syzkaller login: [ 64.419181] systemd-udevd (114) used greatest stack depth: 24232 bytes left Warning: Permanently added '[localhost]:26052' (ECDSA) to the list of known hosts. 2024/11/11 01:53:20 fuzzer started 2024/11/11 01:53:21 dialing manager at localhost:46317 [ 74.434485] cgroup: Unknown subsys name 'net' [ 74.545361] cgroup: Unknown subsys name 'cpuset' [ 74.590398] cgroup: Unknown subsys name 'rlimit' 2024/11/11 01:53:38 syscalls: 201 2024/11/11 01:53:38 code coverage: enabled 2024/11/11 01:53:38 comparison tracing: enabled 2024/11/11 01:53:38 extra coverage: enabled 2024/11/11 01:53:38 setuid sandbox: enabled 2024/11/11 01:53:38 namespace sandbox: enabled 2024/11/11 01:53:38 Android sandbox: enabled 2024/11/11 01:53:38 fault injection: enabled 2024/11/11 01:53:38 leak checking: enabled 2024/11/11 01:53:38 net packet injection: enabled 2024/11/11 01:53:38 net device setup: enabled 2024/11/11 01:53:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/11 01:53:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/11 01:53:38 USB emulation: enabled 2024/11/11 01:53:38 hci packet injection: enabled 2024/11/11 01:53:38 wifi device emulation: enabled 2024/11/11 01:53:38 802.15.4 emulation: enabled 2024/11/11 01:53:38 fetching corpus: 0, signal 0/0 (executing program) 2024/11/11 01:53:40 starting 8 fuzzer processes 01:53:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) socketpair(0x6, 0x800, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$netlink(r2, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff7f, 0x7}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10f3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xce81, @loopback, 0x401}}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2004085) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x20}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x10000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000680)={0x5, &(0x7f0000000640)=[{0x6, 0x5, 0x9, 0x80}, {0x1, 0x80, 0x5, 0x5}, {0x3, 0x80, 0x0, 0x4}, {0x7ff, 0x0, 0x40, 0x3}, {0x7, 0xf9, 0x4, 0x7f}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r6) sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x21}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000940)={0x3, &(0x7f0000000900)=[{0x6, 0x9b, 0x66, 0xffffff27}, {0x100, 0x6, 0x6}, {0x80, 0x81, 0x3, 0x400}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f0000000980)={0x0, 0x2, r7, 0xc877}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x48030000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r9, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x10}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 01:53:40 executing program 2: r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) r1 = eventfd(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000000)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "25d5694870c48a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001000)={{r2, 0x4d9, 0x7, 0x9, 0x4, 0x0, 0x3, 0x8c, 0x53c, 0xfffffff8, 0xa2c, 0x80000000, 0x7, 0xff, 0x3}}) r3 = shmget(0x1, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) sendmsg$nl_xfrm(r4, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f00000010c0)=@updpolicy={0x15c, 0x19, 0x100, 0x70bd25, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x4e23, 0x3ff, 0x4e24, 0x2, 0x2, 0x0, 0x20, 0x21}, {0x100, 0xb7, 0x2, 0x5, 0xfffffffffffffffd, 0x100000000, 0x83, 0x9}, {0x1606, 0x6, 0x6, 0x101}, 0x1, 0x6e6bb7, 0x1, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}, @proto={0x5, 0x19, 0xff}, @etimer_thresh={0x8, 0xc, 0x9}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @address_filter={0x28, 0x1a, {@in6=@local, @in=@remote, 0xa, 0x71, 0x1}}, @migrate={0x50, 0x11, [{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, @in=@local, 0x2b, 0x0, 0x0, 0x3503, 0x2, 0xa}]}]}, 0x15c}}, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x804) shmat(r3, &(0x7f0000ffe000/0x1000)=nil, 0x6000) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001400), 0x2, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget(0x1, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) r5 = open_tree(0xffffffffffffffff, &(0x7f0000001440)='./file0\x00', 0x100) write$cgroup_pid(r5, &(0x7f0000001480), 0x12) openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000014c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000001500)={'team_slave_0', 0x32, 0x34}, 0xf) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000001540)=r4, 0x1) r6 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmat(r6, &(0x7f0000ffc000/0x1000)=nil, 0x0) [ 92.845956] audit: type=1400 audit(1731290020.282:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:53:40 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x8841) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x3110000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x40480c0}, 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc4, r5, 0x81, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7a}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaf}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2bd5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46f1}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r6, 0x20, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x4) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, @none}, &(0x7f0000000880)=0xe, 0x800) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f00000008c0)=0x60, 0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000900)=0x2, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x1c}}, 0x4) socketpair(0x11, 0x1, 0x6, &(0x7f0000000b00)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000b40)={0x3, 0x2, 0x2, 0x80000000}, 0x14) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000bc0)={'syzkaller0\x00', @ifru_names}) 01:53:40 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socketpair(0x10, 0x2, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x17}}}}, ["", "", "", ""]}, 0x20}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000300)=0x5, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000540)={"6438ca20cafe7f8b30945eceb2ae5fe7", 0x0, r6, {0x6, 0x3}, {0x3ff800, 0x7}, 0x7f, [0xffffffff, 0x5, 0xfffffffffffffffa, 0x7, 0x5, 0x7d99, 0x3, 0x7, 0x2, 0xa98b, 0x8001, 0x7, 0x8, 0xfff, 0x8, 0x101]}) lsetxattr$trusted_overlay_origin(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680), &(0x7f00000006c0), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000700)={r5, 0x4}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000001700)={r5, 0x40}) r7 = syz_io_uring_complete(0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000002700)={0x3, 0xfffffffe, 0x1e, 0x0, 0x6479, 0x40}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000002740)=""/103, &(0x7f00000027c0)=0x67) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8101}, 0x84) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000002900), 0x4) 01:53:40 executing program 5: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000140)={'bond0\x00', @ifru_mtu}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r1) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000200)={@initdev, @multicast1, 0x0}, &(0x7f0000000240)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x2a0, 0x0, 0x302, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd7f}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x400c8c4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000063c0)={@rand_addr, @loopback, 0x0}, &(0x7f0000006400)=0xc) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000006500)={0x0, @xdp={0x2c, 0x5, r2, 0x21}, @l2={0x1f, 0x9, @any, 0x6f3, 0x1}, @isdn={0x22, 0x64, 0xbc, 0x1, 0x80}, 0xcfae, 0x0, 0x0, 0x0, 0xff, &(0x7f00000064c0)='wg1\x00', 0x7, 0x7ff, 0x8}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000006580)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000cf00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f000000cf80)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f000000fb40)={@broadcast, @initdev, 0x0}, &(0x7f000000fb80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f000000fbc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000fc00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000010740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000010700)={&(0x7f000000fc40)={0xa94, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdf}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x20, 0x3, 0x3f, 0x4}, {0x5, 0x3, 0x0, 0x6}, {0x9, 0x2, 0x80, 0x3}, {0x8, 0x8, 0x3f, 0x81}, {0x9, 0x7, 0x7, 0x3}, {0xfffd, 0x2, 0x40, 0xfff}, {0x101, 0x39, 0x64, 0x2}, {0x4, 0x4, 0x3, 0x7fffffff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x4}}, {{0x8, 0x1, r2}, {0x254, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x6, 0x3, 0x8aa}, {0x0, 0xac, 0x80, 0x5}, {0x9, 0x1f, 0xa, 0xffff}, {0x0, 0xd1, 0x0, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r2}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r2}, {0x27c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x775}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r13}, {0x21c, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x72, 0x3, 0x6}, {0x85, 0x3, 0x81, 0xab78}, {0xc7, 0x81, 0x5b}, {0x0, 0xd1, 0x7f, 0xfffff800}, {0x3, 0x1, 0xb0, 0x68c7}, {0x43c, 0x49, 0x81, 0x7d}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x52d2b452}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x5, 0x3, 0x7}, {0xfff9, 0x2, 0xff, 0x7fffffff}, {0x3, 0x1f, 0x0, 0xffff}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r2}, {0x4}}]}, 0xa94}}, 0x10010) 01:53:40 executing program 7: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x100000000, 0x4}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @llc={0x1a, 0x20, 0xff, 0x6c, 0x7, 0x5d, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x4000}, @isdn={0x22, 0x2, 0x5, 0xff, 0x3}, 0x1000, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='team_slave_0\x00', 0x4, 0x6f14, 0x1}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x8000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000015c0)="a406f0a04a77fbb03ae983fb86820b85", 0x10) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000001600)={{0x8000, 0x8}, 0x100, './file0\x00'}) eventfd2(0x2b9, 0x80800) r2 = socket$netlink(0x10, 0x3, 0x15) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001740)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000001780)=@ccm_128={{0x304}, "3d6e13bbc376d429", "a0fdfafbbdfeae57364dc3d94ef70da4", '(vtF', "4295a036e70226db"}, 0x28) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044813}, 0x41) r4 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000003b00)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000003c80)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_IE={0x12, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x3f, 0x7c}}, @mesh_chsw={0x76, 0x6, {0x3, 0xe9, 0x1c, 0x7}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000894}, 0x20000080) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000003cc0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000003d00)="32c0aa5933175b1e2782b97909cb7a854d28019f2e1c284f2116aede5c811484baaf8e16ffc6b9c5301258b0a82ae1b0816aa9f9d94b02a6a17e913fbc052c", 0x3f) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000003d40)=""/86, &(0x7f0000003dc0)=0x56) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000003e00)=0x4, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 01:53:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x855}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r4) r5 = epoll_create(0x80000000) epoll_pwait2(r5, &(0x7f00000002c0)=[{}, {}], 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x4]}, 0x8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r4) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0xc1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000000600)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "40093cfed8dbfd"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001600)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000001800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "157ec7ee1ac038"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002800)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000002a00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "fbf28f698699b6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000004fe40)={0x40, [{0x0, r7}, {}, {}, {r8}, {0x0, r9}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {r11}], 0xcf, "5b18c9734d33dd"}) 01:53:41 executing program 6: r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc) r1 = fsmount(r0, 0x0, 0x76) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2, 0x60e, 0x7fff}) r3 = getpid() r4 = getpid() r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000140)={r0, r5, 0x3}) socketpair(0x9, 0x5, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "1247853d6261fa48", "2cdd6d815340b6bee064333d8bb9c67c", "38f883c4", "07831deefb34aeac"}, 0x28) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000280)=0x6, 0x4) r7 = epoll_create(0x5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f00000002c0)={0x80000014}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x111100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000000340)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf8, "e19f26c1c420a2"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f000004cc80)={0x6, [{}, {0x0, r9}], 0x8, "5758615a1861f6"}) [ 94.288451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.290845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.293182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.299028] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.305015] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.317009] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.348289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.353042] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.354189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.358379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.365647] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.367789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.464981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.466404] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.467625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.477009] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.478680] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.479742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.503274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.505032] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.506642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.508162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.509447] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.516124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.519405] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.527150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.530497] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.531591] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.538265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.539499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.596309] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.604115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.614082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.634091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.650184] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.654065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.865103] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.870146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.876451] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.929144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.941629] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.947038] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.023212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.025577] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.057969] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.091073] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.108977] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.111051] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.386682] Bluetooth: hci1: command tx timeout [ 96.386687] Bluetooth: hci0: command tx timeout [ 96.506838] Bluetooth: hci2: command tx timeout [ 96.570914] Bluetooth: hci3: command tx timeout [ 96.633896] Bluetooth: hci4: command tx timeout [ 96.697870] Bluetooth: hci5: command tx timeout [ 97.018884] Bluetooth: hci6: command tx timeout [ 97.146915] Bluetooth: hci7: command tx timeout [ 98.426453] Bluetooth: hci1: command tx timeout [ 98.427803] Bluetooth: hci0: command tx timeout [ 98.553920] Bluetooth: hci2: command tx timeout [ 98.618001] Bluetooth: hci3: command tx timeout [ 98.682017] Bluetooth: hci4: command tx timeout [ 98.748584] Bluetooth: hci5: command tx timeout [ 99.065845] Bluetooth: hci6: command tx timeout [ 99.193860] Bluetooth: hci7: command tx timeout [ 100.473852] Bluetooth: hci0: command tx timeout [ 100.474872] Bluetooth: hci1: command tx timeout [ 100.602162] Bluetooth: hci2: command tx timeout [ 100.665858] Bluetooth: hci3: command tx timeout [ 100.731351] Bluetooth: hci4: command tx timeout [ 100.793892] Bluetooth: hci5: command tx timeout [ 101.113880] Bluetooth: hci6: command tx timeout [ 101.241876] Bluetooth: hci7: command tx timeout [ 102.521897] Bluetooth: hci1: command tx timeout [ 102.521930] Bluetooth: hci0: command tx timeout [ 102.650103] Bluetooth: hci2: command tx timeout [ 102.713851] Bluetooth: hci3: command tx timeout [ 102.778962] Bluetooth: hci4: command tx timeout [ 102.841873] Bluetooth: hci5: command tx timeout [ 103.161984] Bluetooth: hci6: command tx timeout [ 103.290075] Bluetooth: hci7: command tx timeout [ 156.774669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.782430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.787617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.794302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.799259] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.804588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.827877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.834987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.857168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.865202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.869025] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.876129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.936588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.940918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.950352] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.971327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.974494] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.977091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.010640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.018174] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.033298] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.034905] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.039206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.044234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.045377] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.047025] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.049524] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.052365] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.056551] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.058433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.058440] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.062049] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.063857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.078224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.104959] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.114240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.115697] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.127932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.134895] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.157404] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.159304] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.161072] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.165264] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.167713] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.169312] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.216128] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.218669] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.228438] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.905892] Bluetooth: hci1: command tx timeout [ 158.907068] Bluetooth: hci0: command tx timeout [ 159.034845] Bluetooth: hci2: command tx timeout [ 159.161851] Bluetooth: hci4: command tx timeout [ 159.163126] Bluetooth: hci5: command tx timeout [ 159.163253] Bluetooth: hci3: command tx timeout [ 159.226080] Bluetooth: hci7: command tx timeout [ 159.290980] Bluetooth: hci6: command tx timeout [ 160.954806] Bluetooth: hci1: command tx timeout [ 160.954846] Bluetooth: hci0: command tx timeout [ 161.082827] Bluetooth: hci2: command tx timeout [ 161.209876] Bluetooth: hci3: command tx timeout [ 161.210957] Bluetooth: hci5: command tx timeout [ 161.211592] Bluetooth: hci4: command tx timeout [ 161.273861] Bluetooth: hci7: command tx timeout [ 161.337940] Bluetooth: hci6: command tx timeout [ 163.001984] Bluetooth: hci1: command tx timeout [ 163.002937] Bluetooth: hci0: command tx timeout [ 163.130890] Bluetooth: hci2: command tx timeout [ 163.259601] Bluetooth: hci4: command tx timeout [ 163.259636] Bluetooth: hci5: command tx timeout [ 163.260308] Bluetooth: hci3: command tx timeout [ 163.322824] Bluetooth: hci7: command tx timeout [ 163.386818] Bluetooth: hci6: command tx timeout [ 165.050898] Bluetooth: hci0: command tx timeout [ 165.051431] Bluetooth: hci1: command tx timeout [ 165.178846] Bluetooth: hci2: command tx timeout [ 165.305883] Bluetooth: hci3: command tx timeout [ 165.306444] Bluetooth: hci5: command tx timeout [ 165.307371] Bluetooth: hci4: command tx timeout [ 165.369842] Bluetooth: hci7: command tx timeout [ 165.433896] Bluetooth: hci6: command tx timeout [ 217.326786] syz-executor.6 (3553) used greatest stack depth: 24224 bytes left [ 219.204643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.209023] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.212977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.222543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.230230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.233492] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.267586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.271908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.274463] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.279506] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.282487] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.286512] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.344366] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.361414] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.365061] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.373057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.384116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.388053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.458032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.461254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.463786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.475073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.478032] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.482064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.551367] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.557261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.563160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.575888] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.596264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.599178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.612964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.624035] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.635637] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.638278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.641317] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.643684] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.645844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.662190] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.665609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.715284] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.723045] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.727694] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.756283] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.771947] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.773019] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.776993] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.779176] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.783510] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.307010] Bluetooth: hci1: command tx timeout [ 221.307122] Bluetooth: hci0: command tx timeout [ 221.497852] Bluetooth: hci2: command tx timeout [ 221.562269] Bluetooth: hci3: command tx timeout [ 221.754900] Bluetooth: hci5: command tx timeout [ 221.818836] Bluetooth: hci4: command tx timeout [ 221.882971] Bluetooth: hci7: command tx timeout [ 221.945877] Bluetooth: hci6: command tx timeout [ 223.355782] Bluetooth: hci1: command tx timeout [ 223.355975] Bluetooth: hci0: command tx timeout [ 223.547088] Bluetooth: hci2: command tx timeout [ 223.611764] Bluetooth: hci3: command tx timeout [ 223.801838] Bluetooth: hci5: command tx timeout [ 223.866520] Bluetooth: hci4: command tx timeout [ 223.929883] Bluetooth: hci7: command tx timeout [ 223.995293] Bluetooth: hci6: command tx timeout [ 225.401967] Bluetooth: hci1: command tx timeout [ 225.403669] Bluetooth: hci0: command tx timeout [ 225.594662] Bluetooth: hci2: command tx timeout [ 225.657842] Bluetooth: hci3: command tx timeout [ 225.849889] Bluetooth: hci5: command tx timeout [ 225.915948] Bluetooth: hci4: command tx timeout [ 225.977908] Bluetooth: hci7: command tx timeout [ 226.042799] Bluetooth: hci6: command tx timeout [ 227.449899] Bluetooth: hci1: command tx timeout [ 227.449925] Bluetooth: hci0: command tx timeout [ 227.642024] Bluetooth: hci2: command tx timeout [ 227.707785] Bluetooth: hci3: command tx timeout [ 227.897857] Bluetooth: hci5: command tx timeout [ 227.961953] Bluetooth: hci4: command tx timeout [ 228.027777] Bluetooth: hci7: command tx timeout [ 228.089858] Bluetooth: hci6: command tx timeout [ 281.690253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.700818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.705359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.725389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.727257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.729197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.807064] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.810959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.817021] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.829615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.831962] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.833489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.861639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.867970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.874375] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.879469] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.913274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.921147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.927378] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.932169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.933523] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.935053] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.938038] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.939325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.945818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.946047] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.948650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.948846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.950884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.957821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.962316] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.980302] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.997235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.006972] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.008284] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.013985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.020071] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.023137] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.030301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.031330] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.041447] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.043163] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.044976] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.049985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.065029] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.066165] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.087267] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.116065] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 283.769866] Bluetooth: hci0: command tx timeout [ 283.897811] Bluetooth: hci1: command tx timeout [ 283.961819] Bluetooth: hci2: command tx timeout [ 284.025788] Bluetooth: hci4: command tx timeout [ 284.027296] Bluetooth: hci3: command tx timeout [ 284.154974] Bluetooth: hci6: command tx timeout [ 284.155844] Bluetooth: hci5: command tx timeout [ 284.218857] Bluetooth: hci7: command tx timeout [ 285.818758] Bluetooth: hci0: command tx timeout [ 285.948282] Bluetooth: hci1: command tx timeout [ 286.010924] Bluetooth: hci2: command tx timeout [ 286.075853] Bluetooth: hci3: command tx timeout [ 286.077580] Bluetooth: hci4: command tx timeout [ 286.202858] Bluetooth: hci6: command tx timeout [ 286.202951] Bluetooth: hci5: command tx timeout [ 286.266797] Bluetooth: hci7: command tx timeout [ 287.867004] Bluetooth: hci0: command tx timeout [ 287.994772] Bluetooth: hci1: command tx timeout [ 288.059869] Bluetooth: hci2: command tx timeout [ 288.123799] Bluetooth: hci3: command tx timeout [ 288.125616] Bluetooth: hci4: command tx timeout [ 288.250991] Bluetooth: hci6: command tx timeout [ 288.251009] Bluetooth: hci5: command tx timeout [ 288.313914] Bluetooth: hci7: command tx timeout [ 289.914915] Bluetooth: hci0: command tx timeout [ 290.042780] Bluetooth: hci1: command tx timeout [ 290.106825] Bluetooth: hci2: command tx timeout [ 290.170931] Bluetooth: hci3: command tx timeout [ 290.172551] Bluetooth: hci4: command tx timeout [ 290.299764] Bluetooth: hci5: command tx timeout [ 290.299783] Bluetooth: hci6: command tx timeout [ 290.362796] Bluetooth: hci7: command tx timeout [ 344.012157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.016157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.023281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.029092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.031580] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.032871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.073412] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.075142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.077258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.083470] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.088187] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.095918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.131514] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.136954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.153934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.159366] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.161265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.162882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.227329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.229178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.230577] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.276213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.278288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.280578] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.413749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.420134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.423970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.440998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.447630] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.452999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.496570] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.507360] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.509286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.532336] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.533580] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.537149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.543241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.550988] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.578991] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.582460] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.584361] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.588063] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.589264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.591568] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.605942] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.608547] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.611676] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.616105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.107185] Bluetooth: hci0: command tx timeout [ 346.170167] Bluetooth: hci1: command tx timeout [ 346.233831] Bluetooth: hci2: command tx timeout [ 346.361925] Bluetooth: hci3: command tx timeout [ 346.553951] Bluetooth: hci4: command tx timeout [ 346.681859] Bluetooth: hci6: command tx timeout [ 346.681858] Bluetooth: hci5: command tx timeout [ 346.682296] Bluetooth: hci7: command tx timeout [ 348.154123] Bluetooth: hci0: command tx timeout [ 348.217783] Bluetooth: hci1: command tx timeout [ 348.281876] Bluetooth: hci2: command tx timeout [ 348.410744] Bluetooth: hci3: command tx timeout [ 348.616762] Bluetooth: hci4: command tx timeout [ 348.729927] Bluetooth: hci5: command tx timeout [ 348.730600] Bluetooth: hci7: command tx timeout [ 348.731448] Bluetooth: hci6: command tx timeout [ 350.201793] Bluetooth: hci0: command tx timeout [ 350.265780] Bluetooth: hci1: command tx timeout [ 350.330753] Bluetooth: hci2: command tx timeout [ 350.457793] Bluetooth: hci3: command tx timeout [ 350.649855] Bluetooth: hci4: command tx timeout [ 350.777927] Bluetooth: hci6: command tx timeout [ 350.778572] Bluetooth: hci7: command tx timeout [ 350.779350] Bluetooth: hci5: command tx timeout [ 352.250332] Bluetooth: hci0: command tx timeout [ 352.313869] Bluetooth: hci1: command tx timeout [ 352.378757] Bluetooth: hci2: command tx timeout [ 352.505933] Bluetooth: hci3: command tx timeout [ 352.697932] Bluetooth: hci4: command tx timeout [ 352.826080] Bluetooth: hci6: command tx timeout [ 352.826642] Bluetooth: hci5: command tx timeout [ 352.827799] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:58:50 Registers: info registers vcpu 0 RAX=ffffed1004625f3a RBX=000000000000001e RCX=ffffffff816e3c7c RDX=ffff8880169ab700 RSI=ffffffff816e3bc7 RDI=0000000000000001 RBP=ffffea0000167000 RSP=ffff88802312f808 R8 =0000000000000001 R9 =fffff9400002ce06 R10=0000000000000000 R11=00000000000007e0 R12=ffff88802312f9a8 R13=ffff88802312f9d0 R14=dffffc0000000000 R15=ffff88802312fac8 RIP=ffffffff816e3bcc RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff5b13d2b70 CR3=00000000289c0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880255fdce8 RBX=1ffff1100462aee4 RCX=ffff888023157760 RDX=0000000000000004 RSI=ffff88806cf37060 RDI=ffff8880255fdce8 RBP=0000000000000007 RSP=ffff888023157710 R8 =0000000000000001 R9 =ffff8880255fdcb8 R10=ffffffff863f7797 R11=0000000000000001 R12=ffff88806cf37060 R13=ffffffff817bd0d1 R14=0000000000000002 R15=ffff8880255fd280 RIP=ffffffff81300cb4 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558b1d11a2b0 CR3=0000000035e2e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000