Warning: Permanently added '[localhost]:13340' (ECDSA) to the list of known hosts. 2025/04/30 15:10:34 fuzzer started 2025/04/30 15:10:34 dialing manager at localhost:46073 syzkaller login: [ 93.457253] cgroup: Unknown subsys name 'net' [ 93.586521] cgroup: Unknown subsys name 'cpuset' [ 93.623081] cgroup: Unknown subsys name 'rlimit' 2025/04/30 15:10:48 syscalls: 2214 2025/04/30 15:10:48 code coverage: enabled 2025/04/30 15:10:48 comparison tracing: enabled 2025/04/30 15:10:48 extra coverage: enabled 2025/04/30 15:10:48 setuid sandbox: enabled 2025/04/30 15:10:48 namespace sandbox: enabled 2025/04/30 15:10:48 Android sandbox: enabled 2025/04/30 15:10:48 fault injection: enabled 2025/04/30 15:10:48 leak checking: enabled 2025/04/30 15:10:48 net packet injection: enabled 2025/04/30 15:10:48 net device setup: enabled 2025/04/30 15:10:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/30 15:10:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/30 15:10:48 USB emulation: enabled 2025/04/30 15:10:48 hci packet injection: enabled 2025/04/30 15:10:48 wifi device emulation: enabled 2025/04/30 15:10:48 802.15.4 emulation: enabled 2025/04/30 15:10:49 fetching corpus: 0, signal 0/0 (executing program) 15:10:51 executing program 0: mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=xen,', {[{@version_9p2000}, {@nodevmap}, {@version_9p2000}, {@access_any}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x34, 0x62, 0x61, 0x33, 0x36, 0x66, 0x64], 0x2d, [0x35, 0x66, 0x36, 0x7], 0x2d, [0x62, 0x5, 0x61, 0xc], 0x2d, [0x63, 0x36, 0x38, 0x66], 0x2d, [0x62, 0x35, 0x62, 0x38, 0x30, 0x32, 0x39, 0x38]}}}]}}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) link(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x220002, 0x2) fsetxattr(r1, &(0x7f0000000440)=@random={'btrfs.', '\\/\'}:@\x00'}, &(0x7f0000000480)='nodevmap', 0x8, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000004c0)=0x3) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000580)={0x1, 0x72, &(0x7f0000000500)="25c57f140dc798c4710c6de107ba634156c0decd032b82bb38e71687feb7e7ebc5951c9f8fc56fa307d8a51672c134e6dea266fc50ad03fd521c04ce4b82f22c0f3c7c8fe8863fd1a892abbe14508586480a4dc7c9922610f5dd6ccdb0d8f721f2369ad8d0a4d01759c06e8c9fdd079586e9"}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001d00), 0x80400, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000001d40)=0x10000, 0x4) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000001d80)={0x4, 0x7, 0xff01, 0x80}) fsetxattr$security_selinux(r2, &(0x7f0000001dc0), &(0x7f0000001e00)='system_u:object_r:policy_src_t:s0\x00', 0x22, 0x1) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001e40)='./binderfs2/binder-control\x00', 0x800, 0x0) fremovexattr(r3, &(0x7f0000001e80)=@known='user.incfs.metadata\x00') ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001ec0)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000001f80)={&(0x7f0000001f00)=""/109, 0x6d}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000002000)) r5 = memfd_secret(0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000002040)={0x0, r5, 0x0, 0xffffffffffffffff, 0x8, 0x9}) 2025/04/30 15:10:50 starting 8 fuzzer processes [ 109.619402] audit: type=1400 audit(1746025851.048:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:10:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000020}, 0x20000800) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c1}, 0x4840) write$P9_RMKDIR(r1, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x20, 0x4, 0x8}}, 0x14) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000c1}, 0x805) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000400), &(0x7f0000000440)=0x8) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x101}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x68c5ec81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c011}, 0x80800) r3 = signalfd(r1, &(0x7f00000005c0), 0x8) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000600)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000640)={0x5, "d52d63"}, 0x6) r4 = open(&(0x7f0000000680)='./file0\x00', 0x800, 0xe0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000700)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0xfa, 0xda, 0x8, 0x0, @empty, @mcast1, 0x10, 0x1, 0x1, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0xc0, 0xfb, 0x4e375826, 0x51, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x8, 0x100, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x6, 0x84, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0, 0x8, 0x80, 0x0, 0x10000000}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001200)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000011c0)={&(0x7f0000000a80)={0x714, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xad}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfbdf}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1b2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x714}, 0x1, 0x0, 0x0, 0x4004c810}, 0x2800) sched_yield() write$rfkill(r4, &(0x7f0000001240)={0x1, 0x8, 0x2, 0x1, 0x1}, 0x8) 15:10:51 executing program 3: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000240)={0x9, 0x2, {0x1, 0x1, 0xe450, 0x0, 0x8}, 0x3ff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000300)={0x5, 0x0, 0x8, 0x5, 0x1fa4}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x181a02, 0x109) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000003c0)={0x20000000}) r3 = accept$inet(r0, &(0x7f0000000400)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000480)="19ff015f7a99f0da946048b6b4705c727764f9d2eeffd4379b75a288dcad68db5f729ac468f14ef3a2599cbec9bfcb93da37a9813cea497de60c8ade89004e", 0x3f}, {&(0x7f00000004c0)="5c3d869dfe2ce9cb19fc0c83435ed16afd6c07295c94d858722275e9c5be06fe5725569aaa34174bac69268a79e5918caf1db996d7cd0f049abade1b", 0x3c}, {&(0x7f0000000500)="3d14241322d74a724fe163bcd4d2ccbbe66caed2efd4d6cb5e1bb28e9cafa8848d5839fb9dd5afb90bc7db834b7cfa9b829788c75da4757c433ccda13d40c2419b990f896cef10e28074bb8d356246b0b3150e3c83e98585a2bc6c98c964259cc72f0751df", 0x65}, {&(0x7f0000000580)="f867d1ff7836a6a5de6abdd049e2520b56c5", 0x12}, {&(0x7f00000005c0)="9a4c007f9067529c62f4888f4c242abe73dab64524be833e9ec36d3ccd2c9a3e021259b11ffe14c5d4e515059f18862b2a869055492cb0af524f75935180258b92cd90ddd2a5c9526ef45a2f1c2971f2f829132704cf253ea39cbfacd125161f8556b16e72297dee26889c54bcab4a29fed14de8ef76a6fcf7aa03d185c2b7566963078ee3e003cf", 0x88}, {&(0x7f0000000680)="d35526e0fed795859280039203ec8226f6f28a1c3e5a963ab4ce25fec5c75929fda9906252744be9680d7490d9198e15c9032f1d9283bb85e8a71ceca7854aa03e386b54a82759184e05b999bcf31424b8d1e5739f14cd532433b5a8726d1667ea0a07f24523ba467d9a2f607d6e829b62c8d352d8d55a729faf5465b82275d7b860f30e0f243677e1a7f01628573a3e19867378df2d1ea2dacdd01a532aa54b1ac63364494db6db76cfa900bd821e", 0xaf}, {&(0x7f0000000740)="fd78d4f87c27dfd5c91a8482f2ae964706ea3faeaae0a1ab3014b2199c5d401d695b5331112815877e69161938fc086385967392fdbbaa4160295126c2fe3edd9859b3055d43e8ac5767f5f09a03a0904e8283ea449bb00f20cb4c4d56bc3ab2df272f2faad2e1d007a19030d64e40f3fe0e609c2b003821d54e5a5a9fb29b201f7a28117b4a418e640f3a0e31d9c1322ab997771448350561b2c475944e3af91786afea8c972c7218db70076563051b8eba466ccfb3bfd206a57d483875829c98a4a2eda8479fb696cd352c278d623d4c1ecfd271dd0a2877b2092e9fb8148601314fd166d211f0315d06383abab2", 0xef}], 0x7) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000008c0)={0x753e, {0x0, 0x362, 0x101, 0x0, 0x8001}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) ioctl$CDROMSEEK(r5, 0x5316, &(0x7f0000000940)={0x1, 0x0, 0x0, 0x5, 0x55}) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x800) r6 = perf_event_open$cgroup(&(0x7f0000000a80)={0x10d82a6eb131fb3c, 0x80, 0x7f, 0xdf, 0x68, 0x2, 0x0, 0x0, 0x10, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x100000001, 0x80}, 0x0, 0x10000, 0xfffffffe, 0x6, 0x8, 0xa5, 0x40, 0x0, 0x81, 0x0, 0x101}, r1, 0x5, r1, 0x1) fsetxattr$security_capability(r6, &(0x7f0000000b00), &(0x7f0000000b40)=@v2={0x2000000, [{0x5768, 0x2}, {0x9, 0x5}]}, 0x14, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000b80)={{0xf, @multicast1, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x3ff, 0x62}, {@local, 0x4e22, 0x2, 0x200, 0xfffffffb, 0xc5a4}}, 0x44) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000800) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000d00)) statx(r0, &(0x7f0000000d40)='./file0\x00', 0x800, 0x8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r7, 0x0) 15:10:51 executing program 2: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r1, &(0x7f0000000040)={0x13, 0x75, 0x1, {0x8, "d6273440797933b2"}}, 0x13) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000080)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x28100, 0x0) write$P9_RATTACH(r2, &(0x7f00000004c0)={0x14, 0x69, 0x1, {0x44, 0x4, 0x6}}, 0x14) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000500)) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0xa8, 0xff, 0x8, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0x1, 0x3}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc8, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8f}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004) r4 = openat2(r1, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x800, 0x0, 0x10}, 0x18) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40004404}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa8, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7c6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x93b6}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x404c014) r5 = signalfd4(r2, &(0x7f0000000a80)={[0x62]}, 0x8, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0x7ff) write$P9_RVERSION(r5, &(0x7f0000000ac0)={0x15, 0x65, 0xffff, 0xfff, 0x8, '9P2000.u'}, 0x15) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl2\x00', r3, 0x4, 0x6, 0x6, 0x3, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x700, 0x7, 0x8, 0x2}}) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000bc0)) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0xfb}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000d00)=""/67, &(0x7f0000000d80)=0x43) 15:10:51 executing program 5: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x200080, 0x0) bind$802154_raw(r1, &(0x7f00000000c0)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r1, 0xfffffffffffffff9, 0x2}) r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x20, 0xff, 0x4, 0x0, 0xc9fd, 0x404, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x40, 0x7}, 0x8210, 0x6, 0x1000, 0x3, 0x57, 0x4, 0x7f, 0x0, 0x9}, r1, 0xe, r1, 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[r1, r3, r1], 0x3) sync_file_range(0xffffffffffffffff, 0x5, 0x5, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000200)) r4 = open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x80100) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000280)={0x0, 0x1, 0x579, 0x0, 0x12}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4e023e8da9bf212d}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r7 = dup(r4) r8 = openat$cgroup_ro(r2, &(0x7f0000000480)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000004c0)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000500)) 15:10:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000000)={0x61df8971, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "dc0fef1a5f2ab2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001000)={{r2, 0x1, 0x3, 0xe8a3, 0x1, 0x5, 0x40, 0x401, 0x81, 0x6, 0x8, 0x5, 0x0, 0x3f, 0xc257}, 0x10, [0x0, 0x0]}) r3 = syz_open_dev$mouse(&(0x7f0000001080), 0x4, 0x21a400) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000010c0)=""/4096) r4 = openat2(r1, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)={0x80003, 0x40}, 0x18) ioctl$CDROMSTOP(r4, 0x5307) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002180), r4) getsockname$packet(0xffffffffffffffff, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1010004}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x5c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3c6bcc45}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008010}, 0x8814) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x48, 0x2, 0x7, 0xa83, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) recvmsg$unix(r1, &(0x7f00000036c0)={&(0x7f0000002480), 0x6e, &(0x7f00000035c0)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/162, 0xa2}], 0x2, &(0x7f0000003600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x1) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000003700)=0x4, 0x4) getsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f0000003740), &(0x7f0000003780)=0x4) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000037c0), 0x80082, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000003800)={r6, 0x1, 0x6, @remote}, 0x10) clock_gettime(0x0, &(0x7f0000008780)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000085c0)=[{{&(0x7f0000003840), 0x6e, &(0x7f0000005940)=[{&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/100, 0x64}], 0x3, &(0x7f0000005980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000005a40), 0x6e, &(0x7f0000007040)=[{&(0x7f0000005ac0)=""/85, 0x55}, {&(0x7f0000005b40)=""/199, 0xc7}, {&(0x7f0000005c40)=""/4, 0x4}, {&(0x7f0000005c80)=""/137, 0x89}, {&(0x7f0000005d40)=""/138, 0x8a}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/29, 0x1d}, {&(0x7f0000006e40)=""/165, 0xa5}, {&(0x7f0000006f00)=""/137, 0x89}, {&(0x7f0000006fc0)=""/92, 0x5c}], 0xa}}, {{&(0x7f0000007100)=@abs, 0x6e, &(0x7f0000007500)=[{&(0x7f0000007180)=""/193, 0xc1}, {&(0x7f0000007280)=""/239, 0xef}, {&(0x7f0000007380)=""/57, 0x39}, {&(0x7f00000073c0)=""/73, 0x49}, {&(0x7f0000007440)=""/152, 0x98}], 0x5, &(0x7f0000007580)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000075c0)=@abs, 0x6e, &(0x7f0000007a00)=[{&(0x7f0000007640)=""/28, 0x1c}, {&(0x7f0000007680)=""/157, 0x9d}, {&(0x7f0000007740)=""/40, 0x28}, {&(0x7f0000007780)=""/159, 0x9f}, {&(0x7f0000007840)=""/178, 0xb2}, {&(0x7f0000007900)=""/198, 0xc6}], 0x6, &(0x7f0000007a80)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000007bc0)=[{&(0x7f0000007b00)=""/190, 0xbe}], 0x1, &(0x7f0000007c00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000007c40)=@abs, 0x6e, &(0x7f0000008240)=[{&(0x7f0000007cc0)}, {&(0x7f0000007d00)=""/226, 0xe2}, {&(0x7f0000007e00)=""/192, 0xc0}, {&(0x7f0000007ec0)=""/174, 0xae}, {&(0x7f0000007f80)=""/219, 0xdb}, {&(0x7f0000008080)=""/141, 0x8d}, {&(0x7f0000008140)=""/237, 0xed}], 0x7, &(0x7f00000082c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000008340), 0x6e, &(0x7f0000008540)=[{&(0x7f00000083c0)=""/233, 0xe9}, {&(0x7f00000084c0)=""/110, 0x6e}], 0x2, &(0x7f0000008580)=[@cred={{0x1c}}], 0x20}}], 0x7, 0x80000000, &(0x7f00000087c0)={r10, r11+10000000}) sendmsg$TIPC_CMD_SET_LINK_PRI(r12, &(0x7f0000008940)={&(0x7f0000008800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000008900)={&(0x7f0000008880)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) 15:10:51 executing program 6: prctl$PR_CAP_AMBIENT(0x2f, 0xf841dbb358f66c9b, 0x18) setfsuid(0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x2) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x214000, &(0x7f0000000080)={[{@none}, {@cpuset_v2_mode}], [{@smackfsdef={'smackfsdef', 0x3d, '.'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '('}}, {@smackfshat}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0x9, 0x4, 0xffffffff7fffffff, 0x40, 0x3, 0x3}) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2002, &(0x7f00000001c0)={'trans=unix,', {[{@access_user}, {@cache_loose}], [{@hash}, {@measure}]}}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) mount$9p_virtio(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x80000, &(0x7f0000000480)={'trans=virtio,', {[{@cache_fscache}, {@fscache}], [{@fsuuid={'fsuuid', 0x3d, {[0xa, 0x36, 0x31, 0x63, 0x65, 0x39, 0x36, 0x37], 0x2d, [0x65, 0x38, 0x33, 0x32], 0x2d, [0x39, 0x30, 0x37, 0x64], 0x2d, [0x64, 0x6b, 0x32, 0x38], 0x2d, [0x33, 0x38, 0x38, 0x59, 0x0, 0x64, 0x65, 0x64]}}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x3a, 0x65, 0x39, 0x30, 0x32, 0x66, 0x62], 0x2d, [0x31, 0x65, 0x61, 0x36], 0x2d, [0x38, 0x30, 0x61, 0x38], 0x2d, [0x63, 0x64, 0x66, 0x35], 0x2d, [0x33, 0x34, 0x34, 0x66, 0x38, 0x66, 0x0, 0x31]}}}, {@subj_role={'subj_role', 0x3d, '/\x9a&\xc9%!'}}, {@fowner_gt={'fowner>', r2}}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$802154_dgram(r3, &(0x7f0000000580), 0x14) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) listen(r4, 0x1) recvmmsg(r3, &(0x7f0000005180)=[{{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000001900)=[{&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/9, 0x9}, {&(0x7f00000007c0)=""/18, 0x12}, {&(0x7f0000000800)=""/91, 0x5b}, {&(0x7f0000000880)=""/57, 0x39}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/12, 0xc}], 0x8}, 0x7}, {{&(0x7f0000001980)=@nfc_llcp, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001a00)=""/26, 0x1a}], 0x1, &(0x7f0000001a80)=""/4096, 0x1000}, 0x3f}, {{&(0x7f0000002a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000002b00)=""/146, 0x92}, {0xfffffffffffffffd}, {&(0x7f0000002bc0)=""/43, 0x2b}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/27, 0x1b}, {&(0x7f0000003c40)=""/128, 0x80}, {&(0x7f0000003cc0)=""/47, 0x2f}, {&(0x7f0000003d00)=""/4096, 0x1000}], 0x8, &(0x7f0000004d80)=""/199, 0xc7}, 0x4}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000004e80)}, {&(0x7f0000004ec0)=""/230, 0xe6}, {&(0x7f0000004fc0)=""/252, 0xfc}], 0x3, &(0x7f0000005100)=""/92, 0x5c}, 0x9}], 0x4, 0x40012021, &(0x7f0000005280)={0x0, 0x3938700}) sendmsg$802154_raw(r3, &(0x7f0000005440)={&(0x7f00000052c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000005400)={&(0x7f0000005300)="497c0026f510fcfffa7456533b1bf2909e24a91bb82555cb4c9a18414ac927df22fd18aa17bfe4dcb5342f07edcc7c5e66d2f01b5be655db1464e808d7adb07c7eb9de5ec71a5ff664d00d3f6d65be0996c8cf5b43fa88146399bd3d5bc362b3ebba324184c9b970d0e5e01b537441a2b25f679c41d9951be01a93d0461ffde69f25ffbbd95f4c7a326f16912547efa3ea55d5ca3fa6fded4a971bb769fac9209ceab0d7fe1a4f05730e9ad7ddef98cc0fa79729abbd6036eafa71956c4ed7331e72c8841be544cb92f431a9f2e715", 0xcf}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000005480)={@in6={{0xa, 0x4e24, 0x2b5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10001}}, 0x0, 0x0, 0x13, 0x0, "1a9766930c9a37a5e28785a1784ee8c74f7e9609250c121266e21c530797a7c384647143c1b84c4eafb073394eeb068d4781624e2071df07f5c79cee98ac8b6ac40d6bea91d212f89819a25c33045e88"}, 0xd8) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000005580)={0x1, 0x40, @status={[0x1, 0x3, 0x8, 0x6, 0x5]}, [0xffff, 0x8, 0xfffffffffffffffe, 0x3f, 0x4, 0x7f, 0xb48, 0xffff, 0x101, 0x27a9, 0x6d38, 0x7, 0xffffffffffffffe0, 0x9, 0x5, 0xb, 0x9, 0x0, 0x1, 0xc5fc, 0x200, 0x800, 0x0, 0x5, 0x8001, 0xa7, 0x3, 0x6, 0x10000, 0x7, 0x4, 0x6, 0x84, 0x100, 0x4, 0x80000001, 0x4, 0x4, 0x3, 0x1, 0x9, 0x0, 0x4, 0xffffffff, 0xebd6, 0x800, 0x1, 0x2, 0x51, 0x4ac6, 0x800, 0x36, 0xfff, 0x80, 0x7ff, 0x200, 0x20, 0x861, 0x7d12, 0x8, 0x0, 0x81, 0xfffffffffffffff7, 0x4]}) 15:10:51 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0x4c4000, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/83}) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x75c, 0x80100) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x3fa, 0x200, 0x70bd27, 0x25dfdbfd, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4c011}, 0x24000004) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='attr\x00') ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000440)=0xae) r3 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000004c0)=0x4) ioctl$int_out(r1, 0x5460, &(0x7f0000000500)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) fsetxattr$system_posix_acl(r4, &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {}, [{0x2, 0x6, r5}, {0x2, 0x1}, {0x2, 0x7, r6}], {0x4, 0x2}, [{0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x1, r7}, {0x8, 0x7, r8}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x5, 0xee00}], {0x10, 0x4}, {0x20, 0x4}}, 0x64, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0\x00'}) setsockopt$inet6_MRT6_DEL_MFC(r9, 0x29, 0xcd, &(0x7f0000000900)={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, {0xa, 0x4e20, 0x5, @empty, 0x9}, 0x8, [0x80000001, 0x0, 0x5, 0x10000, 0x1, 0x731, 0x7f, 0xfffff801]}, 0x5c) [ 111.056598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.059361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.061175] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.064569] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.068799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.097898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.100988] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.103587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.110998] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.114267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.118095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.120227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.137964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.146974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.154840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.195854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.197861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.200440] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.202895] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.204927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.205534] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.226720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.234856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.238017] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.241670] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.243386] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.246417] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.252623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.254725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.265977] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.267312] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.271533] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.273738] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.283399] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.291536] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.293586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.317796] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.320088] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.327981] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.386958] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.128918] Bluetooth: hci0: command tx timeout [ 113.192630] Bluetooth: hci2: command tx timeout [ 113.193737] Bluetooth: hci1: command tx timeout [ 113.320402] Bluetooth: hci4: command tx timeout [ 113.384578] Bluetooth: hci3: command tx timeout [ 113.386254] Bluetooth: hci5: command tx timeout [ 113.448447] Bluetooth: hci6: command tx timeout [ 113.449599] Bluetooth: hci7: command tx timeout [ 115.176286] Bluetooth: hci0: command tx timeout [ 115.240340] Bluetooth: hci2: command tx timeout [ 115.240885] Bluetooth: hci1: command tx timeout [ 115.368289] Bluetooth: hci4: command tx timeout [ 115.432361] Bluetooth: hci3: command tx timeout [ 115.432896] Bluetooth: hci5: command tx timeout [ 115.497482] Bluetooth: hci6: command tx timeout [ 115.498010] Bluetooth: hci7: command tx timeout [ 117.224584] Bluetooth: hci0: command tx timeout [ 117.288677] Bluetooth: hci1: command tx timeout [ 117.290459] Bluetooth: hci2: command tx timeout [ 117.416551] Bluetooth: hci4: command tx timeout [ 117.481163] Bluetooth: hci3: command tx timeout [ 117.481709] Bluetooth: hci5: command tx timeout [ 117.544692] Bluetooth: hci7: command tx timeout [ 117.546343] Bluetooth: hci6: command tx timeout [ 119.272205] Bluetooth: hci0: command tx timeout [ 119.336715] Bluetooth: hci1: command tx timeout [ 119.338196] Bluetooth: hci2: command tx timeout [ 119.464234] Bluetooth: hci4: command tx timeout [ 119.528325] Bluetooth: hci5: command tx timeout [ 119.528850] Bluetooth: hci3: command tx timeout [ 119.592245] Bluetooth: hci7: command tx timeout [ 119.592773] Bluetooth: hci6: command tx timeout [ 173.814917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.817252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.819992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.831060] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.835847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.888400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.892511] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.894817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.914437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.917578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.014923] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.018535] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.021280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.024525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.026517] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.077983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.084281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.087554] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.095696] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.111654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.290389] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.304398] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.311810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.321558] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.324370] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.339354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.349572] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.354821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.357799] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.363868] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.364803] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.369046] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.377561] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.379539] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.402488] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.406739] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.408062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.420283] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.442512] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.464605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.913199] Bluetooth: hci0: command tx timeout [ 175.977424] Bluetooth: hci1: command tx timeout [ 176.104566] Bluetooth: hci3: command tx timeout [ 176.169251] Bluetooth: hci5: command tx timeout [ 176.488229] Bluetooth: hci4: command tx timeout [ 176.489249] Bluetooth: hci2: command tx timeout [ 176.552227] Bluetooth: hci7: command tx timeout [ 176.617169] Bluetooth: hci6: command tx timeout [ 177.960496] Bluetooth: hci0: command tx timeout [ 178.025224] Bluetooth: hci1: command tx timeout [ 178.152211] Bluetooth: hci3: command tx timeout [ 178.220289] Bluetooth: hci5: command tx timeout [ 178.536220] Bluetooth: hci2: command tx timeout [ 178.536278] Bluetooth: hci4: command tx timeout [ 178.603197] Bluetooth: hci7: command tx timeout [ 178.666164] Bluetooth: hci6: command tx timeout [ 180.009440] Bluetooth: hci0: command tx timeout [ 180.072237] Bluetooth: hci1: command tx timeout [ 180.201185] Bluetooth: hci3: command tx timeout [ 180.265636] Bluetooth: hci5: command tx timeout [ 180.584581] Bluetooth: hci2: command tx timeout [ 180.584830] Bluetooth: hci4: command tx timeout [ 180.648239] Bluetooth: hci7: command tx timeout [ 180.712479] Bluetooth: hci6: command tx timeout [ 182.056521] Bluetooth: hci0: command tx timeout [ 182.120190] Bluetooth: hci1: command tx timeout [ 182.248181] Bluetooth: hci3: command tx timeout [ 182.314164] Bluetooth: hci5: command tx timeout [ 182.632258] Bluetooth: hci2: command tx timeout [ 182.632344] Bluetooth: hci4: command tx timeout [ 182.696371] Bluetooth: hci7: command tx timeout [ 182.761208] Bluetooth: hci6: command tx timeout [ 236.219054] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.222348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.227005] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.246962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.251929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.282858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.290885] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.295588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.302454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.313289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.404886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.408416] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.410427] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.416668] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.430163] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.486387] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.502516] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.512990] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.538578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.541240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.544522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.545785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.561480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.612963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.636276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.684692] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.693515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.704718] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.717641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.727460] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.728538] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.735348] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.737798] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.741416] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.744039] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.763809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.801677] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.810573] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.814583] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.824888] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.312217] Bluetooth: hci0: command tx timeout [ 238.376446] Bluetooth: hci1: command tx timeout [ 238.504259] Bluetooth: hci2: command tx timeout [ 238.633589] Bluetooth: hci3: command tx timeout [ 238.696232] Bluetooth: hci4: command tx timeout [ 238.824966] Bluetooth: hci5: command tx timeout [ 238.889224] Bluetooth: hci6: command tx timeout [ 238.952256] Bluetooth: hci7: command tx timeout [ 240.360188] Bluetooth: hci0: command tx timeout [ 240.424405] Bluetooth: hci1: command tx timeout [ 240.554176] Bluetooth: hci2: command tx timeout [ 240.680603] Bluetooth: hci3: command tx timeout [ 240.744500] Bluetooth: hci4: command tx timeout [ 240.872494] Bluetooth: hci5: command tx timeout [ 240.936959] Bluetooth: hci6: command tx timeout [ 241.000215] Bluetooth: hci7: command tx timeout [ 242.408294] Bluetooth: hci0: command tx timeout [ 242.473225] Bluetooth: hci1: command tx timeout [ 242.600204] Bluetooth: hci2: command tx timeout [ 242.728501] Bluetooth: hci3: command tx timeout [ 242.793356] Bluetooth: hci4: command tx timeout [ 242.920626] Bluetooth: hci5: command tx timeout [ 242.984480] Bluetooth: hci6: command tx timeout [ 243.048359] Bluetooth: hci7: command tx timeout [ 244.456541] Bluetooth: hci0: command tx timeout [ 244.520499] Bluetooth: hci1: command tx timeout [ 244.648457] Bluetooth: hci2: command tx timeout [ 244.776231] Bluetooth: hci3: command tx timeout [ 244.840409] Bluetooth: hci4: command tx timeout [ 244.968190] Bluetooth: hci5: command tx timeout [ 245.032480] Bluetooth: hci6: command tx timeout [ 245.096442] Bluetooth: hci7: command tx timeout [ 298.832747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.835447] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.840778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.849645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.853325] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.877045] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.880683] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.883683] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.888663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.890921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.007663] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.012504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.017435] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.035447] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.039594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.131043] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.139476] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.150469] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.164631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.166907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.201735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.215551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.231307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.254314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.290044] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.292063] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.294730] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.295920] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.297165] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.297972] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.304188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.304996] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.311558] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.312488] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.318709] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.366416] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.384464] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.399513] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.421492] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.425360] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.915772] Bluetooth: hci0: command tx timeout [ 300.980346] Bluetooth: hci1: command tx timeout [ 301.096246] Bluetooth: hci2: command tx timeout [ 301.288192] Bluetooth: hci3: command tx timeout [ 301.353370] Bluetooth: hci6: command tx timeout [ 301.416641] Bluetooth: hci4: command tx timeout [ 301.417659] Bluetooth: hci7: command tx timeout [ 301.544197] Bluetooth: hci5: command tx timeout [ 302.952502] Bluetooth: hci0: command tx timeout [ 303.016728] Bluetooth: hci1: command tx timeout [ 303.145141] Bluetooth: hci2: command tx timeout [ 303.336222] Bluetooth: hci3: command tx timeout [ 303.400234] Bluetooth: hci6: command tx timeout [ 303.464370] Bluetooth: hci4: command tx timeout [ 303.465992] Bluetooth: hci7: command tx timeout [ 303.593182] Bluetooth: hci5: command tx timeout [ 305.000249] Bluetooth: hci0: command tx timeout [ 305.064264] Bluetooth: hci1: command tx timeout [ 305.193310] Bluetooth: hci2: command tx timeout [ 305.384422] Bluetooth: hci3: command tx timeout [ 305.448198] Bluetooth: hci6: command tx timeout [ 305.512926] Bluetooth: hci4: command tx timeout [ 305.513457] Bluetooth: hci7: command tx timeout [ 305.640479] Bluetooth: hci5: command tx timeout [ 307.048234] Bluetooth: hci0: command tx timeout [ 307.113157] Bluetooth: hci1: command tx timeout [ 307.240195] Bluetooth: hci2: command tx timeout [ 307.433520] Bluetooth: hci3: command tx timeout [ 307.496244] Bluetooth: hci6: command tx timeout [ 307.560245] Bluetooth: hci7: command tx timeout [ 307.560732] Bluetooth: hci4: command tx timeout [ 307.689389] Bluetooth: hci5: command tx timeout [ 361.788881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.790730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.792855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.796810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.806769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.923473] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.926505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.928972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.932608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.937706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.940155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.942416] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.950515] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.967416] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.983252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.013643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.022507] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.028753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.033281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.038534] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.062393] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.064379] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.066304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.070949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.079304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.082603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.084093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.087244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.091329] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.094315] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.099516] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.101979] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.104301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.108956] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.112396] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.116792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.121384] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.142758] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.168462] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.170959] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.881258] Bluetooth: hci0: command tx timeout [ 364.008534] Bluetooth: hci1: command tx timeout [ 364.072510] Bluetooth: hci2: command tx timeout [ 364.137203] Bluetooth: hci3: command tx timeout [ 364.200221] Bluetooth: hci6: command tx timeout [ 364.200311] Bluetooth: hci4: command tx timeout [ 364.201829] Bluetooth: hci7: command tx timeout [ 364.201838] Bluetooth: hci5: command tx timeout [ 365.928197] Bluetooth: hci0: command tx timeout [ 366.057492] Bluetooth: hci1: command tx timeout [ 366.121341] Bluetooth: hci2: command tx timeout [ 366.185202] Bluetooth: hci3: command tx timeout [ 366.248629] Bluetooth: hci7: command tx timeout [ 366.249248] Bluetooth: hci5: command tx timeout [ 366.249322] Bluetooth: hci6: command tx timeout [ 366.250012] Bluetooth: hci4: command tx timeout [ 367.976247] Bluetooth: hci0: command tx timeout [ 368.104773] Bluetooth: hci1: command tx timeout [ 368.168578] Bluetooth: hci2: command tx timeout [ 368.234421] Bluetooth: hci3: command tx timeout [ 368.296685] Bluetooth: hci7: command tx timeout [ 368.297398] Bluetooth: hci4: command tx timeout [ 368.297884] Bluetooth: hci6: command tx timeout [ 368.298574] Bluetooth: hci5: command tx timeout [ 370.024203] Bluetooth: hci0: command tx timeout [ 370.152179] Bluetooth: hci1: command tx timeout [ 370.216429] Bluetooth: hci2: command tx timeout [ 370.280495] Bluetooth: hci3: command tx timeout [ 370.344238] Bluetooth: hci4: command tx timeout [ 370.344590] Bluetooth: hci7: command tx timeout [ 370.344724] Bluetooth: hci5: command tx timeout [ 370.345328] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 15:15:53 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff81ae06fa RCX=ffff88800961781c RDX=1ffff110012c2f24 RSI=ffffffff85c1bac0 RDI=ffffffff81ae06fa RBP=ffffffff81ae06fa RSP=ffff888009617888 R8 =ffffffff8685f7ae R9 =ffff888009617908 R10=000000000003b124 R11=0000000000024821 R12=ffff888009617990 R13=0000000000000000 R14=ffff888009601bc0 R15=ffff88801cfca378 RIP=ffffffff8142fb13 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5648000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4b535f48e0 CR3=0000000033482000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2e7473696c6b63616c622d7665646266 XMM01=00666e6f632e7473696c6b63616c622d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=f1c626aa2be59e06 RDX=00000000d8cfbc08 RSI=000000007d3de627 RDI=00000000560da22f RBP=ffffffff85c1bac0 RSP=ffff888029e777b0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000024861 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff815185bb RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5748000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f063c9538e0 CR3=000000000d500000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000