Warning: Permanently added '[localhost]:48937' (ECDSA) to the list of known hosts. 2025/01/22 15:10:11 fuzzer started 2025/01/22 15:10:12 dialing manager at localhost:44689 syzkaller login: [ 68.933716] cgroup: Unknown subsys name 'net' [ 69.034498] cgroup: Unknown subsys name 'cpuset' [ 69.081550] cgroup: Unknown subsys name 'rlimit' [ 73.946098] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 84.033670] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 15:10:27 syscalls: 200 2025/01/22 15:10:27 code coverage: enabled 2025/01/22 15:10:27 comparison tracing: enabled 2025/01/22 15:10:27 extra coverage: enabled 2025/01/22 15:10:27 setuid sandbox: enabled 2025/01/22 15:10:27 namespace sandbox: enabled 2025/01/22 15:10:27 Android sandbox: enabled 2025/01/22 15:10:27 fault injection: enabled 2025/01/22 15:10:27 leak checking: enabled 2025/01/22 15:10:27 net packet injection: enabled 2025/01/22 15:10:27 net device setup: enabled 2025/01/22 15:10:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 15:10:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 15:10:27 USB emulation: enabled 2025/01/22 15:10:27 hci packet injection: enabled 2025/01/22 15:10:27 wifi device emulation: enabled 2025/01/22 15:10:27 802.15.4 emulation: enabled 2025/01/22 15:10:27 fetching corpus: 0, signal 0/0 (executing program) 2025/01/22 15:10:29 starting 8 fuzzer processes 15:10:29 executing program 0: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/174) r0 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f00000000c0)=""/97) prctl$PR_MCE_KILL_GET(0x22) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/108) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000001c0)=""/4096) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x20801, 0x0) write$tun(r3, &(0x7f0000001200)={@void, @val={0x3, 0x4, 0x0, 0x400, 0x4, 0x9}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @broadcast, @mcast2, @multicast, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x3e) openat$autofs(0xffffffffffffff9c, &(0x7f0000001240), 0x2000, 0x0) shmctl$IPC_RMID(r0, 0x0) r4 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000001280)=""/228) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}}, 0x4040000) syz_io_uring_setup(0x40ea, &(0x7f0000001480)={0x0, 0xfbf2, 0x20, 0x3, 0x1ec, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001500), &(0x7f0000001540)) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x805) 15:10:29 executing program 1: shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/76) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000080)={'custom1\x00'}) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/154) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000280)=""/109) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x20a440, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r1 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000340)=""/29) socketpair(0x3d6228cc91bc038, 0x1, 0x101, &(0x7f0000000380)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000400)={0x9, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, r2, r0, r0, r0]}, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000440)=""/11, 0xb, 0x12021, &(0x7f00000004c0)={0x11, 0x5, r3, 0x1, 0x80, 0x6, @broadcast}, 0x14) semop(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, 0x1c00}, {0x4, 0x2, 0x3800}, {0x0, 0xff81, 0x1800}, {0x0, 0x3, 0x1800}, {0x0, 0x0, 0x800}], 0x5) open_by_handle_at(r2, &(0x7f0000000540)=@isofs={0x14, 0x1, {0x10000, 0x1000, 0x0, 0x9, 0x400, 0x8000}}, 0x54382) syz_open_dev$rtc(&(0x7f0000000580), 0x3, 0x40000) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000005c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2021200}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4c014}, 0x4040040) 15:10:29 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='lazytime\x00', 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100)=0x4, 0x4) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) r2 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000400)={0x3c8, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe87f}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x48000}, 0x810) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000880)) syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) r8 = accept4$packet(r2, 0x0, &(0x7f0000000900), 0x80400) getpeername$packet(r8, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x50, r2, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000a40)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2007, @fd_index=0x5, 0x0, &(0x7f00000009c0)=""/86, 0x56, 0xf, 0x1}, 0x4) r10 = socket$inet(0x2, 0x4, 0x8) readahead(r10, 0x800, 0x100) [ 86.196052] audit: type=1400 audit(1737558629.691:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:10:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfa}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffff7f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x34}}, 0x4008810) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r2 = fsmount(r0, 0x0, 0x88) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40401000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044000}, 0xc810) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44006}, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000680)='%{\x00', &(0x7f00000006c0)='syz1\x00', 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x2000, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x700, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x200080c5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x200, 0x952, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x69}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000011}, 0xc000) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000bc0)={0x0, 'wg0\x00', {0x1}, 0x82d}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001400)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000000e00)={0x5b0, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5e59}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x88}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 15:10:29 executing program 3: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0384e185a118"}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000091}, 0x2404c051) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000003c0)={0x688, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x245a}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff61d1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd694}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x688}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00', 0x0}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000b00)=""/126, 0x7e, 0x0, &(0x7f0000000bc0)={0x11, 0xf7, r5, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa90}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socketpair(0x26, 0xa, 0xd1f7, &(0x7f0000000d40)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000dc0)={0x11, 0x0, 0x0}, &(0x7f0000000e00)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffe0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1fc00000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1050aaf27fb7cb03}, 0x40044) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000f40), 0x40400, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r7) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r9, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, r10, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c000) syz_genetlink_get_family_id$smc(&(0x7f00000010c0), 0xffffffffffffffff) r11 = memfd_secret(0x80000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4100100}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r10, 0x10c, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 15:10:29 executing program 5: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x264, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x912}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfffe, 0x80, 0x80, 0x8}, {0x1, 0x3, 0xd5, 0x2d1}, {0x8, 0x1f, 0x3f, 0x7}, {0x7ff, 0x80, 0x1f, 0x80000001}]}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc800) r3 = semget(0x3, 0x2, 0x4) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000004c0)=""/127) r4 = semget(0x2, 0x4, 0x0) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000540)=""/4096) semget(0x3, 0x2, 0x100) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000001540)=""/93) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}}, 0x4008001) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f00000016c0)=""/115) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) syz_emit_ethernet(0x26, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@val={0x9100, 0x4, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x1}}, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "02b961b217ecbb32"}}}}, &(0x7f0000001780)={0x1, 0x4, [0xc66, 0xf06, 0x167, 0x3ec]}) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000001880)={&(0x7f00000017c0), 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = semget(0x2, 0x2, 0x20) semctl$SETVAL(r5, 0x0, 0x10, &(0x7f00000018c0)=0x8) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x48, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008084}, 0x4) 15:10:29 executing program 6: fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='&!+!*.$\')]%\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x84040, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)=')\\\x00', &(0x7f0000000180)='&!+!*.$\')]%\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = fsmount(r1, 0x1, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b80)={0x1e4, 0x0, &(0x7f0000000880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0xa, 0x0, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x0, 0x1, 0x2e}, @fda={0x66646185, 0x4, 0x2, 0x35}}, &(0x7f0000000300)={0x0, 0x20, 0x48}}}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x3, 0x1, 0x2e}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/44, 0x2c, 0x0, 0x3b}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x0, 0x2, 0x36}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder, @ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/229, 0xe5, 0x0, 0x35}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}, 0x40}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x0, 0x1c}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000740)={0x0, 0x18, 0x38}}}, @acquire_done={0x40106309, 0x3}, @acquire_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000007c0)={@fda={0x66646185, 0x5, 0x2, 0x1d}, @fd={0x66642a85, 0x0, r6}, @flat=@handle={0x73682a85, 0x1100, 0x3}}, &(0x7f0000000840)={0x0, 0x20, 0x38}}}, @dead_binder_done], 0xce, 0x0, &(0x7f0000000a80)="bf508f0b686835a3840e628b2da7e4a0cdf385c8e8f28df0525cbcec2d861b14e90f54d33663501536aadbf07f068ccb8de87b21f20c861c7fc01ae9821ef0ff33585f846c69ccc160b9b6f9f24200fe03d7fa7a4f3ec1d50a2a2936985c1b6d8c9f0a8711318d57f376c8a927b1ba35de2c3bd929c215e91895298f1938f1ebfb478855a4e02467b17dbd1d3abbd0ebd39f3188c1af377b1254e5ad490ad72f98284f0d621ce906d50cdfbe48631909697ada1e1b234edbcdbf0372f8842f38c10529796ea92163f1996e88edf0"}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) accept4$packet(r0, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c00)=0x14, 0x800) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x818080}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) syz_open_dev$rtc(&(0x7f0000000d80), 0x8, 0x80000) syz_open_dev$vcsn(&(0x7f0000000dc0), 0x1, 0x68080) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000e00), 0x4) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) getpeername$packet(r3, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e80)=0x14) fremovexattr(0xffffffffffffffff, &(0x7f0000000f00)=@known='user.incfs.size\x00') 15:10:29 executing program 7: prctl$PR_SET_FP_MODE(0x2d, 0x3) prctl$PR_SET_FP_MODE(0x2d, 0x1) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x220000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x3903, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='/dev/vcs#\x00', &(0x7f00000000c0)='./file0\x00', r0) r2 = fsopen(&(0x7f0000000100)='vxfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000140)='/dev/vcs#\x00', &(0x7f0000000180)='\x00', r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='/dev/vcs\x00', &(0x7f0000000240)='vxfs\x00', 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f00000002c0)=0x1, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) syz_io_uring_setup(0x21d5, &(0x7f00000003c0)={0x0, 0x15d6, 0x8, 0x2, 0x7a, 0x0, r6}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) syz_io_uring_submit(r8, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000740)={0x2, 0x9}) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000009c0)={r7, 0x1, 0x6, @multicast}, 0x10) [ 87.680427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.685213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.688502] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.692688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.693879] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.694444] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.716698] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.722334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.725587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.736779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.742202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.744671] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.747598] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.748675] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.754212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.756161] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.758932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.761789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.762455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.771291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.775257] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.776262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.790867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.796238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.803346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.810375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.811672] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.811725] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.815680] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.815877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.818081] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.822811] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.823259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.824037] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.835102] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.836100] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.836546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.837038] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.839267] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.869083] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.872782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.874164] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.875389] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.880830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.893093] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.901265] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.910232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.912328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.750506] Bluetooth: hci0: command tx timeout [ 89.814213] Bluetooth: hci2: command tx timeout [ 89.880035] Bluetooth: hci1: command tx timeout [ 89.880348] Bluetooth: hci3: command tx timeout [ 89.880531] Bluetooth: hci4: command tx timeout [ 89.943044] Bluetooth: hci6: command tx timeout [ 89.943094] Bluetooth: hci5: command tx timeout [ 90.005231] Bluetooth: hci7: command tx timeout [ 91.798267] Bluetooth: hci0: command tx timeout [ 91.862199] Bluetooth: hci2: command tx timeout [ 91.925116] Bluetooth: hci4: command tx timeout [ 91.925151] Bluetooth: hci3: command tx timeout [ 91.925257] Bluetooth: hci1: command tx timeout [ 91.989181] Bluetooth: hci6: command tx timeout [ 91.991095] Bluetooth: hci5: command tx timeout [ 92.053771] Bluetooth: hci7: command tx timeout [ 93.845053] Bluetooth: hci0: command tx timeout [ 93.909073] Bluetooth: hci2: command tx timeout [ 93.973613] Bluetooth: hci3: command tx timeout [ 93.973661] Bluetooth: hci4: command tx timeout [ 93.973757] Bluetooth: hci1: command tx timeout [ 94.038135] Bluetooth: hci5: command tx timeout [ 94.038172] Bluetooth: hci6: command tx timeout [ 94.101071] Bluetooth: hci7: command tx timeout [ 95.893061] Bluetooth: hci0: command tx timeout [ 95.958040] Bluetooth: hci2: command tx timeout [ 96.021117] Bluetooth: hci4: command tx timeout [ 96.021192] Bluetooth: hci1: command tx timeout [ 96.021292] Bluetooth: hci3: command tx timeout [ 96.085074] Bluetooth: hci5: command tx timeout [ 96.085190] Bluetooth: hci6: command tx timeout [ 96.149262] Bluetooth: hci7: command tx timeout [ 150.327732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.328704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.329221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.333363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.334276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.334733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.401992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.420531] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.420879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.421240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.451683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.451904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.452292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.486835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.487062] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.593834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.595531] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.596503] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.597351] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.598285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.598546] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.598687] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.600017] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.600895] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.603630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.604159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.604626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.605561] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.606787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.608164] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.608191] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.617077] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.618654] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.618698] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.621335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.622876] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.625437] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.626631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.635251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.638469] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.640775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.648361] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.651400] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.686102] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.703600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.706338] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.710373] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.741173] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.405087] Bluetooth: hci0: command tx timeout [ 152.661081] Bluetooth: hci3: command tx timeout [ 152.725108] Bluetooth: hci6: command tx timeout [ 152.725385] Bluetooth: hci1: command tx timeout [ 152.725586] Bluetooth: hci2: command tx timeout [ 152.728381] Bluetooth: hci4: command tx timeout [ 152.789099] Bluetooth: hci5: command tx timeout [ 152.789319] Bluetooth: hci7: command tx timeout [ 154.471644] Bluetooth: hci0: command tx timeout [ 154.709133] Bluetooth: hci3: command tx timeout [ 154.773217] Bluetooth: hci4: command tx timeout [ 154.773317] Bluetooth: hci2: command tx timeout [ 154.773419] Bluetooth: hci1: command tx timeout [ 154.773499] Bluetooth: hci6: command tx timeout [ 154.837213] Bluetooth: hci7: command tx timeout [ 154.837806] Bluetooth: hci5: command tx timeout [ 156.501292] Bluetooth: hci0: command tx timeout [ 156.757116] Bluetooth: hci3: command tx timeout [ 156.822170] Bluetooth: hci6: command tx timeout [ 156.822535] Bluetooth: hci1: command tx timeout [ 156.822641] Bluetooth: hci2: command tx timeout [ 156.822720] Bluetooth: hci4: command tx timeout [ 156.885239] Bluetooth: hci7: command tx timeout [ 156.885835] Bluetooth: hci5: command tx timeout [ 158.549088] Bluetooth: hci0: command tx timeout [ 158.805331] Bluetooth: hci3: command tx timeout [ 158.870988] Bluetooth: hci4: command tx timeout [ 158.871086] Bluetooth: hci2: command tx timeout [ 158.871193] Bluetooth: hci1: command tx timeout [ 158.871272] Bluetooth: hci6: command tx timeout [ 158.933111] Bluetooth: hci7: command tx timeout [ 158.933718] Bluetooth: hci5: command tx timeout [ 212.623482] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.624688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.627223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.631136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.632303] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.632807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.655806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.661246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.664235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.671114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.672124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.672805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.827853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.864761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.869365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.871252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.872971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.876674] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.877118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.883424] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.883915] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.884291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.886242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.895051] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.902525] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.910794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.916266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.916514] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.931280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.931874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.947376] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.948163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.952667] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.955100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.959237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.973666] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.975426] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.976847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.985655] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.989299] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.992206] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.999113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.012437] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.032473] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.032722] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.042503] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.066345] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.082519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.677103] Bluetooth: hci0: command tx timeout [ 214.742003] Bluetooth: hci1: command tx timeout [ 214.998767] Bluetooth: hci3: command tx timeout [ 214.999408] Bluetooth: hci6: command tx timeout [ 214.999611] Bluetooth: hci2: command tx timeout [ 214.999771] Bluetooth: hci4: command tx timeout [ 215.125880] Bluetooth: hci5: command tx timeout [ 215.126855] Bluetooth: hci7: command tx timeout [ 216.725070] Bluetooth: hci0: command tx timeout [ 216.789124] Bluetooth: hci1: command tx timeout [ 217.045135] Bluetooth: hci4: command tx timeout [ 217.045252] Bluetooth: hci2: command tx timeout [ 217.045835] Bluetooth: hci6: command tx timeout [ 217.045960] Bluetooth: hci3: command tx timeout [ 217.173296] Bluetooth: hci7: command tx timeout [ 217.174139] Bluetooth: hci5: command tx timeout [ 218.775001] Bluetooth: hci0: command tx timeout [ 218.837018] Bluetooth: hci1: command tx timeout [ 219.093317] Bluetooth: hci2: command tx timeout [ 219.094772] Bluetooth: hci3: command tx timeout [ 219.094856] Bluetooth: hci6: command tx timeout [ 219.094979] Bluetooth: hci4: command tx timeout [ 219.221056] Bluetooth: hci5: command tx timeout [ 219.221172] Bluetooth: hci7: command tx timeout [ 220.822069] Bluetooth: hci0: command tx timeout [ 220.885026] Bluetooth: hci1: command tx timeout [ 221.141113] Bluetooth: hci2: command tx timeout [ 221.141778] Bluetooth: hci4: command tx timeout [ 221.142411] Bluetooth: hci6: command tx timeout [ 221.142991] Bluetooth: hci3: command tx timeout [ 221.270197] Bluetooth: hci7: command tx timeout [ 221.270354] Bluetooth: hci5: command tx timeout [ 274.735356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.737111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.738298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.747358] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.749293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.750386] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.798598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.804606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.807248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.815287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.827791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.833273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.926965] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.939579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.942159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.950667] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.953616] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.958182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.050415] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.055434] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.060563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.066353] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.070611] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.072863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.123865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.135378] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.180344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.190460] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.200550] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.200809] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.203416] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.215187] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.217379] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.217524] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.218058] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.243175] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.243456] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.267020] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.267260] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.283066] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.284479] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.284989] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.286542] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.288215] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.288772] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.315504] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.338161] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.342446] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.822629] Bluetooth: hci0: command tx timeout [ 276.885152] Bluetooth: hci1: command tx timeout [ 277.014234] Bluetooth: hci2: command tx timeout [ 277.142817] Bluetooth: hci3: command tx timeout [ 277.334134] Bluetooth: hci4: command tx timeout [ 277.334165] Bluetooth: hci5: command tx timeout [ 277.397096] Bluetooth: hci7: command tx timeout [ 277.397121] Bluetooth: hci6: command tx timeout [ 278.870998] Bluetooth: hci0: command tx timeout [ 278.933066] Bluetooth: hci1: command tx timeout [ 279.063159] Bluetooth: hci2: command tx timeout [ 279.189026] Bluetooth: hci3: command tx timeout [ 279.382963] Bluetooth: hci4: command tx timeout [ 279.383015] Bluetooth: hci5: command tx timeout [ 279.445281] Bluetooth: hci7: command tx timeout [ 279.448005] Bluetooth: hci6: command tx timeout [ 280.918267] Bluetooth: hci0: command tx timeout [ 280.983983] Bluetooth: hci1: command tx timeout [ 281.109018] Bluetooth: hci2: command tx timeout [ 281.237251] Bluetooth: hci3: command tx timeout [ 281.429149] Bluetooth: hci4: command tx timeout [ 281.429348] Bluetooth: hci5: command tx timeout [ 281.493111] Bluetooth: hci6: command tx timeout [ 281.493154] Bluetooth: hci7: command tx timeout [ 282.966974] Bluetooth: hci0: command tx timeout [ 283.029775] Bluetooth: hci1: command tx timeout [ 283.157044] Bluetooth: hci2: command tx timeout [ 283.285345] Bluetooth: hci3: command tx timeout [ 283.477049] Bluetooth: hci5: command tx timeout [ 283.477121] Bluetooth: hci4: command tx timeout [ 283.541088] Bluetooth: hci6: command tx timeout [ 283.541141] Bluetooth: hci7: command tx timeout [ 337.067656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.069117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.073810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.074803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.078206] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.080115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.083689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.083724] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.092387] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.094876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.101198] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.103462] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.179162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.181992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.184880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.188739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.194024] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.196394] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.328640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.332864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.340074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.346825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.347950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.348484] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.367271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.368007] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.401094] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.401979] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.404695] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.404963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.420296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.434718] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.446538] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.452045] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.452269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.456638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.467246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.472459] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.472570] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.479017] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.485436] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.487026] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.599709] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.610622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.626135] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.629757] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.647169] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.656176] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.157082] Bluetooth: hci1: command tx timeout [ 339.157117] Bluetooth: hci0: command tx timeout [ 339.220993] Bluetooth: hci2: command tx timeout [ 339.477140] Bluetooth: hci4: command tx timeout [ 339.541181] Bluetooth: hci3: command tx timeout [ 339.542006] Bluetooth: hci5: command tx timeout [ 339.669107] Bluetooth: hci6: command tx timeout [ 339.732999] Bluetooth: hci7: command tx timeout [ 341.205047] Bluetooth: hci0: command tx timeout [ 341.206043] Bluetooth: hci1: command tx timeout [ 341.269172] Bluetooth: hci2: command tx timeout [ 341.525060] Bluetooth: hci4: command tx timeout [ 341.589996] Bluetooth: hci5: command tx timeout [ 341.590034] Bluetooth: hci3: command tx timeout [ 341.719041] Bluetooth: hci6: command tx timeout [ 341.781021] Bluetooth: hci7: command tx timeout [ 343.253037] Bluetooth: hci1: command tx timeout [ 343.253557] Bluetooth: hci0: command tx timeout [ 343.318059] Bluetooth: hci2: command tx timeout [ 343.572978] Bluetooth: hci4: command tx timeout [ 343.638136] Bluetooth: hci5: command tx timeout [ 343.638734] Bluetooth: hci3: command tx timeout [ 343.766925] Bluetooth: hci6: command tx timeout [ 343.830028] Bluetooth: hci7: command tx timeout [ 345.301629] Bluetooth: hci0: command tx timeout [ 345.301714] Bluetooth: hci1: command tx timeout [ 345.366122] Bluetooth: hci2: command tx timeout [ 345.622846] Bluetooth: hci4: command tx timeout [ 345.684992] Bluetooth: hci3: command tx timeout [ 345.686507] Bluetooth: hci5: command tx timeout [ 345.814222] Bluetooth: hci6: command tx timeout [ 345.878958] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:15:31 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff85c70920 RCX=1ffffffff0c80390 RDX=ffff888034368000 RSI=ffffffff81722767 RDI=ffffffff85c70920 RBP=00007f4d734dd699 RSP=ffff888013f075e8 R8 =0000000000000000 R9 =ffff888013f076a0 R10=00007f4d734dd000 R11=0000000000000003 R12=00007f4d734dd699 R13=0000000000000000 R14=ffff888034368000 R15=ffff88800dda8060 RIP=ffffffff81593c20 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffff634b90 CR3=000000002ba92000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87f1d5d8 RBX=1ffff110012eaf52 RCX=ffffffff814f3dee RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff87f0cf48 RBP=ffff88802f433780 RSP=ffff888009757a68 R8 =0000000000000000 R9 =fffffbfff0fe19e9 R10=ffffffff87f0cf4f R11=0000000000000001 R12=0000000000000007 R13=0000000000000080 R14=ffff88802f4341d0 R15=ffff88800c92ea68 RIP=ffffffff814fbf06 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f95553e2540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fadd3dd3b90 CR3=000000002c4ac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff00000000000000000000000000ff00 XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000