Warning: Permanently added '[localhost]:12887' (ECDSA) to the list of known hosts. 2025/06/05 01:34:52 fuzzer started 2025/06/05 01:34:53 dialing manager at localhost:42669 syzkaller login: [ 93.855052] cgroup: Unknown subsys name 'net' [ 93.990013] cgroup: Unknown subsys name 'cpuset' [ 94.056889] cgroup: Unknown subsys name 'rlimit' 2025/06/05 01:35:16 syscalls: 202 2025/06/05 01:35:16 code coverage: enabled 2025/06/05 01:35:16 comparison tracing: enabled 2025/06/05 01:35:16 extra coverage: enabled 2025/06/05 01:35:16 setuid sandbox: enabled 2025/06/05 01:35:16 namespace sandbox: enabled 2025/06/05 01:35:16 Android sandbox: enabled 2025/06/05 01:35:16 fault injection: enabled 2025/06/05 01:35:16 leak checking: enabled 2025/06/05 01:35:16 net packet injection: enabled 2025/06/05 01:35:16 net device setup: enabled 2025/06/05 01:35:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/05 01:35:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/05 01:35:16 USB emulation: enabled 2025/06/05 01:35:16 hci packet injection: enabled 2025/06/05 01:35:16 wifi device emulation: enabled 2025/06/05 01:35:16 802.15.4 emulation: enabled 2025/06/05 01:35:16 fetching corpus: 0, signal 0/0 (executing program) 2025/06/05 01:35:17 starting 8 fuzzer processes 01:35:17 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x6, 0x1, 0x18, @mcast2, @loopback, 0xf, 0x1, 0x20, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', r0, 0x2f, 0x0, 0x40, 0x7, 0x14, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x80, 0x40, 0x7, 0x2}}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x80800) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x10, r3, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r5 = accept4$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', r6, 0x2f, 0x1, 0x2a, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf9128c3aa26abd6b, 0x700, 0x0, 0x2}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xbc, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x81}, 0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008055}, 0x20000044) write$cgroup_int(r4, &(0x7f0000000640)=0x3, 0x12) r8 = accept$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x0, 0x1175f548bd7a7687, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x8040) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r10, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x4055) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000940)={r9, 0x1, 0x6, @local}, 0x10) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80080}, 0x4041) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r11) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xa4, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2400c854}, 0x4) 01:35:17 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, 0x0, r0) keyctl$clear(0x7, r0) r1 = gettid() setpgid(r1, 0xffffffffffffffff) r2 = getpid() keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r0, 0x0) ptrace$getregset(0x4204, r1, 0x202, &(0x7f00000000c0)={&(0x7f0000000080)=""/52, 0x34}) r3 = getpid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x16, 0x0, @tid=r3}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x3, 0x3, 0x3f, 0x81, 0x0, 0x0, 0x80281, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x8000}, 0x8014, 0xfffffffffffffcc7, 0xf5ab, 0x0, 0x66, 0x3ff, 0xb68, 0x0, 0x400, 0x0, 0x4}, r2, 0x9, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x27c, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0xb8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f824ef21464e5d924f609e97cf807cef9bc687806e5acd9090608c4282b82bcb"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "21d54ea9b7672bc4691fba0f0a68aeeb"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a5cf5762363d4e20adeb54523e0aa28d0e11a2f7944d6b65fdc3504de8508c8f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fc03f510382373b685769bcd9727df332bc494c5311e7ce8ded56b3bf683b5b5"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7c835d3e68fe3131cb4a4ea2e83d61ee"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x188, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "38ce814e8218463031e945cd875b1828"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x50}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "693288a9ad9ae7f76ef3f3cc0825564bf3207b2499440d7ba0fa5d9c371f0abf"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a1788c613c67bc503e209de61e0af595"}, @NL802154_KEY_ATTR_ID={0x88, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8ddd574b9f8a1b02365b8d03bea2ebff8c9c81756c53d7e9e21df8c70b18543b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x40015}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc040) gettid() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}]}, 0x20}}, 0x10) 01:35:17 executing program 2: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/4096) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000001000)=""/173) r0 = syz_open_dev$evdev(&(0x7f00000010c0), 0x95e, 0x48480) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000001100)=""/4096) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000002280)=""/27) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000022c0)=""/222) accept4$packet(r1, &(0x7f0000002400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002440)=0x14, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000002540)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x4c, 0x0, 0x1, 0x70bd2b, 0x91aa, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) process_mrelease(r1, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x3000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002580), 0x10b002, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f00000025c0)=""/21) r4 = gettid() r5 = gettid() r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002800)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000002840)={0x2000000, &(0x7f0000002600), &(0x7f0000002640), &(0x7f0000002680), {0x2a}, &(0x7f00000026c0)=""/115, 0x73, &(0x7f0000002740)=""/76, &(0x7f00000027c0)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x0], 0x6, {r6}}, 0x58) timer_create(0x6, &(0x7f00000028c0)={0x0, 0x26, 0x1, @tid=r5}, &(0x7f0000002900)) get_thread_area(&(0x7f0000002940)={0x8, 0x20000000, 0x4000, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}) 01:35:17 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xce5a}}, './file0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r1, 0x29, 0x10, 0x8b, 0x3bebacbc, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x700, 0x0, 0x198d}}) r2 = accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) accept4$packet(r2, 0x0, &(0x7f0000000200), 0xc1000) r3 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2, 0x6, 0x1, 0x5670546f, 0x7fffffff, r3}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000000300), r4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) r8 = openat$cgroup_ro(r5, &(0x7f00000004c0)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000500)=0x2, 0x4) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 117.714482] audit: type=1400 audit(1749087317.197:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:35:17 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42348702}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4044004) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x1ff) waitid$P_PIDFD(0x3, r0, &(0x7f0000000240), 0x1, &(0x7f00000002c0)) process_mrelease(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000003c0)=""/35) r3 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0x40, 0xa5b, 0x80, 0x4, 0x9, r3}) r4 = getpid() perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x7f, 0x1, 0x43, 0xf8, 0x0, 0xffffffffffff8000, 0x100, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000480), 0x6}, 0x12840, 0xfff, 0x7, 0x4, 0x6, 0x3, 0x7751, 0x0, 0x8, 0x0, 0x1000}, r4, 0x3, 0xffffffffffffffff, 0x9) ptrace$getregset(0x4204, r4, 0x6, &(0x7f0000000580)={&(0x7f0000000540)=""/37, 0x25}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x16c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x90}, 0x20004084) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000840), 0x200000, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000880), 0x484080, 0x0) pidfd_getfd(r7, r6, 0x0) 01:35:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{r1, r2+10000000}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7f, 0x7, 0x6, 0x7c1a, 0x1}) clock_gettime(0x7, &(0x7f0000000100)) clock_gettime(0x5, &(0x7f0000000140)) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xde}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}]}, 0x44}}, 0x40) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6gre0\x00', r5, 0x2f, 0xfc, 0x3, 0x0, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x20, 0x8, 0x3}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) accept4$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14, 0x800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xdc, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe0}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x805}, 0x4044800) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x1, 0x9, 0x2, @private0, @private0, 0x7800, 0x40, 0xa4, 0xff}}) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffe}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x5]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x9, 0x9, 0x9a4]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x100, 0x400, 0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x380000}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000880)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r10, 0x89f6, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'sit0\x00', r9, 0x29, 0x40, 0x1f, 0x8, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x40, 0x0, 0x1b69, 0xffff7fff}}) sched_rr_get_interval(0x0, &(0x7f00000009c0)) 01:35:17 executing program 6: keyctl$get_persistent(0x16, 0x0, 0x0) r0 = add_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="669ce9f094e495edf7b90852820f32790f784b441a089b", 0x17, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)='logon\x00') r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xee00, r1) r2 = add_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="87f09f675a3192a8cefa68c392c2c204b761cc61e4d0fe6015413edb8ceb4e3d3e5a29154f6f1035de673076096968d3a17c35bb280ac6d64b488ab362cf64ac119fc3abc481a6d356ffff02cbf88a10ebe00871703b8333fcadf7e70f4a331ce565c14cc0ea53443cf49e", 0x6b, r1) r3 = request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='syz', r2) r4 = request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='keyring\x00', 0xfffffffffffffffd) keyctl$negate(0xd, r3, 0xffffffffffffffff, r4) r5 = add_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="8d2a005cce4880fc757140c0f9161a32fd62d6edeb83c1cba63b50c4b9e009f18906", 0x22, 0xfffffffffffffffb) keyctl$link(0x8, r5, r1) r6 = request_key(&(0x7f00000006c0)='id_resolver\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)='^\x00', 0x0) add_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="503846865c2b93393ea671b0492f751362be279d8a9f7221ecca44becdb9f2254779034aa3bca4fb0832112e87b1b56720e8147f8f07f775cf734fe014a10f2b468b84ca453c7d88b9b379b71d8db8a08419ccae1050ee48f2fac57fa5bc49ba9af1cddeac67ebb7cef520d72882644d6f83b28a01a3919f08851f500da0bca7a53dbf9563619254177121b6ffe96f394f", 0x91, r6) r7 = add_key(&(0x7f0000000780)='id_resolver\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)="672c04add37bd84c8e6fe7a87befec596bc2f2d67790e8ab46f0f3161b7231db7233f0490b910824563046097e46db922350d23e16cb04487a50ecb19bbc418e87d24b0a14695134b7720118bc2b0107158f54993a176a829ba969974be307cf3d29186702b79b3e74d0d58dbef01869f135bee331689d2899cda73cb7daaf34dc9bd9f245518718d79e175150117cf9157cffb17e22f55f138eb087778aa68c", 0xa0, 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r7, &(0x7f00000008c0)='ceph\x00', &(0x7f0000000900)='id_resolver\x00') add_key(&(0x7f0000000940)='asymmetric\x00', &(0x7f0000000980)={'syz', 0x0}, &(0x7f00000009c0)="7e5ef9e99276fb1b71d1478e4c226c5d94fae676e6db70f54e92ea531290d6c7a53168774757599111c4af34cbbbc4e6bf", 0x31, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000a00)='id_legacy\x00', &(0x7f0000000a40)='^\x00') r8 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc1}, &(0x7f0000000b80)={0x0, "6f84d522550f73aac621d641d2b70d28018c1c1687737c4be6e7aa49bbeca02c5d11e4e3a32ccd3e8eb51c3d40903c9a2b41537010bc925b07f9e660575cdf14", 0x31}, 0x48, r5) keyctl$search(0xa, r3, &(0x7f0000000a80)='asymmetric\x00', &(0x7f0000000ac0)={'syz', 0x1}, r8) 01:35:17 executing program 7: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000080)='(\x00', 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x8) write$tcp_mem(r2, &(0x7f0000000140)={0x1, 0x20, 0x1, 0x20, 0x8}, 0x48) r5 = io_uring_setup(0x3c92, &(0x7f00000001c0)={0x0, 0x2e12, 0x0, 0x2, 0x384, 0x0, r2}) r6 = syz_io_uring_setup(0x71e, &(0x7f0000000240)={0x0, 0x4096, 0x0, 0x0, 0x100, 0x0, r5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$CDROM_SELECT_SPEED(r2, 0x5322, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r8, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000005}, 0x80081) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) r9 = syz_io_uring_setup(0x4a9, &(0x7f0000000500)={0x0, 0xc5f9, 0x0, 0x3, 0xc6, 0x0, r7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_enter(r9, 0x1b3c, 0x421, 0x0, &(0x7f0000000600)={[0x2]}, 0x8) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x2940, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 119.141794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.144520] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.146887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.154292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.158880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.204861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.211958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.217531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.219440] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.220906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.222490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.223561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.225019] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.230660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.231728] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.235312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.236815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.240506] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.244874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.260789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.285704] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.291634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.294774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.301599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.304637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.304884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.310649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.311992] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.319787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.324915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.331311] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.333025] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.338931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.340052] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.341790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.350334] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.416747] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.432547] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.444132] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.464102] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.170758] Bluetooth: hci0: command tx timeout [ 121.298507] Bluetooth: hci2: command tx timeout [ 121.300356] Bluetooth: hci1: command tx timeout [ 121.363322] Bluetooth: hci5: command tx timeout [ 121.364203] Bluetooth: hci3: command tx timeout [ 121.427357] Bluetooth: hci6: command tx timeout [ 121.428611] Bluetooth: hci4: command tx timeout [ 121.555724] Bluetooth: hci7: command tx timeout [ 123.220219] Bluetooth: hci0: command tx timeout [ 123.347586] Bluetooth: hci1: command tx timeout [ 123.348080] Bluetooth: hci2: command tx timeout [ 123.410375] Bluetooth: hci3: command tx timeout [ 123.410859] Bluetooth: hci5: command tx timeout [ 123.475452] Bluetooth: hci4: command tx timeout [ 123.475930] Bluetooth: hci6: command tx timeout [ 123.603211] Bluetooth: hci7: command tx timeout [ 125.266232] Bluetooth: hci0: command tx timeout [ 125.395229] Bluetooth: hci2: command tx timeout [ 125.395689] Bluetooth: hci1: command tx timeout [ 125.459328] Bluetooth: hci5: command tx timeout [ 125.459774] Bluetooth: hci3: command tx timeout [ 125.523235] Bluetooth: hci4: command tx timeout [ 125.523675] Bluetooth: hci6: command tx timeout [ 125.650458] Bluetooth: hci7: command tx timeout [ 127.315537] Bluetooth: hci0: command tx timeout [ 127.443589] Bluetooth: hci2: command tx timeout [ 127.444044] Bluetooth: hci1: command tx timeout [ 127.509194] Bluetooth: hci3: command tx timeout [ 127.509639] Bluetooth: hci5: command tx timeout [ 127.570453] Bluetooth: hci6: command tx timeout [ 127.570884] Bluetooth: hci4: command tx timeout [ 127.699197] Bluetooth: hci7: command tx timeout [ 181.732645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.737689] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.744532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.757659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.764671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.867880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.873874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.881843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.892685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.896113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.958444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.967691] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.975573] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.979754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.983683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.987865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.993886] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.007904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.018786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.030844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.033378] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.039306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.044661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.046905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.052708] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.056301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.061200] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 182.071859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 182.077533] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.086904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.088386] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.113073] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.115923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.122240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 182.151731] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.164099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 182.170398] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.172543] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.175018] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.179715] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.826341] Bluetooth: hci0: command tx timeout [ 183.954462] Bluetooth: hci1: command tx timeout [ 184.147425] Bluetooth: hci3: command tx timeout [ 184.211338] Bluetooth: hci5: command tx timeout [ 184.212005] Bluetooth: hci2: command tx timeout [ 184.274449] Bluetooth: hci7: command tx timeout [ 184.275109] Bluetooth: hci4: command tx timeout [ 184.339208] Bluetooth: hci6: command tx timeout [ 185.874523] Bluetooth: hci0: command tx timeout [ 186.004175] Bluetooth: hci1: command tx timeout [ 186.194241] Bluetooth: hci3: command tx timeout [ 186.259621] Bluetooth: hci5: command tx timeout [ 186.260101] Bluetooth: hci2: command tx timeout [ 186.322310] Bluetooth: hci7: command tx timeout [ 186.322781] Bluetooth: hci4: command tx timeout [ 186.386347] Bluetooth: hci6: command tx timeout [ 187.922242] Bluetooth: hci0: command tx timeout [ 188.050235] Bluetooth: hci1: command tx timeout [ 188.244184] Bluetooth: hci3: command tx timeout [ 188.306289] Bluetooth: hci2: command tx timeout [ 188.306752] Bluetooth: hci5: command tx timeout [ 188.370246] Bluetooth: hci4: command tx timeout [ 188.370712] Bluetooth: hci7: command tx timeout [ 188.436447] Bluetooth: hci6: command tx timeout [ 189.970418] Bluetooth: hci0: command tx timeout [ 190.098363] Bluetooth: hci1: command tx timeout [ 190.290305] Bluetooth: hci3: command tx timeout [ 190.354519] Bluetooth: hci5: command tx timeout [ 190.354952] Bluetooth: hci2: command tx timeout [ 190.418237] Bluetooth: hci7: command tx timeout [ 190.418672] Bluetooth: hci4: command tx timeout [ 190.482397] Bluetooth: hci6: command tx timeout [ 243.750918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.755747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.759376] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.768281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.773425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.917674] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.925181] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.928642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.956018] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.968685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.030553] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.033774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.038101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.045627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.058701] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.081756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.094733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.138082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.147535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.171901] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.176689] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.177444] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.179614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.186764] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.190788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.194718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.205800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.213632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.253073] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.266851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.269746] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.271484] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.276017] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.281050] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.284875] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.288963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.312092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.339097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.340450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.392505] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.843490] Bluetooth: hci0: command tx timeout [ 246.035259] Bluetooth: hci1: command tx timeout [ 246.164863] Bluetooth: hci2: command tx timeout [ 246.226287] Bluetooth: hci6: command tx timeout [ 246.226971] Bluetooth: hci3: command tx timeout [ 246.355268] Bluetooth: hci7: command tx timeout [ 246.418235] Bluetooth: hci4: command tx timeout [ 246.482484] Bluetooth: hci5: command tx timeout [ 247.892208] Bluetooth: hci0: command tx timeout [ 248.082299] Bluetooth: hci1: command tx timeout [ 248.210217] Bluetooth: hci2: command tx timeout [ 248.274885] Bluetooth: hci6: command tx timeout [ 248.275924] Bluetooth: hci3: command tx timeout [ 248.402554] Bluetooth: hci7: command tx timeout [ 248.467755] Bluetooth: hci4: command tx timeout [ 248.531250] Bluetooth: hci5: command tx timeout [ 249.940174] Bluetooth: hci0: command tx timeout [ 250.130444] Bluetooth: hci1: command tx timeout [ 250.258219] Bluetooth: hci2: command tx timeout [ 250.322263] Bluetooth: hci3: command tx timeout [ 250.322745] Bluetooth: hci6: command tx timeout [ 250.450468] Bluetooth: hci7: command tx timeout [ 250.514414] Bluetooth: hci4: command tx timeout [ 250.579368] Bluetooth: hci5: command tx timeout [ 251.986530] Bluetooth: hci0: command tx timeout [ 252.178288] Bluetooth: hci1: command tx timeout [ 252.306308] Bluetooth: hci2: command tx timeout [ 252.370491] Bluetooth: hci3: command tx timeout [ 252.370954] Bluetooth: hci6: command tx timeout [ 252.498317] Bluetooth: hci7: command tx timeout [ 252.562328] Bluetooth: hci4: command tx timeout [ 252.626209] Bluetooth: hci5: command tx timeout [ 306.021571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.030110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.036897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.055572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.062626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.093275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.098937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.102597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.123493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.127285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.287597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.294820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.302760] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.312628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.320422] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.324246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.326821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.337658] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.356044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.404028] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.406027] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.410838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.414917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.420798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.425416] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.513841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.556674] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.566319] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.580613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.590841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.593998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.614682] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.621000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.655395] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.689586] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.806053] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.816009] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.820548] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.831934] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.838584] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.114912] Bluetooth: hci0: command tx timeout [ 308.179596] Bluetooth: hci1: command tx timeout [ 308.370657] Bluetooth: hci2: command tx timeout [ 308.498308] Bluetooth: hci3: command tx timeout [ 308.499467] Bluetooth: hci4: command tx timeout [ 308.755729] Bluetooth: hci5: command tx timeout [ 309.138587] Bluetooth: hci6: command tx timeout [ 309.842381] Bluetooth: hci7: command tx timeout [ 310.162312] Bluetooth: hci0: command tx timeout [ 310.226284] Bluetooth: hci1: command tx timeout [ 310.419418] Bluetooth: hci2: command tx timeout [ 310.546761] Bluetooth: hci4: command tx timeout [ 310.547546] Bluetooth: hci3: command tx timeout [ 310.803384] Bluetooth: hci5: command tx timeout [ 311.186284] Bluetooth: hci6: command tx timeout [ 311.890264] Bluetooth: hci7: command tx timeout [ 312.210325] Bluetooth: hci0: command tx timeout [ 312.274640] Bluetooth: hci1: command tx timeout [ 312.466280] Bluetooth: hci2: command tx timeout [ 312.594397] Bluetooth: hci4: command tx timeout [ 312.595448] Bluetooth: hci3: command tx timeout [ 312.850703] Bluetooth: hci5: command tx timeout [ 313.234206] Bluetooth: hci6: command tx timeout [ 313.939801] Bluetooth: hci7: command tx timeout [ 314.258283] Bluetooth: hci0: command tx timeout [ 314.323299] Bluetooth: hci1: command tx timeout [ 314.514323] Bluetooth: hci2: command tx timeout [ 314.642780] Bluetooth: hci4: command tx timeout [ 314.644107] Bluetooth: hci3: command tx timeout [ 314.898317] Bluetooth: hci5: command tx timeout [ 315.282330] Bluetooth: hci6: command tx timeout [ 315.986249] Bluetooth: hci7: command tx timeout [ 368.548009] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.550665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.553350] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.565118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.570878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.629949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.637766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.640821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.650678] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.656617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.680288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.687630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.689935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.698946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.704040] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.765761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.769020] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.792679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.808033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.824362] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.828808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.837740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.847820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.853925] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 368.858071] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.861321] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 368.863331] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.870856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.873427] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 368.877666] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.879098] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.879516] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.885527] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.921794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.921854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.930987] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.939288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.942797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.981398] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.993723] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.642322] Bluetooth: hci0: command tx timeout [ 370.706882] Bluetooth: hci1: command tx timeout [ 370.772453] Bluetooth: hci2: command tx timeout [ 370.962283] Bluetooth: hci3: command tx timeout [ 370.963585] Bluetooth: hci7: command tx timeout [ 371.026378] Bluetooth: hci5: command tx timeout [ 371.090331] Bluetooth: hci6: command tx timeout [ 371.091397] Bluetooth: hci4: command tx timeout [ 372.690380] Bluetooth: hci0: command tx timeout [ 372.756748] Bluetooth: hci1: command tx timeout [ 372.818404] Bluetooth: hci2: command tx timeout [ 373.011498] Bluetooth: hci7: command tx timeout [ 373.013205] Bluetooth: hci3: command tx timeout [ 373.075321] Bluetooth: hci5: command tx timeout [ 373.139272] Bluetooth: hci6: command tx timeout [ 373.139926] Bluetooth: hci4: command tx timeout [ 374.739243] Bluetooth: hci0: command tx timeout [ 374.802198] Bluetooth: hci1: command tx timeout [ 374.866490] Bluetooth: hci2: command tx timeout [ 375.060301] Bluetooth: hci3: command tx timeout [ 375.060736] Bluetooth: hci7: command tx timeout [ 375.124643] Bluetooth: hci5: command tx timeout [ 375.186392] Bluetooth: hci4: command tx timeout [ 375.186808] Bluetooth: hci6: command tx timeout [ 376.787352] Bluetooth: hci0: command tx timeout [ 376.850193] Bluetooth: hci1: command tx timeout [ 376.915467] Bluetooth: hci2: command tx timeout [ 377.107302] Bluetooth: hci7: command tx timeout [ 377.107747] Bluetooth: hci3: command tx timeout [ 377.172399] Bluetooth: hci5: command tx timeout [ 377.235466] Bluetooth: hci4: command tx timeout [ 377.235901] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 01:40:21 Registers: info registers vcpu 0 RAX=000000000000000b RBX=0000000000000001 RCX=ffffffff812d96f1 RDX=000000000000000b RSI=ffffffff867b2aec RDI=ffffffff8646f0f8 RBP=ffff8880251976c0 RSP=ffff888025197590 R8 =ffffffff867b2aec R9 =0000000000000000 R10=000000000003b6bd R11=00000000000043f8 R12=ffff8880251976c8 R13=ffff8880251976b0 R14=ffff8880251976a9 R15=ffff888025197668 RIP=ffffffff813533a6 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f80579406f4 CR3=000000002f159000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f805794f47000007f805794ef20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81a77aed RDI=ffffed100d9e776a RBP=ffff88806cf3bb50 RSP=ffff88802b527ab8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff8641ee57 R11=ffff88806cf3bb50 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf3bb50 RIP=ffffffff8151b1d2 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556fac6400 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f47350358e0 CR3=000000002a747000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000ff0000000000ff XMM02=000000ff000000ff000000ff000000ff XMM03=ff00000000000000ff0000000000ff00 XMM04=000000000000000000ff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000