Warning: Permanently added '[localhost]:32852' (ECDSA) to the list of known hosts. 2025/06/23 00:54:53 fuzzer started 2025/06/23 00:54:53 dialing manager at localhost:33119 syzkaller login: [ 99.825318] cgroup: Unknown subsys name 'net' [ 99.957418] cgroup: Unknown subsys name 'cpuset' [ 99.997284] cgroup: Unknown subsys name 'rlimit' 2025/06/23 00:55:10 syscalls: 2214 2025/06/23 00:55:10 code coverage: enabled 2025/06/23 00:55:10 comparison tracing: enabled 2025/06/23 00:55:10 extra coverage: enabled 2025/06/23 00:55:10 setuid sandbox: enabled 2025/06/23 00:55:10 namespace sandbox: enabled 2025/06/23 00:55:10 Android sandbox: enabled 2025/06/23 00:55:10 fault injection: enabled 2025/06/23 00:55:10 leak checking: enabled 2025/06/23 00:55:10 net packet injection: enabled 2025/06/23 00:55:10 net device setup: enabled 2025/06/23 00:55:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/23 00:55:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/23 00:55:10 USB emulation: enabled 2025/06/23 00:55:10 hci packet injection: enabled 2025/06/23 00:55:10 wifi device emulation: enabled 2025/06/23 00:55:10 802.15.4 emulation: enabled 2025/06/23 00:55:10 fetching corpus: 0, signal 0/0 (executing program) 2025/06/23 00:55:13 starting 8 fuzzer processes 00:55:13 executing program 0: setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='&&\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) fchownat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0xee01, 0x400) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000180)={0x4, 0x4, 0x3, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @dev={0xfe, 0x80, '\x00', 0x3d}]}, 0x28) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{0x3, 0xa, 0x7, 0x7e000}, {0x3, 0x78, 0x9}, {0x5, 0x6, 0x3, 0x80}, {0x5, 0x40, 0x0, 0x7}, {0xfffe, 0x4, 0x9, 0x7e}, {0x6, 0x0, 0x5, 0x1b6}, {0x7, 0x1e, 0x80, 0x9}]}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@can, &(0x7f00000002c0)=0x80) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000300), &(0x7f0000000340)=0x8) mount(&(0x7f0000000380)=@sg0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='aio\x00', 0x421, &(0x7f0000000440)='\x00') write$binfmt_misc(r0, &(0x7f0000000480)={'syz1', "6f1dd0daa0991f232112cc439e757b426dde8fb3956878158479db"}, 0x1f) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000500)={0x12}) r2 = open(&(0x7f0000000840)='./file0\x00', 0x430002, 0x142) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000880)={0x381, 0xfff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000009c0)={'nr0\x00', &(0x7f00000008c0)=@ethtool_regs={0x4, 0x7, 0xbb, "53ff8116b24909c390c32b547afd38417cdd71811c31588ffda92a6aefe0e833312cb262a45b2eb6e30f6eaf9e02732d62f6192bcc8a7a57a485b82c7568711bccc0033a6933fba53e203c86f9eaf5e8379bcefec8aeb266d0aa66367fbb51cea82e7432027f3bc677d024f826278f83bf71dcaf885548edb79c1e58e64010519c38d8e69e2371e07999af6a25191225051c6e0ab4fe9f95fbea77eec0ccd7e62ed3a606d17b385ec648f3a276341ce546652c850850e1965de801"}}) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x118, 0x0, 0x40a, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc8bb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x118}}, 0x4080) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fstat(r3, &(0x7f0000000c00)) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000c80)={0x187, "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"}) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000001200)={{'\x00', 0x3}, {0x296}, 0x8, 0x0, 0x0, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)="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", 0x131, 0x0, &(0x7f0000001000)={0x2, 0x127, {0x1, 0xc, 0xf8, "3f4d1c264e9dea95ac543400fe3e81ec172bfff6d666b925fbd2583284d5fe229d3d76ab5f90abb83c189bfdb50e908239e3b2ddb578e76c3a737a80159423d6b1ca9034ce945a78cf801c30e5528bcd34dd33c6150fb162e304e155fb37c9e7e74cf5c7b49837f194353630a7d1ae055d808f6fb23f5e79ffc5c20844a9c5da8d3af773016f80f26f9690dc4b0c3891d82b6110679861bfb5e90e92e3ca0e972249b218898e1fc1296f90d4a97441c4f5063b653ff98abd41f023a29aee71f05dfb1d659492a5fb3d2dc2337bb55384baa230e21d93f47e02cac32c280392dd3bd47ca70d0f7e8c3eebb6c4587121b192abf616ad867ff3", 0x22, "b76fdd0669163292c1d455e9621f959edde1c4f6c589a35facc2bab1fce133884871"}, 0x93, "84b77d1c00b5434d846a64159e75f9cf288fd42868edc923fe28514bc7528f7ec4c764ba426b4dfb0bc1bf18f3e12d46f544fa96ffc79419585ece7cf47f676fceffa7585f7f5bc6bebd1fa8bcd53c384568cc0483ee10c97b6c6e9eb0ccb9f2405c21f70cbc596e0fcb9d9d4cdb12c828efdb792c0192ac9a2ace1736abc324de96f9f72d29dd84b49913a0dd5f375d122825"}, 0x1c6}) 00:55:13 executing program 1: write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='hybla\x00', 0x6) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x9, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000001d80), 0x1, 0x10000) timerfd_settime(r1, 0x1, &(0x7f0000001dc0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000001e00)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001e40)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x2007, @fd_index=0x3, 0x7ff, 0x0, 0x0, 0x2}, 0xfff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001e80)={{0x0, 0x3, 0x7fffffff, 0x3, 0x8}}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000001ec0)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x44000) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000004700)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000004740)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000047c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004840)={&(0x7f0000004800)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x53}}}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x44004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f00000048c0)=""/148, &(0x7f0000004980)=0x94) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f00000049c0)={'broute\x00', 0x0, 0x0, 0x0, [0x77, 0x7, 0x0, 0x400, 0x6, 0xffff]}, &(0x7f0000004a40)=0x78) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x100010, r1, 0x1) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000004a80), 0x20000, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000004ac0)={{0x2, 0x4e24, @loopback}, {0x6ea305a0fdd79a3b, @remote}, 0x10, {0x2, 0x4e22, @remote}, 'ip6tnl0\x00'}) 00:55:13 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6a, 0x100000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x4, 0x80, 0x1, 0x3f, 0x8, 0x3, 0x0, 0x20, 0xa0108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x2, 0x3f, 0x1, 0xbdc0000, 0x9, 0x4, 0x0, 0x1f, 0x0, 0xfff}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000100)={0x0, "125dc94efebf0de1a3d6e3ef967bfe39"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001100)={r1, 0x7ff, 0x3ff}) timerfd_settime(r0, 0x0, &(0x7f0000001500)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001540)) timerfd_gettime(r0, &(0x7f0000001580)) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000015c0)='wg0\x00', 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x400, 0x80) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001640)={0x8, 0xffffffff, 0x5, 0x8, 0x13, "be7437bb7c1d7db639170c44ee0408428c57ce"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001680)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000016c0)={0x7, 0x0, 0x400, 0xeb9, 0x80}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000001700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = signalfd(r4, &(0x7f0000001780)={[0x8001]}, 0x8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000017c0)={'filter\x00', 0x4}, 0x68) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000001840)=0x8) syz_open_procfs$userns(0x0, &(0x7f0000001880)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f00000018c0)={0x1, 'batadv_slave_0\x00', {}, 0x8}) getsockname$inet6(r5, &(0x7f0000001900), &(0x7f0000001940)=0x1c) [ 119.406386] audit: type=1400 audit(1750640113.581:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:55:13 executing program 3: r0 = dup(0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'devices'}, {0x2b, 'cpuacct'}, {0x6, 'blkio'}]}, 0x19) r1 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x61}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x81}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x80}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5ca}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x980) r3 = openat(r1, &(0x7f00000001c0)='./file0\x00', 0x404080, 0x19b) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) epoll_pwait2(r3, &(0x7f0000000200)=[{}, {}, {}], 0x3, &(0x7f0000000280)={r4, r5+10000000}, &(0x7f00000002c0)={[0x4]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000300)) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3fb, 0x400, 0x70bd29, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000011}, 0xc96d62a6655fc6bf) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x3f9, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) semtimedop(0xffffffffffffffff, &(0x7f0000000580)=[{0x3, 0x80, 0x800}], 0x1, &(0x7f00000005c0)={0x77359400}) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x108, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffe1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x53f1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1a0b}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbec}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x2000c080) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x2008c0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xae2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1137}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf19}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000a00)) r10 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_JOIN_OCB(r10, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4008091) 00:55:13 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7fff, 0x80000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @remote}, &(0x7f00000000c0)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x20004881) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000240)=""/108) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x8) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000300)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000380)={{r0}, 0x1, &(0x7f0000000340)=[0x2], 0x7ff, 0xb3d8f239fe8e757f, [0x9, 0x9, 0xd97f, 0xd7]}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000400)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0xa000, 0x0) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000500)={0x9, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}}}, 0x108) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x6) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000640)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000680)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x124, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7fe0000}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x14}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x14d0}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4104}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20010000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'}) ioctl$VT_DISALLOCATE(r4, 0x5608) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "73021597fac723133925332efe3a3137"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) 00:55:13 executing program 5: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0xfe, 0x7fffffff, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7800, 0x87, 0xf0, 0xa8a}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x2) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mount$9p_tcp(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x840002, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@msize={'msize', 0x3d, 0x7}}], [{@obj_role}, {@audit}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ip6_vti0\x00'}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x33, 0x35, 0x64, 0x36, 0x30, 0x70], 0x2d, [0x62, 0xe6bdd0e4bd9b49a, 0x34, 0x30], 0x2d, [0x37, 0x34, 0x56, 0x32], 0x2d, [0x34, 0x61, 0x65, 0x3f], 0x2d, [0x30, 0x61, 0x37, 0x31, 0x30, 0x61, 0x38, 0x32]}}}, {@smackfshat={'smackfshat', 0x3d, '/-*\'[(})\xf1):'}}]}}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x70360008}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = dup(0xffffffffffffffff) r3 = accept(r2, &(0x7f00000006c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000740)=0x80) r4 = syz_open_dev$mouse(&(0x7f0000000780), 0x2, 0xb02) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x98, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x56}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xf843c2f15ce92d6e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6a93bdd3}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}]}, 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x200000c1) mknodat$loop(r4, &(0x7f0000000980)='./file1\x00', 0x8, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', r2, &(0x7f0000000a00)='./file1\x00', 0x6) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/-*\'[(})\xf1):'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000b80)={'veth1_macvtap\x00', {0x2, 0x0, @dev}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000cc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 00:55:13 executing program 6: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0xa00) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x9, 0x111, 0x5, 0xce1, 0x5f, "b1f609101f0a3590f9861c88ed4a6603903059", 0x1, 0x5}) write$snapshot(0xffffffffffffffff, &(0x7f0000000100)="f4c2b77cbb91e7ca182ea452c5dec7c1a9c3cfb06a7d05a6624de642f140d684e46406e4a6147db7e3c545a8f279d176fcc15cea", 0x34) r3 = fork() kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r1, &(0x7f0000000140)={r0, r0, 0x6fa}) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/60) process_vm_writev(0x0, &(0x7f0000001200)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)}], 0x2, &(0x7f0000001280)=[{&(0x7f0000001240)=""/43, 0x2b}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000012c0)=0x1, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x2100c0, 0x0, 0x2}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000001380)) r5 = fcntl$dupfd(r0, 0x406, r0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000013c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001400)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r1) 00:55:13 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff, 0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f029ed9c025272699bfc267979e70b73"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="99affb820501e2063657556effc7489e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b24b408d9b82078f888295869dfa47c9f9a6e01c6c7b7669d45d44e1aaf4b825"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="48ad3eccab0093a18e09e45ae6c036b4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3d0140a712a3008a92cef4f3224af677"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3d9fbaef91bb8a66"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6474924b3fac08ce"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8f07a9a5020ab4dc6767a2beb775be9f"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "74078568d8ca01ca"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2052a40eaac1aed3da462103fd761bc8"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2250c5b67d5d54df"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "05047ba021b37b58"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10bda6a97fa5c9d8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9946ae350c55963bdc46d3fa9a689c1d"}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:'}, 0x19, 0xfffffffffffffffb) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8084}, 0x80) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfd}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44014}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000540)=[@free_buffer, @acquire={0x40046305, 0x3}, @clear_death, @request_death={0x400c630e, 0x3}, @request_death={0x400c630e, 0x3}, @acquire_done={0x40106309, 0x2}, @clear_death={0x400c630f, 0x2}, @acquire_done={0x40106309, 0x1}, @decrefs={0x40046307, 0x1}], 0x90, 0x0, &(0x7f0000000600)="226f74fe4c7b96ff28eb918f7712f35184ac4dd67fe8a7d77c8bcc2c5aaa4ed569187867da45b4175ab3c69bd0831e4566e17cca7b60d1e8ba0323e690761eefeba48f00a9e2fba3996e5fea9b3d8039995a67223ae9fac454af01c1d60703ebd08e0a0a330820508cde407b5b71470622f416f7329b976b2912a34e5f4c8b0ab5b11c6aa13b3d064d8ed064702fed0b"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000700)={0x4, 0x2, 0x1}) r3 = add_key(&(0x7f0000000740)='id_legacy\x00', &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000007c0)={0x67, {{0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7}}, 0x0, 0x8, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x183}}, {{0xa, 0x4e22, 0x6, @private0, 0x6}}, {{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, {{0xa, 0x4e22, 0x5, @local, 0xe4}}, {{0xa, 0x4e23, 0x0, @remote, 0xffff}}, {{0xa, 0x4e20, 0x81, @private0, 0x4}}, {{0xa, 0x4e24, 0x9, @loopback, 0x2}}, {{0xa, 0x4e24, 0x9, @mcast1, 0x3ca}}]}, 0x490) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40090) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000d80)='.\x00', &(0x7f0000000dc0)={0x1, 0x2, 0x4}, 0x18) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000e00)) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000091}, 0x40) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x10, 0x3e8, 0x200, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) r4 = add_key$keyring(&(0x7f0000001040), &(0x7f0000001080)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$clear(0x7, r4) [ 120.873590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.877880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.882859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.892366] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.898318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.988226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.992418] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.995768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.001522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.004756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.179591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.194521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.198075] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.210150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.215510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.221425] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.228692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.231675] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.236789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.237344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.248296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.280670] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.297245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.306703] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.324749] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 121.327491] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 121.330406] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 121.336187] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.338356] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 121.343229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 121.348232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 121.360409] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 121.362337] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 121.363110] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.379179] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 121.394306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 121.401467] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.407080] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.413458] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.428515] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.955490] Bluetooth: hci0: command tx timeout [ 123.082542] Bluetooth: hci1: command tx timeout [ 123.338323] Bluetooth: hci2: command tx timeout [ 123.402160] Bluetooth: hci4: command tx timeout [ 123.466105] Bluetooth: hci7: command tx timeout [ 123.530174] Bluetooth: hci3: command tx timeout [ 123.531213] Bluetooth: hci5: command tx timeout [ 123.531229] Bluetooth: hci6: command tx timeout [ 125.003020] Bluetooth: hci0: command tx timeout [ 125.130963] Bluetooth: hci1: command tx timeout [ 125.386001] Bluetooth: hci2: command tx timeout [ 125.450039] Bluetooth: hci4: command tx timeout [ 125.515009] Bluetooth: hci7: command tx timeout [ 125.578450] Bluetooth: hci5: command tx timeout [ 125.578894] Bluetooth: hci6: command tx timeout [ 125.580546] Bluetooth: hci3: command tx timeout [ 127.050018] Bluetooth: hci0: command tx timeout [ 127.178217] Bluetooth: hci1: command tx timeout [ 127.435104] Bluetooth: hci2: command tx timeout [ 127.498050] Bluetooth: hci4: command tx timeout [ 127.562006] Bluetooth: hci7: command tx timeout [ 127.626008] Bluetooth: hci5: command tx timeout [ 127.626447] Bluetooth: hci3: command tx timeout [ 127.626861] Bluetooth: hci6: command tx timeout [ 129.098970] Bluetooth: hci0: command tx timeout [ 129.225984] Bluetooth: hci1: command tx timeout [ 129.483979] Bluetooth: hci2: command tx timeout [ 129.546355] Bluetooth: hci4: command tx timeout [ 129.610220] Bluetooth: hci7: command tx timeout [ 129.675042] Bluetooth: hci5: command tx timeout [ 129.675482] Bluetooth: hci6: command tx timeout [ 129.675895] Bluetooth: hci3: command tx timeout [ 181.007671] syz-executor.7 (283) used greatest stack depth: 24512 bytes left [ 183.319233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.322110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.326398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.337099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.340714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.450569] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.461103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.469165] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.471407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.472719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.474600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.478170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.480313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.485458] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.488286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.491110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.492524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.495712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.517212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.527780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.576275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 183.581968] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 183.592011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 183.607802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.621867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.941900] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.952419] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.954830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.972250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.987068] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 184.005561] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 184.006008] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.007323] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 184.015774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.019206] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 184.032079] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.037365] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 184.066409] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 184.073106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.111410] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.418170] Bluetooth: hci0: command tx timeout [ 185.546102] Bluetooth: hci1: command tx timeout [ 185.610273] Bluetooth: hci3: command tx timeout [ 185.610570] Bluetooth: hci2: command tx timeout [ 185.740008] Bluetooth: hci5: command tx timeout [ 186.186462] Bluetooth: hci6: command tx timeout [ 186.186486] Bluetooth: hci7: command tx timeout [ 186.250111] Bluetooth: hci4: command tx timeout [ 187.467477] Bluetooth: hci0: command tx timeout [ 187.594047] Bluetooth: hci1: command tx timeout [ 187.658033] Bluetooth: hci2: command tx timeout [ 187.659110] Bluetooth: hci3: command tx timeout [ 187.786011] Bluetooth: hci5: command tx timeout [ 188.235071] Bluetooth: hci7: command tx timeout [ 188.235094] Bluetooth: hci6: command tx timeout [ 188.299199] Bluetooth: hci4: command tx timeout [ 189.514163] Bluetooth: hci0: command tx timeout [ 189.642189] Bluetooth: hci1: command tx timeout [ 189.706354] Bluetooth: hci3: command tx timeout [ 189.706386] Bluetooth: hci2: command tx timeout [ 189.834225] Bluetooth: hci5: command tx timeout [ 190.283122] Bluetooth: hci7: command tx timeout [ 190.283281] Bluetooth: hci6: command tx timeout [ 190.346077] Bluetooth: hci4: command tx timeout [ 191.562224] Bluetooth: hci0: command tx timeout [ 191.690240] Bluetooth: hci1: command tx timeout [ 191.754170] Bluetooth: hci3: command tx timeout [ 191.756963] Bluetooth: hci2: command tx timeout [ 191.882994] Bluetooth: hci5: command tx timeout [ 192.329985] Bluetooth: hci6: command tx timeout [ 192.332984] Bluetooth: hci7: command tx timeout [ 192.394020] Bluetooth: hci4: command tx timeout [ 245.655217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.658380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.663582] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.674240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.678428] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.845690] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.848782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.852345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.864424] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.871753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.909899] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.915248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.920254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.940184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.942730] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.946055] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.950749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.951676] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.957038] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.971879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.980197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.989862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.992846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.019062] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 246.024529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.033409] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 246.038506] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.047344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.051541] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.064394] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.075202] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 246.098822] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 246.100083] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.105072] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 246.106680] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.111446] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.113184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 246.133236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.148816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 246.167158] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 247.754041] Bluetooth: hci0: command tx timeout [ 247.947869] Bluetooth: hci1: command tx timeout [ 248.074042] Bluetooth: hci4: command tx timeout [ 248.074228] Bluetooth: hci2: command tx timeout [ 248.138550] Bluetooth: hci3: command tx timeout [ 248.202629] Bluetooth: hci7: command tx timeout [ 248.203395] Bluetooth: hci5: command tx timeout [ 248.267593] Bluetooth: hci6: command tx timeout [ 249.803154] Bluetooth: hci0: command tx timeout [ 249.996941] Bluetooth: hci1: command tx timeout [ 250.123044] Bluetooth: hci4: command tx timeout [ 250.123498] Bluetooth: hci2: command tx timeout [ 250.188079] Bluetooth: hci3: command tx timeout [ 250.250195] Bluetooth: hci7: command tx timeout [ 250.252634] Bluetooth: hci5: command tx timeout [ 250.315069] Bluetooth: hci6: command tx timeout [ 251.850021] Bluetooth: hci0: command tx timeout [ 252.044349] Bluetooth: hci1: command tx timeout [ 252.170153] Bluetooth: hci4: command tx timeout [ 252.171056] Bluetooth: hci2: command tx timeout [ 252.235109] Bluetooth: hci3: command tx timeout [ 252.298212] Bluetooth: hci5: command tx timeout [ 252.298315] Bluetooth: hci7: command tx timeout [ 252.362128] Bluetooth: hci6: command tx timeout [ 253.898995] Bluetooth: hci0: command tx timeout [ 254.092951] Bluetooth: hci1: command tx timeout [ 254.218139] Bluetooth: hci2: command tx timeout [ 254.218158] Bluetooth: hci4: command tx timeout [ 254.282099] Bluetooth: hci3: command tx timeout [ 254.346191] Bluetooth: hci5: command tx timeout [ 254.346258] Bluetooth: hci7: command tx timeout [ 254.410013] Bluetooth: hci6: command tx timeout [ 308.507711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.516775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.522599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.531877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.536810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.640233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.644485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.647312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.659568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.667585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.835578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.851540] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.855871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.875522] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.884396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.898803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.935440] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.939425] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.962697] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.976190] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.023677] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.036420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.054338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.080610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.084334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.092056] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.132355] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.142052] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.156086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.160773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.261254] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 309.283696] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.328488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.337126] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.366037] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.538046] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 309.577616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 309.645891] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.657368] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.662267] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.602252] Bluetooth: hci0: command tx timeout [ 310.729987] Bluetooth: hci1: command tx timeout [ 310.986000] Bluetooth: hci2: command tx timeout [ 311.179007] Bluetooth: hci4: command tx timeout [ 311.370163] Bluetooth: hci5: command tx timeout [ 311.371245] Bluetooth: hci3: command tx timeout [ 311.500870] Bluetooth: hci7: command tx timeout [ 311.819020] Bluetooth: hci6: command tx timeout [ 312.651253] Bluetooth: hci0: command tx timeout [ 312.779000] Bluetooth: hci1: command tx timeout [ 313.035159] Bluetooth: hci2: command tx timeout [ 313.226354] Bluetooth: hci4: command tx timeout [ 313.419076] Bluetooth: hci5: command tx timeout [ 313.419573] Bluetooth: hci3: command tx timeout [ 313.546059] Bluetooth: hci7: command tx timeout [ 313.866025] Bluetooth: hci6: command tx timeout [ 314.697999] Bluetooth: hci0: command tx timeout [ 314.826994] Bluetooth: hci1: command tx timeout [ 315.084268] Bluetooth: hci2: command tx timeout [ 315.275006] Bluetooth: hci4: command tx timeout [ 315.467007] Bluetooth: hci3: command tx timeout [ 315.467479] Bluetooth: hci5: command tx timeout [ 315.593999] Bluetooth: hci7: command tx timeout [ 315.915111] Bluetooth: hci6: command tx timeout [ 316.746232] Bluetooth: hci0: command tx timeout [ 316.874290] Bluetooth: hci1: command tx timeout [ 317.131017] Bluetooth: hci2: command tx timeout [ 317.321968] Bluetooth: hci4: command tx timeout [ 317.514241] Bluetooth: hci5: command tx timeout [ 317.514727] Bluetooth: hci3: command tx timeout [ 317.643007] Bluetooth: hci7: command tx timeout [ 317.965181] Bluetooth: hci6: command tx timeout [ 370.849017] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.853863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.859264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.866764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.871803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.985725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.992513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.000735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.012760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.017725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.104876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.108576] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.112405] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.120048] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.125448] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.221764] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.226299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.230436] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.240746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.247393] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.328359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.334668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.346266] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.348620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 371.352229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.363613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.368469] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.374384] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 371.379162] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.398155] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 371.403664] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 371.430496] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 371.442568] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.444171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.469525] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.494587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.514712] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.530502] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.546147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.559624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 372.938035] Bluetooth: hci0: command tx timeout [ 373.066156] Bluetooth: hci1: command tx timeout [ 373.194144] Bluetooth: hci2: command tx timeout [ 373.322330] Bluetooth: hci3: command tx timeout [ 373.514076] Bluetooth: hci5: command tx timeout [ 373.643026] Bluetooth: hci7: command tx timeout [ 373.643068] Bluetooth: hci6: command tx timeout [ 373.707038] Bluetooth: hci4: command tx timeout [ 374.986332] Bluetooth: hci0: command tx timeout [ 375.114030] Bluetooth: hci1: command tx timeout [ 375.242029] Bluetooth: hci2: command tx timeout [ 375.372115] Bluetooth: hci3: command tx timeout [ 375.562186] Bluetooth: hci5: command tx timeout [ 375.690004] Bluetooth: hci6: command tx timeout [ 375.690104] Bluetooth: hci7: command tx timeout [ 375.755307] Bluetooth: hci4: command tx timeout [ 377.034217] Bluetooth: hci0: command tx timeout [ 377.163115] Bluetooth: hci1: command tx timeout [ 377.291953] Bluetooth: hci2: command tx timeout [ 377.418001] Bluetooth: hci3: command tx timeout [ 377.610035] Bluetooth: hci5: command tx timeout [ 377.738369] Bluetooth: hci7: command tx timeout [ 377.738964] Bluetooth: hci6: command tx timeout [ 377.801976] Bluetooth: hci4: command tx timeout [ 379.081980] Bluetooth: hci0: command tx timeout [ 379.210082] Bluetooth: hci1: command tx timeout [ 379.338292] Bluetooth: hci2: command tx timeout [ 379.466008] Bluetooth: hci3: command tx timeout [ 379.658038] Bluetooth: hci5: command tx timeout [ 379.786304] Bluetooth: hci6: command tx timeout [ 379.786470] Bluetooth: hci7: command tx timeout [ 379.850118] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 01:00:22 Registers: info registers vcpu 0 RAX=ffffffff8685f106 RBX=0000000000000001 RCX=ffffffff8685f106 RDX=0000000000000000 RSI=ffffffff8685f106 RDI=ffffffff864e0044 RBP=ffff8880162a74f0 RSP=ffff8880162a7428 R8 =ffffffff8685f106 R9 =0000000000000000 R10=000000000003b53d R11=00000000000231b3 R12=ffff8880162a74f8 R13=ffff8880162a74e0 R14=ffff8880162a74d9 R15=ffff8880162a7498 RIP=ffffffff81353f5c RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5cebb00870 CR3=000000000b792000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8174137b RDX=ffff8880165f0000 RSI=ffffffff81741437 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff88806cf089a0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c75328 R15=ffff888009813b00 RIP=ffffffff815ab8fc RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f53e9225260 CR3=0000000030c5c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000