Warning: Permanently added '[localhost]:4886' (ECDSA) to the list of known hosts. 2025/04/28 11:57:35 fuzzer started 2025/04/28 11:57:35 dialing manager at localhost:46629 syzkaller login: [ 94.078050] cgroup: Unknown subsys name 'net' [ 94.239303] cgroup: Unknown subsys name 'cpuset' [ 94.288573] cgroup: Unknown subsys name 'rlimit' 2025/04/28 11:58:03 syscalls: 2214 2025/04/28 11:58:03 code coverage: enabled 2025/04/28 11:58:03 comparison tracing: enabled 2025/04/28 11:58:03 extra coverage: enabled 2025/04/28 11:58:03 setuid sandbox: enabled 2025/04/28 11:58:03 namespace sandbox: enabled 2025/04/28 11:58:03 Android sandbox: enabled 2025/04/28 11:58:03 fault injection: enabled 2025/04/28 11:58:03 leak checking: enabled 2025/04/28 11:58:03 net packet injection: enabled 2025/04/28 11:58:03 net device setup: enabled 2025/04/28 11:58:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/28 11:58:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/28 11:58:03 USB emulation: enabled 2025/04/28 11:58:03 hci packet injection: enabled 2025/04/28 11:58:03 wifi device emulation: enabled 2025/04/28 11:58:03 802.15.4 emulation: enabled 2025/04/28 11:58:03 fetching corpus: 0, signal 0/0 (executing program) 2025/04/28 11:58:06 starting 8 fuzzer processes 11:58:06 executing program 0: r0 = msgget(0x2, 0x130) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/218) r1 = msgget(0x0, 0x388) msgrcv(r1, &(0x7f0000000100)={0x0, ""/3}, 0xb, 0x0, 0x1000) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000140)=""/4096) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x59}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x53}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5e}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4d}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x800) getsockname$netlink(0xffffffffffffffff, &(0x7f0000001280), &(0x7f00000012c0)=0xc) r2 = shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000001300)=""/162) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24}, 0x4004000) setxattr$trusted_overlay_upper(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500), &(0x7f0000001540)={0x0, 0xfb, 0x36, 0x5, 0x80, "9bb6700b0235deccc458ffc790559ca2", "a146ea4e2eb6918e3d55b499e495d6a2669400d88b75da5b004c4178de2283ac6b"}, 0x36, 0x3) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000001580)={0x7, 0x5}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000015c0)='memory.current\x00', 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000001600)=""/241) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001700)={0x0}, &(0x7f0000001740)=0xc) ptrace$pokeuser(0x6, r4, 0x0, 0x5) shmget(0x2, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) getsockname$packet(r3, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000017c0)=0x14) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000001840)={&(0x7f0000001800)=[0x0, 0x0], 0x2, 0x81}) 11:58:06 executing program 1: sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000091}, 0x4800) r0 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xc8, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2400000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000005}, 0x1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) pipe(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x20, 0xd, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44001) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001800)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001840)={r1, 0x80, 0x40, 0x8}) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000001c80)={0x3, 0x0, 0x11, 0xb, 0x200, &(0x7f0000001880)}) r4 = signalfd4(r0, &(0x7f0000001cc0)={[0x2]}, 0x8, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000001d00)={@desc={0x1, 0x0, @auto="bc7d7987d752456c"}}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r6 = socket$unix(0x1, 0x1, 0x0) readahead(r6, 0x7fffffff, 0x12) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001ec0)={0x0, 0x0, 0x3}) fcntl$setsig(r2, 0xa, 0x2f) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r0}, '.\x00'}) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000001f40)) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x18, 0x3f9, 0x800, 0x70bd26, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20040820}, 0x40088c0) 11:58:06 executing program 2: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0xfff, 0xeca, 0x77c}) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x10001, 0x1000, 0x0, 0x5, 0xc2, "cc1e8fdffc6703a3f938aab1bf841c68824fb1", 0x6, 0x1}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000080)={0x0, 0xff, 0xf4, 0xfffb}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000180)=0x1e) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc440}, 0x840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x400) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x70300, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000380)={0x0, 'vxcan1\x00', 0x3}, 0x18) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000003c0)={0x1, 0x6, 0x80, 0x0, 0x7, "c8dd398ac19029fe"}) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000440)) r4 = add_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="075d95d10881777ab21141de1c091e56ee6da95ed2561ed63a3300d95dbc27c872c0bd1558095bc1eefa4d6a81a16a75f225840d5a2e1c509f5152e73299214c6dcf9e458b10f0312ebf78b3b01c594de5e7697b2f78c9e852f69ee95c3681aed32b3a48a5e9a645a2b137abe9be0ae7539946c0fa10c7d20934557a2bf3a0f71f93816f3719606ea9562cf247956179", 0x90, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)={0x1, 0x0, @c}, 0x29, r4) 11:58:06 executing program 3: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x104) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x20200, 0x8) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)) r1 = getgid() ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000080)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x5}, [{0x2, 0x1}, {0x2, 0x6, 0xee01}, {}, {0x2, 0x4, r2}, {0x2, 0x1, 0xee01}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x3, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x1, r1}, {0x8, 0x3, r1}, {0x8, 0x0, r1}, {0x8, 0x7, r1}, {0x8, 0x8, r1}, {0x8, 0x2, r1}], {0x10, 0x7}, {0x20, 0x1}}, 0x94, 0x0) r3 = syz_io_uring_complete(0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4, &(0x7f00000015c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/59, 0x3b}], 0x1}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000001800)=[{&(0x7f00000017c0)=""/8, 0x8}], 0x1, &(0x7f0000001840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000001b00)=[{&(0x7f00000019c0)=""/71, 0x47}, {&(0x7f0000001a40)=""/131, 0x83}], 0x2, &(0x7f0000001b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001cc0)=""/179, 0xb3}, {&(0x7f0000001d80)=""/80, 0x50}, {&(0x7f0000001e00)=""/181, 0xb5}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001fc0)=""/96, 0x60}], 0x5}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000020c0)=""/81, 0x51}, {&(0x7f0000002140)=""/122, 0x7a}, {&(0x7f00000021c0)=""/69, 0x45}, {&(0x7f0000002240)=""/49, 0x31}, {&(0x7f0000002280)=""/56, 0x38}, {&(0x7f00000022c0)=""/226, 0xe2}, {&(0x7f00000023c0)=""/34, 0x22}, {&(0x7f0000002400)=""/161, 0xa1}, {&(0x7f00000024c0)=""/202, 0xca}], 0x9}}], 0x6, 0x122, 0x0) copy_file_range(r3, &(0x7f0000000240)=0x400, r6, &(0x7f0000002800)=0x6, 0x6, 0x0) r9 = syz_open_procfs$userns(0x0, &(0x7f0000002840)) pwritev2(r9, &(0x7f0000002e40)=[{&(0x7f0000002880)="67f308fe014d2ef01c869651ad632540d79a997f86f44a955964808e9182c3ed579528d6bcff7fdce02ff0b471852a9a8cd750cf56eb2a847593e879d6ac0c8966a4b3fc797286635876e2a8840ec25f68e639cdaceec68c1c2657e5959716d5f55952de1f6a338034a5f97314407340d57226dd0280d7a3b216d7694a5638dfb9ee84c737b3798764c626934c0f8a4018ac0aaad2f7ecf38f83c503c3904d701992d3a447fec0e2c456a58ab3878ad6155654741ef14b85e5a4b0ccbfc873bf8baeba3f0d440be3a7a059b452088e4b251bbe91054136667b8ecea59780114da69668e37831ddd9052b4b162dc3a01bd538b7fc", 0xf4}, {&(0x7f0000002980)="e323fb57d65e044e7062e608fd8f5594c959c21cde3c1cccbc1d42dcc9785f150af7410d1736b1898eb104505ff974d3a195abc84cac0041a65382f772e21accd48113db72005d372c877fad2fae3972ab70ecc3efc3775ec1430253a4acd33c2714c3cb5c1334a91421c95fb46f1b53052580abf4b4f94735c3126de43edf44e4da2ec393dba6a0b60dd869bad9ded152d39bbc3646499ba6cb7543a4c8fefbbf299d054065516298f391a6d7d194c537ad1e9d0a", 0xb5}, {&(0x7f0000002a40)="05d711e7e61472eeade3891821fcf6c4cbd1afc838813b082192a3ce72e7b602a21e3788318349ad4e966bb7673f9f10b1bd1cd877be8a97b085e18f0bd167360daaed970566c1364990e3820faf67248090c506fb0842e6db0952aef0d3af6b3a261395e90b11b69ae324215f958d936f3779632252899081143023b6f91168ac5a77a5a330c431cae5e1d42c914803f289a59f4c18bdf4739cdf81d4032743dfac95e1ee1f9920737a89b576ad196cc5b54b0154f2dac459aeab1579c0397481aebb49e6a8bab1ac6aa60e3d7677e69fcaeb", 0xd3}, {&(0x7f0000002b40)="bebc2513cae2351805412d8d5da7bfa5036346e6bb1492e253d3024a7f72bc164f6254360c45894e27b1ca7f2c5f53c59821e15d040332a1d988c95f29ef075147f32252ddfd2c616f369a3ef78ccab858debb38690d19c91f96bc90a3febfe4fdd01115bdff0376cadf295dc7c6aa6fab7d26334ae4539b1ed74f9f7d92df0426a4fba0356e36963a3e39d6e53a24ed53c7cb80b91e6eb8476ef6e9e053a32d17f45d3b3dd8746824d8b88af50a696489ef0b10e3d5ba370b5f0f42c35a1ed50d9e36f530f801ef3263d92a40a176b7cea1176ff3b6e0d85297a6c5b5927144b46379", 0xe3}, {&(0x7f0000002c40)="f1937ad5890791157ab307e5bc9abbc24b2a4ac72585fe1b425a7b5b465833f2ba3eb81d3a21c25eca45b0933d38ee3de3925031c9ad3b8d56f917aed433aaabd70a411517059d241e9053767718016859bef83cd393dfe1ce6e199e476109f9b82ce90e4bdbcd", 0x67}, {&(0x7f0000002cc0)="962bcd501670d8d202254373a7b165a989abb256f49f536365c56131d447c7bddfbcfaaf1afd6455d862d3ba049f983f34e22b44d154a7066f24af618763a651f2d38784b8576a2d5a060fe89e1dbb60f5755a6f4f2c0524bbea8c2e7111d6ecdb658bc9f2a4171479d596d5636cc9f3fb3975ed9feea6216e1809fddac9c1df0c572e197840a76913b2f49e313ca9b89daaaa6a1de38a8f438cbdb95b9e9e82fa4e479d57f7fd7f26e90c026bb468044489f9ecbd72bc5d93f6229d2ba24b078b4641282d5f840342aaa6dfc10e76873a242f1cbac2400ad62fde5f8e29adef198b295de920", 0xe6}, {&(0x7f0000002dc0)="07ca6307f216f954ac25222e7b28923379ea8eddc58a891fc608ed7047702f1388d937c4f7f1eda2bb3f97334b89dd132fb3a11b6657680cd0916e6b8782a736680fe1a4915d172033f206f4a34c8c06a3e100195764306115402f4804f6808e3984d9518eb5ed4415266481e4b8d963f544077469d6", 0x76}], 0x7, 0xffffffff, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000002ec0)={{0x0, 0x0, 0xfff, 0x2, 0x200}, 0x1, 0xffff}) r10 = accept(r0, &(0x7f0000002f40)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000002fc0)=0x80) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r10, 0x40089413, &(0x7f0000003000)=0x45) setsockopt$inet6_tcp_buf(r8, 0x6, 0xe, &(0x7f0000003040)="78a9c7bda239e5f8497859a5c13b72202f4eb6661bd5e78137c54529519323d29a9a93a27cf593f2006d615393c1c0c4dab4d3c6ff0e5c7882a61dde1147e0e579a6725a59ffe9aa1f1f06e5661e3be02b86284d4daa9b968e3da181dff42dd416ddd90fdcdcee2e715f6f17e0033b194391c3bd4d6dac05c221b08e974cf46e4e6244c8d937c1e1e8c57ecea8764a290030df8fda1551e780754b1911663cd55ab7bbffa768ebb9da125fbff107a263d0cb5bea1daa4f77f5eed690b79c95462d", 0xc1) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000003140)={{0x32, @local, 0x4e24, 0x3, 'dh\x00', 0x19, 0x80000001, 0x74}, {@rand_addr=0x64010100, 0x4e21, 0x2, 0x3, 0x6, 0x2}}, 0x44) r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000031c0), 0x101000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r11, 0xc0c89425, &(0x7f0000003200)={"9b3118b8c259dabdd3017a10e186eaa7", 0x0, 0x0, {0x9, 0x81}, {0xec94, 0x1}, 0xffffffffffff9c50, [0x2, 0x47, 0x2d7ac60e, 0x6, 0x3, 0x0, 0x0, 0x7f, 0x5, 0x80, 0xffffffff80000000, 0x3, 0x9, 0x400, 0x7, 0x7]}) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000003300)=""/100, &(0x7f0000003380)=0x64) [ 124.456403] audit: type=1400 audit(1745841486.509:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:58:06 executing program 4: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000040)) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xcf, 0x17802) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r3 = openat$incfs(r2, &(0x7f0000000140)='.pending_reads\x00', 0x80, 0x2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f00000001c0)) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x18c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @beacon=[@NL80211_ATTR_IE={0x158, 0x2a, [@tim={0x5, 0x95, {0x0, 0xf6, 0x48, "091ee5f9b596811458ba70c731c0445f74dc7947a0bb4e17565b79dab7d294a021af3b1c71dccef96f784a0f2c560481e4361f4a9cc6f3bce1dbba28661cb5ee69f9548a68be8d1148d64dd2247fc7fbf5d8e41b470ef99735654d44e0db3c10c925d2cfb76070dcd5af417944612a356f398d033f91bb668e0fd775408af47b985272457f4b066fc879ed2d5ef49f7c88b7"}}, @dsss={0x3, 0x1, 0xb8}, @measure_req={0x26, 0x40, {0x1f, 0x3, 0xff, "3f5537a4eae94a68805623808a58fbc5da74489d5d6214c0b57c7ae8164d3f82fa2f4b5ded66fae587d03551cd037eb1c6d6d07422d9f9f7b921801cd9"}}, @perr={0x84, 0x76, {0x7f, 0x8, [@ext={{}, @broadcast, 0x0, @broadcast, 0x33}, @not_ext={{}, @broadcast, 0x405b, "", 0x34}, @not_ext={{}, @device_b, 0x5, "", 0x3f}, @not_ext={{}, @broadcast, 0x405, "", 0xf}, @ext={{}, @broadcast, 0xdf7, @device_a, 0xa}, @not_ext={{}, @broadcast, 0x7fffffff, "", 0x1b}, @not_ext={{}, @device_b, 0x401, "", 0x33}, @not_ext={{}, @device_a, 0xff, "", 0x2e}]}}]}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x6000}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000480)=0x40000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r7, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40040) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(r8, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x2, 0x0, 0x5, 0x2, 0x3, 0x8, 0x3d2, 0x40, 0x26c, 0x4c, 0x0, 0x38, 0x1, 0x8, 0xfffc, 0x99}, [{0x70000000, 0xc7f, 0x2, 0x101, 0x7, 0x9, 0x0, 0x80000000}], "8ab181ced38b031f28b168fc637fd20f5cb1debc41c164112b2f08e5f4ddda00252c5ce110348f95d2338d7e729a0ddc193e177ff24df883c75b01062dbdde31bbefb4da1c6fb81a747e1c6c7c1cef287777890a25", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8cd) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000f40)=""/112) openat(r1, &(0x7f0000000fc0)='./file0\x00', 0x400800, 0x0) ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f0000001040)={{}, {@val, @actul_num={@val=0x2b, 0x5, 0x74}}}) 11:58:06 executing program 5: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1e1) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0xd, 0x3, 0xc6, &(0x7f0000000040)="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"}) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000540)=@add_del={0x2, &(0x7f0000000500)='geneve0\x00'}) quotactl(0x7fffffff, &(0x7f0000000580)='./file0\x00', 0xffffffffffffffff, &(0x7f00000005c0)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000600)={{0x1, 0x7f}, {0x6, 0x7}, 0x1000, 0x1, 0x1f}) setxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@random={'security.', '/dev/bsg\x00'}, &(0x7f0000000700)=')\x00', 0x2, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)=@v2={0x2000000, [{0x3, 0xffff}, {0x7, 0x65a99bd8}]}, 0x14, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x3f2, 0x20, 0x70bd2d, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x41) r2 = fsmount(r0, 0x0, 0x4) fcntl$setownex(r2, 0xf, &(0x7f0000000900)={0x1, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x10483, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000980)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f00000009c0)={'custom0\x00'}) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000b00)=0x1, 0x4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x100, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000b80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) 11:58:06 executing program 6: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1202, @none, 0x3, 0x2}, 0xe) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/66, 0x42}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x2, &(0x7f0000000400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x2000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000500)) r4 = socket(0x6, 0x3, 0x5) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x330, 0x0, 0x600, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8b9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffd485}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa024}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @loopback, 0xe2c6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @private1, 0x4159}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x20, @private0, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf86}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0xd}, 0xffff}}}}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x44014}, 0x40) r5 = accept(r2, &(0x7f0000000940)=@nl, &(0x7f00000009c0)=0x80) fcntl$notify(r5, 0x402, 0x14) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000a00)={{0x6, 0x1f}, 0x100, './file0\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/consoles\x00', 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, 0x0, 0xd00, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6e}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x810) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, 0x4, 0x8, 0xf02, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_DCCP_OPEN={0x8}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1e0910ef}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000844) mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x1002, &(0x7f0000000e40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}], [{@subj_role={'subj_role', 0x3d, '*$[,'}}]}}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000ec0)=0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000f80)={0x0, "fd281d8f859673acaff0715f27656b83"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001f80)={{r3}, r7, 0x6, @inherit={0x58, &(0x7f0000000f00)={0x0, 0x2, 0x98, 0x9cc, {0x6, 0x400, 0x2, 0x1, 0x101}, [0xa5, 0xdc]}}, @devid=r8}) r9 = syz_open_dev$vcsa(&(0x7f0000002f80), 0x3, 0x200) ioctl$BTRFS_IOC_SET_FEATURES(r9, 0x40309439, &(0x7f0000002fc0)={0x1, 0x1, 0x15}) 11:58:06 executing program 7: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @remote}, 0x4723284cf4b4482a, 0x0, 0x0, 0x0, 0x101, &(0x7f00000000c0)='veth1_virt_wifi\x00', 0x5, 0x9, 0x800}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = io_uring_setup(0x4ae4, &(0x7f00000001c0)={0x0, 0xc369, 0x10, 0x3, 0x16d}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r0, 0x4000}, {r0, 0x2}, {r1, 0x400}, {r2, 0x1}], 0x4, &(0x7f00000002c0)={r3, r4+10000000}, &(0x7f0000000300)={[0x3]}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000740)={0x1, 0x1, 0x1, 0x0, 0x1b0, &(0x7f0000000340)}) prctl$PR_GET_NAME(0x10, &(0x7f0000000780)=""/200) r6 = syz_open_dev$vcsn(&(0x7f0000000880), 0x1, 0x521000) connect$inet(r6, &(0x7f00000008c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000900)={@remote, @private=0xa010100, 0x0, 0x2, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2a}]}, 0x18) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000980)=0x8, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000009c0)={0x2, 0x2e, "fd599e", 0x4, 0x6}) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000a00)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, {0x6}, 0x22, {0x2, 0x4e22, @local}, 'veth1_to_batadv\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x4000010, r6, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) getsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) [ 126.021194] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.027655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.031559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.041566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.046210] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.066961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.089425] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.091755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.103265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.106687] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.138418] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.143423] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.145616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.151086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.155411] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.242185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.266202] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.278359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.297133] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.302799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.304934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.322776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.328352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.332408] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.335375] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.341956] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 126.351564] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.353542] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 126.361432] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.376064] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 126.395185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.452472] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.457811] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 126.460156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.462994] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 126.468135] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 126.493823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 126.494384] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 126.561264] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 126.564605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 128.096713] Bluetooth: hci0: command tx timeout [ 128.160253] Bluetooth: hci1: command tx timeout [ 128.223978] Bluetooth: hci2: command tx timeout [ 128.479227] Bluetooth: hci5: command tx timeout [ 128.480115] Bluetooth: hci3: command tx timeout [ 128.543953] Bluetooth: hci4: command tx timeout [ 128.672957] Bluetooth: hci7: command tx timeout [ 128.673736] Bluetooth: hci6: command tx timeout [ 130.143755] Bluetooth: hci0: command tx timeout [ 130.208427] Bluetooth: hci1: command tx timeout [ 130.272057] Bluetooth: hci2: command tx timeout [ 130.528278] Bluetooth: hci5: command tx timeout [ 130.528761] Bluetooth: hci3: command tx timeout [ 130.590940] Bluetooth: hci4: command tx timeout [ 130.719996] Bluetooth: hci6: command tx timeout [ 130.720484] Bluetooth: hci7: command tx timeout [ 132.191686] Bluetooth: hci0: command tx timeout [ 132.255285] Bluetooth: hci1: command tx timeout [ 132.319423] Bluetooth: hci2: command tx timeout [ 132.575103] Bluetooth: hci3: command tx timeout [ 132.575854] Bluetooth: hci5: command tx timeout [ 132.639164] Bluetooth: hci4: command tx timeout [ 132.767311] Bluetooth: hci7: command tx timeout [ 132.767975] Bluetooth: hci6: command tx timeout [ 134.239944] Bluetooth: hci0: command tx timeout [ 134.305059] Bluetooth: hci1: command tx timeout [ 134.366949] Bluetooth: hci2: command tx timeout [ 134.625911] Bluetooth: hci5: command tx timeout [ 134.626377] Bluetooth: hci3: command tx timeout [ 134.688158] Bluetooth: hci4: command tx timeout [ 134.814987] Bluetooth: hci6: command tx timeout [ 134.815501] Bluetooth: hci7: command tx timeout [ 188.277288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.280558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.288637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.296666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.303604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.365102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.370543] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.373478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.377747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.387171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.388646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.392616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.399475] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.412514] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.424050] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.487110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.507341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.534462] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.556154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 188.559424] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.563225] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.566761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.570390] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 188.575805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 188.581699] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.595215] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.605840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.622441] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.624238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.635129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.643952] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 188.646787] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 188.661614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 188.670454] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 188.690725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 188.769342] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 188.782572] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 188.807396] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 188.829372] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 188.867548] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.367007] Bluetooth: hci0: command tx timeout [ 190.431099] Bluetooth: hci1: command tx timeout [ 190.494966] Bluetooth: hci2: command tx timeout [ 190.688132] Bluetooth: hci4: command tx timeout [ 190.689711] Bluetooth: hci3: command tx timeout [ 190.751010] Bluetooth: hci5: command tx timeout [ 190.751625] Bluetooth: hci7: command tx timeout [ 191.007019] Bluetooth: hci6: command tx timeout [ 192.416134] Bluetooth: hci0: command tx timeout [ 192.479978] Bluetooth: hci1: command tx timeout [ 192.543129] Bluetooth: hci2: command tx timeout [ 192.735285] Bluetooth: hci3: command tx timeout [ 192.735757] Bluetooth: hci4: command tx timeout [ 192.799140] Bluetooth: hci5: command tx timeout [ 192.799576] Bluetooth: hci7: command tx timeout [ 193.055322] Bluetooth: hci6: command tx timeout [ 194.465111] Bluetooth: hci0: command tx timeout [ 194.528979] Bluetooth: hci1: command tx timeout [ 194.590948] Bluetooth: hci2: command tx timeout [ 194.784192] Bluetooth: hci3: command tx timeout [ 194.784670] Bluetooth: hci4: command tx timeout [ 194.847002] Bluetooth: hci5: command tx timeout [ 194.847458] Bluetooth: hci7: command tx timeout [ 195.104155] Bluetooth: hci6: command tx timeout [ 196.513526] Bluetooth: hci0: command tx timeout [ 196.576324] Bluetooth: hci1: command tx timeout [ 196.640213] Bluetooth: hci2: command tx timeout [ 196.833063] Bluetooth: hci4: command tx timeout [ 196.833504] Bluetooth: hci3: command tx timeout [ 196.897981] Bluetooth: hci7: command tx timeout [ 196.898407] Bluetooth: hci5: command tx timeout [ 197.152221] Bluetooth: hci6: command tx timeout [ 250.632577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.641448] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.643845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.648670] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.651657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.654297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.679383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.681971] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.687393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.689370] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.712374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.731172] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.738309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.749833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.761421] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.888460] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.900491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.907770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.924570] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.926689] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.931271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.937351] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.947615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.954370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.973017] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.137693] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.141634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 251.145343] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 251.157385] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 251.164324] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.169996] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.188774] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 251.206632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 251.262989] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.288469] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 251.298909] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 251.306361] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.314732] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 251.350539] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 251.368447] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.769144] Bluetooth: hci0: command tx timeout [ 252.770025] Bluetooth: hci1: command tx timeout [ 252.830967] Bluetooth: hci2: command tx timeout [ 253.023123] Bluetooth: hci3: command tx timeout [ 253.087519] Bluetooth: hci4: command tx timeout [ 253.215285] Bluetooth: hci6: command tx timeout [ 253.407031] Bluetooth: hci5: command tx timeout [ 253.407854] Bluetooth: hci7: command tx timeout [ 254.815358] Bluetooth: hci1: command tx timeout [ 254.816382] Bluetooth: hci0: command tx timeout [ 254.878956] Bluetooth: hci2: command tx timeout [ 255.071049] Bluetooth: hci3: command tx timeout [ 255.136914] Bluetooth: hci4: command tx timeout [ 255.263083] Bluetooth: hci6: command tx timeout [ 255.455031] Bluetooth: hci5: command tx timeout [ 255.455487] Bluetooth: hci7: command tx timeout [ 256.862977] Bluetooth: hci0: command tx timeout [ 256.863450] Bluetooth: hci1: command tx timeout [ 256.927312] Bluetooth: hci2: command tx timeout [ 257.119153] Bluetooth: hci3: command tx timeout [ 257.182964] Bluetooth: hci4: command tx timeout [ 257.311117] Bluetooth: hci6: command tx timeout [ 257.502973] Bluetooth: hci7: command tx timeout [ 257.503430] Bluetooth: hci5: command tx timeout [ 258.911173] Bluetooth: hci1: command tx timeout [ 258.911643] Bluetooth: hci0: command tx timeout [ 258.975533] Bluetooth: hci2: command tx timeout [ 259.167184] Bluetooth: hci3: command tx timeout [ 259.231031] Bluetooth: hci4: command tx timeout [ 259.358931] Bluetooth: hci6: command tx timeout [ 259.550974] Bluetooth: hci5: command tx timeout [ 259.551439] Bluetooth: hci7: command tx timeout [ 313.407185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.416148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.419932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.429533] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.440850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.460436] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.463994] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.466704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.474537] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.482450] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.496490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.497844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.500445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.530462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.533802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.589383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.600574] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.607743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.613739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.616522] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.626734] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.635316] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.639065] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.659630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.662378] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.664985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.668125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.674680] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.677855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.680300] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.690526] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.694661] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.702705] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.717402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.774367] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.856500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 313.860459] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 313.862650] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 313.912696] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 313.955505] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 315.487320] Bluetooth: hci0: command tx timeout [ 315.551323] Bluetooth: hci1: command tx timeout [ 315.616946] Bluetooth: hci2: command tx timeout [ 315.679184] Bluetooth: hci3: command tx timeout [ 315.871233] Bluetooth: hci6: command tx timeout [ 316.000210] Bluetooth: hci4: command tx timeout [ 316.062957] Bluetooth: hci5: command tx timeout [ 316.063254] Bluetooth: hci7: command tx timeout [ 317.536923] Bluetooth: hci0: command tx timeout [ 317.599202] Bluetooth: hci1: command tx timeout [ 317.662977] Bluetooth: hci2: command tx timeout [ 317.727230] Bluetooth: hci3: command tx timeout [ 317.919298] Bluetooth: hci6: command tx timeout [ 318.048776] Bluetooth: hci4: command tx timeout [ 318.111428] Bluetooth: hci5: command tx timeout [ 318.112191] Bluetooth: hci7: command tx timeout [ 319.583291] Bluetooth: hci0: command tx timeout [ 319.649959] Bluetooth: hci1: command tx timeout [ 319.710945] Bluetooth: hci2: command tx timeout [ 319.777073] Bluetooth: hci3: command tx timeout [ 319.968915] Bluetooth: hci6: command tx timeout [ 320.096048] Bluetooth: hci4: command tx timeout [ 320.159176] Bluetooth: hci5: command tx timeout [ 320.160996] Bluetooth: hci7: command tx timeout [ 321.631200] Bluetooth: hci0: command tx timeout [ 321.694943] Bluetooth: hci1: command tx timeout [ 321.760985] Bluetooth: hci2: command tx timeout [ 321.822984] Bluetooth: hci3: command tx timeout [ 322.015418] Bluetooth: hci6: command tx timeout [ 322.142995] Bluetooth: hci4: command tx timeout [ 322.207096] Bluetooth: hci7: command tx timeout [ 322.207272] Bluetooth: hci5: command tx timeout [ 376.060320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.064281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.068937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.084747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.091707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.140361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.145587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.148143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.163374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.178422] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.326786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 376.341651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 376.347234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 376.355822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 376.404622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.408760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.412442] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.420512] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.426404] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.431372] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.510811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.514115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.544989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.554410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.566407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.570999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 376.571787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.608059] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.614303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.633932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 376.660021] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 376.664167] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 376.675355] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 376.699278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 376.726236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.800056] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 376.814271] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 376.827593] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 376.874817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 376.893408] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 378.143043] Bluetooth: hci0: command tx timeout [ 378.271028] Bluetooth: hci1: command tx timeout [ 378.526957] Bluetooth: hci2: command tx timeout [ 378.590998] Bluetooth: hci3: command tx timeout [ 378.719109] Bluetooth: hci5: command tx timeout [ 378.719280] Bluetooth: hci4: command tx timeout [ 379.039352] Bluetooth: hci7: command tx timeout [ 379.039588] Bluetooth: hci6: command tx timeout [ 380.192833] Bluetooth: hci0: command tx timeout [ 380.319110] Bluetooth: hci1: command tx timeout [ 380.575219] Bluetooth: hci2: command tx timeout [ 380.639116] Bluetooth: hci3: command tx timeout [ 380.768066] Bluetooth: hci5: command tx timeout [ 380.768126] Bluetooth: hci4: command tx timeout [ 381.087179] Bluetooth: hci7: command tx timeout [ 381.087584] Bluetooth: hci6: command tx timeout [ 382.238954] Bluetooth: hci0: command tx timeout [ 382.368366] Bluetooth: hci1: command tx timeout [ 382.624909] Bluetooth: hci2: command tx timeout [ 382.686946] Bluetooth: hci3: command tx timeout [ 382.815308] Bluetooth: hci5: command tx timeout [ 382.817001] Bluetooth: hci4: command tx timeout [ 383.135157] Bluetooth: hci6: command tx timeout [ 383.137926] Bluetooth: hci7: command tx timeout [ 384.287199] Bluetooth: hci0: command tx timeout [ 384.415005] Bluetooth: hci1: command tx timeout [ 384.670942] Bluetooth: hci2: command tx timeout [ 384.735915] Bluetooth: hci3: command tx timeout [ 384.862972] Bluetooth: hci4: command tx timeout [ 384.863466] Bluetooth: hci5: command tx timeout [ 385.183043] Bluetooth: hci7: command tx timeout [ 385.183540] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 12:03:14 Registers: info registers vcpu 0 RAX=ffffffff8160063e RBX=0000000000000001 RCX=ffffffff8679cf8c RDX=dffffc0000000000 RSI=1ffff11005e4eec0 RDI=1ffff11005e4eec0 RBP=ffff88802f277600 RSP=ffff88802f2774e8 R8 =ffffffff8679cf90 R9 =ffff88802f2775e8 R10=000000000003b0c2 R11=00000000000043a2 R12=ffff88802f277608 R13=ffff88802f2775f0 R14=ffff88802f277650 R15=ffff88802f2775a8 RIP=ffffffff8135141c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa7eee06540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff94693f48 CR3=0000000037990000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c1ba00 RDI=ffff88800f202640 RBP=ffffffff85c1ba00 RSP=ffff88806cf08c48 R8 =0000000000000000 R9 =fffffbfff0c81d82 R10=ffffffff8640ec17 R11=ffff88806cf37018 R12=ffff88800f201bc0 R13=ffff88800f202618 R14=00000000ffffffff R15=ffff88800f202640 RIP=ffffffff84ae10f3 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7f03440620 CR3=0000000035a02000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000