Warning: Permanently added '[localhost]:4429' (ECDSA) to the list of known hosts. 2025/06/04 15:03:47 fuzzer started 2025/06/04 15:03:48 dialing manager at localhost:39055 syzkaller login: [ 109.157883] cgroup: Unknown subsys name 'net' [ 109.396249] cgroup: Unknown subsys name 'cpuset' [ 109.493243] cgroup: Unknown subsys name 'rlimit' 2025/06/04 15:04:08 syscalls: 200 2025/06/04 15:04:08 code coverage: enabled 2025/06/04 15:04:08 comparison tracing: enabled 2025/06/04 15:04:08 extra coverage: enabled 2025/06/04 15:04:08 setuid sandbox: enabled 2025/06/04 15:04:08 namespace sandbox: enabled 2025/06/04 15:04:08 Android sandbox: enabled 2025/06/04 15:04:08 fault injection: enabled 2025/06/04 15:04:08 leak checking: enabled 2025/06/04 15:04:08 net packet injection: enabled 2025/06/04 15:04:08 net device setup: enabled 2025/06/04 15:04:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/04 15:04:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/04 15:04:08 USB emulation: enabled 2025/06/04 15:04:08 hci packet injection: enabled 2025/06/04 15:04:08 wifi device emulation: enabled 2025/06/04 15:04:08 802.15.4 emulation: enabled 2025/06/04 15:04:08 fetching corpus: 0, signal 0/0 (executing program) 2025/06/04 15:04:09 starting 8 fuzzer processes 15:04:09 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xca, 0x0, 0x9, 0x5}, {0xffff, 0xff, 0x81, 0x2}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = accept4$packet(r1, 0x0, &(0x7f00000000c0), 0x80800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048800}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) semctl$GETVAL(0x0, 0x2, 0xc, &(0x7f00000002c0)=""/179) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r6, 0x204, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4801) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x3a2f, @bearer=@udp='udp:syz1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x60000}, 0x48001) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x202, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x31fe, &(0x7f0000000740)={0x0, 0x7e8a, 0x4, 0x0, 0x1c3, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)=0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0x7}}, './file1\x00'}) r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0xc00, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f00000008c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r10, 0x0, 0x0, 0x7, 0x4, 0x1, {0x0, 0x0, r11}}, 0x5) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8dbc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a80)) 15:04:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1dc284d08f965e0690ec22070f"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2bb42c0658"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b5b9207c48"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x20040451) r2 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a300, 0x0) shmctl$SHM_LOCK(r2, 0xb) r3 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x40000) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000340)={{0x2, 0x4e22, @multicast1}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8, {0x2, 0x4e23, @multicast2}, 'bond_slave_1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3fb, 0x104, 0x70bd29, 0x25dfdbfd, "", ["", "", ""]}, 0x10}}, 0x4000080) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$smc(&(0x7f0000000540), r5) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x14) 15:04:09 executing program 2: sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1800000000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x9, 0x8000, 0xff, 0x8}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x44050) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x381601, 0x0) accept(r2, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x17, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x4}]}, 0x24}}, 0x41) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = accept(r5, 0x0, &(0x7f00000005c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000600)={0x0, 'ip6gretap0\x00', 0x3}, 0x18) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r6) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r7, 0x108, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x40004) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 15:04:09 executing program 3: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0xc0000c0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x8801) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10, 0x80000) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0xef, "104e8f3394738480ca2547d569414273719e2eff3c49a82efde57f9d121b457c243d94b0fbecfbbd041ab3fcccf8fda555e7c2b257276f0c761b656a86cad6490403d4e87ee5753103fe5b5b5da24755dbedb4a3e522994b55a2764c281ca5b11df13eafd36026ab67f3b9f50761ff506569af36b2891d0bbd2f2047913a129c12d23996672f1cb9818c86e4b393a9225866d4b1332514cf953afecd885854155c4f32ae4b9d36f5163619843e470068343b97eb925564888661697a4ec548221fb8f0ec6193294821207e1abce964511f25bc55581c9362cc36b682962aecc69f013a3d6ee22ad9fd3236f246b5fe"}, &(0x7f0000000440)=0x113) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000000) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0xb, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, '-@!\x00'}, @NFTA_COMPAT_NAME={0xc, 0x1, 'gretap0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r4, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x20000050) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000900)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) ioctl$CDROM_MEDIA_CHANGED(r7, 0x5325, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000940)={{0x1, 0x1, 0x18, r6, {0xea}}, './file0\x00'}) accept4$inet(r8, &(0x7f0000000980)={0x2, 0x0, @initdev}, &(0x7f00000009c0)=0x10, 0x80000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r5, {0x7000}}, './file0\x00'}) accept4$inet(r9, &(0x7f0000000a40), &(0x7f0000000a80)=0x10, 0x80800) accept(r9, &(0x7f0000000ac0)=@nfc_llcp, &(0x7f0000000b40)=0x80) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x4000) 15:04:09 executing program 4: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x7c}}, 0x48800) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x138, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x129}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffff800}]}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7c}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x23}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x115}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe92}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xadeeaa4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x138}, 0x1, 0x0, 0x0, 0x8001}, 0x800) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8004) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {0xb, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = accept(r3, 0x0, &(0x7f0000000740)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r3) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000880) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r5, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x800) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x10, 0x453, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x4040804) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r0, 0x0, 0x70bd27, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x40008844) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xfff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r6, {0xffff, 0x1fc000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) [ 130.201022] audit: type=1400 audit(1749049449.895:7): avc: denied { execmem } for pid=277 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:04:09 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3ac, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x1, 0x8, 0xffffff01}, {0x3, 0x6, 0xb7, 0x4}, {0x4, 0x8, 0x2, 0x101}, {0x60bc, 0x4, 0x7, 0x2}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r0}, {0x204, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x81, 0x52, 0xbf65}, {0x800, 0x38, 0x5, 0x4}, {0x7, 0x0, 0xe2, 0x7fffffff}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x7, 0x674}}}]}}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x20004000}, 0xc001) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa0, 0x4, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce614a7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2863a1f}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x35cc3437}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x38d6358}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x23a808fa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4008030) r1 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) shmctl$IPC_SET(r1, 0x1, &(0x7f00000006c0)={{0x1, 0xee01, r4, 0xee00, 0xee01, 0x91, 0x2}, 0x1, 0x5, 0x3ff, 0x7ff, 0x0, 0x0, 0x1fb}) r5 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000740)=""/176) r6 = semget(0x1, 0x1, 0x128) semctl$SEM_INFO(r6, 0x0, 0x13, &(0x7f0000000800)=""/161) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000900)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_INFO(r8, 0x3, &(0x7f0000000940)=""/205) semctl$GETZCNT(r6, 0x2, 0xf, &(0x7f0000000a40)=""/84) r9 = getegid() r10 = gettid() r11 = gettid() shmctl$IPC_SET(r8, 0x1, &(0x7f0000000ac0)={{0x3, r3, r4, r3, r9, 0x82, 0x39cf}, 0x5, 0x3ff, 0x9d, 0x5, r10, r11, 0x3ff}) shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000b40)=""/68) 15:04:09 executing program 6: getitimer(0x1, &(0x7f0000000000)) getitimer(0x2, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80100800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8001}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x9ea7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x7fff, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) bind$bt_sco(r3, &(0x7f00000005c0)={0x1f, @none}, 0x8) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x2442, 0x0) ioctl$CDROMMULTISESSION(r4, 0x5310, &(0x7f0000000640)={@lba=0x1, 0x0, 0x3}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0x33b8bb6b}}, './file0\x00'}) accept4$packet(r6, &(0x7f00000006c0), &(0x7f0000000700)=0x14, 0x80000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r7, 0x700, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x935, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40040) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x40080) 15:04:09 executing program 7: sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000094) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$CDROM_MEDIA_CHANGED(0xffffffffffffffff, 0x5325, 0x7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x420, 0x3f4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x3, 0x0, 0x29, [0x3ff, 0x5, 0x5, 0xfff, 0x8, 0x81, 0x6a0b, 0x7fff, 0x10001, 0x5, 0x74, 0x5, 0x3, 0x7, 0xdeaf, 0x1ff, 0x6, 0x6b, 0x9, 0x9, 0x6, 0x7f, 0x7fff8, 0x8, 0xffffff80, 0x2, 0x100, 0xd39, 0x4, 0x6, 0xffff, 0x9, 0x5, 0x401, 0x4, 0x1000, 0xcf5, 0x9, 0x5, 0xa6, 0x10001, 0x1, 0x10001, 0x7fffffff, 0x4, 0x5, 0x5, 0x7, 0xb73, 0x7, 0x0, 0x4, 0x9, 0x3, 0x4, 0x202, 0xcabd, 0x3, 0x20, 0x8d1, 0xbf, 0x3, 0x4, 0x238], [0x2, 0x2f3a, 0x4, 0x800, 0xfe7, 0x2, 0x9, 0x1b95, 0x6, 0xfffffffc, 0x0, 0x8, 0xfffffff7, 0x9, 0x2, 0x101, 0x3451, 0x7, 0x8, 0x2, 0x10000, 0x79, 0xffffffff, 0x3, 0x3, 0x3f, 0x4, 0xbda, 0x80, 0x8, 0x7fffffff, 0x0, 0x5, 0x1, 0x0, 0x81, 0x4, 0x100, 0x8, 0x0, 0x8, 0x7, 0x9, 0x7f, 0xf0a, 0xffff747f, 0x20, 0x4, 0x7fffffff, 0x33e, 0x3ff, 0xa7, 0x1, 0x8, 0x0, 0x401, 0x1, 0x8001, 0x5, 0x5, 0x4, 0x95, 0x20, 0x1], [0x7b5, 0x1, 0x3, 0x200, 0x400, 0x4, 0x3f, 0x40, 0x3, 0x1, 0x1f, 0x1000, 0x2, 0x80000000, 0x1, 0x7, 0x1000, 0x9, 0x0, 0x6e3, 0x200, 0x7311, 0x8, 0x6, 0x1ff, 0x7ff, 0x8, 0xa3, 0xfffffffa, 0x5, 0x0, 0x5, 0x1, 0x3, 0x0, 0x13f, 0x4, 0x9, 0x4952, 0x972, 0x2, 0x1ff, 0x1, 0x20, 0x1a9, 0x8, 0x7, 0x3, 0x5, 0x1, 0x800, 0x51a5, 0x0, 0xfff, 0x9, 0x333a4a36, 0x81, 0xdae, 0x519, 0x0, 0x6, 0x401, 0x7], [0x5, 0x9, 0xfffffffe, 0x20, 0x0, 0x3, 0x45, 0xff, 0x8, 0x5, 0x40, 0x80000000, 0x2, 0x81, 0x3ff, 0x2, 0x3, 0xe9b, 0x1, 0x0, 0x5, 0xbc4, 0x9, 0x1, 0x6, 0x7, 0xeef1, 0x3, 0x3, 0x2, 0x3, 0x40, 0x0, 0x7ff, 0x3, 0x26f, 0x100, 0x20, 0x8, 0x81, 0x1, 0x4, 0x1, 0x7, 0xfffffffe, 0x7fff, 0x1, 0x7, 0x1, 0x5, 0x0, 0x8, 0x401, 0xa00, 0x2e, 0x0, 0x4db3, 0x7, 0x10001, 0x1, 0x0, 0x80000000, 0x4, 0x8]}, ["", "", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = accept(r0, &(0x7f00000006c0)=@hci, &(0x7f0000000740)=0x80) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80001020}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x40, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x840) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r4, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x80, 0x5, 0x4c}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0x3, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x10001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000d40)=""/4096, &(0x7f0000001d40)=0x1000) r5 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000001f00)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0xd4, 0x4, 0xa, 0x0, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa8ee}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5d}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x78}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008044}, 0x400c001) connect$packet(r5, &(0x7f0000001f40)={0x11, 0x16, 0x0, 0x1, 0xd9, 0x6, @link_local}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r2, {0xffffffe0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0/file0\x00'}) [ 131.631379] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.635095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.638436] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.642654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.645359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.673072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.681836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.683531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.689550] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.693054] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.695683] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.697844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.706565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.708529] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.715577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.718075] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.720464] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.723396] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.728063] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.733872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.739517] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.742592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.746350] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.749555] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.757843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.764853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.771463] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.776043] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.778700] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.781641] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.784994] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.787093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.787756] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.792716] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.792860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.805365] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.816004] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.820508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.828752] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.830912] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 133.686321] Bluetooth: hci0: command tx timeout [ 133.811391] Bluetooth: hci3: command tx timeout [ 133.812002] Bluetooth: hci1: command tx timeout [ 133.812629] Bluetooth: hci2: command tx timeout [ 133.875338] Bluetooth: hci4: command tx timeout [ 133.875409] Bluetooth: hci7: command tx timeout [ 133.875891] Bluetooth: hci6: command tx timeout [ 133.876412] Bluetooth: hci5: command tx timeout [ 135.731686] Bluetooth: hci0: command tx timeout [ 135.859569] Bluetooth: hci2: command tx timeout [ 135.860081] Bluetooth: hci1: command tx timeout [ 135.861377] Bluetooth: hci3: command tx timeout [ 135.923635] Bluetooth: hci7: command tx timeout [ 135.924141] Bluetooth: hci5: command tx timeout [ 135.924984] Bluetooth: hci6: command tx timeout [ 135.925713] Bluetooth: hci4: command tx timeout [ 137.779562] Bluetooth: hci0: command tx timeout [ 137.907399] Bluetooth: hci1: command tx timeout [ 137.907944] Bluetooth: hci3: command tx timeout [ 137.908616] Bluetooth: hci2: command tx timeout [ 137.971399] Bluetooth: hci5: command tx timeout [ 137.973139] Bluetooth: hci6: command tx timeout [ 137.975329] Bluetooth: hci7: command tx timeout [ 137.975654] Bluetooth: hci4: command tx timeout [ 139.827323] Bluetooth: hci0: command tx timeout [ 139.955330] Bluetooth: hci3: command tx timeout [ 139.956280] Bluetooth: hci2: command tx timeout [ 139.957194] Bluetooth: hci1: command tx timeout [ 140.020339] Bluetooth: hci4: command tx timeout [ 140.020923] Bluetooth: hci7: command tx timeout [ 140.022247] Bluetooth: hci6: command tx timeout [ 140.022295] Bluetooth: hci5: command tx timeout [ 192.127593] syz-executor.6 (286) used greatest stack depth: 24784 bytes left [ 194.392761] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.394512] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.396719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.400491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.400790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.406364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.412494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.420895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.422769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.429456] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.434527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.437885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.444664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.447968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.457734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.481385] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.492788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.495546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.498003] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.499848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.502683] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.506488] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.520253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.520565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.527255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.560843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.564564] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.566973] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.589585] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.600374] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.706908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.721763] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.728089] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.734508] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.750812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.756399] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.756420] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.770583] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.772943] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.789083] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 196.468986] Bluetooth: hci0: command tx timeout [ 196.531325] Bluetooth: hci1: command tx timeout [ 196.532945] Bluetooth: hci2: command tx timeout [ 196.595348] Bluetooth: hci3: command tx timeout [ 196.596866] Bluetooth: hci4: command tx timeout [ 196.659319] Bluetooth: hci5: command tx timeout [ 196.851791] Bluetooth: hci7: command tx timeout [ 196.853502] Bluetooth: hci6: command tx timeout [ 198.515779] Bluetooth: hci0: command tx timeout [ 198.579550] Bluetooth: hci1: command tx timeout [ 198.581279] Bluetooth: hci2: command tx timeout [ 198.643420] Bluetooth: hci3: command tx timeout [ 198.645162] Bluetooth: hci4: command tx timeout [ 198.708703] Bluetooth: hci5: command tx timeout [ 198.899406] Bluetooth: hci7: command tx timeout [ 198.901277] Bluetooth: hci6: command tx timeout [ 200.563329] Bluetooth: hci0: command tx timeout [ 200.627335] Bluetooth: hci2: command tx timeout [ 200.627901] Bluetooth: hci1: command tx timeout [ 200.692276] Bluetooth: hci4: command tx timeout [ 200.692831] Bluetooth: hci3: command tx timeout [ 200.756245] Bluetooth: hci5: command tx timeout [ 200.947605] Bluetooth: hci7: command tx timeout [ 200.949863] Bluetooth: hci6: command tx timeout [ 202.611729] Bluetooth: hci0: command tx timeout [ 202.675338] Bluetooth: hci2: command tx timeout [ 202.676927] Bluetooth: hci1: command tx timeout [ 202.741511] Bluetooth: hci3: command tx timeout [ 202.743407] Bluetooth: hci4: command tx timeout [ 202.803345] Bluetooth: hci5: command tx timeout [ 202.995433] Bluetooth: hci7: command tx timeout [ 202.997138] Bluetooth: hci6: command tx timeout [ 256.841874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.847912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.851907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.862544] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.872527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.095902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.097573] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.106548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.111071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.113149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.120791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.122162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.124105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.129577] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.130827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.133796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.138098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.143798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.146337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.147142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.168841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.174781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.180467] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.192479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.195888] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.199117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.207896] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.248214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.276597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.292881] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.308680] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.322169] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.324627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.336630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.349574] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.398046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.411545] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.436573] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.438637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.455641] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.932587] Bluetooth: hci0: command tx timeout [ 259.189377] Bluetooth: hci1: command tx timeout [ 259.191155] Bluetooth: hci3: command tx timeout [ 259.252368] Bluetooth: hci5: command tx timeout [ 259.252390] Bluetooth: hci2: command tx timeout [ 259.443424] Bluetooth: hci4: command tx timeout [ 259.507334] Bluetooth: hci7: command tx timeout [ 259.572281] Bluetooth: hci6: command tx timeout [ 260.979281] Bluetooth: hci0: command tx timeout [ 261.236612] Bluetooth: hci1: command tx timeout [ 261.236659] Bluetooth: hci3: command tx timeout [ 261.300471] Bluetooth: hci2: command tx timeout [ 261.300538] Bluetooth: hci5: command tx timeout [ 261.491317] Bluetooth: hci4: command tx timeout [ 261.555296] Bluetooth: hci7: command tx timeout [ 261.619275] Bluetooth: hci6: command tx timeout [ 263.027295] Bluetooth: hci0: command tx timeout [ 263.284500] Bluetooth: hci3: command tx timeout [ 263.284515] Bluetooth: hci1: command tx timeout [ 263.347418] Bluetooth: hci2: command tx timeout [ 263.347913] Bluetooth: hci5: command tx timeout [ 263.540536] Bluetooth: hci4: command tx timeout [ 263.603583] Bluetooth: hci7: command tx timeout [ 263.667302] Bluetooth: hci6: command tx timeout [ 265.076155] Bluetooth: hci0: command tx timeout [ 265.333239] Bluetooth: hci3: command tx timeout [ 265.333779] Bluetooth: hci1: command tx timeout [ 265.395557] Bluetooth: hci5: command tx timeout [ 265.396324] Bluetooth: hci2: command tx timeout [ 265.587517] Bluetooth: hci4: command tx timeout [ 265.651382] Bluetooth: hci7: command tx timeout [ 265.715336] Bluetooth: hci6: command tx timeout [ 319.616260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.633722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.645101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.706976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.718402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.743974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.746685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.759896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.762747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.764537] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.766547] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.769406] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.776309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.782546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.787567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.831625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.834764] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.838782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.848596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.852664] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.899981] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.912130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.919098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.966918] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.975264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.977536] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.980919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.985587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.988929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.011876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.014827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.016263] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.017973] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.025529] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.043441] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.083850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.092835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.095410] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.131090] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.153551] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 321.779307] Bluetooth: hci0: command tx timeout [ 321.843351] Bluetooth: hci2: command tx timeout [ 321.844005] Bluetooth: hci1: command tx timeout [ 321.971329] Bluetooth: hci3: command tx timeout [ 322.036548] Bluetooth: hci4: command tx timeout [ 322.099372] Bluetooth: hci5: command tx timeout [ 322.163366] Bluetooth: hci6: command tx timeout [ 322.227382] Bluetooth: hci7: command tx timeout [ 323.827277] Bluetooth: hci0: command tx timeout [ 323.891360] Bluetooth: hci1: command tx timeout [ 323.892913] Bluetooth: hci2: command tx timeout [ 324.019373] Bluetooth: hci3: command tx timeout [ 324.083382] Bluetooth: hci4: command tx timeout [ 324.148386] Bluetooth: hci5: command tx timeout [ 324.211342] Bluetooth: hci6: command tx timeout [ 324.276247] Bluetooth: hci7: command tx timeout [ 325.875363] Bluetooth: hci0: command tx timeout [ 325.940687] Bluetooth: hci1: command tx timeout [ 325.942556] Bluetooth: hci2: command tx timeout [ 326.067281] Bluetooth: hci3: command tx timeout [ 326.132545] Bluetooth: hci4: command tx timeout [ 326.196474] Bluetooth: hci5: command tx timeout [ 326.259485] Bluetooth: hci6: command tx timeout [ 326.324250] Bluetooth: hci7: command tx timeout [ 327.923572] Bluetooth: hci0: command tx timeout [ 327.988360] Bluetooth: hci2: command tx timeout [ 327.990045] Bluetooth: hci1: command tx timeout [ 328.115511] Bluetooth: hci3: command tx timeout [ 328.180311] Bluetooth: hci4: command tx timeout [ 328.245239] Bluetooth: hci5: command tx timeout [ 328.307331] Bluetooth: hci6: command tx timeout [ 328.371691] Bluetooth: hci7: command tx timeout [ 382.494678] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.496352] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.497641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.502931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.506560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.538594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.542964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.545644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.549344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.553393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.666463] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.674798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.691022] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.702784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.705994] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.709477] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.715627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.721725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.724524] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.729614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.809860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.812629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.814127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.819524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.824507] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.842523] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.846831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.850902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.887583] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 382.906573] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 382.923567] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 382.934784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.937442] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.941525] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.944521] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.954228] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 382.957063] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.963387] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.981386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.997517] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 384.564322] Bluetooth: hci1: command tx timeout [ 384.627377] Bluetooth: hci0: command tx timeout [ 384.756297] Bluetooth: hci2: command tx timeout [ 384.883473] Bluetooth: hci3: command tx timeout [ 384.947364] Bluetooth: hci4: command tx timeout [ 385.013077] Bluetooth: hci5: command tx timeout [ 385.075308] Bluetooth: hci7: command tx timeout [ 385.395455] Bluetooth: hci6: command tx timeout [ 386.611281] Bluetooth: hci1: command tx timeout [ 386.675435] Bluetooth: hci0: command tx timeout [ 386.803287] Bluetooth: hci2: command tx timeout [ 386.931842] Bluetooth: hci3: command tx timeout [ 386.995268] Bluetooth: hci4: command tx timeout [ 387.060373] Bluetooth: hci5: command tx timeout [ 387.123270] Bluetooth: hci7: command tx timeout [ 387.443515] Bluetooth: hci6: command tx timeout [ 388.660252] Bluetooth: hci1: command tx timeout [ 388.723267] Bluetooth: hci0: command tx timeout [ 388.851332] Bluetooth: hci2: command tx timeout [ 388.980646] Bluetooth: hci3: command tx timeout [ 389.044455] Bluetooth: hci4: command tx timeout [ 389.108413] Bluetooth: hci5: command tx timeout [ 389.171287] Bluetooth: hci7: command tx timeout [ 389.492696] Bluetooth: hci6: command tx timeout [ 390.707296] Bluetooth: hci1: command tx timeout [ 390.771643] Bluetooth: hci0: command tx timeout [ 390.899723] Bluetooth: hci2: command tx timeout [ 391.027452] Bluetooth: hci3: command tx timeout [ 391.091584] Bluetooth: hci4: command tx timeout [ 391.155310] Bluetooth: hci5: command tx timeout [ 391.219288] Bluetooth: hci7: command tx timeout [ 391.539289] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 15:09:17 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea00001b7000 RCX=ffffffff8190ef21 RDX=ffff88802cd90000 RSI=0000000000000008 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff88803234f840 R8 =0000000000000000 R9 =fffff94000036e00 R10=0000000000000000 R11=0000000000000001 R12=0000000006dc0025 R13=00007feff325e000 R14=ffff88803234fce0 R15=0000000000000000 RIP=ffffffff8190ef3f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feff36206f4 CR3=00000000293bd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007feff362f47000007feff362ef20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880e571b000 RCX=ea1afa703a7121e7 RDX=0000000000000000 RSI=0000000030b7cd12 RDI=ffff88806cf31850 RBP=ffff88803236f470 RSP=ffff88803236f398 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff88803236f460 R14=ffff8880132e5280 R15=ffff88803236f418 RIP=ffffffff815aba10 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3e75fa7028 CR3=000000000732c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000