Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:62564' (ECDSA) to the list of known hosts. 2025/01/29 23:59:17 fuzzer started 2025/01/29 23:59:18 dialing manager at localhost:36977 syzkaller login: [ 63.243122] cgroup: Unknown subsys name 'net' [ 63.381597] cgroup: Unknown subsys name 'cpuset' [ 63.418978] cgroup: Unknown subsys name 'rlimit' 2025/01/29 23:59:36 syscalls: 2217 2025/01/29 23:59:36 code coverage: enabled 2025/01/29 23:59:36 comparison tracing: enabled 2025/01/29 23:59:36 extra coverage: enabled 2025/01/29 23:59:36 setuid sandbox: enabled 2025/01/29 23:59:36 namespace sandbox: enabled 2025/01/29 23:59:36 Android sandbox: enabled 2025/01/29 23:59:36 fault injection: enabled 2025/01/29 23:59:36 leak checking: enabled 2025/01/29 23:59:36 net packet injection: enabled 2025/01/29 23:59:36 net device setup: enabled 2025/01/29 23:59:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 23:59:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 23:59:36 USB emulation: enabled 2025/01/29 23:59:36 hci packet injection: enabled 2025/01/29 23:59:36 wifi device emulation: enabled 2025/01/29 23:59:36 802.15.4 emulation: enabled 2025/01/29 23:59:36 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/29 23:59:36 fetching corpus: 0, signal 0/2379 (executing program) 2025/01/29 23:59:36 fetching corpus: 0, signal 0/2379 (executing program) 2025/01/29 23:59:39 starting 8 fuzzer processes 23:59:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20006001) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x92, 0x20, 0x12, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, @remote, 0x8, 0x20, 0xff, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x6, 0xfffffff8, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x64, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @remote, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x20, 0x4, 0xfffffff8, 0x8, @mcast1, @private0, 0x1, 0x10, 0x708, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x29, 0x1f, 0x0, 0x6, 0x40, @mcast2, @mcast2, 0x7800, 0x8, 0x80000000, 0x4}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x258, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x258}, 0x1, 0x0, 0x0, 0xc801}, 0x24000044) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r1, 0x8, 0x2, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4c810) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e0bc339f970624fc80db5c6e4a91656f"}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004080}, 0x10000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) sync_file_range(r3, 0x4, 0x4, 0x0) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x250000, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r11, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x736d1d82fc24e1b0}, 0x4004080) 23:59:39 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000040)={0x0, 0x100000000, 0x7, 0x1}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000440)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x484000, 0x0) move_mount(r0, &(0x7f0000000480)='./file0\x00', r1, &(0x7f0000000500)='./file0\x00', 0x4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x120, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6db8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x800) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000740)=0x1f) r3 = accept4$inet(r1, &(0x7f0000000780), &(0x7f00000007c0)=0x10, 0x40000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000800)) fsetxattr(r1, &(0x7f0000000840)=@known='user.incfs.metadata\x00', &(0x7f0000000880)='\x00', 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000900)) r5 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f0000003cc0)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003d00), 0x442c00, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000003d40)) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000003dc0)={'nat\x00', 0x0, 0x0, 0x0, [0x284000, 0xab, 0x793, 0xfffffffffffffffc, 0x2, 0x80], 0x3, &(0x7f0000003d80), 0x0, [{}, {}, {}]}, 0xa8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000003e80)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000003ec0), &(0x7f0000003f00), 0x2, 0x1) 23:59:39 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xffff, 0x1f, 0x62, 0xf094}, {0x2, 0x1f, 0x8, 0xa81}]}, 0x10) quotactl(0xff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)="2d9722ec1e38340a50bd9fc6493da3eb9143f59273ae5e94e5c983f5a492a42d8af33549472aec126c508aa5242647389a3dce57dc0fb5afd9373678566965f57f872f83f23360d1278ab9b4535e33eb2fe85280058f2930d6423fb45f8d0e10053aa5e6b1517b279d9345fea67c039d158b652b9fee583e5c7be1bc651b4b4b35d673c38314188e52854e75b758773c22f793b7dc2c575c4d8e6ec4aa9a0601b1ca") r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@sha1={0x1, "b50885514f3983da96cf3e9b88a28a835f39137f"}, 0x15, 0x1) flock(r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x3686}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x3, 0x0) getsockname$unix(r0, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000004c0)={'veth1_to_bond\x00', &(0x7f0000000440)=@ethtool_coalesce={0x1, 0x1, 0x100, 0x0, 0x10001, 0x615fc414, 0x3, 0x8, 0xff, 0x7, 0xcfa, 0x8001, 0x400, 0xf2c7, 0x8, 0xb0, 0x1a, 0xa8f, 0xbb, 0x80, 0x2, 0x3, 0x38}}) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000500)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {r5}}, './file0\x00'}) r8 = accept4$inet(r7, &(0x7f0000000580)={0x2, 0x0, @local}, &(0x7f00000005c0)=0x10, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0/file0\x00'}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000640)=0x1, &(0x7f0000000680)=0x2) accept4(0xffffffffffffffff, &(0x7f00000006c0)=@in6, &(0x7f0000000740)=0x80, 0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0/file0\x00'}) [ 83.691215] audit: type=1400 audit(1738195179.267:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:59:39 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt(r1, 0x7, 0x6, &(0x7f0000000080)="594a76c5103722d489221656a74304c44d6ce10c7c66dd92f488ae0f864ef1c148f88f26cebc0c6a2c773f979a", 0x2d) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f00000013c0)={0x0, 0x1ff, 0x6, 0x4}, 0x10) r3 = fcntl$dupfd(r0, 0x406, r1) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x84, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x38, 0x4, "84660ee302bb2ff99e4a09295087944012e09707251767f70667077077c174950d42b0dcf17156b4c9617599394be17c10bda0bf"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x2004c800) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001580), 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x60, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7b}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe0}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008000) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000001700)={0x9, 0x7e, "44071994437ff5b9998c5a3ba9bbcfdeba901bb68a8ad1dae25f834b5e1480e381adbb8fd0cb5f3222733a1799e388c1aae18f57b74fd1b33dae9c60152a727c3619278d576c345ea91ddb2acc8ffd052b72fad9f9fe8311f7ac692e6e08d0f6a93e3415a0d383b6abb39658e22aa0eb9271b979df5c5530b48e86f2338c"}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000017c0), r5) prctl$PR_GET_TSC(0x19, &(0x7f0000001800)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000001a40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001880)={0x14c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_SRC={0xa4, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x24040007) pipe2(&(0x7f0000001a80)={0xffffffffffffffff}, 0x80000) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000001ac0)=0x80, 0x4) fsetxattr$security_evm(r2, &(0x7f0000001b00), &(0x7f0000001b40)=@v1={0x2, "c85b15d5b53853827388752a8e94615d6db6"}, 0x13, 0x1) timerfd_create(0x6, 0x80800) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001b80)=""/55) 23:59:39 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x2, 0x3f, 0x5, 0x0, 0xe}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x828e9dd90a3ea696, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/78, 0x4e}], 0x4, 0x5, 0xb1, 0x4) write$snapshot(r1, &(0x7f0000000380)="37ceaa97697ee22dc4ae3eb8598a9eb60b0d3d8f2b0a2fa40d3dcd96f24c835bca224a28cedef81d14", 0x29) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000003c0)) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) ioctl$FIONCLEX(r0, 0x5450) r2 = openat$incfs(r0, &(0x7f0000000400)='.pending_reads\x00', 0x18040, 0x6) fsetxattr$security_capability(r2, &(0x7f0000000440), &(0x7f0000000480)=@v2={0x2000000, [{0x9}, {0x95e, 0x3}]}, 0x14, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x76}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x84) r3 = syz_io_uring_complete(0x0) fsync(r3) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f00000005c0)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000600)={0x0, 0x4, 0x4}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000640)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/module/tcp_cubic', 0x4000, 0x24) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000700)=[0xffffffffffffffff, r4, 0xffffffffffffffff, r1], 0x4) 23:59:39 executing program 5: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffa}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7e9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0xf993892f16a31489, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x4000800) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_LABELS_MASK={0x14, 0x17, [0x6, 0x9, 0xffffffff, 0x1]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_LABELS_MASK={0x8, 0x17, [0xe67af7a4]}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}]}, 0x94}}, 0x8041) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r3, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x582d518ff9fc7cba}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x2c0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_genetlink_get_family_id$fou(&(0x7f0000000580), r0) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f00000005c0)) fcntl$getflags(r2, 0x401) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x18000, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$VT_DISALLOCATE(r2, 0x5608) r5 = open_tree(r0, &(0x7f0000000640)='./file0\x00', 0x9100) sendmsg$nl_generic(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb8, 0x14, 0x400, 0x70bd2b, 0x25dfdbfb, {0x8}, [@generic="5e02ba2887f02cf3f8f273489e09afb6ba1086275172e5f2dca922cf0becc71ed04d3be32471afbb8331a1f056b6642ef9f711b344399cd5e93bc1b6756902d6bb919bbcef870ca42f2d23a93bbfabd4a907eebcab6a6d1baf9f31243ea60aa10fc4f47fec443b7e6a532653bbe56428b2cda658ce748b3c52defabe540177dc19abb74ba38e449478085d620ef5d5386172a68e00e9675b8e787191", @typed={0x8, 0x1d, 0x0, 0x0, @u32=0x800}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4840}, 0x20000010) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xec, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xb4, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8f5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x24}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xbf}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xf390}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x29}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4010) ioctl$CDROM_SELECT_DISK(r5, 0x5322, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xfff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2fc}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x73}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040004}, 0x80480d0) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x17fff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}]}, 0x44}}, 0x40000) 23:59:39 executing program 6: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x20, 0x1, 0x2000000, 0x10001, 0x0, 0xffffffff, 0x2, 0x4, 0xff, 0xe891, 0xb8, 0x4, 0x4}}) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000001000)={0x14, 0x69, 0x1, {0x20, 0x1, 0x1}}, 0x14) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000001040)={0xfff, 0x3}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000010c0)={0x1, &(0x7f0000001080)=[{0x3, 0x80, 0x20, 0x75a8}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001140)={0x2, &(0x7f0000001100)=[{0x3ff, 0x3, 0x0, 0x9d1}, {0x20, 0x9, 0x39, 0x800}]}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x3000)=nil) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10010, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000001180), &(0x7f00000011c0)=@v3={0x3000000, [{0xfffff001, 0x5}, {0x401, 0x4}], 0xee00}, 0x18, 0x2) write$char_usb(0xffffffffffffffff, &(0x7f0000001200)="e9a05f93cd8a4a3dba1e2c682f6c61f29b2fcde542a21b937033ac50cf8c328f9dacdeb8d0d7e1bb7486470639874cd510ee2c5ec364a357e099e363530079621fdfc66785846998d0", 0x49) pipe2(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLOCK(r0, &(0x7f00000012c0)={0x8, 0x35, 0x1}, 0x8) r2 = open(&(0x7f0000001300)='./file0\x00', 0x311600, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000001340)={0x401, 0x100, 0x1, 'queue0\x00'}) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000001400), 0x4) io_uring_enter(r1, 0x72eb, 0x2b7b, 0x1, &(0x7f0000001440)={[0x100000000]}, 0x8) ioctl$KDSETLED(r1, 0x4b32, 0x3) 23:59:39 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x800004, 0x100010, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000000)={{r0}, 0x0, 0x8, @unused=[0x7, 0x7fe0, 0x8, 0x5], @subvolid=0xffff}) pipe(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000001040)=0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000001080)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0\x00'}) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000080) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x769a, &(0x7f00000011c0)={0x0, 0x37da, 0x2, 0x3, 0x16a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001240), &(0x7f0000001280)) r5 = syz_open_dev$hidraw(&(0x7f00000012c0), 0x1, 0x10200) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000001300)={0x0, 0x1ff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001340)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001380)=[r4, r6, r1, r7, r3, r4], 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000013c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000001400)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001440)='net/ip6_tables_targets\x00') sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xd8, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x9580c570a77278fb) connect$netlink(r2, &(0x7f0000001640)=@unspec, 0xc) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) [ 85.272587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.276382] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.279063] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.288319] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.292342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.296679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.306673] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.310948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.314199] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.327638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.330022] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.332021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.347590] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.352740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.365850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.370960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.381058] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.381166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.412960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.416914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.419036] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.423068] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.428017] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.431897] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.433530] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.433676] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.439002] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.440364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.443859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.452650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.454613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.457263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.459225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.467604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.470784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.475378] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.477845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.481954] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.486050] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.486261] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.504350] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.507002] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.507057] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.511050] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.523903] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.525870] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.527977] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.529767] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.413552] Bluetooth: hci1: command tx timeout [ 87.414179] Bluetooth: hci0: command tx timeout [ 87.539617] Bluetooth: hci2: command tx timeout [ 87.603780] Bluetooth: hci4: command tx timeout [ 87.603822] Bluetooth: hci5: command tx timeout [ 87.604395] Bluetooth: hci7: command tx timeout [ 87.606172] Bluetooth: hci3: command tx timeout [ 87.668619] Bluetooth: hci6: command tx timeout [ 89.460620] Bluetooth: hci0: command tx timeout [ 89.461692] Bluetooth: hci1: command tx timeout [ 89.587588] Bluetooth: hci2: command tx timeout [ 89.652574] Bluetooth: hci3: command tx timeout [ 89.653366] Bluetooth: hci4: command tx timeout [ 89.654235] Bluetooth: hci5: command tx timeout [ 89.655105] Bluetooth: hci7: command tx timeout [ 89.715649] Bluetooth: hci6: command tx timeout [ 91.509629] Bluetooth: hci1: command tx timeout [ 91.509661] Bluetooth: hci0: command tx timeout [ 91.635659] Bluetooth: hci2: command tx timeout [ 91.699610] Bluetooth: hci3: command tx timeout [ 91.699657] Bluetooth: hci7: command tx timeout [ 91.700050] Bluetooth: hci4: command tx timeout [ 91.700782] Bluetooth: hci5: command tx timeout [ 91.764062] Bluetooth: hci6: command tx timeout [ 93.555533] Bluetooth: hci0: command tx timeout [ 93.556151] Bluetooth: hci1: command tx timeout [ 93.684503] Bluetooth: hci2: command tx timeout [ 93.748518] Bluetooth: hci4: command tx timeout [ 93.749092] Bluetooth: hci5: command tx timeout [ 93.749677] Bluetooth: hci7: command tx timeout [ 93.750202] Bluetooth: hci3: command tx timeout [ 93.811600] Bluetooth: hci6: command tx timeout [ 147.397121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.401279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.404378] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.410530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.415721] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.417919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.577656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.580333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.582794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.587670] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.590355] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.592572] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.689184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.690688] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.695612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.702202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.715694] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.716328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.733168] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.734261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.735199] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.751967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.752217] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.765815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.766601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.768835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.775532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.775622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.780830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.784545] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.786319] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.786665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.790095] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.791053] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.792059] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.796382] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.797836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.800963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.805826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.811684] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.812999] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.815037] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.816323] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.817539] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.818984] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.820113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.827617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.828579] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.492508] Bluetooth: hci0: command tx timeout [ 149.619514] Bluetooth: hci1: command tx timeout [ 149.811547] Bluetooth: hci6: command tx timeout [ 149.875517] Bluetooth: hci4: command tx timeout [ 150.004543] Bluetooth: hci2: command tx timeout [ 150.067501] Bluetooth: hci5: command tx timeout [ 150.068629] Bluetooth: hci3: command tx timeout [ 150.388632] Bluetooth: hci7: command tx timeout [ 151.541464] Bluetooth: hci0: command tx timeout [ 151.668663] Bluetooth: hci1: command tx timeout [ 151.860512] Bluetooth: hci6: command tx timeout [ 151.924529] Bluetooth: hci4: command tx timeout [ 152.053465] Bluetooth: hci2: command tx timeout [ 152.116689] Bluetooth: hci3: command tx timeout [ 152.117276] Bluetooth: hci5: command tx timeout [ 152.435501] Bluetooth: hci7: command tx timeout [ 153.587495] Bluetooth: hci0: command tx timeout [ 153.715669] Bluetooth: hci1: command tx timeout [ 153.908515] Bluetooth: hci6: command tx timeout [ 153.972450] Bluetooth: hci4: command tx timeout [ 154.099605] Bluetooth: hci2: command tx timeout [ 154.164645] Bluetooth: hci5: command tx timeout [ 154.165130] Bluetooth: hci3: command tx timeout [ 154.483664] Bluetooth: hci7: command tx timeout [ 155.637098] Bluetooth: hci0: command tx timeout [ 155.764641] Bluetooth: hci1: command tx timeout [ 155.955711] Bluetooth: hci6: command tx timeout [ 156.020482] Bluetooth: hci4: command tx timeout [ 156.148482] Bluetooth: hci2: command tx timeout [ 156.211509] Bluetooth: hci3: command tx timeout [ 156.212022] Bluetooth: hci5: command tx timeout [ 156.532707] Bluetooth: hci7: command tx timeout [ 209.535935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.538859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.542771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.546500] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.549019] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.550807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.665168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.671528] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.674936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.684040] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.687048] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.689139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.722328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.726904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.730152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.737991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.742621] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.744818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.800351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.803284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.805334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.810644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.813737] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.815784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.876369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.881799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.884357] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.900871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.906851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.913286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.006850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.032553] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.058740] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.063863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.068072] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.070186] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.075074] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.075803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.105746] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.126685] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.138877] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.140037] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.188245] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.214669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.236053] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.261745] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.268668] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.276727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.571562] Bluetooth: hci0: command tx timeout [ 211.763560] Bluetooth: hci1: command tx timeout [ 211.763657] Bluetooth: hci2: command tx timeout [ 211.827579] Bluetooth: hci3: command tx timeout [ 212.019961] Bluetooth: hci4: command tx timeout [ 212.148611] Bluetooth: hci5: command tx timeout [ 212.213699] Bluetooth: hci6: command tx timeout [ 212.339690] Bluetooth: hci7: command tx timeout [ 213.619645] Bluetooth: hci0: command tx timeout [ 213.811557] Bluetooth: hci1: command tx timeout [ 213.811569] Bluetooth: hci2: command tx timeout [ 213.876484] Bluetooth: hci3: command tx timeout [ 214.068511] Bluetooth: hci4: command tx timeout [ 214.196514] Bluetooth: hci5: command tx timeout [ 214.261441] Bluetooth: hci6: command tx timeout [ 214.388606] Bluetooth: hci7: command tx timeout [ 215.667482] Bluetooth: hci0: command tx timeout [ 215.859533] Bluetooth: hci2: command tx timeout [ 215.862686] Bluetooth: hci1: command tx timeout [ 215.924509] Bluetooth: hci3: command tx timeout [ 216.115595] Bluetooth: hci4: command tx timeout [ 216.244538] Bluetooth: hci5: command tx timeout [ 216.308611] Bluetooth: hci6: command tx timeout [ 216.436553] Bluetooth: hci7: command tx timeout [ 217.716457] Bluetooth: hci0: command tx timeout [ 217.908500] Bluetooth: hci1: command tx timeout [ 217.908537] Bluetooth: hci2: command tx timeout [ 217.972491] Bluetooth: hci3: command tx timeout [ 218.164501] Bluetooth: hci4: command tx timeout [ 218.295112] Bluetooth: hci5: command tx timeout [ 218.356707] Bluetooth: hci6: command tx timeout [ 218.484740] Bluetooth: hci7: command tx timeout [ 271.620176] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.624882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.628862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.631697] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.634063] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.638086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.645295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.647926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.649087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.650818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.652704] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.655095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.815896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.818659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.824972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.838231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.843660] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.845742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.970986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.981748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.984855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.993899] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.014307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.017862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.020371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.028337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.034025] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.038933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.047122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.055786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.070317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.086529] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.089158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.092873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.126315] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.130490] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.132264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.143090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.146880] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.170100] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.181230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.187271] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.189935] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.210603] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.254080] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.327583] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.342803] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.351897] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.715622] Bluetooth: hci0: command tx timeout [ 273.717531] Bluetooth: hci1: command tx timeout [ 273.907480] Bluetooth: hci2: command tx timeout [ 274.099557] Bluetooth: hci3: command tx timeout [ 274.163521] Bluetooth: hci4: command tx timeout [ 274.292543] Bluetooth: hci6: command tx timeout [ 274.292613] Bluetooth: hci5: command tx timeout [ 274.484853] Bluetooth: hci7: command tx timeout [ 275.766460] Bluetooth: hci1: command tx timeout [ 275.766543] Bluetooth: hci0: command tx timeout [ 275.955644] Bluetooth: hci2: command tx timeout [ 276.147558] Bluetooth: hci3: command tx timeout [ 276.212739] Bluetooth: hci4: command tx timeout [ 276.339529] Bluetooth: hci6: command tx timeout [ 276.339697] Bluetooth: hci5: command tx timeout [ 276.531647] Bluetooth: hci7: command tx timeout [ 277.811556] Bluetooth: hci1: command tx timeout [ 277.811618] Bluetooth: hci0: command tx timeout [ 278.003856] Bluetooth: hci2: command tx timeout [ 278.195601] Bluetooth: hci3: command tx timeout [ 278.259526] Bluetooth: hci4: command tx timeout [ 278.388646] Bluetooth: hci5: command tx timeout [ 278.388683] Bluetooth: hci6: command tx timeout [ 278.579512] Bluetooth: hci7: command tx timeout [ 279.860455] Bluetooth: hci1: command tx timeout [ 279.860956] Bluetooth: hci0: command tx timeout [ 280.051589] Bluetooth: hci2: command tx timeout [ 280.244509] Bluetooth: hci3: command tx timeout [ 280.309422] Bluetooth: hci4: command tx timeout [ 280.437449] Bluetooth: hci6: command tx timeout [ 280.437912] Bluetooth: hci5: command tx timeout [ 280.627518] Bluetooth: hci7: command tx timeout [ 333.831744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.836201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.842911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.853945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.862618] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.865599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.278847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.285650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.287836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.290089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.291732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.294199] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.298762] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.307530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.308855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.312720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.318033] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.322759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.355002] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.363644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.380672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.400134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.415787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.419297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.428842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.435695] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.440211] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.449839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.453355] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.455063] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.457117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.459040] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.472093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.475521] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.475857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.480864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.481173] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.500026] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.504627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.516825] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.519358] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.521726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.525979] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.536752] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.552740] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.561282] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.572798] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.588950] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.923486] Bluetooth: hci0: command tx timeout [ 336.372460] Bluetooth: hci1: command tx timeout [ 336.436485] Bluetooth: hci2: command tx timeout [ 336.499864] Bluetooth: hci3: command tx timeout [ 336.563496] Bluetooth: hci4: command tx timeout [ 336.627480] Bluetooth: hci7: command tx timeout [ 336.629458] Bluetooth: hci5: command tx timeout [ 336.630006] Bluetooth: hci6: command tx timeout [ 337.973431] Bluetooth: hci0: command tx timeout [ 338.419501] Bluetooth: hci1: command tx timeout [ 338.485442] Bluetooth: hci2: command tx timeout [ 338.547593] Bluetooth: hci3: command tx timeout [ 338.611617] Bluetooth: hci4: command tx timeout [ 338.676110] Bluetooth: hci6: command tx timeout [ 338.676642] Bluetooth: hci5: command tx timeout [ 338.677053] Bluetooth: hci7: command tx timeout [ 340.021684] Bluetooth: hci0: command tx timeout [ 340.467529] Bluetooth: hci1: command tx timeout [ 340.532559] Bluetooth: hci2: command tx timeout [ 340.596630] Bluetooth: hci3: command tx timeout [ 340.660621] Bluetooth: hci4: command tx timeout [ 340.723480] Bluetooth: hci5: command tx timeout [ 340.723997] Bluetooth: hci6: command tx timeout [ 340.724629] Bluetooth: hci7: command tx timeout [ 342.067447] Bluetooth: hci0: command tx timeout [ 342.515593] Bluetooth: hci1: command tx timeout [ 342.580559] Bluetooth: hci2: command tx timeout [ 342.644601] Bluetooth: hci3: command tx timeout [ 342.709576] Bluetooth: hci4: command tx timeout [ 342.773427] Bluetooth: hci6: command tx timeout [ 342.774055] Bluetooth: hci5: command tx timeout [ 342.774694] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:04:47 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffea000012e600 RCX=ffffffff819eed55 RDX=fffff94000025cc7 RSI=0000000000000004 RDI=ffffea000012e630 RBP=ffffea000012e600 RSP=ffff88803390fad0 R8 =0000000000000001 R9 =fffff94000025cc6 R10=ffffea000012e633 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=ffffea000012e618 RIP=ffffffff84ab0f80 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7f0ba87540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7f0bad6b90 CR3=0000000028038000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800ea10001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88800ea0f601 RSI=ffff88800ea0f5f8 RDI=ffff88806cf09a50 RBP=ffff88800ea0f5f8 RSP=ffff88806cf099a8 R8 =0000000000000001 R9 =ffff88806cf09a80 R10=000000000003ab5c R11=0000000000020a6e R12=0000000000000008 R13=ffff88800ea08000 R14=ffff88800ea0f5f8 R15=ffff88806cf09a40 RIP=ffffffff81348d4e RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557748175080 CR3=0000000038576000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000