [0x7, 0x8000, 0x3f, 0x3f, 0x200, 0x6e9, 0x1c41a557]}, 0x5c) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000740)) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0x2) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000780), &(0x7f00000007c0), 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000800)={0x9, {{0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfc}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x3f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {{0xa, 0x4e23, 0x3ff, @loopback, 0x8}}, {{0xa, 0x4e21, 0x3e5, @dev={0xfe, 0x80, '\x00', 0x31}, 0x13b}}]}, 0x210) fsetxattr(r0, &(0x7f0000000a40)=@random={'system.', '/dev/null\x00'}, &(0x7f0000000a80)='$$%\x00', 0x4, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000bc0)=0xe8) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4080) 23:27:11 executing program 2: ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x2, 0x2, 0x8}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0xd}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x7b}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x1e) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x4, 0x4d60b6b9955ead89) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000540)="a6630061e3e3a6cc29dc92e58d6c06568ee7524903177397facfbeb3af2bfdb24f42541004e814080be864769c1fde4f692a4cdd5abacdfee0361cf9a96ef248d9a77119afefaf130fcafb4511a44887eed73763c702f8ac08a980dc5f0c5a8d4cb994bc53404b667fc28564d503b7fecaa24c6755ba023e7bcffc03fb406f991deccb9f16207c38b2339d449c4cec9092b4b0ed108ea2e0ebc3e04d86ba481847075bad9a770fed79c91d427d1e1b35506218b9054adb08a264971e0d26ed73f3539676ec8644066a6de6") ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000640)={r1}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000680)) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x31}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000804) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000980)={0x4, 0x5, 0x5, 0x0, 0x5, "8b45916d993ecb46"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000009c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) [ 118.150613] audit: type=1400 audit(1748647631.642:7): avc: denied { execmem } for pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:27:11 executing program 3: sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x174, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7c}}}}, [@NL80211_ATTR_IE={0x14b, 0x2a, [@mesh_id={0x72, 0x6}, @perr={0x84, 0x12f, {0x6, 0x13, [@not_ext={{}, @device_b, 0x6, "", 0x24}, @not_ext={{}, @device_b, 0x5, "", 0x23}, @ext={{}, @broadcast, 0x7, @device_a, 0x13}, @not_ext={{}, @device_b, 0x80000000, "", 0x13}, @ext={{}, @broadcast, 0x7, @broadcast, 0x1c}, @not_ext={{}, @device_b, 0x1, "", 0x3}, @ext={{}, @broadcast, 0x3b81ecbc, @device_b, 0x38}, @ext={{}, @device_a, 0xffff, @broadcast, 0x19}, @ext={{}, @broadcast, 0x401, @device_b, 0x1b}, @ext={{}, @device_a, 0xbc86, @device_a, 0x21}, @not_ext={{}, @device_a, 0xcc, "", 0x15}, @ext={{}, @device_b, 0x9940, @device_b, 0x42}, @not_ext={{}, @device_b, 0xffff6d6d, "", 0xf}, @not_ext={{}, @device_b, 0x6, "", 0x6}, @ext={{}, @device_a, 0xffff927e, @device_b, 0x2a}, @ext={{}, @broadcast, 0x80000000, @broadcast, 0x39}, @not_ext={{}, @broadcast, 0x7fffffff, "", 0xa}, @not_ext={{}, @broadcast, 0x9, "", 0x17}, @not_ext={{}, @broadcast, 0xffffffff, "", 0x25}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0xb9, 0x5}}, @cf={0x4, 0x6, {0x4, 0xef, 0x94c, 0x5}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x48051) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4400) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, 0x453, 0x1, 0x70bd29, 0x25dfdbfd, "3e963d1826527a9b6e0ade06c371a661aa32f4170d28f3e6588dc9875bf41f6e3d8d3e821b0fad79480dc2a3e1ec8629e0c3b3da73ce389698cf6dc207a4b832f61826fb106fb1cfaba0f02c461269d0647107b84e8c353be96fbf9ba1db8dd1e62c398dda9de945019d24372debbefd9ec606ebcc199c17458bf1d1e107d92f740fdf928ec96f591c48deabd2581e66546695ac2998aa897078e8a7a53f25335103d023737a5ea9c0a6beb2293c0442b3ee783e5de52d0af75ff445efde59b8926ae0a8820b8cd07622f18beaa9b82b2b976082290629", ["", "", "", "", ""]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x26000000) r2 = openat(r1, &(0x7f0000000440)='./file0\x00', 0x4400, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="4655a6f94f06"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x854}, 0x20040000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000600)=0x0) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder-control\x00', 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x7, 0x8, 0x1, 0x100000001, 0x3, 0x0, 0x7ff, 0x94, 0x40, 0x2a9, 0x7, 0xff80, 0x38, 0x2, 0x8001, 0x0, 0x5}, [{0x6474e551, 0x3, 0x0, 0x40, 0x9, 0x4d, 0x400, 0xffff}, {0x4, 0x101, 0x4, 0x1f, 0x3, 0x9, 0x3, 0xfffffffffffffffa}], "4270e4bc4587f463e4220bfa2334818f15e60b492906aeb8f074c78666c4e3868d8818c6bd32bd6255a6538837ac067f977b96d3802cc1044c1e6d", ['\x00']}, 0x1eb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0xa, 0x1, '\x03\x03\x03\x03\x03\x03'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000001}, 0x0) fstat(r5, &(0x7f00000009c0)) r7 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) splice(r2, &(0x7f0000000a40)=0xc2, r7, &(0x7f0000000a80)=0x7, 0x9, 0x2) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0x100, r8, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7b9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7731}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x593}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x41d4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7c5b0e80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x40040) r9 = dup2(r5, r1) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000d00), 0xc30700, 0x0) r11 = syz_open_dev$vcsu(&(0x7f0000000d40), 0x3ff, 0x40000) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x16c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) 23:27:11 executing program 4: geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', r0, 0x2f, 0x3f, 0xfe, 0x101, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8, 0x7f0f, 0x7fffffff, 0x890}}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000200)="844d2975599fc0dd1d08864052e81dd39ec14f5ccfcded663147fea77c384d17e0db30771fccf723480b7be8e68c3dff0522a9dcb91eecdf7f1393bac32c8942f6820d991ba0072319e454fbd2dec090034e593d3448974dccf9380aeccb5a84294e954b9e748956db690896e7c8b1af4f7d2b5533fe3d4f5c0ea08e160b070f4144aa244bc7fd24e05af93fc783e27ce74daf4f2d7072f5fe608c72", 0x9c) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, &(0x7f00000002c0)="ce364021ab8d72293087918a013bd2f0590301288f80a3ec44b5a20951ccb10899cc750f7b5286798287461984251a9f35979f3e154a621fc0b0ca70454e1dba975a1b5531725e7876cc9008e4c9f6814c7c83c32c32e45ac6c5f13fec3059dbd14ee656613713572ca493440c8a14b88aa27b7920bec8b700247234af8fe10bf1e703f3e00db0c3c0d867246458a1bf544db992a7521090", 0x80000001, 0x0, 0x0, {0x2}}, 0x6) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001680)=[{&(0x7f0000000480)=""/59, 0x3b}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/15, 0xf}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000001700)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001740), 0x101402, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000017c0)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @private=0xa010101}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)='veth1\x00', 0x1, 0xffff, 0x8}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000001840), &(0x7f0000001880)={'U+'}, 0x16, 0x1) connect(r3, &(0x7f00000018c0)=@l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x1}, 0x80) write$P9_RXATTRCREATE(r3, &(0x7f0000001940)={0x7, 0x21, 0x1}, 0x7) socket$inet_icmp(0x2, 0x2, 0x1) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000001980), &(0x7f00000019c0)='./file1\x00', 0x6189, 0x2, &(0x7f0000001bc0)=[{&(0x7f0000001a00)="68cbc1ea3db972fa02effbfabf7cbd14fd060dee67090c71a2bb73cf8122304a16911e8c338aec4094c6683cb8868cea9668ee9d11c34bd7079c92578c7069586d3c4b732256ea93869119f3460fc455362ac7af7358cd73979bc0f59e5d2470643ea7a5ca621ad452f02d1ebae1e281ce532fc6f1b3c851382212aa87af112b24ff2472d29e22bda2696f2c3676c0f57f9b90568eb5aa32f71c14b8c10436695074a83ba7156e66650b2ee85d1e6530ce39427e49d3dbff64f267d31245506523ceab37794edb9eec7cd3e48e", 0xcd, 0x400}, {&(0x7f0000001b00)="462bceb8632b1a00fcd1d6829e6b2cfcdd8c6f0f8f2a7f5326f306ab8950bc73141237a185da080f1838b843df927448b963684a1d80cc252a14a8391aa8419ff085522f938f3ecc06d2cc88a8886888c7d529a3dfe60330b212550779228014979c04549ecf611cde2da9ebb6a82fb8165b68ed5954c442f959eae05b37edf911cd13986b09735a", 0x88, 0x5}], 0x1120022, &(0x7f0000001cc0)={[{@dots}, {@fat=@sys_immutable}, {@fat=@check_normal}, {@fat=@flush}, {@fat=@discard}, {@dots}], [{@euid_eq={'euid', 0x3d, r4}}, {@dont_appraise}, {@permit_directio}]}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r3, {0x7fff}}, './file2\x00'}) 23:27:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2800, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x34, 0x33, 0x6b, 0x36]}}, {@uid={'uid', 0x3d, r2}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x32, 0x65]}}, {@mode={'mode', 0x3d, 0x1ff}}], [{@context={'context', 0x3d, 'system_u'}}, {@dont_hash}, {@uid_gt={'uid>', r3}}, {@obj_role={'obj_role', 0x3d, '&-\':/\\'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000280)=0x4) openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x111000, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x0, 0x3}, 'port0\x00', 0x84, 0x1000, 0x8, 0x7fff, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x6}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000400)={0x6, 0x80, 0x7fff, 0x200, 0x49d94f05}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000440)=0x5) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x105000, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x7fff, 0x6, 0x4, 0x8, 0x64b, 0x4}, {0x5, 0xa8, 0x3d7c881, 0x81, 0x0, 0x3}], ['\x00', '\x00', '\x00']}) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x4040, 0x21) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000680)={0x6, 0x7, 0x4, 0x1, 0x3}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000006c0)='\x00', &(0x7f0000000700)='mode', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc6e8c6abc17ea6c1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x20004000) 23:27:11 executing program 6: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x3, 0x6, 0x200, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000140)={0x0, 0x0, 0x401, 0x0, 0x70000, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x374, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x118, 0x4, 0x0, 0x1, [{0x114, 0x1, 0x0, 0x1, [@range={{0xa}, @void}, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}, @match={{0xa}, @void}, @byteorder={{0xe}, @void}, @socket={{0xb}, @void}, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}]}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0xc8, 0x7, 0x1, 0x0, "b0fe490f49237c8c8372314ff648ee0152f1d4d6374494acfe948a34d41598f6c853a83272cb65796f8888a618b885b7a7ed066783c46cbc57eab392a70fb8410f85ea624714a76b60401b7709b3c50f1b99384862e52bd4013187692a0990f10c8f7482278c6000aaa3d5e41133d354a6adc54a155c2bdd471d8901e5c50ec84f638bb2e44103e3f32678e7fd2761e5ed62d31cbb2acfc4f8bc29e8bfec123230cdcaf7491dcb96eff06b1b875bca3c943d525c02e94f658c947a7985fc8b375c4dc6c2"}, @NFTA_RULE_USERDATA={0x49, 0x7, 0x1, 0x0, "79d345e83cc043fea31f3378ec44864142dd235f09399fc9b90e9ef6ad79b460b3ca3a8ba5554ddc614caf66f87af380f94d85059e428953ed8c03b794a2d8176401154ce3"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xff, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x50, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x41c}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000006c0)={0xa1, 0x6, 0xc4}) r0 = syz_open_dev$vcsa(&(0x7f0000000700), 0x8, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf4, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000900)='cpuset.mem_exclusive\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000940)={0x1, 0x4, 0x6}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000e40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f00000009c0)={0x42c, 0x3f4, 0x8, 0x70bd2a, 0x25dfdbfb, {0x6, 0x0, 0x0, [0x7, 0x13d, 0x0, 0x287c, 0x3, 0x80000001, 0x7f, 0xc1, 0x7fff, 0x1, 0x7, 0x666, 0xb6, 0x81, 0x1, 0x9, 0x4, 0x46622790, 0x3, 0x1f, 0x4, 0xec, 0x8000, 0x800, 0x7, 0x0, 0x2, 0x3fc0000, 0x3, 0x3f, 0x7f, 0x1, 0x5, 0x5, 0x400, 0x1, 0x7, 0x7d2f, 0x8, 0x8a, 0x7, 0x100, 0x4, 0x11382c93, 0x7ff, 0x7, 0x1, 0x800, 0x3, 0x6, 0xf5d22ed1, 0x52, 0x8, 0x400, 0x6, 0x6, 0x101, 0x7, 0x4, 0x1, 0x7f, 0x5, 0x2], [0x0, 0x3ff, 0xfffffc00, 0x5, 0x0, 0x7f, 0x10000, 0x7, 0x6, 0x19, 0xf99, 0x10001, 0x3f, 0xd0f, 0x9, 0x0, 0x4000000, 0x60d3, 0xfffff801, 0x3f, 0x20, 0x3f, 0x728, 0x8, 0x3c, 0x5f58, 0x4, 0x5, 0xff, 0xffff, 0xfffffffd, 0x7, 0x8, 0x0, 0x400, 0x1f, 0x0, 0x1, 0xfffffe01, 0xbe, 0x7f, 0x1255af8b, 0x6, 0x80000001, 0x7ff, 0x516, 0x976f, 0x0, 0xd1e, 0x440, 0xff, 0x3, 0x3, 0x6, 0x8, 0xffffffff, 0x8, 0x10001, 0x6, 0xfff, 0xff, 0x8, 0x1, 0x100], [0x8, 0x80000000, 0x80, 0x0, 0xce3f, 0x1, 0x4, 0x5, 0x5, 0x5a9, 0x5, 0x5, 0x1e, 0x5, 0x4, 0xffffffc8, 0x7, 0x8001, 0x30, 0x3, 0x1ff, 0x100, 0xa00, 0x2, 0x9066, 0x4, 0x9, 0x81, 0xffff, 0x9022, 0x8001, 0x1, 0x200, 0xfffff0d9, 0x20, 0x5f, 0x7, 0x81, 0x1348, 0x7, 0xfffffffe, 0x7fff, 0x5, 0x20, 0x2, 0xb9800000, 0xef, 0x4, 0x3e, 0x0, 0x1a55e630, 0xeb, 0x8, 0x9, 0x2, 0x5, 0x1, 0x0, 0x9, 0x4, 0x1c, 0x1ba, 0x78c, 0x9], [0x7, 0x2, 0xc43, 0x98, 0x1, 0x5, 0x0, 0x2, 0x2, 0x4, 0x6, 0x7ff, 0x8, 0x6, 0x5, 0x7, 0x3ff, 0x1, 0x30, 0x10001, 0x8, 0x2, 0xffff, 0xff, 0x73b, 0x1, 0x4, 0x2, 0x0, 0x0, 0x8, 0x101, 0x3, 0x5, 0x3, 0x5, 0xffffffff, 0x2, 0x8efc, 0x8, 0x8, 0x4, 0x5, 0x995, 0x2, 0x8, 0x8, 0x0, 0x5, 0x3, 0x80000001, 0x3, 0x5, 0x0, 0x1f, 0x6, 0x80000000, 0x2ab2, 0x4, 0x7, 0xde8f, 0x5, 0x80000000, 0x100], 0xa, ['byteorder\x00']}, ["", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x20004090}, 0xc000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0x88, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x800) r4 = open_tree(r0, &(0x7f0000001080)='./file0\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x49}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c0}, 0x8004) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xa0, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x17, 0x34, @random="d8aad5431bb7295d9d783b16c3c5274f9b0acd"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="7df2e62c0264"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8846d792b6781608373d6c8d643ad6d1"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x61}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "ef1724d23d93b9947657675f6dfeccdf"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x24000001) syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), r0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 23:27:11 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x23, 0x20, 0x7, 0x10, @empty, @mcast1, 0x0, 0x80, 0x7, 0x8b89}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x40, 0x6, 0x40, @rand_addr=' \x01\x00', @local, 0x7, 0x0, 0x3, 0x800}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@rand_addr, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x33, 0x800000, {{0x5, 0x4, 0x1, 0x1d, 0x14, 0x66, 0x0, 0x7f, 0x2f, 0x0, @private=0xa010100, @local}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f00000004c0)={0x4e8, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf01a}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x10c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x5, 0x0, 0xd77f}, {0x8, 0x5e, 0xf7, 0x4f9a}, {0x5, 0x3, 0x6}, {0x40, 0xc5, 0xe4, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000a40)={0x4, 0x10001}) r7 = syz_open_dev$vcsu(&(0x7f0000000a80), 0x5, 0x20000) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x120, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {0x2, 0x3b, 0x5, 0x3, {0x4e20, 0x4e23, [0x8, 0x3c4d, 0x3f0, 0x6], [0x0, 0x3, 0xa3, 0x9], r3, [0x6, 0x7]}, 0x3, 0xa41}, [@INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "a580e01678881c6ded02738fda740df30e4362baea169137f9fd448ff6ddc06c5b9edf5b15f3ace75fbdaae880b7623d6a8542090a5ee0862f33d9b5e273468db5cb2f57126dd845e768922e070338192ab5249afb2ea90fd11ddd0e2dd257d7b75c6c4d6cd612e4c6673deabb7a08af3a3cf9ec60ca768ca688b670792820e022eb32b581fb515a55bb865d161a47b7c7914174fa7c1ad092cccd7df44e7626969c729e52accd72128cf0fea0a9b9f36d3aa1f9c5321e8dbdfd6e17256eeb56e9423bfd21b0b3f5"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "d74a39"}]}, 0x120}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x86b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x90) connect$packet(r0, &(0x7f0000000dc0)={0x11, 0x1b, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000e00)=""/233, &(0x7f0000000f00)=0xe9) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x148, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @empty, 0x1b33}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @loopback, 0x40}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xd0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7f}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x991}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}]}]}, 0x148}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000001180)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001200)=""/40, &(0x7f0000001240)=0x28) [ 119.517640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.520527] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.523633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.530035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.534132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.575673] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.587556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.593024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.596030] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.597376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.600024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.600992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.604295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.607045] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.608873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.611446] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.612179] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.614485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.627195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.643728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.654227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.662824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.665763] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.687274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.696435] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.711257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.711371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.720975] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.721468] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.724400] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.727120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.732448] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.734230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.737107] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.750591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.752548] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.762324] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.766368] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.770643] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.782342] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.589728] Bluetooth: hci0: command tx timeout [ 121.653404] Bluetooth: hci2: command tx timeout [ 121.717339] Bluetooth: hci3: command tx timeout [ 121.720168] Bluetooth: hci1: command tx timeout [ 121.781690] Bluetooth: hci6: command tx timeout [ 121.782302] Bluetooth: hci4: command tx timeout [ 121.846529] Bluetooth: hci5: command tx timeout [ 121.846834] Bluetooth: hci7: command tx timeout [ 123.637161] Bluetooth: hci0: command tx timeout [ 123.701460] Bluetooth: hci2: command tx timeout [ 123.765340] Bluetooth: hci1: command tx timeout [ 123.765824] Bluetooth: hci3: command tx timeout [ 123.829980] Bluetooth: hci4: command tx timeout [ 123.830475] Bluetooth: hci6: command tx timeout [ 123.894123] Bluetooth: hci7: command tx timeout [ 123.894146] Bluetooth: hci5: command tx timeout [ 125.685520] Bluetooth: hci0: command tx timeout [ 125.749720] Bluetooth: hci2: command tx timeout [ 125.813197] Bluetooth: hci1: command tx timeout [ 125.813273] Bluetooth: hci3: command tx timeout [ 125.877859] Bluetooth: hci6: command tx timeout [ 125.878671] Bluetooth: hci4: command tx timeout [ 125.941168] Bluetooth: hci7: command tx timeout [ 125.941208] Bluetooth: hci5: command tx timeout [ 127.733308] Bluetooth: hci0: command tx timeout [ 127.798169] Bluetooth: hci2: command tx timeout [ 127.861195] Bluetooth: hci1: command tx timeout [ 127.861251] Bluetooth: hci3: command tx timeout [ 127.925750] Bluetooth: hci6: command tx timeout [ 127.925962] Bluetooth: hci4: command tx timeout [ 127.989548] Bluetooth: hci7: command tx timeout [ 127.989798] Bluetooth: hci5: command tx timeout [ 182.241526] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.246020] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.255822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.262956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.270831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.311558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.317662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.319626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.320684] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.324196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.334473] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.343658] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.349681] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.351856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.365698] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 182.367296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.378589] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.381548] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.384501] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.386610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.388899] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.395465] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 182.397768] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.398375] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.402762] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.402828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.404616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.407458] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.414132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.422628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.423561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.425332] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 182.426419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.429165] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.435997] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 182.447022] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.453037] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.502354] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.504342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.511530] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.309326] Bluetooth: hci0: command tx timeout [ 184.437163] Bluetooth: hci2: command tx timeout [ 184.501155] Bluetooth: hci3: command tx timeout [ 184.502002] Bluetooth: hci7: command tx timeout [ 184.502081] Bluetooth: hci1: command tx timeout [ 184.565208] Bluetooth: hci4: command tx timeout [ 184.629341] Bluetooth: hci5: command tx timeout [ 184.629368] Bluetooth: hci6: command tx timeout [ 186.357128] Bluetooth: hci0: command tx timeout [ 186.485235] Bluetooth: hci2: command tx timeout [ 186.549313] Bluetooth: hci1: command tx timeout [ 186.549751] Bluetooth: hci3: command tx timeout [ 186.551101] Bluetooth: hci7: command tx timeout [ 186.613392] Bluetooth: hci4: command tx timeout [ 186.677199] Bluetooth: hci5: command tx timeout [ 186.677635] Bluetooth: hci6: command tx timeout [ 188.406214] Bluetooth: hci0: command tx timeout [ 188.533455] Bluetooth: hci2: command tx timeout [ 188.598300] Bluetooth: hci7: command tx timeout [ 188.598806] Bluetooth: hci3: command tx timeout [ 188.599407] Bluetooth: hci1: command tx timeout [ 188.661176] Bluetooth: hci4: command tx timeout [ 188.725186] Bluetooth: hci6: command tx timeout [ 188.725684] Bluetooth: hci5: command tx timeout [ 190.453151] Bluetooth: hci0: command tx timeout [ 190.581139] Bluetooth: hci2: command tx timeout [ 190.645200] Bluetooth: hci1: command tx timeout [ 190.645692] Bluetooth: hci3: command tx timeout [ 190.646163] Bluetooth: hci7: command tx timeout [ 190.709410] Bluetooth: hci4: command tx timeout [ 190.773444] Bluetooth: hci5: command tx timeout [ 190.773953] Bluetooth: hci6: command tx timeout [ 244.366752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.371636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.374406] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.381216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.386775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.575792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.579784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.583600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.590886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.593716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.605579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.608689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.618950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.624154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.628014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.633735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.637970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.652506] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.658936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.678713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.685601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.689482] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.695466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.703386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.709361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.728152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.748490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.753697] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.762714] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.768683] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.779844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.783612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.785006] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.820587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.838775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.948734] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.952551] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.963556] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.971959] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.982650] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.455132] Bluetooth: hci0: command tx timeout [ 246.709271] Bluetooth: hci3: command tx timeout [ 246.710153] Bluetooth: hci1: command tx timeout [ 246.773479] Bluetooth: hci5: command tx timeout [ 246.837453] Bluetooth: hci2: command tx timeout [ 246.837988] Bluetooth: hci6: command tx timeout [ 247.157342] Bluetooth: hci4: command tx timeout [ 247.285139] Bluetooth: hci7: command tx timeout [ 248.501175] Bluetooth: hci0: command tx timeout [ 248.759341] Bluetooth: hci1: command tx timeout [ 248.759851] Bluetooth: hci3: command tx timeout [ 248.821191] Bluetooth: hci5: command tx timeout [ 248.885229] Bluetooth: hci6: command tx timeout [ 248.885728] Bluetooth: hci2: command tx timeout [ 249.205687] Bluetooth: hci4: command tx timeout [ 249.333280] Bluetooth: hci7: command tx timeout [ 250.550136] Bluetooth: hci0: command tx timeout [ 250.805695] Bluetooth: hci3: command tx timeout [ 250.807240] Bluetooth: hci1: command tx timeout [ 250.869224] Bluetooth: hci5: command tx timeout [ 250.933284] Bluetooth: hci2: command tx timeout [ 250.935952] Bluetooth: hci6: command tx timeout [ 251.253589] Bluetooth: hci4: command tx timeout [ 251.381489] Bluetooth: hci7: command tx timeout [ 252.597533] Bluetooth: hci0: command tx timeout [ 252.853495] Bluetooth: hci1: command tx timeout [ 252.854237] Bluetooth: hci3: command tx timeout [ 252.918388] Bluetooth: hci5: command tx timeout [ 252.981173] Bluetooth: hci6: command tx timeout [ 252.981269] Bluetooth: hci2: command tx timeout [ 253.301934] Bluetooth: hci4: command tx timeout [ 253.429472] Bluetooth: hci7: command tx timeout [ 306.907797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.919904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.922027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.925483] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.931954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.939678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.948159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.952679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.958827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.961381] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.964496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.970306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.973898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.977740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.985713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.083877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.089667] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.093687] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.105602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.114328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.238833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.242632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.261603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.267930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.270005] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.323595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.327309] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.341410] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.351526] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.353794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.363435] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.383402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.390825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.396318] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.419822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.450627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.454786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.473323] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.509335] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.528631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.046156] Bluetooth: hci2: command tx timeout [ 309.111666] Bluetooth: hci1: command tx timeout [ 309.173138] Bluetooth: hci3: command tx timeout [ 309.237149] Bluetooth: hci0: command tx timeout [ 309.429166] Bluetooth: hci5: command tx timeout [ 309.749170] Bluetooth: hci6: command tx timeout [ 309.750231] Bluetooth: hci7: command tx timeout [ 309.750569] Bluetooth: hci4: command tx timeout [ 311.095170] Bluetooth: hci2: command tx timeout [ 311.157460] Bluetooth: hci1: command tx timeout [ 311.221196] Bluetooth: hci3: command tx timeout [ 311.286084] Bluetooth: hci0: command tx timeout [ 311.477342] Bluetooth: hci5: command tx timeout [ 311.797198] Bluetooth: hci7: command tx timeout [ 311.797386] Bluetooth: hci6: command tx timeout [ 311.798151] Bluetooth: hci4: command tx timeout [ 313.141188] Bluetooth: hci2: command tx timeout [ 313.205350] Bluetooth: hci1: command tx timeout [ 313.269181] Bluetooth: hci3: command tx timeout [ 313.333328] Bluetooth: hci0: command tx timeout [ 313.525149] Bluetooth: hci5: command tx timeout [ 313.845419] Bluetooth: hci6: command tx timeout [ 313.849118] Bluetooth: hci4: command tx timeout [ 313.849145] Bluetooth: hci7: command tx timeout [ 315.190291] Bluetooth: hci2: command tx timeout [ 315.253300] Bluetooth: hci1: command tx timeout [ 315.317414] Bluetooth: hci3: command tx timeout [ 315.381149] Bluetooth: hci0: command tx timeout [ 315.573424] Bluetooth: hci5: command tx timeout [ 315.893529] Bluetooth: hci4: command tx timeout [ 315.893671] Bluetooth: hci6: command tx timeout [ 315.894388] Bluetooth: hci7: command tx timeout [ 369.358319] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.363469] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.367524] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.374617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.380679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.559898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.573036] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.575785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.584859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.589823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.678962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.681501] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.691664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.703657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.707858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.751496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.788447] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.793162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.819333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.826163] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.831474] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.833535] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.835858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.837790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.847585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.849484] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.857031] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.858847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.885486] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.896153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.943953] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.956566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.959883] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.984674] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.007570] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.101926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 370.113653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 370.118538] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 370.184734] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 370.199599] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 371.446265] Bluetooth: hci0: command tx timeout [ 371.638200] Bluetooth: hci1: command tx timeout [ 371.765214] Bluetooth: hci2: command tx timeout [ 371.894922] Bluetooth: hci4: command tx timeout [ 372.021969] Bluetooth: hci3: command tx timeout [ 372.023555] Bluetooth: hci5: command tx timeout [ 372.149289] Bluetooth: hci6: command tx timeout [ 372.277951] Bluetooth: hci7: command tx timeout [ 373.493286] Bluetooth: hci0: command tx timeout [ 373.685205] Bluetooth: hci1: command tx timeout [ 373.814397] Bluetooth: hci2: command tx timeout [ 373.942099] Bluetooth: hci4: command tx timeout [ 374.069278] Bluetooth: hci3: command tx timeout [ 374.069870] Bluetooth: hci5: command tx timeout [ 374.197576] Bluetooth: hci6: command tx timeout [ 374.325175] Bluetooth: hci7: command tx timeout [ 375.542283] Bluetooth: hci0: command tx timeout [ 375.734113] Bluetooth: hci1: command tx timeout [ 375.861212] Bluetooth: hci2: command tx timeout [ 375.989192] Bluetooth: hci4: command tx timeout [ 376.118115] Bluetooth: hci5: command tx timeout [ 376.118652] Bluetooth: hci3: command tx timeout [ 376.245142] Bluetooth: hci6: command tx timeout [ 376.373277] Bluetooth: hci7: command tx timeout [ 377.589359] Bluetooth: hci0: command tx timeout [ 377.783269] Bluetooth: hci1: command tx timeout [ 377.909347] Bluetooth: hci2: command tx timeout [ 378.037178] Bluetooth: hci4: command tx timeout [ 378.165426] Bluetooth: hci3: command tx timeout [ 378.165928] Bluetooth: hci5: command tx timeout [ 378.293142] Bluetooth: hci6: command tx timeout [ 378.421144] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:32:12 Registers: info registers vcpu 0 RAX=ffffffff87a55508 RBX=ffff88802e925280 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff88802e925d28 RDI=ffff88802e925d28 RBP=ffff88802e925cd8 RSP=ffff8880376af868 R8 =0000000000000002 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88802e925d28 R13=d2798f8332aac49f R14=0000000000000000 R15=0000000000000002 RIP=ffffffff81519448 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdca74cd028 CR3=000000003404e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=1ffff11005bb4e8a RSI=ffff88802dda7ca0 RDI=ffff88802dda7458 RBP=0000000000000812 RSP=ffff88802dda7398 R8 =0000000000000001 R9 =ffff88802dda7448 R10=000000000003b6bd R11=0000000000022897 R12=ffff88802dda7468 R13=ffff88802dda7450 R14=ffff88802dda7ca0 R15=ffff88802dda7408 RIP=ffffffff813554d9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f47a9a628e0 CR3=0000000038312000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000