Warning: Permanently added '[localhost]:8417' (ECDSA) to the list of known hosts. 2025/05/23 22:21:23 fuzzer started 2025/05/23 22:21:23 dialing manager at localhost:46087 syzkaller login: [ 100.738061] cgroup: Unknown subsys name 'net' [ 100.914284] cgroup: Unknown subsys name 'cpuset' [ 100.966574] cgroup: Unknown subsys name 'rlimit' 2025/05/23 22:21:47 syscalls: 214 2025/05/23 22:21:47 code coverage: enabled 2025/05/23 22:21:47 comparison tracing: enabled 2025/05/23 22:21:47 extra coverage: enabled 2025/05/23 22:21:47 setuid sandbox: enabled 2025/05/23 22:21:47 namespace sandbox: enabled 2025/05/23 22:21:47 Android sandbox: enabled 2025/05/23 22:21:47 fault injection: enabled 2025/05/23 22:21:47 leak checking: enabled 2025/05/23 22:21:47 net packet injection: enabled 2025/05/23 22:21:47 net device setup: enabled 2025/05/23 22:21:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/23 22:21:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/23 22:21:47 USB emulation: enabled 2025/05/23 22:21:47 hci packet injection: enabled 2025/05/23 22:21:47 wifi device emulation: enabled 2025/05/23 22:21:47 802.15.4 emulation: enabled 2025/05/23 22:21:47 fetching corpus: 0, signal 0/0 (executing program) 2025/05/23 22:21:49 starting 8 fuzzer processes 22:21:49 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x10, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x804) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x188, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x188}}, 0x4008040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r2 = memfd_secret(0x80000) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x178, 0x0, 0x22, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x178}, 0x1, 0x0, 0x0, 0x44080}, 0x40080) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000900)=[{{&(0x7f0000000800)=@isdn, 0x80, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=""/23, 0x17}, 0x80}], 0x1, 0x2042, &(0x7f0000000980)={r3, r4+10000000}) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x300, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x810) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x101002, 0x2) faccessat2(r6, &(0x7f0000000b40)='./file0\x00', 0x50, 0x1000) r7 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000012c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f00000013c0)=0xe8) r10 = request_key(&(0x7f0000001400)='big_key\x00', &(0x7f0000001440)={'syz', 0x1}, &(0x7f0000001480)='l2_drops\x00', 0xfffffffffffffff9) keyctl$get_persistent(0x16, r9, r10) keyctl$reject(0x13, r10, 0x1, 0x0, 0x0) 22:21:49 executing program 2: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/4096) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000001000)) r0 = dup(0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fchownat(r0, &(0x7f0000001040)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x100) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5e}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x971}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x14) r1 = dup(r0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x6000010) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000012c0)=""/99) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001340)={0x73622a85, 0xb}) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000013c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x54, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24000804) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'lo\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'gre0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc080}, 0x20000000) shmget(0x3, 0x1000, 0x780010f0, &(0x7f0000ffe000/0x1000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001640)={@private2, 0x0, 0x0, 0x1, 0xb, 0x7, 0x8}, &(0x7f0000001680)=0x20) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xcc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x40, 0x0, 0x29c, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @void, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc095}, 0x20000000) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000019c0)={0xd4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x2, 0x7, 0x0, {0x40, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x1, 0x3f}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x68, 0x51, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3b8d738150"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x71fbb79715d1ee4e}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3316df9514"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f69423cdb5"}]}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x3, 0x0, {0x6, 0x1ef9, 0x0, 0x360, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x9}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x40020) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x70, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x134}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8}}]}, 0x70}}, 0x8051) 22:21:49 executing program 1: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x1f}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @llc={0x1a, 0x337, 0x1, 0xb, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @phonet={0x23, 0x0, 0x1f, 0x1}, 0x3000, 0x0, 0x0, 0x0, 0x41, &(0x7f0000000040)='caif0\x00', 0x1, 0x101, 0x8}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x135}}, './file0\x00'}) recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000280)=""/94, 0x5e}], 0x3, &(0x7f0000000340)=""/225, 0xe1}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/28, 0x1c}, {&(0x7f00000015c0)=""/171, 0xab}], 0x5, &(0x7f0000001700)=""/101, 0x65}, 0x6}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/86, 0x56}, {&(0x7f0000002880)=""/84, 0x54}], 0x4}, 0x3}, {{&(0x7f0000002940)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/230, 0xe6}, {&(0x7f0000002ac0)=""/62, 0x3e}], 0x2, &(0x7f0000002b40)=""/7, 0x7}, 0x8000}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000002b80)=""/4096, 0x1000}], 0x1, &(0x7f0000003bc0)=""/14, 0xe}, 0x3}, {{&(0x7f0000003c00)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003c80)=""/232, 0xe8}, {&(0x7f0000003d80)=""/46, 0x2e}], 0x2, &(0x7f0000003e00)=""/158, 0x9e}, 0x80}], 0x6, 0x10000, &(0x7f0000004040)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000004100)={'ip6gre0\x00', &(0x7f0000004080)={'ip6tnl0\x00', 0x0, 0x2f, 0xf7, 0x0, 0x0, 0x44, @empty, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x71a, 0x8, 0x80, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000004140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000004180)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004240)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000004340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000004400)={'syztnl2\x00', &(0x7f0000004380)={'ip6tnl0\x00', r4, 0x2f, 0x4, 0x4, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x20, 0x1, 0x12f, 0x3}}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000004440)) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000004480)="4e32ce4911b9f82a17d5a9351a5fe6a093406b64743079b4883a4bdba52554cf378690cbc6961183874d28fce6781dfa1fcdd4769adddf9ff2e133b708594af559fc72154a6441a472fcff60b96574c483bc83049c3144caebb202ecd531b5e83e") r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000004500)=""/191, &(0x7f00000045c0)=0xbf) pipe2(&(0x7f0000004600), 0x84000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000004680), r0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000004780)={&(0x7f0000004640), 0xc, &(0x7f0000004740)={&(0x7f00000046c0)={0x54, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) [ 125.896777] audit: type=1400 audit(1748038909.224:7): avc: denied { execmem } for pid=285 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:21:49 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x61bd, 0xff, 0xfffffffffffffffe}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x30) renameat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') faccessat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1032, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x80}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48c0}, 0x40008c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, r6, 0x0) getdents(r1, &(0x7f0000000400)=""/247, 0xf7) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000500)=0x1, 0x4) pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) write$binfmt_script(r7, &(0x7f0000000580)={'#! ', './file0', [{0x20, 'keyring\x00'}], 0xa, "b0258b036413fe63b1aef3cda089f9c8123de1787fceba8e"}, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f00000005c0)={@desc={0x1, 0x0, @desc1}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'}) recvmmsg(r4, &(0x7f0000007b00)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000001780)=[{&(0x7f00000006c0)=""/151, 0x97}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, &(0x7f00000017c0)=""/33, 0x21}}, {{&(0x7f0000001800)=@pppoe, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/249, 0xf9}, {&(0x7f0000001980)=""/63, 0x3f}, {&(0x7f00000019c0)=""/43, 0x2b}], 0x3, &(0x7f0000001a40)}, 0x2}, {{&(0x7f0000001a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001b00)=""/6, 0x6}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x2, &(0x7f0000002b80)=""/143, 0x8f}, 0x101}, {{&(0x7f0000002c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002cc0)=""/133, 0x85}, {&(0x7f0000002d80)=""/166, 0xa6}, {&(0x7f0000002e40)=""/54, 0x36}, {&(0x7f0000002e80)=""/18, 0x12}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x5}, 0x8}, {{&(0x7f0000003f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003fc0)=""/28, 0x1c}, {&(0x7f0000004000)=""/109, 0x6d}], 0x2, &(0x7f00000040c0)=""/151, 0x97}, 0x5}, {{&(0x7f0000004180)=@sco, 0x80, &(0x7f0000005200)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1, &(0x7f0000005240)=""/182, 0xb6}, 0xffff}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000005300)=""/11, 0xb}, {&(0x7f0000005340)=""/36, 0x24}, {&(0x7f0000005380)=""/60, 0x3c}, {&(0x7f00000053c0)=""/87, 0x57}, {&(0x7f0000005440)=""/132, 0x84}], 0x5, &(0x7f0000005580)=""/127, 0x7f}, 0x2}, {{0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/143, 0x8f}, {&(0x7f00000066c0)=""/2, 0x2}, {&(0x7f0000006700)=""/176, 0xb0}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f00000077c0)=""/180, 0xb4}, {&(0x7f0000007880)=""/114, 0x72}, {&(0x7f0000007900)=""/227, 0xe3}, {&(0x7f0000007a00)=""/51, 0x33}], 0x9}, 0x5}], 0x8, 0x4000a040, &(0x7f0000007d00)={0x0, 0x989680}) recvmmsg(r8, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f000000a080)=[{&(0x7f0000007d40)=""/121, 0x79}, {&(0x7f0000007dc0)=""/32, 0x20}, {&(0x7f0000007e00)=""/4096, 0x1000}, {&(0x7f0000008e00)=""/127, 0x7f}, {&(0x7f0000008e80)=""/63, 0x3f}, {&(0x7f0000008ec0)=""/160, 0xa0}, {&(0x7f0000008f80)=""/83, 0x53}, {&(0x7f0000009000)=""/4096, 0x1000}, {&(0x7f000000a000)=""/121, 0x79}], 0x9, &(0x7f000000a140)=""/76, 0x4c}, 0x5}], 0x1, 0x200, &(0x7f000000a240)) 22:21:49 executing program 4: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000080)={'\x00', 0xde, 0x1, 0x8}) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000100)={0xffff, 0x1}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x280, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '%)-)#%&\xa7,-'}, {0x20, '\x00'}, {}], 0xa, "6ea98d5885469f"}, 0x22) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c091}, 0x4000041) r3 = memfd_secret(0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x2}, @increfs], 0x48, 0x0, &(0x7f0000000340)="8cd5d7befa9cc9b08788e8179dbc1b7efbcbfdad849022b901414c70b56eada6b1f9003acc67fd38d1518aa5bde5cd3827e205443ea2932aafa2c699e420ef3472b7e274b7d8bd74"}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x0, 0x100) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r3) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa0, r5, 0x0, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r6, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000008c0)={0x2}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0xb40) 22:21:49 executing program 5: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa77b}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x302b}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x128, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000800}, 0x801) r3 = socket(0x26, 0x6, 0x10001) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r2) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', './file0', [{0x20, ':,}:'}, {0x20, ')'}, {0x20, 'w-).'}, {0x20, 'devlink\x00'}, {0x20, 'netdevsim'}, {0x20, '\'^'}], 0xa, "6b0d2aae9570ad7583ecb97b678de93396447e6e62b360dd40da41208640ff882f69a2019ce0db48b9bf22cd2a6c748e1b24b202002af3200f9b8f2bd6d70b24e45a028e6897477c702df0be71"}, 0x7a) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x220d00, 0x40) r6 = dup(r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001940)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r6, 0x0, &(0x7f0000001900)={&(0x7f0000000700)=@phonet, 0x80, &(0x7f0000001800)=[{&(0x7f0000000780)=""/76, 0x4c}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2, &(0x7f0000001840)=""/191, 0xbf}, 0x0, 0x80000001, 0x1, {0x1}}, 0x6) pipe2(&(0x7f0000001980)={0xffffffffffffffff}, 0x4c00) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r6) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0xb4, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xb3c3}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x776}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2f6}, {0x6, 0x16, 0xda7c}, {0x5}, {0x6, 0x11, 0x3ff}, {0x8, 0xb, 0x1}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c00)={0x120, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) 22:21:49 executing program 6: execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000040)='!-@*-\xc5{\x00', &(0x7f0000000080)=',^\x00', &(0x7f00000000c0)='(&*!\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='])]\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='*]\x00'], 0x800) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x801, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r1 = socket(0x2a, 0x4, 0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000400)={"ef9107366f57837ff1ebb4fe11cb7ae5", 0x0, 0x0, {0x100000000, 0x2}, {0x80000000, 0x401}, 0x9e8, [0x0, 0x9, 0x1000, 0x9, 0x3, 0x90, 0x7, 0x6, 0x80000001, 0x178e000, 0x101, 0xfffffffffffff000, 0x6, 0x4, 0x9c6, 0xffffffffffffff48]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000500)={"41a36cf774922c5a98b2f474459eb81d", 0x0, r2, {0x9, 0x8}, {0x3, 0x101}, 0x3, [0x4, 0xffffffffffff7fff, 0x5, 0xfffffffffffffffc, 0xc00000000000000, 0x8000000000000000, 0x2, 0x80000000, 0x4, 0xffffffff, 0x3ff, 0x10001, 0xffffffff, 0xffff, 0x9, 0xcf]}) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x410000, 0x120) fchownat(r3, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, 0xee00, 0x400) r4 = syz_open_dev$usbmon(&(0x7f0000000680), 0x7, 0x90040) ioctl$FIBMAP(r4, 0x1, &(0x7f00000006c0)=0x3) r5 = dup(r4) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000007c0)={r3, 0x80, 0x7}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000000b40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x27c, r8, 0x4, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x3ff}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0xffffff04}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0xbb}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe94}, {0x6, 0x11, 0xa59}, {0x8, 0x13, 0x1000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff7f}, {0x6, 0x11, 0x20}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x1f}, {0x8, 0x13, 0x401}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8000}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3f}, {0x8, 0x13, 0x800}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0xfff9}, {0x8}, {0x5}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20008000) linkat(r0, &(0x7f0000000b80)='./file0\x00', r5, &(0x7f0000000bc0)='./file0\x00', 0x1400) r9 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x3, 0x244000) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000c80)={&(0x7f0000000c40)=[0x0, 0x0, 0x0], 0x3}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000d00)=@v2={0x2, @adiantum, 0x8, '\x00', @d}) 22:21:49 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0xdb, 0x0, &(0x7f0000000080)="9c0fd64ebcd703dde850b9472d811ff501fe854cda3baf44ea0f16ee719d29825f2aeb829647c9b3fd6331d939bafc6b0af14c0354cdae4f688bfa33a189f304d64922a7d742d0ebf166173720c5217e68bfd6051f0242b31f5ced7f71f31ea75a11dd0faff8652132353d6815d660bc673cc8c8ce6d220dfe4bcb36c41dbb37cd3be7a980c84776d82f1d4c04e3bb59d60c1050ca21b4d5eac5abfe928b833169ac1f9adc71ab15c2d3050d2270d57fa41fe2ea70010e1db0da45abecc496c760843a7904a73d0509422834017bd454b7abe1fb55bd698f92c5a1"}) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x7c, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r1}, @acquire={0x40046305, 0x1}, @dead_binder_done, @dead_binder_done, @exit_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/158, 0x9e, 0x2, 0x15}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fda={0x66646185, 0x7, 0x2, 0x3e}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x400}], 0xff, 0x0, &(0x7f00000003c0)="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"}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r0, 0xfffffffffffffffc, 0x1f, 0x1b}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000540)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000580)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000005c0)={"4fcf890c0d8bf42cc31f9dd9f3d63a73", r4, 0x0, {0x0, 0x4}, {0x6f, 0x4}, 0x9, [0x23, 0x8, 0x7, 0x97, 0x8, 0x2, 0x1, 0x7, 0x8, 0x401, 0x401, 0x9, 0x4, 0x7, 0x9, 0xfffffffffffff1e8]}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2030000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, 0x0, 0x100, 0x70bd29, 0x3, {{}, {@void, @val={0xc, 0x99, {0x7, 0x32}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1}, 0x40, 0x8, 0x63a2, @device_b, 0x9, "", 0x93, 0x7f, 0x4, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x40}, {{0x1, 0x0, 0x1}, @device_b, 0x4}, {{}, @broadcast, 0x1}]}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs2/custom1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x3) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000840)={{0x40, 0x9c5}, {0x2e, 0xfffffff7}, 0x3ac}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000880)={"319acbb7de92dfd29a26c86e395869a0", r5, r5, {0x2af, 0x3f}, {0x0, 0x5}, 0x1, [0x4870, 0x8, 0x80, 0x4, 0x8000, 0x6, 0x3, 0x3, 0x2, 0x2, 0x5, 0x6, 0x8, 0x0, 0x2, 0x2]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000980)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000a00)={0x0, @nl=@unspec, @xdp={0x2c, 0x8, 0x0, 0x17}, @isdn={0x22, 0x1, 0x80, 0xff, 0x5}, 0x5b1, 0x0, 0x0, 0x0, 0xfffd, &(0x7f00000009c0)='ip6_vti0\x00', 0x8, 0x6, 0x1}) pipe2(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000ac0)={"96b8c35ba3affdebc53258a924c3f06a", r7, r7, {0x1, 0x2a}, {0x9, 0x8000}, 0x8, [0x81, 0x2, 0xd5, 0x2, 0x101, 0x7f00000, 0x4, 0x5, 0xff, 0x100000001, 0x731e, 0x7, 0x8, 0x8000, 0x9, 0x3]}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000bc0)=r10) ioctl$PTP_PIN_SETFUNC(r9, 0x40603d07, &(0x7f0000000c00)={'\x00', 0x80000001, 0x3, 0x8}) [ 127.385270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.391769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.397799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.406101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.409484] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.416274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.424768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.428695] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.438464] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.446972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.448501] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.452315] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.454030] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.467087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.482234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.487944] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.489258] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.495705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.500216] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.500626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.504995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.505732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.516370] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.517970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.518888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.525991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.528628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.531947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.533549] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.535472] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.540963] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.541997] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.548061] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.555036] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.564490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.569790] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.575102] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.594004] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.599862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.604846] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.523067] Bluetooth: hci1: command tx timeout [ 129.523713] Bluetooth: hci0: command tx timeout [ 129.586593] Bluetooth: hci3: command tx timeout [ 129.650908] Bluetooth: hci7: command tx timeout [ 129.651482] Bluetooth: hci6: command tx timeout [ 129.652040] Bluetooth: hci4: command tx timeout [ 129.652580] Bluetooth: hci5: command tx timeout [ 129.653085] Bluetooth: hci2: command tx timeout [ 131.570790] Bluetooth: hci0: command tx timeout [ 131.571271] Bluetooth: hci1: command tx timeout [ 131.635173] Bluetooth: hci3: command tx timeout [ 131.699574] Bluetooth: hci4: command tx timeout [ 131.700005] Bluetooth: hci2: command tx timeout [ 131.700415] Bluetooth: hci5: command tx timeout [ 131.701622] Bluetooth: hci6: command tx timeout [ 131.702045] Bluetooth: hci7: command tx timeout [ 133.618625] Bluetooth: hci0: command tx timeout [ 133.619106] Bluetooth: hci1: command tx timeout [ 133.683725] Bluetooth: hci3: command tx timeout [ 133.746676] Bluetooth: hci5: command tx timeout [ 133.747112] Bluetooth: hci7: command tx timeout [ 133.748190] Bluetooth: hci6: command tx timeout [ 133.748654] Bluetooth: hci2: command tx timeout [ 133.749071] Bluetooth: hci4: command tx timeout [ 135.667700] Bluetooth: hci1: command tx timeout [ 135.668190] Bluetooth: hci0: command tx timeout [ 135.731648] Bluetooth: hci3: command tx timeout [ 135.795289] Bluetooth: hci6: command tx timeout [ 135.795738] Bluetooth: hci4: command tx timeout [ 135.796151] Bluetooth: hci2: command tx timeout [ 135.797696] Bluetooth: hci7: command tx timeout [ 135.798114] Bluetooth: hci5: command tx timeout [ 189.633624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.641283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.643418] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.650205] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.659399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.772807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.776950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.779040] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.786909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.791465] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.834323] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.842642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.849971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.850214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.853851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.860161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.863331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.873823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.895249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.902351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.938169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.941121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.949447] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.962296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.990376] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.054886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.124845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.134718] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.159225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.184623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.186455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.191748] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.195223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.229392] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.233353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.850922] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.939316] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.942441] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.978928] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.087883] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.733648] Bluetooth: hci0: command tx timeout [ 191.859695] Bluetooth: hci1: command tx timeout [ 191.986889] Bluetooth: hci3: command tx timeout [ 191.987907] Bluetooth: hci2: command tx timeout [ 192.114675] Bluetooth: hci4: command tx timeout [ 192.242610] Bluetooth: hci6: command tx timeout [ 192.370680] Bluetooth: hci5: command tx timeout [ 193.267235] Bluetooth: hci7: command tx timeout [ 193.778988] Bluetooth: hci0: command tx timeout [ 193.906701] Bluetooth: hci1: command tx timeout [ 194.035469] Bluetooth: hci2: command tx timeout [ 194.036391] Bluetooth: hci3: command tx timeout [ 194.162754] Bluetooth: hci4: command tx timeout [ 194.290680] Bluetooth: hci6: command tx timeout [ 194.419166] Bluetooth: hci5: command tx timeout [ 195.316612] Bluetooth: hci7: command tx timeout [ 195.826602] Bluetooth: hci0: command tx timeout [ 195.954644] Bluetooth: hci1: command tx timeout [ 196.082608] Bluetooth: hci3: command tx timeout [ 196.083074] Bluetooth: hci2: command tx timeout [ 196.211567] Bluetooth: hci4: command tx timeout [ 196.338575] Bluetooth: hci6: command tx timeout [ 196.467153] Bluetooth: hci5: command tx timeout [ 197.362908] Bluetooth: hci7: command tx timeout [ 197.874663] Bluetooth: hci0: command tx timeout [ 198.003598] Bluetooth: hci1: command tx timeout [ 198.131908] Bluetooth: hci3: command tx timeout [ 198.132817] Bluetooth: hci2: command tx timeout [ 198.260143] Bluetooth: hci4: command tx timeout [ 198.387283] Bluetooth: hci6: command tx timeout [ 198.514910] Bluetooth: hci5: command tx timeout [ 199.410650] Bluetooth: hci7: command tx timeout [ 251.974684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.981899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.985485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.000197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.007049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.303957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.321487] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.324907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.330131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.332922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.335673] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.356088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.363616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.365715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.375679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.405054] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.425937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.444025] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.452271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.460494] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.470754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.478495] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.485469] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.498856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.518033] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.523112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.526475] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.535043] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.550402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.556054] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.559901] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.564137] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.568474] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.604771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.619059] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.620983] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.639964] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.666897] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.701075] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 252.711813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.066918] Bluetooth: hci0: command tx timeout [ 254.451015] Bluetooth: hci1: command tx timeout [ 254.451171] Bluetooth: hci2: command tx timeout [ 254.579682] Bluetooth: hci4: command tx timeout [ 254.706606] Bluetooth: hci3: command tx timeout [ 254.707785] Bluetooth: hci6: command tx timeout [ 254.770835] Bluetooth: hci7: command tx timeout [ 254.835684] Bluetooth: hci5: command tx timeout [ 256.114611] Bluetooth: hci0: command tx timeout [ 256.498775] Bluetooth: hci1: command tx timeout [ 256.499272] Bluetooth: hci2: command tx timeout [ 256.626763] Bluetooth: hci4: command tx timeout [ 256.754628] Bluetooth: hci6: command tx timeout [ 256.754645] Bluetooth: hci3: command tx timeout [ 256.818630] Bluetooth: hci7: command tx timeout [ 256.882795] Bluetooth: hci5: command tx timeout [ 258.162871] Bluetooth: hci0: command tx timeout [ 258.546937] Bluetooth: hci2: command tx timeout [ 258.546992] Bluetooth: hci1: command tx timeout [ 258.674682] Bluetooth: hci4: command tx timeout [ 258.803579] Bluetooth: hci3: command tx timeout [ 258.803598] Bluetooth: hci6: command tx timeout [ 258.866820] Bluetooth: hci7: command tx timeout [ 258.930703] Bluetooth: hci5: command tx timeout [ 260.210838] Bluetooth: hci0: command tx timeout [ 260.595795] Bluetooth: hci1: command tx timeout [ 260.596219] Bluetooth: hci2: command tx timeout [ 260.722842] Bluetooth: hci4: command tx timeout [ 260.850670] Bluetooth: hci6: command tx timeout [ 260.851167] Bluetooth: hci3: command tx timeout [ 260.914839] Bluetooth: hci7: command tx timeout [ 260.978813] Bluetooth: hci5: command tx timeout [ 314.507251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.519021] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.522919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.525915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.535437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.540222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.543853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.548834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.568983] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.573213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.579043] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.584595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.584982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.615939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.623150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.753925] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.756983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.759011] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.776108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.803006] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.814614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.821275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.831903] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.847262] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.860790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.931828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.935911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.937954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.945185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.950961] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.170011] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.187968] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.218765] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.245496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.261716] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.305223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.314004] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.325920] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.366998] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.377060] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.594631] Bluetooth: hci1: command tx timeout [ 316.658643] Bluetooth: hci2: command tx timeout [ 316.659667] Bluetooth: hci0: command tx timeout [ 316.978613] Bluetooth: hci4: command tx timeout [ 317.042584] Bluetooth: hci3: command tx timeout [ 317.106627] Bluetooth: hci5: command tx timeout [ 317.426595] Bluetooth: hci6: command tx timeout [ 317.554581] Bluetooth: hci7: command tx timeout [ 318.642795] Bluetooth: hci1: command tx timeout [ 318.706731] Bluetooth: hci0: command tx timeout [ 318.707218] Bluetooth: hci2: command tx timeout [ 319.026611] Bluetooth: hci4: command tx timeout [ 319.092738] Bluetooth: hci3: command tx timeout [ 319.154627] Bluetooth: hci5: command tx timeout [ 319.474832] Bluetooth: hci6: command tx timeout [ 319.602808] Bluetooth: hci7: command tx timeout [ 320.691693] Bluetooth: hci1: command tx timeout [ 320.754800] Bluetooth: hci2: command tx timeout [ 320.755266] Bluetooth: hci0: command tx timeout [ 321.074697] Bluetooth: hci4: command tx timeout [ 321.139544] Bluetooth: hci3: command tx timeout [ 321.203913] Bluetooth: hci5: command tx timeout [ 321.522660] Bluetooth: hci6: command tx timeout [ 321.650701] Bluetooth: hci7: command tx timeout [ 322.738825] Bluetooth: hci1: command tx timeout [ 322.802618] Bluetooth: hci0: command tx timeout [ 322.803096] Bluetooth: hci2: command tx timeout [ 323.124642] Bluetooth: hci4: command tx timeout [ 323.186578] Bluetooth: hci3: command tx timeout [ 323.251537] Bluetooth: hci5: command tx timeout [ 323.570582] Bluetooth: hci6: command tx timeout [ 323.698765] Bluetooth: hci7: command tx timeout [ 376.659652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.669720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.673203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.684954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.689138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.776297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.779793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.787091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.804408] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.820011] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.924596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 376.937212] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 376.944071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 376.953270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 376.981122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.029926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.054077] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.072031] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.078227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.080447] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.085917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.089794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.106822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.173431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.176104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.182016] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.188155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.198220] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.205008] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.212595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.235753] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 377.240074] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 377.243329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 377.245948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 377.248740] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 377.251857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 377.253942] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 377.261354] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 377.266097] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.282383] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.804565] Bluetooth: hci0: command tx timeout [ 378.930822] Bluetooth: hci1: command tx timeout [ 379.058730] Bluetooth: hci2: command tx timeout [ 379.122590] Bluetooth: hci4: command tx timeout [ 379.314643] Bluetooth: hci7: command tx timeout [ 379.315348] Bluetooth: hci5: command tx timeout [ 379.379602] Bluetooth: hci6: command tx timeout [ 379.380121] Bluetooth: hci3: command tx timeout [ 380.850843] Bluetooth: hci0: command tx timeout [ 380.979750] Bluetooth: hci1: command tx timeout [ 381.107710] Bluetooth: hci2: command tx timeout [ 381.172553] Bluetooth: hci4: command tx timeout [ 381.362872] Bluetooth: hci5: command tx timeout [ 381.363328] Bluetooth: hci7: command tx timeout [ 381.426951] Bluetooth: hci3: command tx timeout [ 381.427375] Bluetooth: hci6: command tx timeout [ 382.898941] Bluetooth: hci0: command tx timeout [ 383.028420] Bluetooth: hci1: command tx timeout [ 383.155940] Bluetooth: hci2: command tx timeout [ 383.218606] Bluetooth: hci4: command tx timeout [ 383.410625] Bluetooth: hci5: command tx timeout [ 383.411123] Bluetooth: hci7: command tx timeout [ 383.474635] Bluetooth: hci6: command tx timeout [ 383.475107] Bluetooth: hci3: command tx timeout [ 384.947629] Bluetooth: hci0: command tx timeout [ 385.074613] Bluetooth: hci1: command tx timeout [ 385.203309] Bluetooth: hci2: command tx timeout [ 385.267088] Bluetooth: hci4: command tx timeout [ 385.458747] Bluetooth: hci7: command tx timeout [ 385.459567] Bluetooth: hci5: command tx timeout [ 385.522728] Bluetooth: hci3: command tx timeout [ 385.523971] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 22:26:52 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff867cc1c2 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffff888015c579c0 RSP=ffff888015c578f8 R8 =ffffffff867cc1c6 R9 =0000000000000000 R10=000000000003b67d R11=0000000000008699 R12=ffff888015c579c8 R13=ffff888015c579b0 R14=ffff888015c57f40 R15=ffff888015c57968 RIP=ffffffff81354116 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6f0f89f540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055563eae4008 CR3=0000000029235000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=534e4f4954504f5f45424f5250444f4d XMM01=00712d3d534e4f4954504f5f45424f52 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000002 RCX=ffff88806cf089a4 RDX=0000000000000002 RSI=ffffffff85c1d1c0 RDI=ffff888015638aa8 RBP=ffffffff85c1d1c0 RSP=ffff88806cf08998 R8 =0000000000000001 R9 =ffff88806cf08a90 R10=000000000003b67d R11=00000000000c4f69 R12=ffffffff81353f32 R13=0000000000000202 R14=ffff888015638000 R15=0000000000000003 RIP=ffffffff8151acfa RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6a48369368 CR3=000000001e020000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000