Warning: Permanently added '[localhost]:58896' (ECDSA) to the list of known hosts. 2025/06/10 01:34:00 fuzzer started 2025/06/10 01:34:00 dialing manager at localhost:40003 syzkaller login: [ 98.097582] cgroup: Unknown subsys name 'net' [ 98.242480] cgroup: Unknown subsys name 'cpuset' [ 98.304270] cgroup: Unknown subsys name 'rlimit' 2025/06/10 01:34:17 syscalls: 2214 2025/06/10 01:34:17 code coverage: enabled 2025/06/10 01:34:17 comparison tracing: enabled 2025/06/10 01:34:17 extra coverage: enabled 2025/06/10 01:34:17 setuid sandbox: enabled 2025/06/10 01:34:17 namespace sandbox: enabled 2025/06/10 01:34:17 Android sandbox: enabled 2025/06/10 01:34:17 fault injection: enabled 2025/06/10 01:34:17 leak checking: enabled 2025/06/10 01:34:17 net packet injection: enabled 2025/06/10 01:34:17 net device setup: enabled 2025/06/10 01:34:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/10 01:34:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/10 01:34:17 USB emulation: enabled 2025/06/10 01:34:17 hci packet injection: enabled 2025/06/10 01:34:17 wifi device emulation: enabled 2025/06/10 01:34:17 802.15.4 emulation: enabled 2025/06/10 01:34:17 fetching corpus: 0, signal 0/0 (executing program) 2025/06/10 01:34:19 starting 8 fuzzer processes 01:34:19 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "0ed15c53534cedcb60de99d5639b64000782778269558f710e081e2f11f6f65d"}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24048854) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f00000003c0)=0xe8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24044044}, 0x4) unshare(0x10000000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0x12000, 0x0) accept4$inet(r2, &(0x7f0000000600)={0x2, 0x0, @multicast1}, &(0x7f0000000640)=0x10, 0x80000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008884) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xa0, 0x2, 0x8, 0x801, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xb9f3}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x10000}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffd4f4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10c0}, 0x4010000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$CDROM_CHANGER_NSLOTS(r5, 0x5328) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x200008d0) 01:34:19 executing program 1: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x7f, 0x401, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x14000880}, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4002001) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x100200, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xdc, r3, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x1c}}}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "365339f9dd0e60c0d392dcfbdde68f49"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x8c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7715fc4557"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x8, 0x4, "6e7ed103"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "78151f58a8223f42c6bb7fb654"}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24088014}, 0x4000880) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000640)={0x3}, 0x4) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) futimesat(r2, &(0x7f0000000680)='./file0\x00', &(0x7f0000000700)={{0x0, 0x2710}, {r4, r5/1000+10000}}) ioctl$TIOCCONS(r2, 0x541d) recvmmsg(r2, &(0x7f0000005b80)=[{{&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/151, 0x97}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/57, 0x39}, {&(0x7f0000000a40)=""/41, 0x29}, {&(0x7f0000000a80)=""/123, 0x7b}], 0x6}, 0xfffffff8}, {{&(0x7f0000000b80)=@hci, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/187, 0xbb}, {&(0x7f0000000cc0)=""/125, 0x7d}, {&(0x7f0000000d40)=""/227, 0xe3}], 0x3, &(0x7f0000000e80)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000001e80)=""/27, 0x1b}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/26, 0x1a}, {&(0x7f0000002f00)=""/26, 0x1a}, {&(0x7f0000002f40)=""/95, 0x5f}, {&(0x7f0000002fc0)=""/151, 0x97}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/230, 0xe6}, {&(0x7f0000004180)=""/20, 0x14}, {&(0x7f00000041c0)=""/179, 0xb3}], 0xa}, 0x4}, {{&(0x7f0000004340)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004580)=[{&(0x7f00000043c0)=""/188, 0xbc}, {&(0x7f0000004480)=""/126, 0x7e}, {&(0x7f0000004500)=""/108, 0x6c}], 0x3, &(0x7f00000045c0)=""/181, 0xb5}, 0x1}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f0000004680)=""/60, 0x3c}, {&(0x7f00000046c0)=""/112, 0x70}, {&(0x7f0000004740)=""/28, 0x1c}, {&(0x7f0000004780)=""/61, 0x3d}, {&(0x7f00000047c0)=""/139, 0x8b}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/68, 0x44}, {&(0x7f0000005900)=""/51, 0x33}, {&(0x7f0000005940)=""/54, 0x36}, {&(0x7f0000005980)=""/116, 0x74}], 0xa, &(0x7f0000005ac0)=""/134, 0x86}, 0x3}], 0x5, 0x100, &(0x7f0000005cc0)={0x77359400}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000005d40), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000005e80)={&(0x7f0000005d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005e40)={&(0x7f0000005d80)={0x9c, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff8}, {0x6, 0x11, 0xdf}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000005f40)={'syztnl2\x00', &(0x7f0000005ec0)={'ip6_vti0\x00', 0x0, 0x2f, 0xa1, 0x7, 0x0, 0x21, @local, @rand_addr=' \x01\x00', 0x40, 0x7800, 0x2a, 0x80000000}}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000006040)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006000)={&(0x7f0000005fc0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4008004) r8 = openat2(r2, &(0x7f0000006080)='./file0\x00', &(0x7f00000060c0)={0x131081, 0x4, 0x8}, 0x18) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000006280)={&(0x7f0000006100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006240)={&(0x7f0000006140)={0xdc, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x68, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f00000062c0)=0x5) 01:34:19 executing program 3: rt_sigprocmask(0x2, &(0x7f0000000000), &(0x7f0000000040), 0x8) rt_sigtimedwait(&(0x7f0000000080)={[0x100000001]}, 0x0, &(0x7f00000000c0), 0x8) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x7fff]}, 0x8) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20008080) rt_sigprocmask(0x0, &(0x7f00000002c0), 0x0, 0x8) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000300)=""/89) r2 = signalfd(r0, &(0x7f0000000380)={[0x3]}, 0x8) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x80000000, @bearer=@l2={'eth', 0x3a, 'ip6_vti0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x100) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x26, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000600)={0x3, {{0x2, 0x4e22, @local}}}, 0x88) r4 = fspick(r2, &(0x7f00000006c0)='./file0\x00', 0x1) ioctl$FITHAW(r4, 0xc0045878) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mq_timedreceive(r5, &(0x7f0000000740)=""/254, 0xfe, 0x0, &(0x7f0000000840)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000008c0)) 01:34:19 executing program 2: chdir(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') chmod(&(0x7f00000000c0)='./file0\x00', 0x50) r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, &(0x7f0000000180)=0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x7c}}}}, [@NL80211_ATTR_SSID={0x1f, 0x34, @random="ae639b703766c0ed93fbe09d7379698583d46576315a5da1bb64c3"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4020}, 0x4) sendmsg$AUDIT_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3e8, 0x20, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40448c0}, 0x40400c1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0xf864}}, './file0\x00'}) r3 = dup3(r2, r0, 0x80000) ioctl$TIOCSCTTY(r3, 0x540e, 0xe4) execveat(r3, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)=[&(0x7f0000000500)='/dev/rfkill\x00', &(0x7f0000000540)='{,#\x00', &(0x7f0000000580)='/dev/rfkill\x00', &(0x7f00000005c0)='&#\x00', &(0x7f0000000600)='/dev/rfkill\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='.\x00', &(0x7f00000006c0)='/dev/rfkill\x00', &(0x7f0000000700)='}@!\\\xf2\x00', &(0x7f0000000740)='/dev/rfkill\x00'], &(0x7f0000000980)=[&(0x7f0000000800)=']^-]))\x00', &(0x7f0000000840)='/dev/rfkill\x00', &(0x7f0000000880)='/dev/rfkill\x00', &(0x7f00000008c0)='].\x00', &(0x7f0000000900)='-!*:\'/,-)*\x00', &(0x7f0000000940)=',(^.\\\xa7\'\'/\xd6\x00'], 0x1000) r4 = syz_open_dev$vcsu(&(0x7f00000009c0), 0x79e4, 0x8000) r5 = syz_mount_image$msdos(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x5, 0x3, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="1a9cb198e5c7ec44f68a30797e07322e70d14b84404fa5c71595610dfe06c589a0c5975e033db9093e87515d660b67e2dfc7fa21597805933fea1114c1799a49b6766cf14032c659bdea599a55be3e1753d30016717c0415679257fb", 0x5c, 0xffff00}, {&(0x7f0000000b40)="6c971216659d0b12151dec7a07e0648a564b8670baed0c5f98c76f2bde1626ed9bc389e9f64f63", 0x27, 0x8}, {&(0x7f0000000b80)="e16f4fcc7edec2133cf4c0c37ef4b1b34f6465e768858efe64e7d0e0942981dadf4c1e71634535d1a5c1cc96b1be9b2899cb379187dc7f2d8a681f74ad6b900fb53419d2cc1406a6decee68d663530bd86f6a1b213005a51a579fd0e617a6ab1a2bcd88706ff2c31487fdd19a0ab7d2c1e09d92f2ae1f22b00d6c5f265a4759ed153aea7be5046b8f448fa69522098fc6224b8c342afbd44b71ccb63e2c75248144ecba76047f5b0ef", 0xa9, 0xffffffffffff0001}], 0x1000, &(0x7f0000000cc0)={[{@nodots}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '@'}}, {@obj_role={'obj_role', 0x3d, '{,#\x00'}}]}) renameat(r4, &(0x7f0000000a00)='./file0\x00', r5, &(0x7f0000000d40)='./file0\x00') r6 = creat(&(0x7f0000000d80)='./file0\x00', 0x124) clock_gettime(0x0, &(0x7f0000000e00)={0x0, 0x0}) futimesat(r6, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e40)={{0x0, 0xea60}, {r7, r8/1000+10000}}) rename(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)='./file0\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000fc0)={&(0x7f0000000f00)=""/174, 0xae}) [ 117.103536] audit: type=1400 audit(1749519259.856:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:34:19 executing program 4: ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000000)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)=0x1) r0 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x0) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d1c8044265855bcd328fbdba894b97b4f13b21389d4a34dd128106a6bb20a487cc3b7d0a3270733421237b75", 0x2c}, {&(0x7f0000000100)="ed1f0f3b1d7f676b7871a3674601e0ad7e678e7bc3556d28ab25f7bad67f9384594175219b55243af06bad84419b9a42a6f4551faff094f658e887fa6de13fef8351020df31faa96459b8b77cb86550332ab616b5f7e147bb46273964fd90368ed20cd75b53dc2323dc9c4abfa7cf2d2655ce343ff12409ec2fa4fa3e64374c202", 0x81}], 0x2, 0x5) sendmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000280)="6a7435e7eeeb639dc2cb987c2359cf618de71a55bda966416adc322ec2", 0x1d}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="59e9bb494de1b9e24162914ea8c029b2dd19b81a2329af6d66847a8aa59c48d9191b67b8209ce096a01153d79c6131d3a0aebf7ee96651c1ecc170c183674bbf7185c8814653612163187139a945bb9619b1f004c347a0bd729ab7e47972a581992d93dba56bbea4b1c5ba4ea0d11f8e985fdc18833df5f102fb05c3c3b8a97a4b629e5c79e0331d828d5a8a6823964ef07c123f", 0x94}, {&(0x7f00000003c0)="00ce277fea21fadefd", 0x9}, {&(0x7f0000000400)="146f118a1d211f64bd8a88093a490cf2389807b0d200500ad65ad193d3d69f0ef0c55a4ead2a4740801244d6ee7900402d0bee382292e4132964bfd7adad22056a15280649bac214cadd3f1e4b746bb1c3d003926fa2a8b50b41a302f1385bc7a63f11a127498fe0a0d9e0b216e298addc08af23cdd8533229b47cf3a858439f233a3f94e9c8a1df2bbb425253431c30a07ab3721f07f06487344c6d36e4220268ff9bbdeab732527d6ce00c8050e26bc894f68a1be24a3875a930b0adc3ea7af54728ccfb8ba42a759f03bd3d358a68b51442b6f381c346c0f45bf2c416659a5a23b6ae6825241e8139984b2a686b71d97af8479e95f431", 0xf8}, {&(0x7f0000000500)="0344cd570a8e03921e31acf31f3ac1a18d635773461aafc436c50e8ccde8ff26234be03d6212e8889ca72ae8d705433b10825727a11be4e505e5f2c5d2b74c9899d9212562ac8c8902b4d7f457a9793ec3409bcdef7a2052eb38878487c0c55a32f0b1d04ff4c3e244", 0x69}], 0x6}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ip_tables_names\x00') ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000680)) open$dir(&(0x7f00000006c0)='./file0\x00', 0x1, 0x4f) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000700)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000b40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f00000008c0)={0x230, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x148, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3b411eb5a025b2be}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000cc0)=0xffffffffffffffff) write(r0, &(0x7f0000000d00)="75938e5fec28c632104506cfea36bd0fdaf3fea34496eca59a211ac4e20058dcd9f42f5eae556b4501bd850afd7b57fff7b8b773113fbf94a9c33dab36b5df065842ba7aa4eb", 0x46) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6021}, 0x20000800) fchmod(r0, 0x282) accept$packet(r0, 0x0, &(0x7f0000000ec0)) 01:34:19 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) readv(r0, &(0x7f0000001200)=[{&(0x7f0000000000)=""/212, 0xd4}, {&(0x7f0000000100)=""/225, 0xe1}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001240)={@empty, 0x5, 0x0, 0x3, 0x9, 0x6, 0x8}, 0x20) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001280)={0xfc, "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"}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$KDDELIO(r0, 0x4b35, 0x100000000) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000014c0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001500)={{0x1, 0x1, 0x18, r0, {0x5, 0x10000}}, './file0\x00'}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540), 0x408001, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000001580)={0x0, 0xfff, 0xffffffff, 0x1}) pwritev2(r2, &(0x7f0000001bc0)=[{&(0x7f0000001980)="5a28f8db95f24fb8387900bfd9f78657bd35202b3feabf7ac111d8ad290c7fab8dfd2b51180f9845ba1a973f49697cd29ceea6baa4cfb81471ed1105b6d0f6d777ae50c103323a39a1d7cad286b17f635eac250489021023fcc196749dc4c4a87934173d02b9487a834d0bdbadc6f40eb07147715527c426c15015c19c4766b8924a8c5422d44cdee79c063d63676141821c99b1142c57cfe40a2d11502275a4eeac", 0xa2}, {&(0x7f0000001a40)="c9145e839a18e6da213d9c18c9", 0xd}, {&(0x7f0000001a80)="1840cfc02c768981a1bb49039f9d31e3fa36508330e3a3e70ad5adaae3b9110a76fd047cd307b9c6ff8cb99c80b6f8d5032704324d4a33fe9f816fa1d4e5a8bbb125b5b235f543aa20142e6a6e3e2a3143f5809f4db509ddbf80bd764ecd01600b06969046c977f43a0731145a1f9487b77684c94c0c450acb3fa628c6bb21aee09f06a1a48a58ac4aababb62e4625fa44408132433937", 0x97}, {&(0x7f0000001b40)="5a6e541237fb7096fc0ac33dbd516806110179a4ca099201691724c3903742b0ebab20d93a26f2c2a5a4a10000a61fa6e7bd41fdc5fd5b0bfc848cb1d7cbcfe6b0cf0df13757331a2d65423d8a8f7db1313b50931129bff893fc34cb532c250edca17b3e", 0x64}], 0x4, 0x7fffffff, 0x3, 0x19) write$P9_RWSTAT(r1, &(0x7f0000001c00)={0x7, 0x7f, 0x1}, 0x7) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000001c40)={0x1}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, 0x0, 0xb08, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x8804) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000001dc0)={0x6, 0x7, 0x5, 0x3, 0x5, "95b5707dea969167"}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001e40)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0/file0\x00'}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000001f40)={&(0x7f0000001e80)=""/184, 0xb8, 0x7, 0x3ff}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000003380)={0x9, 0x4, {0x400, @usage=0x8000, 0x0, 0x3, 0xd55, 0x3, 0x6, 0x4, 0x90, @usage=0xa7, 0xffff8000, 0x2, [0xfffffffffffffe00, 0x5, 0x9, 0xfffffffffffffe01, 0x6, 0x1]}, {0x0, @usage=0x10001, 0x0, 0x4b, 0x8, 0x6, 0x400, 0x1000, 0x40, @struct={0xb6f4, 0x20}, 0x100, 0x8000, [0x8f, 0x8, 0x401, 0x4, 0x1]}, {0x3, @struct={0x6935, 0x4}, 0x0, 0x2, 0x80, 0x80000001, 0x1, 0x5, 0x28, @struct={0x5, 0x10000}, 0x1, 0x7, [0x7, 0xfff, 0xdd, 0x3, 0x56]}, {0x1000, 0x2, 0x1}}) 01:34:19 executing program 6: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x7ff, 0x1ff, 0x0, 0xfc01}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x0, 0x7fff}, {0x5, 0x3}]}, 0x14, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000140)) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/134, 0x86}], 0x1, &(0x7f0000000300)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x1, 0x140, &(0x7f0000000400)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, {r0}}, './file0\x00'}) write$9p(r5, &(0x7f0000000480)="4b0de790545c267b0c2293881463910fdd5e4b7deb9352b1f7717ffabcf1b545327af89763aa547a64396de5bbdbeff4a5da81cf77e629d95c3740c1d150da7f8a27f44b16defe1044f1c1363637063822ebd371e6439376", 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x1f}}, './file0\x00'}) pwrite64(0xffffffffffffffff, &(0x7f0000000540)="dce5ffd980e886c0154cc3069530f08ad0d77f85bc2d8a8648ece0e4d954cd64040cb81d2f1569", 0x27, 0x5) r9 = syz_open_dev$vcsn(&(0x7f0000000580), 0x80000001, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000005c0)={0xb19d, {{0xa, 0x4e22, 0x6, @remote, 0x8}}}, 0x88) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000680)=0x0) r11 = clone3(&(0x7f00000018c0)={0x200088080, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740), {0x31}, &(0x7f0000000780)=""/238, 0xee, &(0x7f0000000880)=""/4096, &(0x7f0000001880)=[r8, r8, r8, r8, r8], 0x5, {r0}}, 0x58) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001940)='/proc/bus/input/handlers\x00', 0x0, 0x0) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001980)='/sys/module/hid_cypress', 0x591001, 0x4) kcmp$KCMP_EPOLL_TFD(r10, r11, 0x7, r12, &(0x7f00000019c0)={r13, r3, 0x100}) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000001a00), &(0x7f0000001a40)={'L+', 0x9}, 0x16, 0x1) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x10, 0x3f5, 0x200, 0x70bd29, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040010}, 0x8004) sendmsg$AUDIT_TTY_SET(r9, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x18, 0x3f9, 0x100, 0x70bd26, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40048000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 01:34:20 executing program 7: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x2, 0x2, 0x1}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x5000, 0x161) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000080)={0x5, 0xb78b}) fcntl$setstatus(r0, 0x4, 0x400) r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) r4 = syz_open_pts(r0, 0x84081) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000140)={0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000180)={0x3, 0x1, {0x1, 0x0, 0x10000, 0x0, 0x1}, 0x7}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x8000, 0x3}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000240)={0x3, 0xffffff7f, 0x2, 0x2, 0x1f, 0x8}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$KDSETLED(r6, 0x4b32, 0x4) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2010}, 0x4c0c1) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000a80)) [ 118.622691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.627869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.629586] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.634088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.638925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.643075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.646070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.648634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.656065] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.673619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.682722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.685541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.686907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.695703] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.702510] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.767380] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.771316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.772908] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.774361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.775423] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.776836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.778882] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.780057] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.782622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.784982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.788949] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.790450] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.794781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.796065] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.797837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.819656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.839933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.842103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.844248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.856259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.858748] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.869782] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.900312] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.902904] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.909296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.709723] Bluetooth: hci1: command tx timeout [ 120.710482] Bluetooth: hci0: command tx timeout [ 120.774291] Bluetooth: hci2: command tx timeout [ 120.837188] Bluetooth: hci4: command tx timeout [ 120.901232] Bluetooth: hci7: command tx timeout [ 120.901848] Bluetooth: hci6: command tx timeout [ 120.902795] Bluetooth: hci3: command tx timeout [ 120.965194] Bluetooth: hci5: command tx timeout [ 122.758220] Bluetooth: hci0: command tx timeout [ 122.758705] Bluetooth: hci1: command tx timeout [ 122.822666] Bluetooth: hci2: command tx timeout [ 122.885230] Bluetooth: hci4: command tx timeout [ 122.950624] Bluetooth: hci3: command tx timeout [ 122.951072] Bluetooth: hci6: command tx timeout [ 122.952322] Bluetooth: hci7: command tx timeout [ 123.013212] Bluetooth: hci5: command tx timeout [ 124.806171] Bluetooth: hci1: command tx timeout [ 124.806664] Bluetooth: hci0: command tx timeout [ 124.871038] Bluetooth: hci2: command tx timeout [ 124.933394] Bluetooth: hci4: command tx timeout [ 124.997232] Bluetooth: hci6: command tx timeout [ 124.997693] Bluetooth: hci7: command tx timeout [ 124.998164] Bluetooth: hci3: command tx timeout [ 125.071384] Bluetooth: hci5: command tx timeout [ 126.853307] Bluetooth: hci1: command tx timeout [ 126.853800] Bluetooth: hci0: command tx timeout [ 126.918303] Bluetooth: hci2: command tx timeout [ 126.981208] Bluetooth: hci4: command tx timeout [ 127.045302] Bluetooth: hci3: command tx timeout [ 127.046270] Bluetooth: hci7: command tx timeout [ 127.046714] Bluetooth: hci6: command tx timeout [ 127.109332] Bluetooth: hci5: command tx timeout [ 180.895108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.899822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.903659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.912027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.917760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.978887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.983681] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.985880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.988074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.991749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.995324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.004838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.012068] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.016686] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.026740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.045268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.051335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.057990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.063735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.065765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.067876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.073526] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.078568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.083829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.090103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.109943] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.113966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.139484] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.143835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.147957] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.156820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.160656] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.169257] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.170927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.178699] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.192261] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.206035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.229973] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 181.237549] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.246405] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.984189] Bluetooth: hci0: command tx timeout [ 183.045214] Bluetooth: hci2: command tx timeout [ 183.045842] Bluetooth: hci3: command tx timeout [ 183.173290] Bluetooth: hci1: command tx timeout [ 183.237459] Bluetooth: hci5: command tx timeout [ 183.238057] Bluetooth: hci6: command tx timeout [ 183.429230] Bluetooth: hci4: command tx timeout [ 183.430792] Bluetooth: hci7: command tx timeout [ 185.030251] Bluetooth: hci0: command tx timeout [ 185.093548] Bluetooth: hci3: command tx timeout [ 185.094011] Bluetooth: hci2: command tx timeout [ 185.221319] Bluetooth: hci1: command tx timeout [ 185.286449] Bluetooth: hci6: command tx timeout [ 185.286906] Bluetooth: hci5: command tx timeout [ 185.478293] Bluetooth: hci7: command tx timeout [ 185.478794] Bluetooth: hci4: command tx timeout [ 187.078228] Bluetooth: hci0: command tx timeout [ 187.144288] Bluetooth: hci2: command tx timeout [ 187.144755] Bluetooth: hci3: command tx timeout [ 187.270283] Bluetooth: hci1: command tx timeout [ 187.334334] Bluetooth: hci5: command tx timeout [ 187.334796] Bluetooth: hci6: command tx timeout [ 187.527662] Bluetooth: hci7: command tx timeout [ 187.529391] Bluetooth: hci4: command tx timeout [ 189.126210] Bluetooth: hci0: command tx timeout [ 189.190411] Bluetooth: hci3: command tx timeout [ 189.190879] Bluetooth: hci2: command tx timeout [ 189.317519] Bluetooth: hci1: command tx timeout [ 189.381293] Bluetooth: hci6: command tx timeout [ 189.381771] Bluetooth: hci5: command tx timeout [ 189.574194] Bluetooth: hci7: command tx timeout [ 189.574677] Bluetooth: hci4: command tx timeout [ 243.297933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.302783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.310860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.333543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.342871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.374257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.379480] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.382799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.396338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.412430] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.573850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.583596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.589757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.633807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.658904] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.830651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.837766] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.842191] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.844799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.863097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.865578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.889464] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.900136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.904069] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.908734] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.912742] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.915070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.918560] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.923917] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.928049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.936618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.944375] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.951639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.977858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.996270] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.000094] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.005693] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.011573] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.015816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.026589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.381507] Bluetooth: hci0: command tx timeout [ 245.446185] Bluetooth: hci1: command tx timeout [ 245.766273] Bluetooth: hci2: command tx timeout [ 246.021358] Bluetooth: hci3: command tx timeout [ 246.022365] Bluetooth: hci4: command tx timeout [ 246.086692] Bluetooth: hci6: command tx timeout [ 246.149261] Bluetooth: hci7: command tx timeout [ 246.213410] Bluetooth: hci5: command tx timeout [ 247.429223] Bluetooth: hci0: command tx timeout [ 247.493174] Bluetooth: hci1: command tx timeout [ 247.813510] Bluetooth: hci2: command tx timeout [ 248.071201] Bluetooth: hci4: command tx timeout [ 248.071710] Bluetooth: hci3: command tx timeout [ 248.133349] Bluetooth: hci6: command tx timeout [ 248.197237] Bluetooth: hci7: command tx timeout [ 248.261472] Bluetooth: hci5: command tx timeout [ 249.477198] Bluetooth: hci0: command tx timeout [ 249.541716] Bluetooth: hci1: command tx timeout [ 249.863167] Bluetooth: hci2: command tx timeout [ 250.117199] Bluetooth: hci3: command tx timeout [ 250.117223] Bluetooth: hci4: command tx timeout [ 250.181320] Bluetooth: hci6: command tx timeout [ 250.245485] Bluetooth: hci7: command tx timeout [ 250.309513] Bluetooth: hci5: command tx timeout [ 251.528142] Bluetooth: hci0: command tx timeout [ 251.589234] Bluetooth: hci1: command tx timeout [ 251.910450] Bluetooth: hci2: command tx timeout [ 252.166211] Bluetooth: hci4: command tx timeout [ 252.166235] Bluetooth: hci3: command tx timeout [ 252.229366] Bluetooth: hci6: command tx timeout [ 252.296340] Bluetooth: hci7: command tx timeout [ 252.357416] Bluetooth: hci5: command tx timeout [ 306.265784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.272416] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.280717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.284827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.290728] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.294841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.297948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.303858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.306788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.320680] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.401936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.405687] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.413652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.429648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.435959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.461607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.481935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.497747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.500748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.531244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.541584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.544584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.561726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.565396] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.579485] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.595862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.600669] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.604883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.616587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.636701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.896087] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.901784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.912608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.974253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.982984] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.990614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.011707] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.029651] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.048973] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.061593] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.357292] Bluetooth: hci0: command tx timeout [ 308.358010] Bluetooth: hci1: command tx timeout [ 308.550180] Bluetooth: hci2: command tx timeout [ 308.623797] Bluetooth: hci3: command tx timeout [ 308.741389] Bluetooth: hci5: command tx timeout [ 308.870450] Bluetooth: hci4: command tx timeout [ 309.190493] Bluetooth: hci7: command tx timeout [ 309.190544] Bluetooth: hci6: command tx timeout [ 310.405446] Bluetooth: hci1: command tx timeout [ 310.406862] Bluetooth: hci0: command tx timeout [ 310.597285] Bluetooth: hci2: command tx timeout [ 310.661261] Bluetooth: hci3: command tx timeout [ 310.790828] Bluetooth: hci5: command tx timeout [ 310.917252] Bluetooth: hci4: command tx timeout [ 311.237309] Bluetooth: hci7: command tx timeout [ 311.238201] Bluetooth: hci6: command tx timeout [ 312.453473] Bluetooth: hci0: command tx timeout [ 312.453496] Bluetooth: hci1: command tx timeout [ 312.647168] Bluetooth: hci2: command tx timeout [ 312.709413] Bluetooth: hci3: command tx timeout [ 312.839242] Bluetooth: hci5: command tx timeout [ 312.965426] Bluetooth: hci4: command tx timeout [ 313.285215] Bluetooth: hci7: command tx timeout [ 313.286229] Bluetooth: hci6: command tx timeout [ 314.501192] Bluetooth: hci1: command tx timeout [ 314.501308] Bluetooth: hci0: command tx timeout [ 314.695221] Bluetooth: hci2: command tx timeout [ 314.757259] Bluetooth: hci3: command tx timeout [ 314.885169] Bluetooth: hci5: command tx timeout [ 315.013283] Bluetooth: hci4: command tx timeout [ 315.334489] Bluetooth: hci6: command tx timeout [ 315.334868] Bluetooth: hci7: command tx timeout [ 368.282635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.285035] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.288416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.296795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.300363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.400845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.405698] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.413898] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.422662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.424993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.498034] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.508539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.518712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.539751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.547636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.565598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.573798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.583365] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.595905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.608301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.633380] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.697128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.713382] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.715469] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.717055] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.720671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.722922] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.735534] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.738424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.743067] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.745478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.756660] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.760935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.784571] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 368.791844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.796391] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 368.803522] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 368.845949] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.853720] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.855252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.374250] Bluetooth: hci0: command tx timeout [ 370.501413] Bluetooth: hci1: command tx timeout [ 370.629320] Bluetooth: hci2: command tx timeout [ 370.693187] Bluetooth: hci3: command tx timeout [ 370.758205] Bluetooth: hci4: command tx timeout [ 370.758265] Bluetooth: hci5: command tx timeout [ 370.886554] Bluetooth: hci6: command tx timeout [ 370.949349] Bluetooth: hci7: command tx timeout [ 372.421484] Bluetooth: hci0: command tx timeout [ 372.549196] Bluetooth: hci1: command tx timeout [ 372.678203] Bluetooth: hci2: command tx timeout [ 372.742169] Bluetooth: hci3: command tx timeout [ 372.805229] Bluetooth: hci5: command tx timeout [ 372.805261] Bluetooth: hci4: command tx timeout [ 372.934359] Bluetooth: hci6: command tx timeout [ 372.997188] Bluetooth: hci7: command tx timeout [ 374.470349] Bluetooth: hci0: command tx timeout [ 374.598294] Bluetooth: hci1: command tx timeout [ 374.726598] Bluetooth: hci2: command tx timeout [ 374.790516] Bluetooth: hci3: command tx timeout [ 374.853304] Bluetooth: hci5: command tx timeout [ 374.854043] Bluetooth: hci4: command tx timeout [ 374.981330] Bluetooth: hci6: command tx timeout [ 375.046609] Bluetooth: hci7: command tx timeout [ 376.518431] Bluetooth: hci0: command tx timeout [ 376.645388] Bluetooth: hci1: command tx timeout [ 376.773361] Bluetooth: hci2: command tx timeout [ 376.837238] Bluetooth: hci3: command tx timeout [ 376.901215] Bluetooth: hci4: command tx timeout [ 376.902228] Bluetooth: hci5: command tx timeout [ 377.029188] Bluetooth: hci6: command tx timeout [ 377.093170] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:39:28 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff8880163573d8 RCX=ffff888016357478 RDX=1ffff11002c6ae86 RSI=ffffffff85c1cbc0 RDI=ffffffff81604bfe RBP=ffff888016357430 RSP=ffff8880163573c0 R8 =0000000000000001 R9 =ffff888016357418 R10=000000000003b6cd R11=00000000000043fe R12=ffff8880163574a0 R13=0000000000000000 R14=ffff888016420000 R15=ffffffff8225e211 RIP=ffffffff81353b19 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007eff033c0910 CR3=0000000038d08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff84abfaeb RDX=ffff8880282d5280 RSI=ffffffff84abfc5f RDI=0000000000000006 RBP=dffffc0000000000 RSP=ffff888026ea7c70 R8 =0000000000000001 R9 =0000000000000000 R10=00007fd895b4dfff R11=0000000000000001 R12=00007fd895caa270 R13=0000000000000000 R14=ffff888026ea7e45 R15=00007fd895b4dfff RIP=ffffffff84abfc64 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd895b4a540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd895caa270 CR3=0000000034281000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000