Warning: Permanently added '[localhost]:19766' (ECDSA) to the list of known hosts. 2025/04/24 09:19:53 fuzzer started 2025/04/24 09:19:53 dialing manager at localhost:37747 syzkaller login: [ 101.534019] cgroup: Unknown subsys name 'net' [ 101.702813] cgroup: Unknown subsys name 'cpuset' [ 101.727945] cgroup: Unknown subsys name 'rlimit' 2025/04/24 09:20:11 syscalls: 2214 2025/04/24 09:20:11 code coverage: enabled 2025/04/24 09:20:11 comparison tracing: enabled 2025/04/24 09:20:11 extra coverage: enabled 2025/04/24 09:20:11 setuid sandbox: enabled 2025/04/24 09:20:11 namespace sandbox: enabled 2025/04/24 09:20:11 Android sandbox: enabled 2025/04/24 09:20:11 fault injection: enabled 2025/04/24 09:20:11 leak checking: enabled 2025/04/24 09:20:11 net packet injection: enabled 2025/04/24 09:20:11 net device setup: enabled 2025/04/24 09:20:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/24 09:20:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/24 09:20:11 USB emulation: enabled 2025/04/24 09:20:11 hci packet injection: enabled 2025/04/24 09:20:11 wifi device emulation: enabled 2025/04/24 09:20:11 802.15.4 emulation: enabled 2025/04/24 09:20:11 fetching corpus: 0, signal 0/0 (executing program) 2025/04/24 09:20:13 starting 8 fuzzer processes 09:20:13 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes128, 0x0, @desc1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) r1 = openat$incfs(r0, &(0x7f0000000500)='.pending_reads\x00', 0xde2f4e1cab97650c, 0x20) renameat(r0, &(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000540)='./file0\x00') r2 = dup(r1) r3 = openat2(r2, &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)={0x4000, 0x70, 0x14}, 0x18) fsmount(r0, 0x0, 0x73) r4 = dup(r3) write$P9_RFLUSH(r4, &(0x7f0000000600)={0x7, 0x6d, 0x2}, 0x7) r5 = openat$incfs(r2, &(0x7f0000000640)='.log\x00', 0x147000, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/31, 0x1f, 0x0, &(0x7f00000006c0)=""/79, 0x4f}, &(0x7f0000000780)=0x40) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x40800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f00000008c0)) getdents64(r5, &(0x7f0000000900)=""/17, 0x11) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x2080, 0x0) r8 = syz_mount_image$tmpfs(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x7fffffff, 0x8, &(0x7f0000000d80)=[{&(0x7f0000000a40)="b17b2faaea878b3e3bbe30bdec3259608d49979b8623b830cd15df3ef679727635e728eaf135", 0x26, 0x8}, {&(0x7f0000000a80)="353212bc936cd8ba02c52cd47ee7069d0464f7be795e1eb3e52a5d1a5b39ff170121ba7dc6", 0x25, 0x9}, {&(0x7f0000000ac0)="524cd4273266371a233af3cfab02a8216485b278b920814c9ddbbf44946c8d8a724333b58b44c5a143372dd17adf5138438999d180c96f5247b336fe583f", 0x3e, 0x80000001}, {&(0x7f0000000b00)="237552c4c49a67b42bdebd32cf8c90b68213185b6fd441469fcaa6b5ca77f8d9f3306658c927fffe0883639db3d748158d43109141311c10d20472d73c2dcec2a8a5d92f07976483ad9731a5180ff0695739fc358e23e3d4bf22dfbad9da32dbc3d0a8d43693149b8ecca6bf81e1c89c6b1317eb1559a103c5ad5e2e348e2f2ea83ee199a817c5ed9102d9fc274b68b2a7e612294394ffca", 0x98, 0x4}, {&(0x7f0000000bc0)="1592d995da723beaa6953a629181df1108b1f61981991b44fe8693c914fb", 0x1e, 0x7fc0000000}, {&(0x7f0000000c00)="f1b57c4f7c279dd2d53749647d892b2a815b0823f55390b0b95db126592a4bc049c845097d684ecedfdae71ac8a2d15ef69c717382e26b98ba9e1df70cdf93e7f872a48f6b53243a983d557aeee1d80dc4784a4c7352bd504fa1c68f461668912cd7a08ea51bb46afe75234ebaef8f8fa5648d7f5ff1ee97bccb778fc350e95b26d6ccafd8582e1c75f66a1cbde5ac712e105a4852697717662f631ca9", 0x9d}, {&(0x7f0000000cc0)="e3115295c9d3cc561de350271c2a2473e5834e22d58a4ea06b53e50b2820a20cb4f4e5488bc7d5f3b9897b24aec258c46cdc37f545dfc52c6bb84c336157811bbdf50a72613b611b220172960e610c9a5eee05c384e0a10308255a80bdb651b547544443923534f49c1602bdb2d0f372c8ef9dd2ba", 0x75, 0x799}, {&(0x7f0000000d40), 0x0, 0x9}], 0x800400, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31, 0x33, 0x25, 0x65, 0x34, 0x6d, 0x38]}}], [{@dont_appraise}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@uid_lt={'uid<', 0xee00}}, {@dont_measure}, {@fowner_gt={'fowner>', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) linkat(r7, &(0x7f0000000980)='./file1\x00', r8, &(0x7f0000000f00)='./file1\x00', 0x1000) 09:20:14 executing program 1: sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="388edb46e68c0e0bd015408a5c9f8a91"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f0dec7f8b55debb6"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c24b0f914d669afec5186c14f393d3e0476d40d40c5367b0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="72205fba24af5612cb768b6778df4f2bf5dacf1babddf59f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7781793f0b2ed26c8baec3f726e275fd"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffd}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4840}, 0x40440c0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_io_uring_setup(0x9, &(0x7f0000000440)={0x0, 0xa794, 0x8, 0x3, 0x2d6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x60, 0xb8000000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x80, 0x8000, 0x8, 0x7}}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000800)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r3, 0x80, &(0x7f0000000780)=@can={0x1d, r4}}, 0x40000000) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000840)={0x3, 0x55, "4151782a7a22e84841fe0d0691b71ce098ee8a85f2ed5958d8d3024fdc805a1615674bc62f06da3f39ea9adbac882c774421b8a20b081398f1893bfea2dadebfc35fb9a84c1597f89c67e78f7acdbe25ce116f1b29"}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000008c0)=0x564ef106, 0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x51}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r5 = memfd_create(&(0x7f0000000a00)='\x00', 0x2) fcntl$lock(r5, 0x25, &(0x7f0000000a40)={0x2, 0x4, 0x1899, 0x3ff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000ac0)={'veth0\x00', &(0x7f0000000a80)=@ethtool_modinfo={0x42, 0x81a3, 0x10001}}) r6 = creat(&(0x7f0000000b00)='./file0\x00', 0xeb) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40004010) getsockopt$sock_buf(r6, 0x1, 0x1f, &(0x7f0000000c80)=""/198, &(0x7f0000000d80)=0xc6) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x130, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xde, 0x4, "a927f3bb42e7fbee2e8ba32468dcab83d0b9540c4bcfd81943cae163d30ed52514a1f927e4b5bc94aafb2fa4a7eeea21303840d5cb3f6dd2ff5ae812117e87ae591c74e69ff26144f87cc7fd08fe92b2f123c81d60912e13dc964abdcb1786274bf186802601e88573541d00eca320d741c3826d379c6c9d937784f235451e2eb2b0ae2dd5100db8adf57736abd38dc2cc2a02ff48392ef97f5974cbed6be466565678c97b45597858109ef5a43906c814d0a881d5d3c25bc95a37e238ce3108b0956e774ad5e6dae83d9abcc477ae4c9c082b048a43868645bd"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3f}]}, 0x130}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x13c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5a3295946dc95b69"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5a72fd2c445e5202ca6fa4b01f13a6e7fb75b169e3cad14a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a127c3391c0a95e9db6f2d0080ec4e754ae09ae1751a89d6e0fbd03558a8d05b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8a1ef9e1ad8aec49"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a929037e1c9a91c92d2dc4e6508b362da883a61076ce717a04cef4d4f1c2ecc6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "061cb062a53b71f0"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "483b6504515db882"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="da47539191c90547da3a135911f3cedb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84fca2042da3be59"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x65}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3304d716d4527f86dd1386a1e03ca175"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "64ba8ad97ddf8017"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="90d5e85fe871266948b0c3cbdde2c810"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 09:20:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/198) lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'L+', 0x80000001}, 0x16, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x7f, 0x1}]}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000280)) readlinkat(r0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=""/240, 0xf0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000400)={0x400, 0x78, 0x80}) getresuid(&(0x7f0000000540), &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000ac0)=0xe8) mount$9p_rdma(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x40, &(0x7f0000000b00)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@aname={'aname', 0x3d, 'L+'}}], [{@audit}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@uid_gt={'uid>', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@obj_type}, {@subj_role={'subj_role', 0x3d, '\\'}}]}}) utime(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x1, 0x7}) setreuid(r2, r3) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000c80)={0x5, 0x7ff, 0x0, 0x3, 0x19, "44f533ea1eecbf2a85d7dc161bcd4a7df3247d"}) recvfrom$unix(r0, &(0x7f0000000cc0)=""/4096, 0x1000, 0x40, &(0x7f0000001cc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r4 = fsopen(&(0x7f0000001d40)='proc\x00', 0x1) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000001d80)={{r0}, {@void, @max}}) r5 = syz_open_dev$hidraw(&(0x7f0000001dc0), 0x3ff, 0x80) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000001e00)={0x0, 0x9}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000002e00), 0x8, 0x80000) utimensat(r6, &(0x7f0000002e40)='./file1\x00', &(0x7f0000002ec0)={{0x77359400}}, 0x0) 09:20:14 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x4100) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @multicast2}, 0x268, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffffffffffffffa, 0x18, 0x7}) recvmmsg(r0, &(0x7f0000003680)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/103, 0x67}, {&(0x7f00000001c0)=""/130, 0x82}, {&(0x7f0000000280)=""/117, 0x75}, {&(0x7f0000000300)=""/7, 0x7}, {&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/25, 0x19}, {&(0x7f0000000540)=""/107, 0x6b}], 0x8, &(0x7f0000000640)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001640)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002940)=[{&(0x7f00000016c0)=""/251, 0xfb}, {&(0x7f00000017c0)=""/81, 0x51}, {&(0x7f0000001840)=""/4, 0x4}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/160, 0xa0}], 0x5, &(0x7f00000029c0)=""/58, 0x3a}, 0x9}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a80)=""/146, 0x92}, {&(0x7f0000002b40)=""/255, 0xff}, {&(0x7f0000002c40)=""/22, 0x16}], 0x3, &(0x7f0000002cc0)=""/245, 0xf5}}, {{&(0x7f0000002dc0)=@phonet, 0x80, &(0x7f0000003000)=[{&(0x7f0000002e40)=""/158, 0x9e}, {&(0x7f0000002f00)=""/207, 0xcf}], 0x2, &(0x7f0000003040)=""/25, 0x19}, 0x8}, {{&(0x7f0000003080)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003100)=""/219, 0xdb}, {&(0x7f0000003200)=""/223, 0xdf}, {&(0x7f0000003300)=""/67, 0x43}, {&(0x7f0000003380)=""/198, 0xc6}, {&(0x7f0000003480)=""/3, 0x3}, {&(0x7f00000034c0)=""/200, 0xc8}], 0x6, &(0x7f0000003640)=""/2, 0x2}, 0x3}], 0x5, 0x0, &(0x7f00000037c0)={0x77359400}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000003800)) pipe(&(0x7f0000003a00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003a40), 0x30080, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003a80)={0x0}, &(0x7f0000003ac0)=0xc) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000003b00)=0x0) sendmmsg$unix(r1, &(0x7f0000003bc0)=[{{&(0x7f0000003840)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000038c0)="0b6109000cebe16f310289ddc07fa83e20504b835517a5f54e6da8e6bcd6253bf24b529a7541a8b0e81b2c13d2af50d28ae00d2b3ad94db4760a253366a6c8afb097fd216712992ee934c077e827190914bdcd1c33b8b6d50d2c462d396358bad22335266ae659b6aaa5c658a3ef256cea13e631cbdd9bd346b85b57782bbb3669a96a0b2065eb416f12079821d6419ba186615cb445fe64e0824b", 0x9b}, {&(0x7f0000003980)="675460cd8b5035a94558e3a1341a649842c110746b2ed8d0bb8428759e3ad8", 0x1f}], 0x2, &(0x7f0000003b40)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x70, 0x80000}}], 0x1, 0x1) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000003c40), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000003d00)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x34, r7, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1d, 0x4, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x8044) process_vm_writev(r5, &(0x7f0000004e00)=[{&(0x7f0000003d40)=""/21, 0x15}, {&(0x7f0000003d80)=""/122, 0x7a}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x3, &(0x7f0000005340)=[{&(0x7f0000004e40)=""/78, 0x4e}, {&(0x7f0000004ec0)=""/255, 0xff}, {&(0x7f0000004fc0)=""/130, 0x82}, {&(0x7f0000005080)=""/1, 0x1}, {&(0x7f00000050c0)=""/210, 0xd2}, {&(0x7f00000051c0)=""/81, 0x51}, {&(0x7f0000005240)=""/95, 0x5f}, {&(0x7f00000052c0)=""/115, 0x73}], 0x8, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000053c0)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000005400), 0x8000, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000005480), r1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000005540)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005500)={&(0x7f00000054c0)={0x1c, r8, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004805}, 0x4080010) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000005580), 0x80000, 0x0) write$P9_RWRITE(r9, &(0x7f00000055c0)={0xb, 0x77, 0x1, 0x10}, 0xb) llistxattr(&(0x7f0000005600)='./file0\x00', &(0x7f0000005640)=""/163, 0xa3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000005740)=0xc) [ 121.669977] audit: type=1400 audit(1745486414.047:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:20:14 executing program 4: pause() clock_gettime(0x0, &(0x7f0000002f40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/234, 0xea}, {&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000000440)=""/206, 0xce}, {&(0x7f0000000540)=""/91, 0x5b}], 0x6, &(0x7f0000000640)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000700)=""/112, 0x70}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, &(0x7f0000000900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000002cc0)=[{&(0x7f00000009c0)=""/248, 0xf8}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/170, 0xaa}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/203, 0xcb}], 0x6, &(0x7f0000002d40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}], 0x4, 0x40000022, &(0x7f0000002f80)={r0, r1+60000000}) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000002fc0), &(0x7f0000003000)=0x8) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000003040)={'veth1_to_bond\x00', 0x101}) r8 = openat2(r5, &(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)={0x80000, 0x2}, 0x18) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) mq_timedreceive(r8, &(0x7f0000003100)=""/219, 0xdb, 0x0, &(0x7f0000003240)={r9, r10+10000000}) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000003280)=0x1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r11, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x3c, r12, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000003540)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r11, &(0x7f0000003640)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003600)={&(0x7f0000003580)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c080) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000003680)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) getsockopt$bt_BT_DEFER_SETUP(r14, 0x112, 0x7, &(0x7f00000036c0), &(0x7f0000003700)=0x4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r11, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x5c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3b}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040081}, 0x800) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r15, 0x8982, &(0x7f0000003880)={0x8, 'bond0\x00', {'veth1_macvtap\x00'}, 0x12eb}) 09:20:14 executing program 5: lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000300)=""/244, 0xf4, 0x40002042, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000480)) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) mkdirat(r1, &(0x7f0000000500)='./file0\x00', 0x148) acct(0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x150, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x62, 0xa8, @random="f762d8935a1a1bc2305853db350db4358458bf617c84ef30d0eb84c3323ded8f00ebac7c3b7dd60f6e968ae65f437ec19676f56f6aa431eca1c14cd0eb49f5ad17ef2cdbf15cc532c5bc1435a6e4bbe34e5a3542cebf5bb32f8c9a66dca7"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xbd, 0xa9, @random="ff0ab74bf95c1461c451738000cbdfd37ad056d6e8417672ff4c0acfa6c590f9cba17b942680bdabe204da6ff349d766983fbdad9168542b48fcdd88c92b247cf07019a32206228860e10efd3300ddd7014ca8c9b2566d414cf4d57ae925ab4bb869f766a3813c6956cb732fa95e570983bdc8c9639a575f10dab366ff507eec94227be920686087633a50d6790000eee51cd4e3f52e33fafa5d2bd55ef1bb6d8a7fb72140a404e85032acecbf70497fc22142e7c3fd4584d9"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x2, 0x1, {{0x10, 0x4, 0x2, 0xc, 0x40, 0x64, 0x0, 0x5, 0x29, 0x0, @remote, @remote, {[@ssrr={0x89, 0x13, 0x99, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @local]}, @rr={0x7, 0x17, 0xc0, [@multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, @remote]}]}}}}}) r4 = signalfd(r1, &(0x7f00000008c0)={[0x100000001]}, 0x8) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0xc0, 0x0) r5 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, 0x4, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x40001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000b80)={0x81, 0x1ff, 0x8}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x91) 09:20:14 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rpc\x00') mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x8000, 0xbe0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', 'net/rpc\x00'}, &(0x7f0000000100)='-\'-$--$\x00', 0x8, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/pcmcia_core', 0x200001, 0x102) name_to_handle_at(r1, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x3, 0x4, 0x8, 0x7c, 0x6, 0x101}}, &(0x7f0000000200), 0x600) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000280)={0x6, 0x381b}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000002c0)) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x20100, 0x0) r4 = accept$inet(r1, &(0x7f0000000700)={0x2, 0x0, @loopback}, &(0x7f0000000740)=0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000780)={"c9b2bce1da9ebbb325889da75f7552f0", 0x0, 0x0, {0x81, 0x9}, {0x200, 0x6}, 0x1ff, [0x3fd, 0x1, 0x7fff, 0x7fffffff, 0x1, 0x401, 0x0, 0x1, 0x1, 0x5fc, 0xfffffffffffff94c, 0x2, 0x3ff, 0x4, 0x31, 0x4]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000880)={{r4}, r5, 0x8, @unused=[0xc8, 0x8, 0x6, 0x7], @devid}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001880), 0x101000, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f00000018c0)={0x0, "7dde6f345fccead49d78f4bef14cdedd"}) flock(r4, 0xc) fremovexattr(r2, &(0x7f00000028c0)=@known='trusted.overlay.upper\x00') r7 = openat$incfs(r6, &(0x7f0000002b00)='.pending_reads\x00', 0x2000c0, 0x16) fallocate(r7, 0x12, 0x356d, 0xa0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b80), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000002d80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002bc0)={0x170, r8, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x85, 0xbe, "fe484bfdf06bc7b9b3f701746539b235cb0253bd217c6b4bbed961ae01e30188931874d08f8111f9a6f2be014433ff21f0dbaead163ddf3a856883faf86d3e4a31d80372c3e7729c39af69831072f8e22829d833520b7062c1fbae868860e50d858d6e3b9ae66f010412cb2abaccd9b4a690665124eaf1ccd42aa30337476a4e83"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb2, 0xac, "2c509b2a3b7e6fc588303efab2d5e4757506de13f6da1c38ce4ac39ba83a424b4375e35010c13c981d82b11bebefd7b8ee4342c7408a62f40cd19292ae66cb204fe5768d6f6b7d47275e72e71cd19f4a472d58ab24c8b066308971951810ee71b192d42e571d7544877e3acf35cb0f4d5d9b8c8ee71daffcc57bd2797264d77f0f015fb6e364bc9b83a00d3eef1ad4ce87d4bf8cc3e60154631f2cab90c1b83544cca6a3a90f055f56194f32576a"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) 09:20:14 executing program 6: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x3f) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffff]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000180)={0x6, 0x2, 0x7, 0xdcf5, 0x1, [{0x6, 0x4f, 0x8, '\x00', 0x1100}]}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x8020, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000240)={0x2480, 0x3f, 0x2, 0xfffffffb, 0x3, [0x2, 0x1f, 0x7, 0x80000001]}) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000280)={'tunl0\x00', {0x2, 0x0, @private}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) write$binfmt_elf32(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x5e, 0x8, 0xf5, 0x9, 0x1f, 0x2, 0x6, 0xffff, 0xdc, 0x38, 0x187, 0x5, 0x4ec, 0x20, 0x1, 0xfeae, 0xf1, 0x7fff}, [{0x3, 0x1, 0x8, 0x1f, 0xfffffff8, 0x10000, 0x6}], "0a377b70436457a32c7e0086d125ede8567156b1ac6e14fa1341e9c7775801144f7d637da1c31045433949ae14e376f8014cd90a9e9a1a1ba9cee000d55a10591761819886b06c2befa5026dce52ad05e5b4f88b7b3225ddedbc506cf6607b378b6da0d991fbef778e58a6e0d26ab1d5eedb15103bda77f336e0", ['\x00', '\x00']}, 0x2d2) read(r0, &(0x7f0000000600)=""/207, 0xcf) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000700)={0x0, "1feeb43c00e08f04c5a3d7daca90003e"}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000001700)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) getsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000001740)=""/129, &(0x7f0000001800)=0x81) ioctl$FICLONE(r4, 0x40049409, r6) r7 = syz_open_dev$vcsa(&(0x7f0000001840), 0x5, 0x40400) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001880)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000001940)=0x2) [ 123.117486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.123041] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.125385] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.129244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.142049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.145100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.148610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.151314] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.152556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.154571] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.172163] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.211162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.219386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.224740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.234476] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.259975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.271187] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.283423] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.284936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.287897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.292551] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.293767] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.294533] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.296090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.297777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.298969] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.304366] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.306838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.311985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.312832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.314932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.329031] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.331136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.331232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.334303] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.335442] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.352297] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.353956] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.362769] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.387939] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.203524] Bluetooth: hci0: command tx timeout [ 125.204749] Bluetooth: hci1: command tx timeout [ 125.330743] Bluetooth: hci2: command tx timeout [ 125.394811] Bluetooth: hci3: command tx timeout [ 125.394827] Bluetooth: hci5: command tx timeout [ 125.459093] Bluetooth: hci6: command tx timeout [ 125.459181] Bluetooth: hci7: command tx timeout [ 125.460658] Bluetooth: hci4: command tx timeout [ 127.250977] Bluetooth: hci0: command tx timeout [ 127.251530] Bluetooth: hci1: command tx timeout [ 127.379681] Bluetooth: hci2: command tx timeout [ 127.443456] Bluetooth: hci5: command tx timeout [ 127.444805] Bluetooth: hci3: command tx timeout [ 127.507272] Bluetooth: hci4: command tx timeout [ 127.507839] Bluetooth: hci6: command tx timeout [ 127.508307] Bluetooth: hci7: command tx timeout [ 129.298745] Bluetooth: hci1: command tx timeout [ 129.299298] Bluetooth: hci0: command tx timeout [ 129.426947] Bluetooth: hci2: command tx timeout [ 129.491506] Bluetooth: hci3: command tx timeout [ 129.493271] Bluetooth: hci5: command tx timeout [ 129.555049] Bluetooth: hci7: command tx timeout [ 129.555576] Bluetooth: hci6: command tx timeout [ 129.557097] Bluetooth: hci4: command tx timeout [ 131.346733] Bluetooth: hci0: command tx timeout [ 131.347393] Bluetooth: hci1: command tx timeout [ 131.475363] Bluetooth: hci2: command tx timeout [ 131.539074] Bluetooth: hci5: command tx timeout [ 131.540832] Bluetooth: hci3: command tx timeout [ 131.604427] Bluetooth: hci6: command tx timeout [ 131.605699] Bluetooth: hci4: command tx timeout [ 131.606726] Bluetooth: hci7: command tx timeout [ 183.184218] syz-executor.3 (292) used greatest stack depth: 24496 bytes left [ 185.893690] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.895892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.897736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.900529] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.903926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.982267] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 185.984375] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 185.985716] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 185.990522] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 185.995101] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.003119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.006717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.011192] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.013289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.014456] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.017216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.023451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.027154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.030387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.033807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.034627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.035436] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.036270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.040281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.040337] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.044968] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.048779] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.050449] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.053125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.057445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.061460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.070160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.071317] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.095683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.096475] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.097444] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.108549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.110249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.115216] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.136456] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.989660] Bluetooth: hci1: command tx timeout [ 188.050743] Bluetooth: hci7: command tx timeout [ 188.114918] Bluetooth: hci6: command tx timeout [ 188.187531] Bluetooth: hci3: command tx timeout [ 188.187743] Bluetooth: hci0: command tx timeout [ 188.188328] Bluetooth: hci5: command tx timeout [ 188.189514] Bluetooth: hci2: command tx timeout [ 188.243751] Bluetooth: hci4: command tx timeout [ 188.596459] hrtimer: interrupt took 5320927 ns [ 190.034676] Bluetooth: hci1: command tx timeout [ 190.099696] Bluetooth: hci7: command tx timeout [ 190.164641] Bluetooth: hci6: command tx timeout [ 190.226824] Bluetooth: hci0: command tx timeout [ 190.226870] Bluetooth: hci5: command tx timeout [ 190.227380] Bluetooth: hci3: command tx timeout [ 190.227982] Bluetooth: hci2: command tx timeout [ 190.290681] Bluetooth: hci4: command tx timeout [ 192.083629] Bluetooth: hci1: command tx timeout [ 192.146768] Bluetooth: hci7: command tx timeout [ 192.211954] Bluetooth: hci6: command tx timeout [ 192.276697] Bluetooth: hci3: command tx timeout [ 192.277221] Bluetooth: hci5: command tx timeout [ 192.277709] Bluetooth: hci2: command tx timeout [ 192.278144] Bluetooth: hci0: command tx timeout [ 192.339668] Bluetooth: hci4: command tx timeout [ 194.130688] Bluetooth: hci1: command tx timeout [ 194.194730] Bluetooth: hci7: command tx timeout [ 194.258696] Bluetooth: hci6: command tx timeout [ 194.324793] Bluetooth: hci3: command tx timeout [ 194.326421] Bluetooth: hci0: command tx timeout [ 194.327044] Bluetooth: hci2: command tx timeout [ 194.327950] Bluetooth: hci5: command tx timeout [ 194.386759] Bluetooth: hci4: command tx timeout [ 248.491794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.495966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.497494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.501157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.502521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.504989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.511033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.515519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.517843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.520252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.684099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.691562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.696983] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.713999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.732019] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.740830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.752933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.757319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.761338] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.765073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.767276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.769359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.771651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.773498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.775120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.778826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.794760] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.806102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.806985] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.808948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.812026] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.821031] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.821925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.822885] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.833659] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.836078] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.865616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.896004] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.933629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.937924] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.580086] Bluetooth: hci1: command tx timeout [ 250.580157] Bluetooth: hci0: command tx timeout [ 250.835158] Bluetooth: hci2: command tx timeout [ 250.899114] Bluetooth: hci3: command tx timeout [ 250.899304] Bluetooth: hci4: command tx timeout [ 250.900026] Bluetooth: hci5: command tx timeout [ 250.900407] Bluetooth: hci6: command tx timeout [ 251.026718] Bluetooth: hci7: command tx timeout [ 252.627492] Bluetooth: hci1: command tx timeout [ 252.628404] Bluetooth: hci0: command tx timeout [ 252.884679] Bluetooth: hci2: command tx timeout [ 252.946703] Bluetooth: hci6: command tx timeout [ 252.948719] Bluetooth: hci5: command tx timeout [ 252.950242] Bluetooth: hci4: command tx timeout [ 252.951537] Bluetooth: hci3: command tx timeout [ 253.074994] Bluetooth: hci7: command tx timeout [ 254.675879] Bluetooth: hci1: command tx timeout [ 254.676409] Bluetooth: hci0: command tx timeout [ 254.930928] Bluetooth: hci2: command tx timeout [ 254.996738] Bluetooth: hci5: command tx timeout [ 254.997321] Bluetooth: hci6: command tx timeout [ 254.998682] Bluetooth: hci4: command tx timeout [ 254.999212] Bluetooth: hci3: command tx timeout [ 255.122702] Bluetooth: hci7: command tx timeout [ 256.722724] Bluetooth: hci1: command tx timeout [ 256.723318] Bluetooth: hci0: command tx timeout [ 256.978927] Bluetooth: hci2: command tx timeout [ 257.042962] Bluetooth: hci3: command tx timeout [ 257.043561] Bluetooth: hci4: command tx timeout [ 257.043651] Bluetooth: hci6: command tx timeout [ 257.044111] Bluetooth: hci5: command tx timeout [ 257.170868] Bluetooth: hci7: command tx timeout [ 310.981741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.020674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.033816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.050031] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.065342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.272255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.276361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.281024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.284327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.291123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.312864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.320908] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.329177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.348366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.350384] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.351861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.353225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.355083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.362372] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.364950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.395900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.398972] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.400158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.402767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.406408] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.408832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.413120] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.415194] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.442845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.449858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.454263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.459973] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.460012] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.462052] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.467898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.474088] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.479945] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.507107] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.507973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.517305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.106984] Bluetooth: hci0: command tx timeout [ 313.362729] Bluetooth: hci1: command tx timeout [ 313.426806] Bluetooth: hci2: command tx timeout [ 313.427908] Bluetooth: hci3: command tx timeout [ 313.554774] Bluetooth: hci5: command tx timeout [ 313.555788] Bluetooth: hci7: command tx timeout [ 313.618910] Bluetooth: hci4: command tx timeout [ 313.619932] Bluetooth: hci6: command tx timeout [ 315.157708] Bluetooth: hci0: command tx timeout [ 315.411105] Bluetooth: hci1: command tx timeout [ 315.474703] Bluetooth: hci3: command tx timeout [ 315.475712] Bluetooth: hci2: command tx timeout [ 315.604414] Bluetooth: hci5: command tx timeout [ 315.604455] Bluetooth: hci7: command tx timeout [ 315.666682] Bluetooth: hci4: command tx timeout [ 315.666769] Bluetooth: hci6: command tx timeout [ 317.202708] Bluetooth: hci0: command tx timeout [ 317.458993] Bluetooth: hci1: command tx timeout [ 317.523844] Bluetooth: hci2: command tx timeout [ 317.523981] Bluetooth: hci3: command tx timeout [ 317.651861] Bluetooth: hci5: command tx timeout [ 317.651946] Bluetooth: hci7: command tx timeout [ 317.716635] Bluetooth: hci4: command tx timeout [ 317.716906] Bluetooth: hci6: command tx timeout [ 319.251019] Bluetooth: hci0: command tx timeout [ 319.508017] Bluetooth: hci1: command tx timeout [ 319.572664] Bluetooth: hci2: command tx timeout [ 319.572693] Bluetooth: hci3: command tx timeout [ 319.698815] Bluetooth: hci5: command tx timeout [ 319.698892] Bluetooth: hci7: command tx timeout [ 319.762956] Bluetooth: hci6: command tx timeout [ 319.763070] Bluetooth: hci4: command tx timeout [ 373.880193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.881739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.883259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.883789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.886872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.888233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.891793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.892540] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.894463] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.904170] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.906477] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.908360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.909408] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.913158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.918057] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.000739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.006291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.007632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.012475] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.015399] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.026842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.032027] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.033307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.046797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.058860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.066387] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.075883] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.077245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.084380] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.090047] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.092416] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.110004] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.115691] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.128886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.136784] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.138265] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.158908] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.164768] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.170889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.178337] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 375.954991] Bluetooth: hci1: command tx timeout [ 375.956018] Bluetooth: hci0: command tx timeout [ 376.019908] Bluetooth: hci2: command tx timeout [ 376.082761] Bluetooth: hci3: command tx timeout [ 376.146725] Bluetooth: hci5: command tx timeout [ 376.147616] Bluetooth: hci4: command tx timeout [ 376.274856] Bluetooth: hci6: command tx timeout [ 376.275917] Bluetooth: hci7: command tx timeout [ 378.002742] Bluetooth: hci1: command tx timeout [ 378.003296] Bluetooth: hci0: command tx timeout [ 378.066671] Bluetooth: hci2: command tx timeout [ 378.130800] Bluetooth: hci3: command tx timeout [ 378.194964] Bluetooth: hci4: command tx timeout [ 378.195472] Bluetooth: hci5: command tx timeout [ 378.323070] Bluetooth: hci6: command tx timeout [ 378.323861] Bluetooth: hci7: command tx timeout [ 380.051018] Bluetooth: hci1: command tx timeout [ 380.051542] Bluetooth: hci0: command tx timeout [ 380.114721] Bluetooth: hci2: command tx timeout [ 380.178708] Bluetooth: hci3: command tx timeout [ 380.242862] Bluetooth: hci5: command tx timeout [ 380.243465] Bluetooth: hci4: command tx timeout [ 380.370995] Bluetooth: hci6: command tx timeout [ 380.372054] Bluetooth: hci7: command tx timeout [ 382.098715] Bluetooth: hci1: command tx timeout [ 382.100494] Bluetooth: hci0: command tx timeout [ 382.163758] Bluetooth: hci2: command tx timeout [ 382.226995] Bluetooth: hci3: command tx timeout [ 382.292692] Bluetooth: hci5: command tx timeout [ 382.294178] Bluetooth: hci4: command tx timeout [ 382.418740] Bluetooth: hci7: command tx timeout [ 382.418867] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 09:25:22 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff819af471 RDX=ffff8880267bb780 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88800f62e180 RSP=ffff888038507ba8 R8 =0000000000000000 R9 =fffffbfff0c81dc2 R10=0000000000000001 R11=0000000000088306 R12=0000000000000000 R13=ffff88800f62e6e0 R14=ffff888038507de8 R15=ffff888038507d90 RIP=ffffffff8172ed30 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f51852fd540 00000000 00000000 GS =0000 ffff8880e564e000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f51857d4000 CR3=000000002c5ec000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000042494c4700352e32 XMM04=312e325f4342494c470035312e325f43 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff81a70a8c RDX=000000000000a70a RSI=000000000000a70a RDI=ffffffff86c7e440 RBP=ffff88806cf08a80 RSP=ffff88806cf089b8 R8 =0000000000000000 R9 =0000000000000001 R10=000000000003b074 R11=0000000000025941 R12=ffff88806cf08a88 R13=ffff88806cf08a70 R14=ffff88806cf08a69 R15=ffff88806cf08a28 RIP=ffffffff81350a02 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6f37c45540 00000000 00000000 GS =0000 ffff8880e574e000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6f37e30620 CR3=000000002f2a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000