Warning: Permanently added '[localhost]:3779' (ECDSA) to the list of known hosts. 2025/06/16 04:31:59 fuzzer started 2025/06/16 04:31:59 dialing manager at localhost:42061 syzkaller login: [ 101.872513] cgroup: Unknown subsys name 'net' [ 102.043589] cgroup: Unknown subsys name 'cpuset' [ 102.108732] cgroup: Unknown subsys name 'rlimit' 2025/06/16 04:32:26 syscalls: 2214 2025/06/16 04:32:26 code coverage: enabled 2025/06/16 04:32:26 comparison tracing: enabled 2025/06/16 04:32:26 extra coverage: enabled 2025/06/16 04:32:26 setuid sandbox: enabled 2025/06/16 04:32:26 namespace sandbox: enabled 2025/06/16 04:32:26 Android sandbox: enabled 2025/06/16 04:32:26 fault injection: enabled 2025/06/16 04:32:26 leak checking: enabled 2025/06/16 04:32:26 net packet injection: enabled 2025/06/16 04:32:26 net device setup: enabled 2025/06/16 04:32:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/16 04:32:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/16 04:32:26 USB emulation: enabled 2025/06/16 04:32:26 hci packet injection: enabled 2025/06/16 04:32:26 wifi device emulation: enabled 2025/06/16 04:32:26 802.15.4 emulation: enabled 2025/06/16 04:32:26 fetching corpus: 0, signal 0/0 (executing program) 2025/06/16 04:32:28 starting 8 fuzzer processes 04:32:28 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '{.(,,'}, {0x20, '\\:'}, {0x20, ',]'}, {0x20, '!%'}, {0x20, '+'}], 0xa, "10c53857a81cc15fdcaa88e01e7a0757d38f39bb4ace10a5aee0255d8778abd3af29e2f41296e7f83c78519d270158b9cbe9d797cacf2c3b201e5f705f34913c81d70e4c10"}, 0x61) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080), 0x8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x3676) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x802, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="c52636e12d31dca8280f2c8db8d13020616ef19c647dca7160fb64d0cbe8608562c2bb259b622a2d1ba4969550b36581e6209c2cba2cfe249878f29ad984ecef9102a7e3264b", 0x46, 0x10001}], 0x20000, &(0x7f0000000280)={[{@shortname_lower}, {@shortname_lower}, {@fat=@nocase}, {@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_winnt}], [{@dont_measure}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x1) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x0, 0x0, 0x82, 0x800, 0x2, 0x3e, 0x6, 0x9a, 0x40, 0x20d, 0x6, 0x85, 0x38, 0x1, 0x8001, 0x6, 0x5}, [{0x3, 0x7f, 0x8, 0x9, 0x0, 0x0, 0x44, 0x1}, {0x1, 0x8, 0x0, 0x749, 0x6, 0x0, 0x8000, 0x1000}], "b1bf84b972fb131d0ab51767e05be84c7f6b4b07e58762f67afb90df72688ebe9312cc56256882361913298992624b811bdcb4ea17c695529812a7727b1db42cfbeb00b8c93b38e7eaed4976d1407e0d7b6a3c92ac8af896b17d15e8e008952a634629ce7524af6fe1d45deb5d7e49e8a000d261f3f47d58afd54f042ce890", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb2f) setxattr$security_evm(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), &(0x7f0000000f80)=@md5={0x1, "c2e85d87faaa399132c7eaf302e2a8b5"}, 0x11, 0x1) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000fc0)=0x3) faccessat2(r1, &(0x7f0000001000)='./file0\x00', 0x101, 0x100) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000001040)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), 0xffffffffffffffff) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001240)=0x14, 0x180400) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x38, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4040850) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001340)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) openat$cgroup_ro(r5, &(0x7f0000001380)='cpuacct.usage_sys\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000013c0), &(0x7f0000001400)='./file0\x00', 0x0, 0x3, &(0x7f0000001640)=[{&(0x7f0000001440)="178ae64caa61500503b44a0829e119a71c9f1ca4dff81a5decba2bc03aac4c4339cc8ea80982a26b886038cbbb136770e155c4715e4340fcec2108e15b2270d31b5466a0fb99e08af182ca9fc5da3cfe686b629d59f7ad0b0d6e6a17cd007e63261f7488b3329bac3f8eee01b94af63896389ff60544d8e7b56995b643513fb20bcc3ca2d6679fb7b68574550417455838453657495b4cd35e8c449e3492fe9f81c6b7d4371720b7f183a9172b6e723bf46e744fdb697061215d31f24b28696f11", 0xc1, 0x6}, {&(0x7f0000001540)="33d2892944d194f11a73be0f20541477f5830e536a44dd83770769584d20a9ef3f15844f645e33c5c31d7c82724dc4370941e81a062fd39c7d5c", 0x3a, 0x5}, {&(0x7f0000001580)="99572271ba98b70bff2ae71e0c5545825c631f582d0d01372a81b0f27243ab48cbb6df3ad5e8429142b951998a4508f94a499553b6bda001131dae656125e8b17b02359c90b7ef7485791c311cd38b99524e12438fe862b163506f7006a999370369d7a10a70517fceaddf5bedf44892f0bff5ecb6d939bd4fd36c1fffe7298914e7cac436624c0da3", 0x89, 0x669}], 0x4, &(0x7f00000016c0)={[{@nodots}, {@fat=@check_normal}, {@nodots}, {@fat=@usefree}, {@fat=@check_normal}], [{@fowner_lt={'fowner<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x24}}]}) stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001800)={r0, 0x4, 0x2d, 0x6}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) 04:32:28 executing program 1: rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x8) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0xc08, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x3}, 0x24000000) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) pidfd_send_signal(r1, 0x1e, &(0x7f0000000200)={0x29, 0x62a, 0x9}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000280)={{0x0, 0xa20e, 0x3f, 0x400, 0x0, 0xef, 0x4, 0x1, 0xff, 0x9, 0xfff, 0x400, 0x0, 0x0, 0x518}, 0x10, [0x0, 0x0]}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000300)={'gre0\x00', {0x2, 0x0, @dev}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000480)={0x6c, 0x7d, 0x2, {{0x0, 0x4e, 0x3e22, 0x5, {0x40, 0x0, 0x6}, 0x55000000, 0x5, 0x40000000, 0x5, 0x0, '', 0xb, '/dev/nvram\x00', 0xb, '/dev/nvram\x00', 0x5, 'gre0\x00'}, 0x9, '+]$::#}!{', r2, 0xee00, 0xee01}}, 0x6c) write$nbd(r0, &(0x7f0000000500)={0x67446698, 0x0, 0x2, 0x0, 0x4, "768e18e1797242893002d8cf8c8700b37d97b97b6b13e1a1903ef3793e220058a5481248d04dfacb0ce7622a9bdc08941a2dba9ed4f6471161cbedbcb372b2e1361ef3d0e9750d60958d19b2f039f0c1d6f747132ec180ef7929107ec3cc02f44a67d37f56b52eac519b15479b381fccd4d6dad34c0e829548614d37d45bb42b9f9177532c4ce205f3bbc64f92cc0eecec091c6cb16ce1615139abffe2c408e69d848260d68dea1a2413d24a8579a159c998ed551a34b70ec070d68f07334225b9619843287ca4781291"}, 0xda) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000780)={'nat\x00', 0x0, 0x3, 0xcc, [0x3, 0x2, 0x5a4, 0x0, 0x101], 0x6, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000680)=""/204}, &(0x7f0000000800)=0x78) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000840)={0x3, {{0xa, 0x4e24, 0xff, @remote, 0x1}}}, 0x88) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='children\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000a00)={{r4}, 0x0, 0xa, @inherit={0x70, &(0x7f0000000980)={0x0, 0x5, 0x3, 0x20, {0x1, 0x10000, 0x2, 0x9, 0x9}, [0x4, 0x5, 0x80000001, 0x1f, 0x84a]}}, @subvolid=0x7}) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000001a00)={{0xe8d9, 0x1}, {0x9, 0x8}, 0x80000001, 0x1}) r5 = dup3(r3, r4, 0x0) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, &(0x7f0000001a40)={{0x100000001, 0x7fff}, {0x3}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000001ac0)={0x9, 0x10001}) 04:32:28 executing program 2: io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="cb32b4d56a4e6cf59c714d457c8bd4bce7aa220afb02c806cf2c22c3eae1585615387f89bbb432b5763eda349da7435b4a3e77b81e5daa671e95e6e3a08da1240262e3bff6eeb06c807cc64fe107e68cfb7c2051d5a6d430cebd841fb9379a08762da95280b8e999a4393b6ad40d81b0c68a4994123b81e3055a2e422ea9004a9cf401cb53d8b8af619584f8ec8bb68834c63da154c10da87e28478c720bae9e81980197778a4247ab197c1e08564f68aa50cd5e20d2a3f66ea2887bec118aa1980119497e65565affda8abd6e1344b1df8a336ab90714eb2229896a760bfe44edd4ab5375377f6a93ae13817f76", 0xee, 0x4, 0x0, 0x2}, &(0x7f0000000140)) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) fstat(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x1}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000640)) renameat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), &(0x7f0000000780)={0x0, 0xfb, 0x48, 0x1, 0x0, "7b68e91f4554c5fcf33ef5618c7d3522", "e731c7061203dae7d316b68bc20c90bd1b490f7851f9e4d248779ab9e73e52e87b1ee7efc20ce6c7faa0cac2fbd2122d7600d7"}, 0x48, 0x0) clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000800), 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/168, 0xa8}, {&(0x7f00000009c0)=""/20, 0x14}, {&(0x7f0000000a00)=""/22, 0x16}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x5, &(0x7f0000001ac0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001bc0)=""/218, 0xda}, {&(0x7f0000001cc0)=""/106, 0x6a}, {&(0x7f0000001d40)=""/79, 0x4f}, {&(0x7f0000001dc0)=""/99, 0x63}], 0x4}}], 0x2, 0x40000002, &(0x7f0000001f40)={r0, r1+60000000}) openat$cgroup_subtree(r2, &(0x7f0000001f80), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000002040)={r3, 0xfff, 0x1, 0x4}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000001fc0)='.\x00', &(0x7f0000002000)='./file0\x00', r5) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002080)={r5, 0x1b, 0x7ff, 0x1}) openat$cgroup_devices(r6, &(0x7f00000020c0)='devices.allow\x00', 0x2, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000002100)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000002140)={0x2, 'hsr0\x00', 0x4}, 0x18) r7 = gettid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000002180)=r7) ioctl$CDROMVOLREAD(r6, 0x5313, &(0x7f00000021c0)) ioctl$CDROM_DISC_STATUS(r3, 0x5327) 04:32:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x9, 0x6, 0xfffa, 0x1, 0x1b, "8bd3aaa814847cd4"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDISABIO(r1, 0x4b37) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x8, 0x5, 0x5, 0x83, 0x80000000, 0x100000000}) r2 = dup3(r1, r1, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000080)) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x186) epoll_wait(r3, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0xffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1a4, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeee}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff8b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9054}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf0ae}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000004c0)) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, &(0x7f0000000540)={0x0, 0x0, 0x1}) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000580)=0x1) r7 = accept4$unix(r3, &(0x7f00000005c0)=@abs, &(0x7f0000000640)=0x6e, 0x0) fcntl$dupfd(r0, 0x406, r7) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) [ 130.268329] audit: type=1400 audit(1750048348.286:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:32:28 executing program 4: r0 = timerfd_create(0x5, 0x80000) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x3, 0x6, 0xa4, &(0x7f0000000000)=""/164}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x501003, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x2, 'caif0\x00', {0xeb}, 0xc0}) r2 = perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x80, 0x27, 0xfd, 0x3, 0x1, 0x0, 0x4, 0x2030, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000200), 0x4}, 0x10100, 0x5a, 0x7, 0x3, 0x10001, 0x0, 0xfffe, 0x0, 0x7fffffff, 0x0, 0x4}, r1, 0x0, r1, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4048000}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000480), 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0x800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000005c0)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000600)={0x2, 'xfrm0\x00', {0xffff}, 0x2841}) r4 = accept(r1, &(0x7f0000000640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000006c0)=0x80) sendto(r4, &(0x7f0000000700)="b8311a55011626722fef874c497d48b13487303962", 0x15, 0x40800, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x2, 0x4, 0x3, 0x4}}, 0x80) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000007c0)={{r0}, {@val, @actul_num={@val=0x2d, 0x6, 0x65}}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r5, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3e}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004881}, 0x0) 04:32:28 executing program 5: sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x2e}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8d2b5c2aafe134d4a3dea2b0457758b0"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8c9c346a3948476ae6372e6034259890"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20040050) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x736}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x983e}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x20000044) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4008814) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x20c, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}, @NL80211_ATTR_PMK={0x102, 0xfe, "518162453a470fbccba657119662c88f84347c05b5a4ee20503bd4cb93f130c6067687b40f0eda4c2c08071d1f4b5d6147dbd6533a038b2886c19a261b181f64fcb6339a784f4c655de628539e16157d2e7143bb8228c9ab35f842cae50a6e3da662b1a426810b752639c90101dcef1e9a7c403d6f32221d93d32dfe924d06a92e0a1ff4c4ab0ed7339bd80aea0e2354aa3f3fd9449565ab622f6306679abdfa4bd95218ea71a75a3d26545405c2112c59a4e78f028cdb0bedce65a63822e5cdefbb5a740b76c57fa86bcbf10ca9141e19d4e78d16d30dfa288e14767ee58a78369d885028158b04fb5b35b6fefadae3fe51a52e01ecdc2b04d8cc16f340"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac05, 0xfac0c, 0xfac0c, 0xfac09, 0xfac00]}, @NL80211_ATTR_SAE_PASSWORD={0x6b, 0x115, "778b4e12370a7be63755365180c9927bb4ba9b21cbb5919a09baa8c32c524709024b77bb224fdb296c5d83d42ad5f763cd82d1cbcd60319998daa5f0cf81133ddc555d4b27d675937f558d579c7fe3461c2050401b8be02fc1d1658dcbe8023873e9c019146526"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0x966ef1db20d2c989, 0xfac01, 0xfac04, 0xfac01]}], @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x20}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0xc0}, 0x24040811) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x9c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:dhcpd_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_run_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r1) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x5555555555550201}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r6, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x40480c0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44040) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x10, 0x3f8, 0x100, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x810}, 0x10e7336d97485e81) 04:32:28 executing program 6: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)="5fb70801fa181a725c2c412258bb1a50e372c55672b2db474ff98644199624779a31bd5fb29e2cbb74c40c4c0f101dd9cf3e69d25a4806d5ff8e12719d662cff7c7346bf9e486e4bcb4e717a838cdff3a2365c661cfd7fa4a7912ebb6134a06252cffa5aa54a62a8fe392792f2436522e7cfdc42f4aaa34f6063b6cc0c2a60d1687b83194ce38542219745f3f18b4a27c70a69abc3aaef5d427bd83c41ac9573e86691d136d744eb68abc991a5f31c8159e217723af883197a10828e841df02b13fc99627e42e4ffb7e5b8e055aa1ac9aaca4fcddadf534b2528318341d755c54462f9c31817ce61548ead44a345cea17f86f9fd99", 0xf5) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x100000000, 0x7fffffff, 0x800000, 0x4c9, 0x1], 0x7, &(0x7f0000000100)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x9, 0xffffffffffffffe1, 0x8, 0x10001, 0x7]}, &(0x7f0000000300)=0x78) r1 = signalfd(r0, &(0x7f0000000340)={[0x3408]}, 0x8) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0xd6}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000400)=[@sack_perm, @window={0x3, 0x5f, 0x1ff}, @timestamp], 0x3) ioctl$CDROMCLOSETRAY(r1, 0x5319) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip6tnl0\x00'}) r3 = dup3(r2, r0, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000480)=0x1, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000004c0)=0x3) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}}, 0x4045) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000640)={r2, 0x9, 0x8001, 0x25d5}) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000680)={{0x2, 0x4e22, @private=0xa010102}, {0x1, @local}, 0x40, {0x2, 0x4e21, @private=0xa010102}, 'wlan1\x00'}) flistxattr(r2, &(0x7f0000000700)=""/103, 0x67) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x70}}, 0x40840) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000008c0)={0x3, 0x0, {0x7, 0x3, 0x9e1, 0x0, 0x58586e34}, 0x7}) 04:32:28 executing program 7: ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0xfffffffe}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001f40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x140, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffcd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3edd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x80, 0x15}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x2a}}}}, ["", "", ""]}, 0x28}}, 0x91) r2 = syz_open_dev$vcsn(&(0x7f00000025c0), 0xcce, 0x52040) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x3c, 0x0, 0x10, 0x70bd2c, 0xa27, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x14) fcntl$setsig(r0, 0xa, 0x2a) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x64, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x24}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x81) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x30, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002980), 0x400, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000002940), r3) getsockopt$sock_int(r3, 0x1, 0x4, &(0x7f00000029c0), &(0x7f0000002a00)=0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000002a40)={0x0, 0x0, 0x5, 0x0, '\x00', [{0xfffffffe, 0x3, 0xa19, 0xe0, 0x2000000000000000}, {0x10000, 0x31, 0x2, 0x1, 0x0, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = socket$nl_generic(0x10, 0x3, 0x10) pwritev2(r5, &(0x7f0000002c80)=[{&(0x7f0000002c40)="8048c88cae3a11297e62ebc88b37986d72bfc73ddb447474c2683bebb091b7e26bce54674612604266ee7c87952b5f1a238e3a4445524f34866d2733", 0x3c}], 0x1, 0x5, 0x4, 0x1) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002d00), 0x201, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000002cc0), r6) [ 131.627148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.630851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.633727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.641005] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.646942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.754271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.767724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.769920] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.774655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.780574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.861560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.869073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.879482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.901415] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.908388] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.913955] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.922724] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.925073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.927260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.933829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.937915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.948205] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.950186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.952865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.955597] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.957765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.961281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.965727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.966579] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.988419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.995825] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 132.001429] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.003052] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.009714] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 132.025552] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 132.027339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.036059] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 132.089350] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 132.103630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 132.124657] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 133.712474] Bluetooth: hci0: command tx timeout [ 133.840522] Bluetooth: hci1: command tx timeout [ 134.096071] Bluetooth: hci3: command tx timeout [ 134.096681] Bluetooth: hci2: command tx timeout [ 134.159464] Bluetooth: hci5: command tx timeout [ 134.160300] Bluetooth: hci4: command tx timeout [ 134.223313] Bluetooth: hci6: command tx timeout [ 134.224007] Bluetooth: hci7: command tx timeout [ 135.759568] Bluetooth: hci0: command tx timeout [ 135.888266] Bluetooth: hci1: command tx timeout [ 136.143243] Bluetooth: hci3: command tx timeout [ 136.143727] Bluetooth: hci2: command tx timeout [ 136.207285] Bluetooth: hci5: command tx timeout [ 136.207756] Bluetooth: hci4: command tx timeout [ 136.272073] Bluetooth: hci7: command tx timeout [ 136.272560] Bluetooth: hci6: command tx timeout [ 137.807179] Bluetooth: hci0: command tx timeout [ 137.935170] Bluetooth: hci1: command tx timeout [ 138.192140] Bluetooth: hci2: command tx timeout [ 138.192603] Bluetooth: hci3: command tx timeout [ 138.255225] Bluetooth: hci5: command tx timeout [ 138.255658] Bluetooth: hci4: command tx timeout [ 138.319287] Bluetooth: hci6: command tx timeout [ 138.319714] Bluetooth: hci7: command tx timeout [ 139.856429] Bluetooth: hci0: command tx timeout [ 139.983205] Bluetooth: hci1: command tx timeout [ 140.239518] Bluetooth: hci3: command tx timeout [ 140.239988] Bluetooth: hci2: command tx timeout [ 140.303441] Bluetooth: hci4: command tx timeout [ 140.303922] Bluetooth: hci5: command tx timeout [ 140.367306] Bluetooth: hci7: command tx timeout [ 140.367788] Bluetooth: hci6: command tx timeout [ 194.471213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.477326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.482533] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.489473] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.496412] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.537326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.541945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.550190] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.560657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.567058] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.610818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.617806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.623795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.630555] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.654571] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.664047] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.671545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.674640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.711672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.726956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.902047] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.910031] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.920966] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.957737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.961216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.966718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.968171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.973636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.978353] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.981492] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.991627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.995633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 195.006951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.020016] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.022454] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 195.034766] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.037309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.039727] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.052013] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.065770] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.560323] Bluetooth: hci0: command tx timeout [ 196.623260] Bluetooth: hci1: command tx timeout [ 196.753136] Bluetooth: hci3: command tx timeout [ 196.815179] Bluetooth: hci2: command tx timeout [ 197.007209] Bluetooth: hci7: command tx timeout [ 197.135419] Bluetooth: hci4: command tx timeout [ 197.136718] Bluetooth: hci5: command tx timeout [ 197.200170] Bluetooth: hci6: command tx timeout [ 198.608160] Bluetooth: hci0: command tx timeout [ 198.671786] Bluetooth: hci1: command tx timeout [ 198.799372] Bluetooth: hci3: command tx timeout [ 198.863278] Bluetooth: hci2: command tx timeout [ 199.056392] Bluetooth: hci7: command tx timeout [ 199.183863] Bluetooth: hci4: command tx timeout [ 199.184415] Bluetooth: hci5: command tx timeout [ 199.247212] Bluetooth: hci6: command tx timeout [ 200.655454] Bluetooth: hci0: command tx timeout [ 200.721238] Bluetooth: hci1: command tx timeout [ 200.848278] Bluetooth: hci3: command tx timeout [ 200.911258] Bluetooth: hci2: command tx timeout [ 201.103464] Bluetooth: hci7: command tx timeout [ 201.231284] Bluetooth: hci5: command tx timeout [ 201.232182] Bluetooth: hci4: command tx timeout [ 201.295379] Bluetooth: hci6: command tx timeout [ 202.703415] Bluetooth: hci0: command tx timeout [ 202.767298] Bluetooth: hci1: command tx timeout [ 202.896371] Bluetooth: hci3: command tx timeout [ 202.959273] Bluetooth: hci2: command tx timeout [ 203.151252] Bluetooth: hci7: command tx timeout [ 203.279547] Bluetooth: hci5: command tx timeout [ 203.280333] Bluetooth: hci4: command tx timeout [ 203.343510] Bluetooth: hci6: command tx timeout [ 256.485888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.490404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.494917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.507081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.520715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.625599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.634221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.637529] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.652844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.658818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.715275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.718987] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.723073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.734329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.752513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.882157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.895742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.920759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.931686] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.966480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.000439] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.009607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.014827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.022685] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.025782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.028617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.032593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.045376] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.053697] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.060733] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.073781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.107033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.116980] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.118155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.123166] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.133563] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.146884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.161596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.234517] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.259963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.575199] Bluetooth: hci0: command tx timeout [ 258.704024] Bluetooth: hci1: command tx timeout [ 258.831224] Bluetooth: hci2: command tx timeout [ 259.089140] Bluetooth: hci3: command tx timeout [ 259.215171] Bluetooth: hci5: command tx timeout [ 259.279203] Bluetooth: hci6: command tx timeout [ 259.279924] Bluetooth: hci7: command tx timeout [ 259.343239] Bluetooth: hci4: command tx timeout [ 260.623188] Bluetooth: hci0: command tx timeout [ 260.751319] Bluetooth: hci1: command tx timeout [ 260.879209] Bluetooth: hci2: command tx timeout [ 261.137118] Bluetooth: hci3: command tx timeout [ 261.263428] Bluetooth: hci5: command tx timeout [ 261.327284] Bluetooth: hci7: command tx timeout [ 261.327725] Bluetooth: hci6: command tx timeout [ 261.391228] Bluetooth: hci4: command tx timeout [ 262.672143] Bluetooth: hci0: command tx timeout [ 262.799387] Bluetooth: hci1: command tx timeout [ 262.927193] Bluetooth: hci2: command tx timeout [ 263.185139] Bluetooth: hci3: command tx timeout [ 263.311355] Bluetooth: hci5: command tx timeout [ 263.376178] Bluetooth: hci6: command tx timeout [ 263.376663] Bluetooth: hci7: command tx timeout [ 263.439205] Bluetooth: hci4: command tx timeout [ 264.719358] Bluetooth: hci0: command tx timeout [ 264.847445] Bluetooth: hci1: command tx timeout [ 264.975345] Bluetooth: hci2: command tx timeout [ 265.231264] Bluetooth: hci3: command tx timeout [ 265.359186] Bluetooth: hci5: command tx timeout [ 265.424523] Bluetooth: hci7: command tx timeout [ 265.425018] Bluetooth: hci6: command tx timeout [ 265.487422] Bluetooth: hci4: command tx timeout [ 318.943962] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.951282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.955937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.972067] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.976605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.025147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.029767] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.032676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.041575] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.045657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.208990] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.230802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.238527] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.259304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.271650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.354591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.364486] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.379187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.397491] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.405353] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.416452] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.432976] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.436836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.441040] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.446569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.449830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.462566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.492952] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.500952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.504024] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.512045] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.519910] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.532447] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.556884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.558661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.558915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.565697] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.575078] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.576448] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.586864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 321.039485] Bluetooth: hci0: command tx timeout [ 321.104050] Bluetooth: hci1: command tx timeout [ 321.424209] Bluetooth: hci2: command tx timeout [ 321.552225] Bluetooth: hci3: command tx timeout [ 321.679896] Bluetooth: hci6: command tx timeout [ 321.679934] Bluetooth: hci7: command tx timeout [ 321.680359] Bluetooth: hci5: command tx timeout [ 321.745042] Bluetooth: hci4: command tx timeout [ 323.087551] Bluetooth: hci0: command tx timeout [ 323.151499] Bluetooth: hci1: command tx timeout [ 323.471197] Bluetooth: hci2: command tx timeout [ 323.599150] Bluetooth: hci3: command tx timeout [ 323.727616] Bluetooth: hci5: command tx timeout [ 323.727720] Bluetooth: hci7: command tx timeout [ 323.728050] Bluetooth: hci6: command tx timeout [ 323.792593] Bluetooth: hci4: command tx timeout [ 325.135191] Bluetooth: hci0: command tx timeout [ 325.199332] Bluetooth: hci1: command tx timeout [ 325.519176] Bluetooth: hci2: command tx timeout [ 325.648135] Bluetooth: hci3: command tx timeout [ 325.775196] Bluetooth: hci7: command tx timeout [ 325.775224] Bluetooth: hci6: command tx timeout [ 325.775624] Bluetooth: hci5: command tx timeout [ 325.839360] Bluetooth: hci4: command tx timeout [ 327.183163] Bluetooth: hci0: command tx timeout [ 327.249120] Bluetooth: hci1: command tx timeout [ 327.567422] Bluetooth: hci2: command tx timeout [ 327.695368] Bluetooth: hci3: command tx timeout [ 327.823499] Bluetooth: hci5: command tx timeout [ 327.827254] Bluetooth: hci6: command tx timeout [ 327.827392] Bluetooth: hci7: command tx timeout [ 327.887449] Bluetooth: hci4: command tx timeout [ 381.765182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.769589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.772910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.778429] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.782151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.784299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.791476] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.797320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.804390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.813818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.815957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.818358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.824157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.828486] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.829167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.829854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.833315] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.833992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.874438] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.885461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.937992] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.942272] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.948381] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.950981] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.956553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.961712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.974593] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.980033] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.982476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.988681] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.103288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.106460] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.110626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.115806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.121274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.131686] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 382.148030] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 382.169046] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 382.186293] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 382.190021] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 383.951220] Bluetooth: hci0: command tx timeout [ 383.951932] Bluetooth: hci2: command tx timeout [ 383.953432] Bluetooth: hci1: command tx timeout [ 384.079804] Bluetooth: hci3: command tx timeout [ 384.079848] Bluetooth: hci4: command tx timeout [ 384.208302] Bluetooth: hci6: command tx timeout [ 384.272496] Bluetooth: hci7: command tx timeout [ 384.272714] Bluetooth: hci5: command tx timeout [ 385.999274] Bluetooth: hci2: command tx timeout [ 385.999763] Bluetooth: hci1: command tx timeout [ 386.000226] Bluetooth: hci0: command tx timeout [ 386.127256] Bluetooth: hci3: command tx timeout [ 386.128310] Bluetooth: hci4: command tx timeout [ 386.255370] Bluetooth: hci6: command tx timeout [ 386.319207] Bluetooth: hci5: command tx timeout [ 386.319331] Bluetooth: hci7: command tx timeout [ 388.047474] Bluetooth: hci0: command tx timeout [ 388.047514] Bluetooth: hci1: command tx timeout [ 388.047963] Bluetooth: hci2: command tx timeout [ 388.175241] Bluetooth: hci3: command tx timeout [ 388.175279] Bluetooth: hci4: command tx timeout [ 388.303471] Bluetooth: hci6: command tx timeout [ 388.367635] Bluetooth: hci7: command tx timeout [ 388.368135] Bluetooth: hci5: command tx timeout [ 390.096354] Bluetooth: hci1: command tx timeout [ 390.096860] Bluetooth: hci0: command tx timeout [ 390.097773] Bluetooth: hci2: command tx timeout [ 390.223354] Bluetooth: hci3: command tx timeout [ 390.224511] Bluetooth: hci4: command tx timeout [ 390.351410] Bluetooth: hci6: command tx timeout [ 390.416224] Bluetooth: hci5: command tx timeout [ 390.416671] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:37:37 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffff88800a42f45c RDX=0000000000000000 RSI=ffffffff81a21654 RDI=ffff88800fae9f7c RBP=ffff88800a42f560 RSP=ffff88800a42f498 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b4ed R11=000000000002330d R12=0000000000000000 R13=ffff88800a42f550 R14=ffff88800fae9b80 R15=ffff88800a42f508 RIP=ffffffff81353d12 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb372f136f4 CR3=000000001c8a9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fb372f2247000007fb372f21f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff84aa3922 RBX=ffffffff816049f0 RCX=ffff88806cf089cc RDX=1ffff1100d9e115a RSI=ffffffff84aa3922 RDI=ffff88806cf08b40 RBP=ffff88806cf08b10 RSP=ffff88806cf08a60 R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b4ed R11=0000000000023263 R12=ffff88806cf08b40 R13=0000000000000000 R14=ffff88800faed280 R15=ffff88800e8e5a68 RIP=ffffffff84b49bc0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcf80b0b368 CR3=000000000e816000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000