Warning: Permanently added '[localhost]:1215' (ECDSA) to the list of known hosts. 2025/06/19 02:45:43 fuzzer started 2025/06/19 02:45:44 dialing manager at localhost:36157 syzkaller login: [ 98.170660] cgroup: Unknown subsys name 'net' [ 98.299622] cgroup: Unknown subsys name 'cpuset' [ 98.351519] cgroup: Unknown subsys name 'rlimit' 2025/06/19 02:45:59 syscalls: 2214 2025/06/19 02:45:59 code coverage: enabled 2025/06/19 02:45:59 comparison tracing: enabled 2025/06/19 02:45:59 extra coverage: enabled 2025/06/19 02:45:59 setuid sandbox: enabled 2025/06/19 02:45:59 namespace sandbox: enabled 2025/06/19 02:45:59 Android sandbox: enabled 2025/06/19 02:45:59 fault injection: enabled 2025/06/19 02:45:59 leak checking: enabled 2025/06/19 02:45:59 net packet injection: enabled 2025/06/19 02:45:59 net device setup: enabled 2025/06/19 02:45:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/19 02:45:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/19 02:45:59 USB emulation: enabled 2025/06/19 02:45:59 hci packet injection: enabled 2025/06/19 02:45:59 wifi device emulation: enabled 2025/06/19 02:45:59 802.15.4 emulation: enabled 2025/06/19 02:45:59 fetching corpus: 0, signal 0/0 (executing program) 2025/06/19 02:46:02 starting 8 fuzzer processes 02:46:02 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xfc, 0x6, 0x100, 0x16, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7, 0x8, 0x800, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x8, 0x2, 0x55dc, 0x30, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x700, 0x4, 0x7}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x41420000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x8010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3b3629c3, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000440), &(0x7f0000000480)=0x30) setxattr$incfs_metadata(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)="76ef54d203a57346344cf09451a9ba60f56d296633cdc096a673525a45108ac8bc3d4226e5953692d1fb4b741a19a937b5f08070d24aa5081e1c1a99293ca9e2343c0d480b299ca29fa43ab14ef820ba92546caaf827ddede400a39bd92a6f30383bc7e81739f1872bcae7a12fa430554a7451cac18c2b71e82a483340bf214e2c4d6e875299579569dc04a00edbd8fca21241d402e5750d16e4e93beb4e12b7cc60ecba6ea5b0c6698a850f5fa5887195e136946d7732e15437997dac87c1b4e2bd4a0a496c9bc4eb7d4ef6280a9578", 0xd0, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/122, 0x7a}, {&(0x7f0000000740)=""/245, 0xf5}], 0x2, &(0x7f0000000880)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/215, 0xd7}, {&(0x7f0000000a00)=""/241, 0xf1}, {&(0x7f0000000b00)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/223, 0xdf}], 0x4, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}], 0x2, 0x20000, &(0x7f0000000e80)) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r8, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000010c0)={'syztnl1\x00', &(0x7f0000001040)={'syztnl1\x00', r0, 0x29, 0x0, 0x6, 0x2, 0x2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x40, 0x80, 0xeb68, 0x8000}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000011c0)={'syztnl2\x00', &(0x7f0000001100)={'tunl0\x00', r9, 0x8, 0x8, 0x7, 0x5, {{0x1d, 0x4, 0x2, 0xc, 0x74, 0x67, 0x0, 0x7f, 0x956347bbed7153f3, 0x0, @rand_addr=0x64010100, @empty, {[@rr={0x7, 0xb, 0xea, [@private=0xa010101, @private=0xa010102]}, @lsrr={0x83, 0x13, 0x5e, [@empty, @empty, @local, @multicast2]}, @lsrr={0x83, 0x13, 0xb2, [@multicast1, @rand_addr=0x64010101, @private=0xa010102, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x37, [@multicast2, @broadcast, @multicast1, @private=0xa010102, @empty]}, @timestamp={0x44, 0x14, 0x3c, 0x0, 0x7, [0x101, 0xffffffff, 0x2, 0x0]}]}}}}}) bind(r7, &(0x7f0000001200)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x80) ioctl$CDROMRESUME(r3, 0x5302) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1a}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040080}, 0x104) ioctl$CDROM_DEBUG(r4, 0x5330, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f00000013c0)={0x8, 'macvlan0\x00', {'ipvlan0\x00'}}) read$snapshot(r8, &(0x7f0000001400)=""/11, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) 02:46:02 executing program 1: ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x1) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x2) r0 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x6}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x7, 0x8, 0x0, 0x7, 0x5, [{0x2, 0x9, 0x7fff, '\x00', 0x1}, {0x2d59, 0xff, 0x0, '\x00', 0x80}, {0x4, 0x1, 0x5, '\x00', 0x4}, {0x1fa5, 0x8, 0x5}, {0xfcf, 0x1000, 0x8000, '\x00', 0x2000}]}) io_setup(0x8, &(0x7f00000001c0)=0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000200)="ce50c35e27529237ea9727f45e1a42c96fe144ca9dde1b30ef01349d6d5148c76ecc68eb6fad895a7506c92fc74414e8bab180b37fd52b426d7c303661c040bc050253c32cf7435f3c4592b3afc66bcf2d5b08418af406bb055867cf879dbe080670441dfe2fc5686d32fda2e12cff0dc48a", 0x72, 0x7, 0x0, 0x1}, &(0x7f00000002c0)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000300)={0x8, 0x4}) connect$netlink(0xffffffffffffffff, &(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000380)=0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'bridge0\x00', @random}) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x301201, 0x0) ioctl$CDROM_SELECT_SPEED(r2, 0x5322, 0x9bf) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000440)={0x7ff, 0x82}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000480)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x480001, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$int_in(r4, 0x5421, &(0x7f0000000500)=0x1) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000005c0)={{}, 0x8, &(0x7f0000000580)=[0xfffffffffffffffa, 0xfffffffffffffe00, 0x1, 0x1, 0x5, 0x0, 0x1, 0x3], 0x1, 0x0, [0x8, 0x6, 0x1, 0x9]}) 02:46:02 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x453, 0x10, 0x70bd25, 0x25dfdbfb, "737395d24e1b884face131951816f6b7bc619195ede87950f548d9", [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x90, 0x100, 0x0, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7, 0xb7, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x4d, 0x4, 0x44, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8000, 0x40, 0x4, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0xee, 0x1, 0x8, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x1, 0x5, 0x20}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x170, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = accept4$inet6(r0, &(0x7f00000006c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000700)=0x1c, 0x800) listen(r0, 0x80000001) r6 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1ec, 0x13, 0x100, 0x70bd27, 0x25dfdbfb, {0x15, 0x0, 0x2, 0x2, {0x4e20, 0x4e20, [0x4, 0x101, 0xa7, 0x8], [0x1, 0x9, 0xff, 0x3], r2, [0x8, 0x9]}, 0x7, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "24a9ed680243f79231f69da0edfddfca6d2ca5743309e572ec8778bcc9012a5c666c30a25fc01a7fafeda76c6110a7bd35b8caf4deeb1ae771c58d65cecb054bf98d77e1e6d0bb42af3921379cd7c4914678db46bfe3ebdc3b34911ea77a6e4f6adae2d7c0fa536dba3af4c2f0ade94d845506998348a3e8abe13625511de161d0e57fa2a116a2ff5123f722202a11c9f8b08bf0b0015994a1dfc88d09cc3f329f1a8ef74f0fc8397e4660df61e61626328918c3f7e2749c"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "0d3a3972d6d886764e9264fbbfed800247853b7da0e78bcf1f2c9b107f19eb7e97ab6e650a6a0322c340d02e05cd52298fe33f497cf7271a70f777372435762e2c1885a3920ceef585af93f6e0d7a6b1ddbc96f872f527ce84404c483b0cd2460d8674dc629af81e39c6c3f8ed1536623d7747e45a4787918a11849a552974c78ca966f8ca5ee8537a19f9393dd8c5c0f5b94c15380f620c05f5bfc9b04006d6ecb2f9f22247e0cdab870972ad30aa884ff16f68fc2ea8408f0c1dc103a9d465d64a3d7e8ccd92f1a2ad8d66991334c4a88b0ecc8c0678b93098fa325a"}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x10}, 0x40801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r5, {0x7ff, 0x1}}, './file0\x00'}) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000a40)) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000c00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000d40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000d80)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000000e80)=0xe8) getsockname$packet(r7, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000fc0)={'ip6tnl0\x00', r3, 0x4, 0x3, 0x20, 0x9, 0x3, @loopback, @empty, 0x8, 0x20, 0x10001, 0x8}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000001240)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x158, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 02:46:02 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0, r1], 0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) close_range(r0, r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x101, 0x9, {{0x18, 0x4, 0x3, 0x38, 0x60, 0x64, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xf5, 0x0, 0x7, [0x8001, 0xff]}, @timestamp={0x44, 0x10, 0xc8, 0x0, 0x7, [0xfffffbff, 0xfff, 0x0]}, @ssrr={0x89, 0x2b, 0xa7, [@remote, @multicast1, @private=0xa010102, @rand_addr=0x64010101, @private=0xa010102, @broadcast, @empty, @empty, @loopback, @multicast2]}]}}}}}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f00000001c0)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000200)=""/61, 0x3d}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000280)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000002c0)=0x8) r3 = socket(0x27, 0x3, 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004840}, 0x8010) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000400)={@private1, 0x47, r2}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000440)={'security\x00', 0x2, [{}, {}]}, 0x48) recvmmsg$unix(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/10, 0xa}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/104, 0x68}], 0x5}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000840)=""/88, 0x58}, {&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f00000009c0)=""/113, 0x71}, {&(0x7f0000000a40)=""/197, 0xc5}, {&(0x7f0000000b40)=""/118, 0x76}, {&(0x7f0000000bc0)=""/136, 0x88}], 0x7, &(0x7f0000000d00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}}], 0x2, 0x2, &(0x7f0000000f00)={0x0, 0x989680}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x810) r6 = dup(0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r4) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x808000b}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)={0x12c, r7, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0xf0, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @initial, @broadcast, @device_a, {0x0, 0x3}}, {0x6, 0x1, 0x2, 0x0, 0x54}}, {@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x1, 0x0, 0x1}, {}, @from_mac, @device_a, @initial, {0x2, 0xd63}}, {0x0, 0x1, 0x1, 0x1, 0x1}}}, @a_msdu=[{@device_a, @device_b, 0xa8, "4e0d1151ea2517d814aba30bbba697dbbeeb735fc70917ca41760b07d33fd45234f912f337183caabfd9cda2afd295bac79312c1fb61d0251d881a0d5a67f2f9e967e97c469923abb612f49b4de5e53297e512800c4289eb05a82d40223f045e74ca48a5f8bf5163c86896f91eb300da0038565cbddbecea660382db1a20fd4575bd056626f2cce9b4a20be89adb73f59f815928bcadc121bcb739c0b94102db15595e749e95d4fa"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88be}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x40000c4) 02:46:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x101800, 0xc0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) fchmod(r2, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='com.apple.system.Security\x00') r4 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x40000) mmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x1000000, 0x8010, r4, 0x3b0e7000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000280)) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/200) readlinkat(r0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/87, 0x57) r6 = syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x8, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000540)="041b1a455a61039e0edac0396099e9e93165133ae455c2cb5a4b997d2a0f6a0771a0a3698647a005194a24ed4d0579640eb4840999398aca42f05b4ec32f9a31a97d5558c2bdd1e093f4ff3f0beab2e4401a4623564e7c023df4ce34ef41d51b6db1f3061f2d26a77ed087a6f1641f9c4e4a2eb9b681a9b3c109ca4cbcb94046cbd1806b0e5544781ae6983268ab800a0c5da57627372a", 0x97, 0x5}, {&(0x7f0000000600)="dcd05d60627af12d0de71eec843509f756e4cd1342c410a5d2e30442187dba8ce126f89864606c080c4fb834fc25ba90718b8c44d89335d6b6d2c05db01c7b210fde915c6dae60c3894fbdd75d026d7f7d5ff3812dfc55696ee6bbd918395873d9b193e8a5a5a265aa210d6aacd02a918a2b0c952cdc8776fbaad4309db6d04ac805278948035894d2bd7ce16bdc66bc9ac78965ffaf5ab66dcd92d80b2382a4508559bbe79c1fa87629618a182c0d68b7823208027ae4d33e912947f64be09520fd4e0c142aca9f4b8798ad347dedb1dd36db74e90b4199c510728a47fc", 0xde, 0x4}, {&(0x7f0000000700)="608c10", 0x3, 0x2}, {&(0x7f0000000740)="b84ac491b834268f2e0c9ef17fb825924cb082686f502cf8f46a52c3f3b9625918b2606b20ada258e1d4d830b2163d8e516b65022db838f2b0d4b35115b3583d29f154d68598bf8d9e24c807c1860a2d25d3a694815393113cfe4df6fa76865e1e529eea3eae43cb04f787285c37d28bd8a30dbb68803bf957f38e1274fd7e71b14dda54683433a165ff0bba220d3e7f35038deda087bacb27d071c1b4", 0x9d, 0x4}, {&(0x7f0000000800)="02b6f0f8fab39a925d5fe6c3a7a515eb618c12bcc1bf9f6fe925c39135aea5163308e0d4d0d3b76eff3f0f6bd600bb9e4d4d5ddce8714d6be98156e5c97f52626147f87f8d6ba6d3312b5f8c58b84ed67ede7053e19ede5b97779502e6c35a991ff99c9917da214d77089b0b37eaf442e611f7e4600ea092f1bfc3104530f19dae93a77b74f6a8479127a8a32e3420115e26cdd07e8852a8b75808a2adeeb9b031e76eb99b6496bd1b6270", 0xab, 0x2}], 0x8010, &(0x7f0000000940)={[{@shortname_win95}, {@rodir}, {@utf8}, {@fat=@tz_utc}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f00000009c0)={0x0, 0x1, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x0, &(0x7f0000000dc0)) ptrace$setregs(0xf, r5, 0x3, &(0x7f0000000e00)="9897195de17b2b") ioctl$int_out(r4, 0x5460, &(0x7f0000000e40)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) 02:46:02 executing program 5: ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x5, 0x2078e254}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)=""/224, &(0x7f0000000140)=0xe0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000880}, 0x20004004) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$CDROMGETSPINDOWN(r1, 0x531d, &(0x7f0000000340)) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000380)) fcntl$setpipe(r0, 0x407, 0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x52}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000540)=0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000084}, 0x40008) r4 = open(&(0x7f00000006c0)='./file0\x00', 0x400a00, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x68}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/module/lockdep', 0x10000, 0x1) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x28}}, 0x8010) r6 = syz_open_dev$vcsu(&(0x7f0000000980), 0x6, 0xc4880) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r6, {0x7fffffff}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000a00)='cubic\x00', 0x6) [ 116.340484] audit: type=1400 audit(1750301162.704:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:46:02 executing program 6: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/198, &(0x7f0000000100)=0xc6) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/pcmcia_rsrc', 0x0, 0xde) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000001c0)={0xd, 0xfffffffa}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000200)=""/116, &(0x7f0000000280)=0x74) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000300)={0x80000001, 0x6dc, 0x6, 0x9, 0x0, "5417d13e9303313e4edc444b1f266a13d41f2b"}) r3 = dup(r0) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000340)=0x5) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000380)={0xffffffffffff7fff, 0xa2b4}) recvmmsg$unix(r3, &(0x7f00000033c0)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000001600)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/34, 0x22}, {&(0x7f0000001480)=""/88, 0x58}, {&(0x7f0000001500)=""/247, 0xf7}], 0x4, &(0x7f0000001640)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001680), 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001700)=""/209, 0xd1}, {&(0x7f0000001800)=""/209, 0xd1}, {&(0x7f0000001900)=""/158, 0x9e}, {&(0x7f00000019c0)=""/227, 0xe3}, {&(0x7f0000001ac0)=""/169, 0xa9}, {&(0x7f0000001b80)=""/103, 0x67}, {&(0x7f0000001c00)=""/68, 0x44}, {&(0x7f0000001c80)=""/62, 0x3e}], 0x8, &(0x7f0000001d40)}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d80)=""/4, 0x4}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001e80), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/28, 0x1c}, {&(0x7f0000002f40)=""/52, 0x34}], 0x3, &(0x7f0000002fc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000003080)=@abs, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003100)=""/172, 0xac}, {&(0x7f00000031c0)=""/135, 0x87}], 0x2}}, {{&(0x7f00000032c0), 0x6e, &(0x7f0000003380)=[{&(0x7f0000003340)=""/46, 0x2e}], 0x1}}], 0x6, 0x2000, &(0x7f0000003540)={0x0, 0x989680}) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000003580)={0x9, 0x61, 0xc6c0, 0x10000, 0x4, "dcc49a8273bc9de92db067dbcdede84e7a1877", 0x8, 0x1}) r6 = fsmount(r1, 0x1, 0x1) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, &(0x7f00000035c0)={{0x7, 0x70}, {0x7ff, 0x4c43}, 0x10}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = fsmount(r5, 0x0, 0x2) fstat(r7, &(0x7f0000003600)) 02:46:02 executing program 7: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffff01}}, './file0\x00'}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1e) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'ip_vti0\x00', {0x2, 0x0, @multicast2}}) r2 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) clone3(&(0x7f0000000300)={0x8000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x14}, &(0x7f00000001c0)=""/11, 0xb, &(0x7f0000000200)=""/95, &(0x7f00000002c0)=[r2, r1, r3, r1], 0x4, {r0}}, 0x58) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f00000003c0)=0x5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20004050) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) getsockopt$sock_buf(r7, 0x1, 0x1a, &(0x7f00000005c0)=""/37, &(0x7f0000000600)=0x25) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000640)=0x9, 0x4) write$P9_RLCREATE(r4, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x20, 0x0, 0x2}, 0x7}}, 0x18) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004840) mkdirat$cgroup(r5, &(0x7f0000000800)='syz1\x00', 0x1ff) [ 117.854617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.857501] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.861359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.868266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.873360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.956574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.960423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.966890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.973911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.979726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.981746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.985739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.991735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.995126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.997626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.999959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.006989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.012492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.016688] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.021694] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.024313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.034768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.047552] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.055459] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.065300] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.092826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.093044] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.113411] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.118513] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.120858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.122699] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.156111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.161646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.165671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 118.169653] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.175836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.184808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.196133] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.240667] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.263347] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 119.940918] Bluetooth: hci0: command tx timeout [ 120.170344] Bluetooth: hci3: command tx timeout [ 120.195303] Bluetooth: hci4: command tx timeout [ 120.195890] Bluetooth: hci2: command tx timeout [ 120.196440] Bluetooth: hci1: command tx timeout [ 120.260279] Bluetooth: hci6: command tx timeout [ 120.260326] Bluetooth: hci5: command tx timeout [ 120.323336] Bluetooth: hci7: command tx timeout [ 121.987328] Bluetooth: hci0: command tx timeout [ 122.179348] Bluetooth: hci3: command tx timeout [ 122.243309] Bluetooth: hci1: command tx timeout [ 122.243359] Bluetooth: hci2: command tx timeout [ 122.243764] Bluetooth: hci4: command tx timeout [ 122.307274] Bluetooth: hci5: command tx timeout [ 122.309213] Bluetooth: hci6: command tx timeout [ 122.371262] Bluetooth: hci7: command tx timeout [ 124.035718] Bluetooth: hci0: command tx timeout [ 124.227699] Bluetooth: hci3: command tx timeout [ 124.291368] Bluetooth: hci1: command tx timeout [ 124.291502] Bluetooth: hci4: command tx timeout [ 124.292642] Bluetooth: hci2: command tx timeout [ 124.355462] Bluetooth: hci6: command tx timeout [ 124.355766] Bluetooth: hci5: command tx timeout [ 124.421521] Bluetooth: hci7: command tx timeout [ 126.084390] Bluetooth: hci0: command tx timeout [ 126.275248] Bluetooth: hci3: command tx timeout [ 126.339260] Bluetooth: hci4: command tx timeout [ 126.340360] Bluetooth: hci2: command tx timeout [ 126.340786] Bluetooth: hci1: command tx timeout [ 126.403772] Bluetooth: hci5: command tx timeout [ 126.404307] Bluetooth: hci6: command tx timeout [ 126.468505] Bluetooth: hci7: command tx timeout [ 180.372286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.377197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.380449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.392732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.397922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.473800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.481417] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.482949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.500431] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.504403] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.505740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.513400] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.516597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.530989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.541131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.556026] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.561695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.571080] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.572948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.578455] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.587244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.594485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.616768] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.621497] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.628120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.636331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.638312] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.640340] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.644721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.653030] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.670825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.679047] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.683299] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.697785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.700460] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 180.710748] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.716727] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.724874] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.763455] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 180.771850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.469226] Bluetooth: hci0: command tx timeout [ 182.595341] Bluetooth: hci3: command tx timeout [ 182.659655] Bluetooth: hci1: command tx timeout [ 182.787796] Bluetooth: hci5: command tx timeout [ 182.788678] Bluetooth: hci6: command tx timeout [ 182.789485] Bluetooth: hci4: command tx timeout [ 182.789589] Bluetooth: hci2: command tx timeout [ 182.851267] Bluetooth: hci7: command tx timeout [ 184.515260] Bluetooth: hci0: command tx timeout [ 184.643837] Bluetooth: hci3: command tx timeout [ 184.707376] Bluetooth: hci1: command tx timeout [ 184.836564] Bluetooth: hci2: command tx timeout [ 184.837773] Bluetooth: hci4: command tx timeout [ 184.837815] Bluetooth: hci6: command tx timeout [ 184.837873] Bluetooth: hci5: command tx timeout [ 184.899505] Bluetooth: hci7: command tx timeout [ 186.565321] Bluetooth: hci0: command tx timeout [ 186.691312] Bluetooth: hci3: command tx timeout [ 186.755342] Bluetooth: hci1: command tx timeout [ 186.885396] Bluetooth: hci6: command tx timeout [ 186.885563] Bluetooth: hci2: command tx timeout [ 186.885885] Bluetooth: hci4: command tx timeout [ 186.886641] Bluetooth: hci5: command tx timeout [ 186.948529] Bluetooth: hci7: command tx timeout [ 188.614439] Bluetooth: hci0: command tx timeout [ 188.740224] Bluetooth: hci3: command tx timeout [ 188.803467] Bluetooth: hci1: command tx timeout [ 188.931315] Bluetooth: hci2: command tx timeout [ 188.931777] Bluetooth: hci5: command tx timeout [ 188.932021] Bluetooth: hci4: command tx timeout [ 188.932234] Bluetooth: hci6: command tx timeout [ 188.995502] Bluetooth: hci7: command tx timeout [ 242.591090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.595383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.600403] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.603522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.605391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.610025] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.612413] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.618928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.624998] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.631056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.639032] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.644942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.648951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.662791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.665112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.673693] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.680929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.683060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.694286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.697589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.706505] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.718676] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.719832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.731289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.736563] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.773503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.777876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.785188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.799409] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.805450] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.837581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 242.842884] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 242.849460] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 242.851827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 242.853012] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 242.853316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 242.866751] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 242.868681] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.870632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 242.882253] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.675341] Bluetooth: hci0: command tx timeout [ 244.739367] Bluetooth: hci2: command tx timeout [ 244.739869] Bluetooth: hci3: command tx timeout [ 244.740754] Bluetooth: hci1: command tx timeout [ 244.803259] Bluetooth: hci4: command tx timeout [ 244.867261] Bluetooth: hci5: command tx timeout [ 244.932192] Bluetooth: hci7: command tx timeout [ 244.995245] Bluetooth: hci6: command tx timeout [ 246.723696] Bluetooth: hci0: command tx timeout [ 246.787274] Bluetooth: hci3: command tx timeout [ 246.787711] Bluetooth: hci1: command tx timeout [ 246.787735] Bluetooth: hci2: command tx timeout [ 246.851536] Bluetooth: hci4: command tx timeout [ 246.917216] Bluetooth: hci5: command tx timeout [ 246.979233] Bluetooth: hci7: command tx timeout [ 247.044286] Bluetooth: hci6: command tx timeout [ 248.771716] Bluetooth: hci0: command tx timeout [ 248.835550] Bluetooth: hci3: command tx timeout [ 248.835576] Bluetooth: hci1: command tx timeout [ 248.836710] Bluetooth: hci2: command tx timeout [ 248.899298] Bluetooth: hci4: command tx timeout [ 248.963793] Bluetooth: hci5: command tx timeout [ 249.027813] Bluetooth: hci7: command tx timeout [ 249.091678] Bluetooth: hci6: command tx timeout [ 250.820077] Bluetooth: hci0: command tx timeout [ 250.883309] Bluetooth: hci2: command tx timeout [ 250.884137] Bluetooth: hci3: command tx timeout [ 250.885057] Bluetooth: hci1: command tx timeout [ 250.947708] Bluetooth: hci4: command tx timeout [ 251.011541] Bluetooth: hci5: command tx timeout [ 251.075825] Bluetooth: hci7: command tx timeout [ 251.139798] Bluetooth: hci6: command tx timeout [ 304.993249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.001605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.008064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.030442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.039452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.062307] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.067562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.071650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.101685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.112916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.129373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.141263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.145555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.169843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.175715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.233712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.238788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.242118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.247734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.251045] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.340648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.351997] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.372744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.393865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.404100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.407558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.416783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.421885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.425974] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.429915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 305.440310] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.446535] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.462364] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 305.479140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 305.482698] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.486062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.553211] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 305.563792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.567210] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.607891] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.075400] Bluetooth: hci0: command tx timeout [ 307.204212] Bluetooth: hci1: command tx timeout [ 307.269228] Bluetooth: hci2: command tx timeout [ 307.331280] Bluetooth: hci3: command tx timeout [ 307.523292] Bluetooth: hci6: command tx timeout [ 307.587274] Bluetooth: hci4: command tx timeout [ 307.715270] Bluetooth: hci7: command tx timeout [ 307.843269] Bluetooth: hci5: command tx timeout [ 309.124206] Bluetooth: hci0: command tx timeout [ 309.251234] Bluetooth: hci1: command tx timeout [ 309.315549] Bluetooth: hci2: command tx timeout [ 309.380424] Bluetooth: hci3: command tx timeout [ 309.571284] Bluetooth: hci6: command tx timeout [ 309.635582] Bluetooth: hci4: command tx timeout [ 309.763253] Bluetooth: hci7: command tx timeout [ 309.891222] Bluetooth: hci5: command tx timeout [ 311.171372] Bluetooth: hci0: command tx timeout [ 311.299931] Bluetooth: hci1: command tx timeout [ 311.364178] Bluetooth: hci2: command tx timeout [ 311.427424] Bluetooth: hci3: command tx timeout [ 311.619263] Bluetooth: hci6: command tx timeout [ 311.683470] Bluetooth: hci4: command tx timeout [ 311.813627] Bluetooth: hci7: command tx timeout [ 311.939250] Bluetooth: hci5: command tx timeout [ 313.219529] Bluetooth: hci0: command tx timeout [ 313.347227] Bluetooth: hci1: command tx timeout [ 313.411512] Bluetooth: hci2: command tx timeout [ 313.475240] Bluetooth: hci3: command tx timeout [ 313.667239] Bluetooth: hci6: command tx timeout [ 313.733211] Bluetooth: hci4: command tx timeout [ 313.859523] Bluetooth: hci7: command tx timeout [ 313.987228] Bluetooth: hci5: command tx timeout [ 367.256108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.262189] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.269635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.279715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.287471] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.575711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.583382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.588039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.602722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.607701] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.614613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.617444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.625761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.628021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.630840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.737396] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.756739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.790441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.809855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.811909] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.837208] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.852831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.860286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.866454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.879792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.886310] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.900233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.907779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.935129] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 367.945054] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.946533] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 367.952102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.970422] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.990272] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.000881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.018748] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 368.040525] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.048787] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 368.073334] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.079785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.347633] Bluetooth: hci0: command tx timeout [ 369.667377] Bluetooth: hci2: command tx timeout [ 369.731340] Bluetooth: hci1: command tx timeout [ 369.988248] Bluetooth: hci3: command tx timeout [ 369.988511] Bluetooth: hci5: command tx timeout [ 370.115840] Bluetooth: hci4: command tx timeout [ 370.179985] Bluetooth: hci6: command tx timeout [ 370.180379] Bluetooth: hci7: command tx timeout [ 371.395387] Bluetooth: hci0: command tx timeout [ 371.718311] Bluetooth: hci2: command tx timeout [ 371.779223] Bluetooth: hci1: command tx timeout [ 372.036215] Bluetooth: hci5: command tx timeout [ 372.036239] Bluetooth: hci3: command tx timeout [ 372.163374] Bluetooth: hci4: command tx timeout [ 372.227331] Bluetooth: hci7: command tx timeout [ 372.227352] Bluetooth: hci6: command tx timeout [ 373.444236] Bluetooth: hci0: command tx timeout [ 373.763219] Bluetooth: hci2: command tx timeout [ 373.828519] Bluetooth: hci1: command tx timeout [ 374.083254] Bluetooth: hci5: command tx timeout [ 374.083270] Bluetooth: hci3: command tx timeout [ 374.211288] Bluetooth: hci4: command tx timeout [ 374.275235] Bluetooth: hci6: command tx timeout [ 374.275723] Bluetooth: hci7: command tx timeout [ 375.491329] Bluetooth: hci0: command tx timeout [ 375.812212] Bluetooth: hci2: command tx timeout [ 375.875386] Bluetooth: hci1: command tx timeout [ 376.131244] Bluetooth: hci3: command tx timeout [ 376.133331] Bluetooth: hci5: command tx timeout [ 376.261496] Bluetooth: hci4: command tx timeout [ 376.324346] Bluetooth: hci7: command tx timeout [ 376.324405] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 02:51:12 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81353d2d RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff88802d12f630 R8 =0000000000000000 R9 =0000000000000000 R10=ffff88802d12f768 R11=00000000ffffffff R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88802d12f768 RIP=ffffffff8151aff2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f89f212f540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560a385ba008 CR3=0000000033f67000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffff11005bd0800 RBX=0000000000000000 RCX=dffffc0000000000 RDX=ffff8880199a5280 RSI=ffffffff819c3b0c RDI=0000000000000007 RBP=00007f01673fffff RSP=ffff8880374df670 R8 =0000000000000000 R9 =ffffed1001e46ca9 R10=0000000000000000 R11=0000000000000001 R12=ffffffff86415248 R13=ffff888036c969c8 R14=ffff8880374dfad0 R15=ffff8880374dfad0 RIP=ffffffff819c3b23 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2ccf5ad1f0 CR3=000000002f2da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000ff000000ff000000ff000000ff XMM02=ff00000000000000ff0000000000ff00 XMM03=00000000000000ff0000000000000000 XMM04=ff000000000000000000ff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000