syzkaller login: [ 71.623510] sshd (230) used greatest stack depth: 23728 bytes left Warning: Permanently added '[localhost]:43262' (ECDSA) to the list of known hosts. 2024/11/07 14:39:59 fuzzer started 2024/11/07 14:39:59 dialing manager at localhost:46317 [ 75.940466] cgroup: Unknown subsys name 'net' [ 76.051595] cgroup: Unknown subsys name 'cpuset' [ 76.120164] cgroup: Unknown subsys name 'rlimit' 2024/11/07 14:40:25 syscalls: 204 2024/11/07 14:40:25 code coverage: enabled 2024/11/07 14:40:25 comparison tracing: enabled 2024/11/07 14:40:25 extra coverage: enabled 2024/11/07 14:40:25 setuid sandbox: enabled 2024/11/07 14:40:25 namespace sandbox: enabled 2024/11/07 14:40:25 Android sandbox: enabled 2024/11/07 14:40:25 fault injection: enabled 2024/11/07 14:40:25 leak checking: enabled 2024/11/07 14:40:25 net packet injection: enabled 2024/11/07 14:40:25 net device setup: enabled 2024/11/07 14:40:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/07 14:40:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/07 14:40:25 USB emulation: enabled 2024/11/07 14:40:25 hci packet injection: enabled 2024/11/07 14:40:25 wifi device emulation: enabled 2024/11/07 14:40:25 802.15.4 emulation: enabled 2024/11/07 14:40:25 fetching corpus: 0, signal 0/0 (executing program) 2024/11/07 14:40:27 starting 8 fuzzer processes 14:40:27 executing program 0: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x7, 0x1, {0x1, ':'}}, 0xa) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r0, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0xaf, 0x6, '9P2000'}, 0x13) write$P9_RCLUNK(r0, &(0x7f0000000140)={0x7, 0x79, 0x2}, 0x7) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes128, 0x10, @desc3}) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) write$P9_RFLUSH(r0, &(0x7f0000000200)={0x7, 0x6d, 0x2}, 0x7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r1, &(0x7f0000000280)={0x18, 0xf, 0x1, {{0x20, 0x3, 0x1}, 0x1}}, 0x18) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RSETATTR(r2, &(0x7f0000000300)={0x7, 0x1b, 0x2}, 0x7) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RFLUSH(r3, &(0x7f0000000380)={0x7, 0x6d, 0x1}, 0x7) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$9p(r4, &(0x7f0000000400)="14bea1deb8cb561b635cb003150cb091423df7b6cf10252c20cfdc3445294c935a071e33adc389d2f67cf623f627dd4341b9825c33fff7f630ca104189a11c3c841f9c16b5aceab15a2aaacf189374e68e96c0f842c848b045f4af85a03a96a47c85573a3c6b86137481ef30a4533d40c43b682271050f130cc795d2bd95a6ef3dc0c4722e", 0x85) write$P9_RMKDIR(r3, &(0x7f00000004c0)={0x14, 0x49, 0x2, {0x40, 0x4, 0x4}}, 0x14) write$P9_RLERROR(r1, &(0x7f0000000500)={0xa, 0x7, 0x2, {0x1, ':'}}, 0xa) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 14:40:27 executing program 1: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0xa800, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x26c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x69}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x213, 0x2a, [@mesh_chsw={0x76, 0x6, {0xe5, 0x3f, 0x3a, 0x3}}, @rann={0x7e, 0x15, {{0x0, 0x75}, 0x7, 0x20, @device_b, 0x7, 0x4, 0x9}}, @dsss={0x3, 0x1, 0xb5}, @mic={0x8c, 0x18, {0x601, "6be8432ca1ec", @long="b5a26753d1b7594aa37644f63dd1b65b"}}, @tim={0x5, 0x14, {0x1, 0xa4, 0x80, "eb632495cd20646c365b067ad3391d3a1f"}}, @perr={0x84, 0xdb, {0x7, 0xd, [@ext={{}, @broadcast, 0x81, @device_a, 0xf}, @not_ext={{}, @device_a, 0x10001, "", 0x40}, @not_ext={{}, @broadcast, 0x3f, "", 0x16}, @not_ext={{}, @device_b, 0x7d, "", 0x20}, @not_ext={{}, @device_a, 0x1, "", 0x38}, @not_ext={{}, @device_b, 0x45, "", 0x32}, @ext={{}, @device_b, 0x525a, @broadcast, 0x21}, @ext={{}, @device_b, 0x99df}, @ext={{}, @broadcast, 0x233740, @broadcast, 0x1e}, @ext={{}, @device_b, 0xae, @device_b, 0xa}, @ext={{}, @device_a, 0x3, @device_b, 0x42}, @ext={{}, @device_b, 0x9, @broadcast, 0x2e}, @ext={{}, @device_b, 0x20, @broadcast, 0x24}]}}, @measure_req={0x26, 0xdb, {0x0, 0x1e, 0x6, "20c35d526984a107d64797caade38aca04f1d9fd69ecc4eb64b8ed976bb78be84fef5c00e3639f8328984e209d0442c4eb34974664fb62cec714aacce0781b323017ae7997bf4e9366a8ebe39bdfc5f23b74d93caaec47211a41c8ddce5d69a20d8822b2b72b18af1ea5d8e7452a6b7d9aba4315fb47367b4ac11a867d5a24004b242dfbbd653deac7154313c1965975403a28deda0337246f16ab8ba80f44c9a0e6d52f295368405c50ed1f4635ab0e7306633c979132ad7e8b6c7553baa6e8029f718e812bf71acb0b25099e90e1c334f72d588ba56117"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}]}, 0x26c}, 0x1, 0x0, 0x0, 0x50}, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000480)) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000540)) r3 = openat$incfs(r2, &(0x7f0000000580)='.log\x00', 0x2102, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x52}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x48800) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x4a8c00, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r5) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000780)=0x10001, 0x4) socketpair(0x9, 0x2, 0x2, &(0x7f00000007c0)) 14:40:27 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x6, 0xfffffff8, 0x60, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x10, 0xfff, 0x3}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2f9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000300)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x24041000}, 0x4004000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0x49, 0x29, 0x2, {0xff, [{{0x2, 0x1, 0x6}, 0x0, 0x9, 0x7, './file0'}, {{0x4, 0x4, 0x5}, 0x0, 0x88, 0x7, './file0'}]}}, 0x49) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x29, 0x0, 0x40, 0x8, 0xa, @dev={0xfe, 0x80, '\x00', 0x34}, @rand_addr=' \x01\x00', 0x1, 0x7, 0x6, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'sit0\x00', r1, 0x2f, 0xac, 0x7, 0x2, 0x21, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2, 0x80, 0x7, 0x3, 0xd35}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x8, 0x2, 0x31, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast1, 0x80, 0x40, 0x8d, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000840)={0x6a0, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x99}}}]}}, {{0x8, 0x1, r4}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r1}, {0x180, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r7}, {0x26c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffe1}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x603}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdb}}, {0x8, 0x6, r2}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7f, 0x7, 0x0, 0x40}, {0x1, 0x2, 0x3, 0x5}, {0x1, 0x8, 0xc5, 0x8}, {0x1ff, 0x4, 0x7, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd19}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r11}, {0x4}}]}, 0x6a0}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x18}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="53f9b0d90c32"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc99}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x60}, 0x1, 0x0, 0x0, 0x666ea5375645ab91}, 0x4c000) 14:40:27 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7aa6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x48000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x26, 0x9, 0x1, 0x7f, 0xed0000000000, 0x0, 0x6, 0x0, 0x1b0, 0x38, 0x16c, 0x8, 0x3000, 0x20, 0x2, 0x6, 0xffff, 0x6}, [{0x2, 0x1000, 0x3ff, 0x101, 0x6f7, 0x8000, 0x1000, 0xff7}, {0x60000000, 0x200, 0x5, 0x9, 0x101, 0x1, 0x80000000, 0x7fffffff}], "34ea5334415832599ae3ac6292059ab1cda28667e2e4e6a3282e18d44c4bdd41362a0a54ef9964a8debe5baf3d2756743231cb705c7caa3da0fbbc081f617452e779da0767d4ac9e9d9f71b45fa017453a140928f24cd3c20fa217c439e0b5def4ebd55f789d15a6eb78e01b8309b5610de81060e422cd0606e8b06398b978b1813b0537705b704cfc95d952567486916a73be791c1e603700706585b48c83b87874cf1bf4dc81e56beee8f08ca51f404b31003c58606b861817cf365d7918ee0df66e23a5dd6aff19d52b1a", ['\x00']}, 0x244) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x6, 0x9, 0x9, 0x81, 0x0, 0xc5, 0x1890, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000400)}, 0x440, 0x7, 0x8, 0x7, 0xfd6, 0x0, 0x47, 0x0, 0x3, 0x0, 0x2a}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20004010) socketpair(0x1e, 0x5, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000804) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20008010) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x62cfdf0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x6f, 0xff, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x40, 0x8000, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x3, 0x5, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x39}, 0x8000, 0x8, 0x7, 0xdaf3}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa4, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x8050) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x8c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8fe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffe}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x14}, 0x4000080) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000dc0)='.log\x00', 0x840, 0xb0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r2) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, r6, 0xe08, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xee}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x66}, @void, @val={0xc, 0x99, {0xfffffffd, 0x1f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0xc0c1) syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), 0xffffffffffffffff) 14:40:27 executing program 5: readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/232, 0xe8) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r1}], 0x3, 0x0, &(0x7f00000001c0)='&=z'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r2, 0x829, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1e}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe05}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000080) mmap$binder(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1, 0x11, r0, 0x0) getdents64(r0, &(0x7f00000003c0)=""/58, 0x3a) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) r4 = openat$incfs(r3, &(0x7f0000000440)='.pending_reads\x00', 0x501000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x408, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x130, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xf9, 0x2a, [@supported_rates={0x1, 0x5, [{0x3}, {0x12}, {0x6}, {0xb}, {0x1, 0x1}]}, @rann={0x7e, 0x15, {{0x0, 0x5e}, 0x1, 0xff, @broadcast, 0x5cef, 0x2, 0x7}}, @fast_bss_trans={0x37, 0xb5, {0x81, 0x4, "037e811d1b83f01a461f5d9b482995ba", "fd0518be22f84f41f7caa31415de95db7fb8919a0dd73d210a32fcc36ea9b41d", "b9ec026fa623b204144d3feacb85c16997757232c0f9adbc72e3c63756da145b", [{0x1, 0x17, "4969b11354704c6b6dfdf183767a78996074e4340ae36d"}, {0x1, 0xe, "5f1cebf5babcf4ba53e6e1c1ced6"}, {0x2, 0x18, "a9a35af3db0cb8d286fad3e152911b4cbce131168f851414"}, {0x3, 0x1e, "2f9614af4a0dfdcee6dad7e015dcfa125f666ff11f273a3a08c80d4eaadd"}]}}, @ibss={0x6, 0x2, 0x4f0}, @ssid={0x0, 0x17, @random="7957db8f801cdfde6979f70844f67f0b04d8e133f7a5c7"}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8080}, 0x30) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) modify_ldt$write2(0x11, &(0x7f0000000900)={0x4, 0x20000800, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) accept4$bt_l2cap(r4, &(0x7f0000000940)={0x1f, 0x0, @fixed}, &(0x7f0000000980)=0xe, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000009c0)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) [ 102.884383] audit: type=1400 audit(1730990427.591:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:40:27 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x20, 0x1, 0x3}}, 0x14) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x14200, 0xc5) write$P9_RREADDIR(r1, &(0x7f00000000c0)={0xc5, 0x29, 0x1, {0xfffffff6, [{{0x2, 0x2}, 0xa03, 0x1f, 0x7, './file0'}, {{0x8, 0x3, 0x7}, 0x4, 0x5, 0x7, './file0'}, {{0x2, 0x1}, 0x7fff, 0xff, 0x7, './file0'}, {{0x1, 0x2, 0x1}, 0x2a18, 0xf9, 0x7, './file0'}, {{0x40, 0x2, 0x7}, 0x8309, 0x40, 0x7, './file0'}, {{0x8, 0x2, 0x3}, 0x100, 0x9, 0x7, './file0'}]}}, 0xc5) write$P9_ROPEN(r1, &(0x7f00000001c0)={0x18, 0x71, 0x1, {{0x20, 0x1, 0x3}, 0x6}}, 0x18) clock_settime(0x2, &(0x7f0000000200)={0x0, 0x989680}) r2 = syz_open_dev$mouse(&(0x7f0000000240), 0xfffffffeffffffff, 0x1010c3) write$P9_ROPEN(r2, &(0x7f0000000280)={0x18, 0x71, 0x2, {{0x2, 0x3, 0x5}, 0x5}}, 0x18) write$P9_RSYMLINK(r1, &(0x7f00000002c0)={0x14, 0x11, 0x2, {0x1, 0x1, 0x8}}, 0x14) execveat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000340)='}\x00', &(0x7f0000000380)='/dev/input/mouse#\x00', &(0x7f00000003c0)='[/-!+\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='.pending_reads\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\xd9+%\x00', &(0x7f0000000500)='/dev/input/mouse#\x00'], 0x1000) write$P9_RVERSION(r1, &(0x7f0000000580)={0x15, 0x65, 0xffff, 0x80000001, 0x8, '9P2000.L'}, 0x15) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x4008800) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x1, 0x43, 0x2}, 0x18) unlinkat(r3, &(0x7f0000000740)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000780)='./file0\x00', &(0x7f0000000800)={{0x0, 0x2710}, {r4, r5/1000+10000}}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$incfs(r2, &(0x7f0000000840)='.pending_reads\x00', 0x42000, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000c00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x26c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x10}, 0x48000) 14:40:27 executing program 6: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100, 0x3}) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x200000, 0x11) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"d74c9d37bce26def80278000fbf00c55", 0x0, 0x0, {0x7, 0x5}, {0x7, 0x4}, 0x2ae1, [0x1, 0x2, 0x0, 0x7, 0xff, 0x4, 0xf1bb, 0x1000, 0xdcef, 0x2, 0xf7, 0xffffffffffff8000, 0x0, 0x8, 0x9, 0x8]}) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x800, 0x20902) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000200)=0x80000001) r5 = openat$incfs(r1, &(0x7f0000000240)='.pending_reads\x00', 0x1a1102, 0x90) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x80, 0x0, &(0x7f00000003c0)=[@dead_binder_done, @increfs_done, @release, @increfs={0x40046304, 0x2}, @release, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x1, 0x1, 0x39}, @flat=@binder={0x73622a85, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/103, 0x67, 0x1}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}}, @exit_looper], 0x10, 0x0, &(0x7f0000000440)="a1e20bd0b81fc4f383aab73db5e02f10"}) write$P9_RUNLINKAT(r1, &(0x7f00000004c0)={0x7, 0x4d, 0x2}, 0x7) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000500)={0x18, 0xf, 0x2, {{0x4, 0x2, 0x3}, 0x9c29}}, 0x18) r6 = openat$incfs(r1, &(0x7f0000000540)='.pending_reads\x00', 0x208000, 0x11) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = openat$incfs(r1, &(0x7f0000000580)='.log\x00', 0x2, 0x8) write$P9_RXATTRWALK(r7, &(0x7f00000005c0)={0xf, 0x1f, 0x2, 0x4}, 0xf) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000600)={"bb7483da5bb95f9fff4b1910be03fea0", r3, r2, {0x401, 0x2}, {0xfff, 0x5}, 0x200, [0x8, 0x0, 0x101, 0x8, 0xff, 0x2, 0x8, 0x0, 0x1, 0xfff, 0x0, 0x8, 0x10001, 0x1f, 0x2, 0x6e]}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000700)=r8) statx(r7, &(0x7f0000000740)='./file0\x00', 0x800, 0x10, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000880)={0xa0, 0x19, 0x2, {0x800, {0x20, 0x0, 0x1}, 0x66, 0xffffffffffffffff, r9, 0x800, 0x5, 0x4, 0x1, 0x100000001, 0x6d3e, 0x800, 0x0, 0x5ac, 0x49830d9e, 0xf947, 0xfffffffffffffff8, 0x1f, 0x800, 0x9}}, 0xa0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000940)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000980)={0x2}) 14:40:27 executing program 7: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x7, 0x2}, 0x9) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x8, 0x4, 0x8}, 0x80000001}}, 0x18) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x1}, 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x1) write$P9_RRENAMEAT(r1, &(0x7f0000000140)={0x7, 0x4b, 0x2}, 0x7) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLOCK(r2, &(0x7f00000001c0)={0x8, 0x35, 0x3, 0x1}, 0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000240), 0xffffffff, 0x82000) write$P9_RXATTRCREATE(r3, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7) write$P9_RLCREATE(r4, &(0x7f00000002c0)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x2}, 0xf5a}}, 0x18) write$P9_RSTAT(r4, &(0x7f0000000300)={0x44, 0x7d, 0x2, {0x0, 0x3d, 0xffab, 0x2, {0x20, 0x4, 0x3}, 0x4000000, 0x0, 0x7f, 0xffff, 0x1, '%', 0x1, '!', 0x6, '^-:$*#', 0x2, '$:'}}, 0x44) write$P9_RSTAT(r1, &(0x7f0000000380)={0x3f, 0x7d, 0x2, {0x0, 0x38, 0x5, 0x80000000, {0x4, 0x1, 0x2}, 0x800000, 0x4e4, 0x45, 0xb9, 0x1, '-', 0x1, '%', 0x2, '\\(', 0x1, '%'}}, 0x3f) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x4080, 0x0) write$P9_RRENAMEAT(r5, &(0x7f0000000400)={0x7, 0x4b, 0x2}, 0x7) write$P9_RXATTRWALK(r1, &(0x7f0000000440)={0xf, 0x1f, 0x2, 0x3}, 0xf) write$P9_RUNLINKAT(r0, &(0x7f0000000480)={0x7, 0x4d, 0x1}, 0x7) write$P9_RGETATTR(r2, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0x180, {0x8, 0x2, 0x6}, 0x18, 0xee00, 0xee01, 0x9, 0x7f, 0x7, 0x20, 0x97c, 0x16, 0x9, 0x0, 0x6, 0x7, 0x9, 0xff, 0x9, 0xf978}}, 0xa0) getitimer(0x0, &(0x7f0000000580)) [ 104.202533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.205101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.208489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.216898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.220149] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.222380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.266982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.271477] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.277994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.285142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.290601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.296468] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.298650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.308637] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 104.310921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.341584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.349661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.354148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.356109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.363802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.365519] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.371821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.373244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.378104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.382712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.396204] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.404279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.407478] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.408628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.411419] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 104.412830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.413795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.421980] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 104.423241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.424663] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 104.442859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.465893] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 104.467268] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 104.473498] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 104.500085] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 104.501831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 104.503053] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 104.505626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 104.510706] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 104.513688] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 104.527166] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 104.530206] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 104.531813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.292968] Bluetooth: hci0: command tx timeout [ 106.372761] Bluetooth: hci2: command tx timeout [ 106.420693] Bluetooth: hci1: command tx timeout [ 106.485655] Bluetooth: hci4: command tx timeout [ 106.549697] Bluetooth: hci3: command tx timeout [ 106.550851] Bluetooth: hci5: command tx timeout [ 106.612436] Bluetooth: hci6: command tx timeout [ 106.613270] Bluetooth: hci7: command tx timeout [ 108.343350] Bluetooth: hci0: command tx timeout [ 108.405592] Bluetooth: hci2: command tx timeout [ 108.473161] Bluetooth: hci1: command tx timeout [ 108.533474] Bluetooth: hci4: command tx timeout [ 108.596671] Bluetooth: hci5: command tx timeout [ 108.598239] Bluetooth: hci3: command tx timeout [ 108.661448] Bluetooth: hci6: command tx timeout [ 108.662950] Bluetooth: hci7: command tx timeout [ 110.389392] Bluetooth: hci0: command tx timeout [ 110.452610] Bluetooth: hci2: command tx timeout [ 110.516741] Bluetooth: hci1: command tx timeout [ 110.581525] Bluetooth: hci4: command tx timeout [ 110.645561] Bluetooth: hci5: command tx timeout [ 110.647246] Bluetooth: hci3: command tx timeout [ 110.709967] Bluetooth: hci6: command tx timeout [ 110.711550] Bluetooth: hci7: command tx timeout [ 112.437487] Bluetooth: hci0: command tx timeout [ 112.500478] Bluetooth: hci2: command tx timeout [ 112.566357] Bluetooth: hci1: command tx timeout [ 112.629463] Bluetooth: hci4: command tx timeout [ 112.692656] Bluetooth: hci3: command tx timeout [ 112.694490] Bluetooth: hci5: command tx timeout [ 112.757458] Bluetooth: hci6: command tx timeout [ 112.758885] Bluetooth: hci7: command tx timeout [ 166.984604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.992044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.999133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.011112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.014746] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 167.016049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.121923] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.123096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.125926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.127550] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.131779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.137059] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.140109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.142884] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.144055] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.149582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.152621] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.155664] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.193795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.195408] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.197184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.206534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.234380] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.237274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 167.239838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 167.240976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.241893] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.243724] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.245915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.246670] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.247686] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.248917] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.250525] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.253147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 167.254990] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.258732] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 167.259538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.265588] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.270362] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 167.272047] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 167.277506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.278678] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 167.280565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.285668] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 167.287268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.292739] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 167.295343] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 167.298426] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.076425] Bluetooth: hci0: command tx timeout [ 169.207228] Bluetooth: hci1: command tx timeout [ 169.208659] Bluetooth: hci2: command tx timeout [ 169.332679] Bluetooth: hci4: command tx timeout [ 169.334851] Bluetooth: hci3: command tx timeout [ 169.396522] Bluetooth: hci7: command tx timeout [ 169.398424] Bluetooth: hci5: command tx timeout [ 169.460502] Bluetooth: hci6: command tx timeout [ 171.124453] Bluetooth: hci0: command tx timeout [ 171.252520] Bluetooth: hci2: command tx timeout [ 171.253048] Bluetooth: hci1: command tx timeout [ 171.380549] Bluetooth: hci4: command tx timeout [ 171.381076] Bluetooth: hci3: command tx timeout [ 171.445348] Bluetooth: hci5: command tx timeout [ 171.445867] Bluetooth: hci7: command tx timeout [ 171.509367] Bluetooth: hci6: command tx timeout [ 173.172573] Bluetooth: hci0: command tx timeout [ 173.300408] Bluetooth: hci2: command tx timeout [ 173.302006] Bluetooth: hci1: command tx timeout [ 173.429116] Bluetooth: hci4: command tx timeout [ 173.430689] Bluetooth: hci3: command tx timeout [ 173.492397] Bluetooth: hci5: command tx timeout [ 173.494381] Bluetooth: hci7: command tx timeout [ 173.556361] Bluetooth: hci6: command tx timeout [ 175.221337] Bluetooth: hci0: command tx timeout [ 175.348427] Bluetooth: hci1: command tx timeout [ 175.348938] Bluetooth: hci2: command tx timeout [ 175.476497] Bluetooth: hci4: command tx timeout [ 175.477018] Bluetooth: hci3: command tx timeout [ 175.540581] Bluetooth: hci5: command tx timeout [ 175.541066] Bluetooth: hci7: command tx timeout [ 175.605533] Bluetooth: hci6: command tx timeout [ 229.540781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.542548] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.544221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.545565] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.548356] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.549898] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.551020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.563120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.564531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.573182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.575255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.576849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.664907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.667066] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.678535] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.679883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.681250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.683318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.688233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.694917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.706558] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.707630] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.708113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.712956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.733598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.742582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.744641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 229.749546] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.753874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 229.757837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 229.759548] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.761788] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.763586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.768794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.769917] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.771577] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.776563] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.779926] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.784636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.792551] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.795052] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.798264] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 229.814749] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 229.818653] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 229.820043] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.825524] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.826549] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 229.829423] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 231.604865] Bluetooth: hci1: command tx timeout [ 231.605355] Bluetooth: hci0: command tx timeout [ 231.796405] Bluetooth: hci2: command tx timeout [ 231.796417] Bluetooth: hci3: command tx timeout [ 231.860377] Bluetooth: hci7: command tx timeout [ 231.860410] Bluetooth: hci5: command tx timeout [ 231.861388] Bluetooth: hci4: command tx timeout [ 231.925417] Bluetooth: hci6: command tx timeout [ 233.652360] Bluetooth: hci0: command tx timeout [ 233.652414] Bluetooth: hci1: command tx timeout [ 233.844615] Bluetooth: hci2: command tx timeout [ 233.845131] Bluetooth: hci3: command tx timeout [ 233.908455] Bluetooth: hci5: command tx timeout [ 233.909436] Bluetooth: hci4: command tx timeout [ 233.909474] Bluetooth: hci7: command tx timeout [ 233.974320] Bluetooth: hci6: command tx timeout [ 235.700894] Bluetooth: hci1: command tx timeout [ 235.701482] Bluetooth: hci0: command tx timeout [ 235.892412] Bluetooth: hci3: command tx timeout [ 235.892955] Bluetooth: hci2: command tx timeout [ 235.956520] Bluetooth: hci7: command tx timeout [ 235.957466] Bluetooth: hci4: command tx timeout [ 235.957968] Bluetooth: hci5: command tx timeout [ 236.020406] Bluetooth: hci6: command tx timeout [ 237.748507] Bluetooth: hci1: command tx timeout [ 237.749372] Bluetooth: hci0: command tx timeout [ 237.941499] Bluetooth: hci2: command tx timeout [ 237.941590] Bluetooth: hci3: command tx timeout [ 238.004444] Bluetooth: hci5: command tx timeout [ 238.004468] Bluetooth: hci7: command tx timeout [ 238.005378] Bluetooth: hci4: command tx timeout [ 238.068493] Bluetooth: hci6: command tx timeout [ 291.656002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.660483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.663789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.672763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.677161] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.681912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.774156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.778191] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.780485] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.784422] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.789218] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 291.795848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.975922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.978917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.984767] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.986100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.990486] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.992600] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.993828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.995508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.000636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.002963] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.007060] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.021110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.022791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.024844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 292.031529] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.034862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.038430] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 292.043503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.047516] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.054584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.061574] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.084095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.088429] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.089592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.092726] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.096377] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 292.097606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.113908] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 292.115731] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 292.116901] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 292.120345] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 292.121990] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 292.123196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 292.140448] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.154197] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 292.155895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.748354] Bluetooth: hci0: command tx timeout [ 293.812461] Bluetooth: hci1: command tx timeout [ 294.004456] Bluetooth: hci2: command tx timeout [ 294.068457] Bluetooth: hci4: command tx timeout [ 294.134374] Bluetooth: hci6: command tx timeout [ 294.196388] Bluetooth: hci3: command tx timeout [ 294.197084] Bluetooth: hci7: command tx timeout [ 294.260361] Bluetooth: hci5: command tx timeout [ 295.796372] Bluetooth: hci0: command tx timeout [ 295.860353] Bluetooth: hci1: command tx timeout [ 296.052408] Bluetooth: hci2: command tx timeout [ 296.116913] Bluetooth: hci4: command tx timeout [ 296.180388] Bluetooth: hci6: command tx timeout [ 296.244434] Bluetooth: hci3: command tx timeout [ 296.244933] Bluetooth: hci7: command tx timeout [ 296.309035] Bluetooth: hci5: command tx timeout [ 297.844500] Bluetooth: hci0: command tx timeout [ 297.908435] Bluetooth: hci1: command tx timeout [ 298.100339] Bluetooth: hci2: command tx timeout [ 298.164424] Bluetooth: hci4: command tx timeout [ 298.228345] Bluetooth: hci6: command tx timeout [ 298.293180] Bluetooth: hci3: command tx timeout [ 298.293776] Bluetooth: hci7: command tx timeout [ 298.356363] Bluetooth: hci5: command tx timeout [ 299.892350] Bluetooth: hci0: command tx timeout [ 299.956586] Bluetooth: hci1: command tx timeout [ 300.148378] Bluetooth: hci2: command tx timeout [ 300.213335] Bluetooth: hci4: command tx timeout [ 300.276460] Bluetooth: hci6: command tx timeout [ 300.340359] Bluetooth: hci3: command tx timeout [ 300.340863] Bluetooth: hci7: command tx timeout [ 300.405049] Bluetooth: hci5: command tx timeout [ 354.131208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.133973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.135669] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.140590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.160469] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 354.161781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.171686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.173342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.174731] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.181728] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.183206] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 354.184676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.306944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.310035] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.311656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.314329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.318083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 354.319189] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.405842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.410655] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.411848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.416673] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.418380] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.419998] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.421615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.422716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.425146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.428989] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 354.430161] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.434844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.442508] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.445529] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.447824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.450936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.453039] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 354.454160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 354.477847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 354.479632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.482796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.489037] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 354.503898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.505603] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 354.507800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.513742] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 354.532109] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 354.573300] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 354.593278] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 354.594369] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 356.213526] Bluetooth: hci1: command tx timeout [ 356.214684] Bluetooth: hci0: command tx timeout [ 356.405311] Bluetooth: hci2: command tx timeout [ 356.532424] Bluetooth: hci3: command tx timeout [ 356.533212] Bluetooth: hci4: command tx timeout [ 356.534009] Bluetooth: hci5: command tx timeout [ 356.596570] Bluetooth: hci6: command tx timeout [ 356.660446] Bluetooth: hci7: command tx timeout [ 358.261014] Bluetooth: hci0: command tx timeout [ 358.261675] Bluetooth: hci1: command tx timeout [ 358.452549] Bluetooth: hci2: command tx timeout [ 358.580443] Bluetooth: hci5: command tx timeout [ 358.581012] Bluetooth: hci4: command tx timeout [ 358.581707] Bluetooth: hci3: command tx timeout [ 358.644354] Bluetooth: hci6: command tx timeout [ 358.708346] Bluetooth: hci7: command tx timeout [ 360.308515] Bluetooth: hci0: command tx timeout [ 360.309064] Bluetooth: hci1: command tx timeout [ 360.500568] Bluetooth: hci2: command tx timeout [ 360.628423] Bluetooth: hci5: command tx timeout [ 360.630178] Bluetooth: hci4: command tx timeout [ 360.630749] Bluetooth: hci3: command tx timeout [ 360.692338] Bluetooth: hci6: command tx timeout [ 360.756456] Bluetooth: hci7: command tx timeout [ 362.356572] Bluetooth: hci1: command tx timeout [ 362.357136] Bluetooth: hci0: command tx timeout [ 362.548337] Bluetooth: hci2: command tx timeout [ 362.676509] Bluetooth: hci4: command tx timeout [ 362.677023] Bluetooth: hci3: command tx timeout [ 362.677711] Bluetooth: hci5: command tx timeout [ 362.740399] Bluetooth: hci6: command tx timeout [ 362.804335] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 14:45:28 Registers: info registers vcpu 0 RAX=ffff88802a168001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802a167c01 RSI=ffff88802a167c58 RDI=ffff88802a167878 RBP=ffff88802a1678c0 RSP=ffff88802a1677f8 R8 =ffffffff86830aaa R9 =ffff88802a1678a8 R10=000000000003c001 R11=00000000000225b5 R12=ffff88802a1678c8 R13=ffff88802a1678b0 R14=ffff88802a167c60 R15=ffff88802a167868 RIP=ffffffff81149aed RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f41291c5540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4129257c70 CR3=0000000023576000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=1ffffffff0fde6c7 RDX=dffffc0000000000 RSI=0000000000000080 RDI=ffffffff87ef3638 RBP=ffff88800ed39b80 RSP=ffff8880248c7818 R8 =0000000000000000 R9 =fffffbfff0fdc5e9 R10=ffffffff87ee2f4f R11=0000000000000000 R12=0000000000000006 R13=dffffc0000000000 R14=ffff88800ed3a5c0 R15=ffff8880340c9780 RIP=ffffffff812fb620 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdca2ff3540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fec396dc6f4 CR3=00000000270d8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69 XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000