[ OK ] Finished Update UTMP about System Runlevel Changes. [ 86.015270] audit: type=1400 audit(1749385578.069:6): avc: denied { checkpoint_restore } for pid=223 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:17165' (ECDSA) to the list of known hosts. 2025/06/08 12:26:25 fuzzer started 2025/06/08 12:26:26 dialing manager at localhost:40003 syzkaller login: [ 94.639641] cgroup: Unknown subsys name 'net' [ 94.766709] cgroup: Unknown subsys name 'cpuset' [ 94.810852] cgroup: Unknown subsys name 'rlimit' 2025/06/08 12:26:43 syscalls: 2214 2025/06/08 12:26:43 code coverage: enabled 2025/06/08 12:26:43 comparison tracing: enabled 2025/06/08 12:26:43 extra coverage: enabled 2025/06/08 12:26:43 setuid sandbox: enabled 2025/06/08 12:26:43 namespace sandbox: enabled 2025/06/08 12:26:43 Android sandbox: enabled 2025/06/08 12:26:43 fault injection: enabled 2025/06/08 12:26:43 leak checking: enabled 2025/06/08 12:26:43 net packet injection: enabled 2025/06/08 12:26:43 net device setup: enabled 2025/06/08 12:26:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 12:26:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 12:26:43 USB emulation: enabled 2025/06/08 12:26:43 hci packet injection: enabled 2025/06/08 12:26:43 wifi device emulation: enabled 2025/06/08 12:26:43 802.15.4 emulation: enabled 2025/06/08 12:26:43 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 12:26:46 starting 8 fuzzer processes 12:26:46 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x111001, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2004c084) write$hidraw(r0, &(0x7f0000000180)="572edc29e2daea7cf623d2104bd488667baf48dca9020b43903dd3622b77a5bb17ad4ac18eb879fea538e90e6b087bb541d66b40d4dcea2f05b348be36ceb08b29432a94fc67e925f260933735daf28df2ecda726724cfcab1b93a86cbd5e5c03c5c4b6fa69325b18d0d1832cba184f6fdbf4dbcddeda97d6d17156e7a4bc1a4c1978fb90ec2e4c968e194b279658ab3e56ee1944e530bf5bfe821c50cdcc2b04b5cc73f4778f7fb428f9d9c", 0xac) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000240)={{0x3, 0x1, 0x0, 0xaa5882781a7d5de6}, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f00000002c0)={{0x8, 0x1}, {0x9, 0x9c}, 0x40, 0x1}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x2f, 0x3f, 0x8, 0x1, 0x20, @dev={0xfe, 0x80, '\x00', 0x12}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7800, 0x7, 0x3, 0x9}}) recvfrom$packet(r0, &(0x7f0000000300)=""/164, 0xa4, 0x40002000, &(0x7f0000000540)={0x11, 0x17, r2, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000580)={0x0, 0x4, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x180, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x4008070) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/module/ahci', 0x109000, 0x160) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000a80)={0x0, 0x4, 0x0, [0x2, 0x2, 0x5, 0x3f, 0x4], [0x5f4, 0x101, 0x3, 0x3f, 0x2, 0x8, 0x81, 0x2, 0x0, 0xfffffffffffffe00, 0x704, 0xffff, 0x8, 0x6, 0x81, 0x4, 0x4, 0x3ff, 0x5, 0x5, 0x7, 0xfffffffffffffff7, 0x7f, 0x400, 0x20, 0x3f, 0xfffffffffffffffb, 0x8001, 0x3, 0xffff, 0x1000, 0xfff, 0x2, 0x101, 0x0, 0x8001, 0x3, 0x7ff, 0xfffffffffffffffd, 0xff, 0x5e, 0x1f, 0x8, 0x1f, 0x494e, 0x1, 0x7, 0x9, 0x9, 0x4, 0x4195, 0x8, 0x1, 0x1, 0x9, 0x357, 0xffff, 0x76a, 0x7, 0x6, 0x3, 0x1ff, 0x45d7, 0xfffffffffffffffb, 0x100, 0x585c8ee, 0x1f, 0x8, 0x40, 0x5e6, 0x80, 0x4, 0x3ff, 0x2f4ccc1c, 0x200, 0x8, 0x4e1, 0x1000000000, 0xa000, 0x7fffffff, 0x7fffffff, 0x3f0e, 0x8000, 0x6, 0x800, 0x9, 0x7fff, 0x6, 0x800, 0x7dd2, 0x55, 0xf019, 0xfffffffffffffff8, 0x8, 0xa7, 0xc95, 0x3800000000, 0x3f, 0x8000000000000, 0x1, 0x6, 0x4, 0x6, 0x800, 0x77, 0x20, 0x0, 0x1ff, 0x3, 0x8d0, 0x1, 0x6, 0x3ff, 0x3, 0x40, 0x4, 0x5, 0x8, 0x8, 0x9, 0x3]}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000ec0)={{r3}, 0x0, 0x0, @inherit={0x90, &(0x7f00000009c0)={0x0, 0x9, 0x20, 0x100, {0x20, 0x9, 0xff, 0x400000000000000, 0x5}, [0x9, 0x6, 0x3, 0x12000000, 0x7, 0x6, 0x2, 0x8, 0xc4e8]}}, @devid=r6}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000001ec0), &(0x7f0000001f00)={'U-', 0x6376}, 0x16, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000001f40), 0x428440, 0x0) ioctl$CDROMREADMODE1(r7, 0x530d, &(0x7f0000001f80)={0x0, 0x5, 0x40, 0x6b, 0x1, 0x33}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000002b40)={&(0x7f0000002a40)=""/241, 0xf1}) 12:26:46 executing program 1: setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x7, 0x4) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3c, 0x30, 0x5, 0x2, 0x5, 0x3d5e86bc, 0x4, 0x78}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, 'vlan1\x00', {0x2}, 0x200}) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffffffffffffffff, &(0x7f00000000c0)="9ffe2996d54fed14ca1ec57b87467c58a24962b69bcd48521368ce8cd555b452f7a4e6ff9669c203c79dbd7584d9463ffd3902ce7514a1f41eca0d480f5294e7a463bc8225bb2159f7052a4c92d30d3a92915bdeee92635cf81dda8452052a77e9f68a790aceb0f84d2779f3135d861887826c600c1a961d8b8d5a7c31f6205636e27330958fabd5854ded0ba3756d9b4181acdead8c475d796dc056a4018633c6274f678a67442973af2fd7eed7cfb97c99b6676d59ddc99ec20b542f345677e7bb78e4d7ece2", 0xc7, 0x10000, 0x0, 0x0, r0}, &(0x7f0000000200)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'vcan0\x00', 0x4}, 0x18) prctl$PR_SVE_GET_VL(0x33, 0xaaa6) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000280)={'veth1_to_bond\x00', {0x2, 0x0, @multicast1}}) kexec_load(0x4, 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)="572c6f05ebf71b98c921df0fb9bdb398783a64b7a9ef05776e5013e5dd9e4b00c79a09d0e7c84f13c1d8c487629689b0db664c34e48600c3f44e0766790e828aa4ac6bf8ec874d8dfa6d29cb3087257d5baf0123ec445d59fdc583eb5b09640a4865d483e700540dd818712f", 0x6c, 0xb4e, 0x80}], 0x3c0002) getpeername$netlink(r0, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x400) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000580)=0x3) bind(r1, &(0x7f00000005c0)=@sco, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "1bca786eddbaa71a60a9667e7ec2afef"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c1d308300f6539c674095043658b9202"}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000810}, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) [ 114.073670] audit: type=1400 audit(1749385606.134:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:26:46 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x1, 0x0, 0x3, 0x0, 0x38, 0x400, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp, 0x40a, 0x4, 0x100, 0x0, 0x4, 0x0, 0x80, 0x0, 0x34df, 0x0, 0x9}, r0, 0x7, 0xffffffffffffffff, 0xa) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)={@rand_addr=0x64010102, @rand_addr=0x64010102, 0x1, 0x5, [@private=0xa010100, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x30}, @remote]}, 0x24) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x40, 0x8}, 0x18) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000001c0)={0x348}) getsockname$netlink(r2, &(0x7f0000000200), &(0x7f0000000240)=0xc) r3 = syz_open_pts(r1, 0x4880) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x2c) ioctl$TCSBRKP(r2, 0x5425, 0x9a) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000002c0)={0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}]}) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x44) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x2f8d}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000440)={'vlan1\x00', {0x2, 0x0, @multicast1}}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48850}, 0x200048c0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x9) recvfrom(r5, &(0x7f0000000580)=""/133, 0x85, 0x80000000, &(0x7f0000000640)=@nfc_llcp={0x27, 0x1, 0x0, 0x3, 0x3f, 0x81, "fc1dc8b2775da937d60b5ccefcb75e9b58ebb889b8abf92daaf72cfe00c7137bdd881896e4585eacb4ad93807668563d0e0d5506da195516c3c0333c382d5c", 0x2d}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000b80)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000c80)=0xe8) r7 = getpid() sendmsg$unix(r5, &(0x7f00000052c0)={&(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000740)="bebeb0257075faece3c62b79029b2ff09acac017a73ac559e4b41b18f133963abb0d7488ed360c0d5105d15e6c5e417554e32bd4d2903ab359256b881c36613d232a6c645cf493f668e668f227b0b53c16dcef2ef2422e49e1289ca2762551c51eb4ac7373c48ceace", 0x69}, {&(0x7f00000007c0)="fb3b2e7e7f12dad57f5ee73f3c289cc286df4b890fb8bdd5a931c7be67d8fc5b4299010027f71f74e7331b3bffa90caa20b3e8da65c28a20899cf147cb123ebef9dfd64c08e7e1cdf692510ffb67b018d50bb5e1b45e275027872867017f9cb653bd2541ea3bf214c291e5ec20d40f34481df99f7c7feac9f522d15c6fe2350a1ed6a4200289141a4564edc2b682857341015b3d5fcc54b21567ee9799b0985950c336f3c01b91446f07b2cf722aa968a2036872982eb3d26f29d9e93033fd01d2fb0a14d99128fe94818a6be6a3ba445e869748", 0xd4}, {&(0x7f00000008c0)="142557afbb4dcb31d525afd0747c07aa8b8d72e8f760612ab15772131509fff89f930bfaa46c3b7ed85cc4779f7e472364341a46f92eb7e5020ee65f3ecb8da9034cf8bf9995694ebbdfef671afa6a0388a1a41d29aedac81583977534c34cacec3591901e00f100597b45d728d2e0fc67af377240b1c1945af8ad1e15b85c790775a0d4e3b1daf7368015d1dde68803de16b90642370bb1462f68d21b396375fa19bcc7c87bf564023188592405f1b6584c7995950d46a4d79813d3c1e8b50172c47d3af91f857f3cd2dd5a47f6e984ffab4312e6c497b0606dcca1be0b5600eaa31cbb6062f2a111bee01175c89f", 0xef}, {&(0x7f00000009c0)="86ec991d6d6c2a5d7da0797ac51931c9308f0f07571de054ddf27a675b4f2d513a178195e53172", 0x27}, {&(0x7f0000000a00)="8e332c2c1a00875ecbbd8bda2d4d8662aee0c916a0da5964", 0x18}, {&(0x7f0000000a40)="546f0cf2fe32acf2d0109b412797feff165260505bb321f7617b9487ab18be01f26bf1402c8a4567cf5f7d349b851017ccefc539d38c11b27b9e2f64db72479c94777ecd0bf5dc7f536f2b3c22410e27968f96272c9e279332f8665ddf100b4d9c7e15cc9ee095a45dad0fdd786d1a3367f3e03168f91359d75c2d35f8c77187a085b61963bfe7", 0x87}], 0x6, &(0x7f0000005200)=[@cred={{0x1c, 0x1, 0x2, {r0, r6, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [r2, r5, r2, 0xffffffffffffffff]}}], 0x88, 0x4000}, 0x4041) 12:26:46 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) bind(r0, &(0x7f0000000000)=@sco, 0x80) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockname$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) r2 = syz_open_dev$vcsa(&(0x7f0000000200), 0x40, 0x400) splice(r2, &(0x7f0000000240)=0x7, r0, &(0x7f0000000280)=0x8, 0x3, 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x67}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x10004004) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000400)) recvmmsg$unix(r0, &(0x7f0000004a80)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/143, 0x8f}, {&(0x7f0000000680)=""/197, 0xc5}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/114, 0x72}, {&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000980)=""/148, 0x94}], 0x3}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001b80)=""/55, 0x37}, {&(0x7f0000001bc0)=""/112, 0x70}, {&(0x7f0000001c40)=""/211, 0xd3}, {&(0x7f0000001d40)=""/186, 0xba}, {&(0x7f0000001e00)=""/88, 0x58}], 0x5}}, {{&(0x7f0000001f00), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001f80)=""/42, 0x2a}], 0x1}}, {{&(0x7f0000002000), 0x6e, &(0x7f0000003100)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/58, 0x3a}, {&(0x7f00000030c0)=""/29, 0x1d}], 0x3}}, {{&(0x7f0000003140), 0x6e, &(0x7f00000034c0)=[{&(0x7f00000031c0)}, {&(0x7f0000003200)=""/121, 0x79}, {&(0x7f0000003280)=""/250, 0xfa}, {&(0x7f0000003380)=""/30, 0x1e}, {&(0x7f00000033c0)=""/125, 0x7d}, {&(0x7f0000003440)=""/104, 0x68}], 0x6, &(0x7f0000003540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000003680), 0x6e, &(0x7f0000004980)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/6, 0x6}, {&(0x7f0000004740)=""/174, 0xae}, {&(0x7f0000004800)=""/208, 0xd0}, {&(0x7f0000004900)=""/94, 0x5e}], 0x5, &(0x7f0000004a00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x8, 0x2000, &(0x7f0000004c80)={0x77359400}) fcntl$dupfd(r3, 0x406, r4) r11 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r11, &(0x7f0000004d80)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000004d40)={&(0x7f0000004d00)={0x30, 0x0, 0x600, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x4}}}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40110}, 0x20048080) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r10, 0x8008f512, &(0x7f0000004dc0)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000004e00)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000004e40)) ioctl$TUNSETOWNER(r8, 0x400454cc, r5) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000004e80)={{0x1, 0x1, 0x18, r6, {0xfffffff7}}, './file0\x00'}) write$tun(r12, &(0x7f0000004ec0)={@void, @val={0x1, 0x4, 0x1, 0x3, 0x57, 0x8d}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @remote, @mcast1, @local, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x3e) 12:26:46 executing program 4: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001340)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x6, &(0x7f00000013c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001480), 0x6e, &(0x7f0000001800)=[{&(0x7f0000001500)=""/91, 0x5b}, {&(0x7f0000001580)=""/172, 0xac}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f0000001740)=""/145, 0x91}], 0x4, &(0x7f0000001840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000002980)=[{&(0x7f0000001900)=""/88, 0x58}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x2, &(0x7f00000029c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002a40)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/242, 0xf2}, {&(0x7f0000002bc0)=""/254, 0xfe}], 0x2, &(0x7f0000002d00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x148}}], 0x4, 0x10041, &(0x7f0000002f80)={0x77359400}) fstat(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r0, r5) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x2010, r4, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000003040)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) syz_io_uring_submit(0x0, r6, &(0x7f0000003100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r7, 0x80, &(0x7f0000003080)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus640-generic)\x00'}}, 0xf9) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000003140)) sendmsg$FOU_CMD_GET(r8, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003240)={&(0x7f00000031c0)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x2c, r10, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000802}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000003540)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x480000a0}, 0xc, &(0x7f0000003500)={&(0x7f0000003440)={0xb0, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x468f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000005) keyctl$clear(0x7, 0xfffffffffffffff9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r11, &(0x7f0000003640)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4800) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000036c0), r11) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000003780)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x30, r12, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r13 = syz_open_dev$vcsa(&(0x7f00000037c0), 0x2, 0x90000) sendmsg$NL80211_CMD_DEL_INTERFACE(r13, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x63}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12:26:46 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x108, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20006040}, 0x4008004) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x5b29d20ea0c56c2e, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040) setns(r1, 0x8000000) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x3, 0x40044) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000280)='/dev/nvram\x00', 0x0, r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0xd02, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040014}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x2, 0xd7, 0xb3b5, 0x0, @remote, @empty, 0x80, 0x0, 0x6, 0x4}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc004}, 0x880) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r6, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) connect$802154_dgram(r7, &(0x7f0000000900)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000940)) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000980)={'geneve1\x00'}) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) 12:26:46 executing program 5: accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@loopback, @empty, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x1f, 0x5, 0x1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1, 0x20, 0x2, 0x2}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000480)={@initdev, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x33c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x4}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb56}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xc8, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0xcf, 0x5, 0x1000}, {0x94, 0x5, 0x5, 0x5629}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8084}, 0x44004011) r4 = syz_open_dev$mouse(&(0x7f00000008c0), 0x5, 0x501000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000940)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000a40)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6_vti0\x00', r1, 0x2b, 0x1, 0x44, 0x3, 0x44, @empty, @mcast2, 0x10, 0x7, 0x6, 0xdf}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@initdev}}, &(0x7f0000000d00)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'syztnl1\x00', r1, 0x4, 0xe0, 0x2, 0x0, 0x60, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x40, 0x10, 0xfbfa, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000e00)={'ip6gre0\x00', r3, 0x0, 0xf8, 0x8, 0x5, 0x18, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x69, 0x2}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000001080)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x158, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x2040}, 0x8000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000010c0)={0x0, 'netpci0\x00', {0x3}, 0x6}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000001100)={@ipv4={""/10, ""/2, @private}}, &(0x7f0000001140)=0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x91) r10 = socket(0x3, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f0000001280)={0x3, 'batadv_slave_1\x00', {0x4f24}, 0x4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001440)={'sit0\x00', &(0x7f00000013c0)={'syztnl2\x00', r3, 0x2f, 0x3f, 0x7f, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7, 0x7, 0x8, 0xd50}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r10, 0x89f5, &(0x7f0000001500)={'ip6_vti0\x00', &(0x7f0000001480)={'syztnl0\x00', r7, 0x52, 0x9, 0x2, 0x4, 0x1, @private0, @local, 0x0, 0x8, 0x4, 0x3}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000001600)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x7c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 12:26:46 executing program 7: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) r0 = pkey_alloc(0x0, 0x7) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, r0) r1 = memfd_secret(0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, r0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000100)={0x81, 0x20, 0x40, 0x1, "0a3e5244592c7d07950bb801130a81edddb330213b385b328248f0cd7b117b9e"}) move_pages(0x0, 0x8, &(0x7f0000000140)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000180)=[0xe8, 0x5ff, 0x4, 0x4, 0xffff629a, 0x1], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000200)={0x1, 0x2df0, 0x3f}) open_by_handle_at(r1, &(0x7f0000000240)=@FILEID_INO32_GEN={0x8, 0x1, {0x26, 0xffffffff}}, 0x140) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r3, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000002c0)=""/75) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x0, 0x2000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000380)=[{r3, 0x4}, {r4, 0x4408}, {r2, 0x400}, {0xffffffffffffffff, 0x6000}, {r5, 0x4000}, {r2, 0x4108}, {r2, 0x40}, {r2, 0x220}], 0x8, 0x8) openat$cgroup_subtree(r1, &(0x7f00000003c0), 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000400)) [ 115.389889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.393740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.399969] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.409862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.414634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.469594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.472689] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.478752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.498708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.511582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.581961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.589601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.597874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.617608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.626495] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.698608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.719304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.730346] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.741423] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.752649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.778869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.794495] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.805189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.807384] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.811119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.815981] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.817168] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.827677] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.841425] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.843212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.850566] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.855739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.861614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.863560] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.865737] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.873504] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.883963] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.888684] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.923153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.924862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.474406] Bluetooth: hci0: command tx timeout [ 117.599901] Bluetooth: hci1: command tx timeout [ 117.664346] Bluetooth: hci2: command tx timeout [ 117.919212] Bluetooth: hci4: command tx timeout [ 117.919410] Bluetooth: hci3: command tx timeout [ 117.984382] Bluetooth: hci6: command tx timeout [ 117.984451] Bluetooth: hci7: command tx timeout [ 117.984959] Bluetooth: hci5: command tx timeout [ 119.519200] Bluetooth: hci0: command tx timeout [ 119.647337] Bluetooth: hci1: command tx timeout [ 119.712108] Bluetooth: hci2: command tx timeout [ 119.968148] Bluetooth: hci4: command tx timeout [ 119.968613] Bluetooth: hci3: command tx timeout [ 120.031361] Bluetooth: hci7: command tx timeout [ 120.031379] Bluetooth: hci6: command tx timeout [ 120.032322] Bluetooth: hci5: command tx timeout [ 121.567209] Bluetooth: hci0: command tx timeout [ 121.696306] Bluetooth: hci1: command tx timeout [ 121.760440] Bluetooth: hci2: command tx timeout [ 122.017270] Bluetooth: hci3: command tx timeout [ 122.017335] Bluetooth: hci4: command tx timeout [ 122.079238] Bluetooth: hci6: command tx timeout [ 122.079286] Bluetooth: hci5: command tx timeout [ 122.079656] Bluetooth: hci7: command tx timeout [ 123.615416] Bluetooth: hci0: command tx timeout [ 123.743096] Bluetooth: hci1: command tx timeout [ 123.807092] Bluetooth: hci2: command tx timeout [ 124.063925] Bluetooth: hci4: command tx timeout [ 124.063951] Bluetooth: hci3: command tx timeout [ 124.127646] Bluetooth: hci7: command tx timeout [ 124.128233] Bluetooth: hci5: command tx timeout [ 124.128422] Bluetooth: hci6: command tx timeout [ 178.111158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.114464] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.119590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.127667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.132885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.196511] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.201200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.218824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.250632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.258754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.264115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.266749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.293347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.294978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.301283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.304590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.331582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.336613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.337611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.343506] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.347613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.350482] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.356606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.366257] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.387196] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.390232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.409486] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.423908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.431560] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.434384] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.455174] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.456745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.498560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.498805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.505116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.543087] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.558401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.562393] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.599675] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.614542] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.191138] Bluetooth: hci0: command tx timeout [ 180.383262] Bluetooth: hci1: command tx timeout [ 180.447121] Bluetooth: hci3: command tx timeout [ 180.576132] Bluetooth: hci2: command tx timeout [ 180.576915] Bluetooth: hci6: command tx timeout [ 180.578160] Bluetooth: hci5: command tx timeout [ 180.640689] Bluetooth: hci4: command tx timeout [ 180.767225] Bluetooth: hci7: command tx timeout [ 182.239316] Bluetooth: hci0: command tx timeout [ 182.431115] Bluetooth: hci1: command tx timeout [ 182.495508] Bluetooth: hci3: command tx timeout [ 182.623472] Bluetooth: hci6: command tx timeout [ 182.623982] Bluetooth: hci5: command tx timeout [ 182.624692] Bluetooth: hci2: command tx timeout [ 182.687926] Bluetooth: hci4: command tx timeout [ 182.815280] Bluetooth: hci7: command tx timeout [ 184.287112] Bluetooth: hci0: command tx timeout [ 184.480435] Bluetooth: hci1: command tx timeout [ 184.544056] Bluetooth: hci3: command tx timeout [ 184.671136] Bluetooth: hci6: command tx timeout [ 184.671582] Bluetooth: hci5: command tx timeout [ 184.672053] Bluetooth: hci2: command tx timeout [ 184.735123] Bluetooth: hci4: command tx timeout [ 184.863918] Bluetooth: hci7: command tx timeout [ 186.336274] Bluetooth: hci0: command tx timeout [ 186.527879] Bluetooth: hci1: command tx timeout [ 186.591424] Bluetooth: hci3: command tx timeout [ 186.719291] Bluetooth: hci2: command tx timeout [ 186.720160] Bluetooth: hci5: command tx timeout [ 186.720922] Bluetooth: hci6: command tx timeout [ 186.783517] Bluetooth: hci4: command tx timeout [ 186.913166] Bluetooth: hci7: command tx timeout [ 240.364929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.373593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.376521] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.384402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.388561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.402561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.405830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.408878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.425352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.433522] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.547533] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.560477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.563533] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.565610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.567942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.577825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.585126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.593589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.594853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.617648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.674675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.692089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.692353] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.697186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.721574] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.726212] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.727910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.730605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.738279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.739165] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.741963] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.768614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.779315] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.782552] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.785643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.787802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.794833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.814598] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.880699] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.882578] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.464120] Bluetooth: hci1: command tx timeout [ 242.527317] Bluetooth: hci0: command tx timeout [ 242.656143] Bluetooth: hci2: command tx timeout [ 242.719157] Bluetooth: hci3: command tx timeout [ 242.783092] Bluetooth: hci4: command tx timeout [ 242.911190] Bluetooth: hci5: command tx timeout [ 243.039195] Bluetooth: hci6: command tx timeout [ 243.103303] Bluetooth: hci7: command tx timeout [ 244.511124] Bluetooth: hci1: command tx timeout [ 244.575120] Bluetooth: hci0: command tx timeout [ 244.704197] Bluetooth: hci2: command tx timeout [ 244.767235] Bluetooth: hci3: command tx timeout [ 244.831231] Bluetooth: hci4: command tx timeout [ 244.959456] Bluetooth: hci5: command tx timeout [ 245.087465] Bluetooth: hci6: command tx timeout [ 245.152101] Bluetooth: hci7: command tx timeout [ 246.560459] Bluetooth: hci1: command tx timeout [ 246.623109] Bluetooth: hci0: command tx timeout [ 246.751075] Bluetooth: hci2: command tx timeout [ 246.815288] Bluetooth: hci3: command tx timeout [ 246.879238] Bluetooth: hci4: command tx timeout [ 247.008424] Bluetooth: hci5: command tx timeout [ 247.135122] Bluetooth: hci6: command tx timeout [ 247.199292] Bluetooth: hci7: command tx timeout [ 248.607159] Bluetooth: hci1: command tx timeout [ 248.672169] Bluetooth: hci0: command tx timeout [ 248.800033] Bluetooth: hci2: command tx timeout [ 248.864071] Bluetooth: hci3: command tx timeout [ 248.927556] Bluetooth: hci4: command tx timeout [ 249.055776] Bluetooth: hci5: command tx timeout [ 249.183551] Bluetooth: hci6: command tx timeout [ 249.247285] Bluetooth: hci7: command tx timeout [ 302.773862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.779166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.783647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.796758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.805506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.027642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.034318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.037313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.048805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.054665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.057985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.063667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.087150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.100615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.123754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.138688] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.148757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.153633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.177096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.184839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.195952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.208315] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.220898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.232612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.249882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.264464] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.286594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.338577] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.344184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.354617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.368529] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.405856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.410590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.434730] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.445495] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.468635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.519893] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.556598] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.645281] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.654295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.863459] Bluetooth: hci0: command tx timeout [ 305.119410] Bluetooth: hci1: command tx timeout [ 305.183113] Bluetooth: hci2: command tx timeout [ 305.248073] Bluetooth: hci3: command tx timeout [ 305.375114] Bluetooth: hci4: command tx timeout [ 305.503113] Bluetooth: hci5: command tx timeout [ 305.568256] Bluetooth: hci6: command tx timeout [ 305.759186] Bluetooth: hci7: command tx timeout [ 306.911654] Bluetooth: hci0: command tx timeout [ 307.167143] Bluetooth: hci1: command tx timeout [ 307.231227] Bluetooth: hci2: command tx timeout [ 307.295127] Bluetooth: hci3: command tx timeout [ 307.423284] Bluetooth: hci4: command tx timeout [ 307.551954] Bluetooth: hci5: command tx timeout [ 307.616119] Bluetooth: hci6: command tx timeout [ 307.807859] Bluetooth: hci7: command tx timeout [ 308.959113] Bluetooth: hci0: command tx timeout [ 309.216417] Bluetooth: hci1: command tx timeout [ 309.281170] Bluetooth: hci2: command tx timeout [ 309.343160] Bluetooth: hci3: command tx timeout [ 309.471094] Bluetooth: hci4: command tx timeout [ 309.599138] Bluetooth: hci5: command tx timeout [ 309.663299] Bluetooth: hci6: command tx timeout [ 309.856058] Bluetooth: hci7: command tx timeout [ 311.007095] Bluetooth: hci0: command tx timeout [ 311.265079] Bluetooth: hci1: command tx timeout [ 311.327343] Bluetooth: hci2: command tx timeout [ 311.391193] Bluetooth: hci3: command tx timeout [ 311.519094] Bluetooth: hci4: command tx timeout [ 311.647177] Bluetooth: hci5: command tx timeout [ 311.711178] Bluetooth: hci6: command tx timeout [ 311.904106] Bluetooth: hci7: command tx timeout [ 365.296447] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.309515] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.313581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.323645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.336746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.492858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.501720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.505666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.519612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.526576] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.567481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.572568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.574927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.582488] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.586972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.640540] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.654367] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.678259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.694945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.699431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.703565] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.705521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.709765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.739524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.764578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.796647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.816435] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.823744] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.833565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.843669] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.848796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.852364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.892982] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.926472] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.936494] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.943409] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.946764] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.949614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.976547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.983322] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.391084] Bluetooth: hci0: command tx timeout [ 367.584134] Bluetooth: hci1: command tx timeout [ 367.648317] Bluetooth: hci2: command tx timeout [ 367.775107] Bluetooth: hci3: command tx timeout [ 367.840120] Bluetooth: hci4: command tx timeout [ 367.972333] Bluetooth: hci5: command tx timeout [ 368.031211] Bluetooth: hci7: command tx timeout [ 368.095177] Bluetooth: hci6: command tx timeout [ 369.439242] Bluetooth: hci0: command tx timeout [ 369.631382] Bluetooth: hci1: command tx timeout [ 369.695163] Bluetooth: hci2: command tx timeout [ 369.823451] Bluetooth: hci3: command tx timeout [ 369.888303] Bluetooth: hci4: command tx timeout [ 370.015211] Bluetooth: hci5: command tx timeout [ 370.079129] Bluetooth: hci7: command tx timeout [ 370.143450] Bluetooth: hci6: command tx timeout [ 371.488199] Bluetooth: hci0: command tx timeout [ 371.679150] Bluetooth: hci1: command tx timeout [ 371.744242] Bluetooth: hci2: command tx timeout [ 371.871296] Bluetooth: hci3: command tx timeout [ 371.935078] Bluetooth: hci4: command tx timeout [ 372.063197] Bluetooth: hci5: command tx timeout [ 372.127307] Bluetooth: hci7: command tx timeout [ 372.192051] Bluetooth: hci6: command tx timeout [ 373.536047] Bluetooth: hci0: command tx timeout [ 373.727088] Bluetooth: hci1: command tx timeout [ 373.792041] Bluetooth: hci2: command tx timeout [ 373.919285] Bluetooth: hci3: command tx timeout [ 373.983089] Bluetooth: hci4: command tx timeout [ 374.111109] Bluetooth: hci5: command tx timeout [ 374.175198] Bluetooth: hci7: command tx timeout [ 374.240081] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 12:31:54 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=ffffffff8645f834 RCX=ffffffff81204899 RDX=0000000000000000 RSI=ffffffff8679b49c RDI=ffffffff8645f800 RBP=ffffffff8645f800 RSP=ffff888009617830 R8 =ffffffff8679b49c R9 =0000000000000000 R10=000000000003b6cd R11=0000000000000534 R12=ffffffff8645f868 R13=ffffffff8645f800 R14=ffffffff8645f800 R15=dffffc0000000000 RIP=ffffffff8135341c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f81bee5a260 CR3=000000002f2b4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff81353e1d RDI=fffffbfff0b83978 RBP=ffffffff85c1cbc0 RSP=ffff88802be974f8 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6cd R11=00000000000282ac R12=0000000000000001 R13=ffffffff81353e1d R14=0000000000000000 R15=ffff88802be975f8 RIP=ffffffff81aec4bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc18e7eff8 CR3=000000000b7cd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000