Warning: Permanently added '[localhost]:40609' (ECDSA) to the list of known hosts. 2025/05/28 00:49:56 fuzzer started 2025/05/28 00:49:56 dialing manager at localhost:36005 syzkaller login: [ 99.471620] cgroup: Unknown subsys name 'net' [ 99.565815] cgroup: Unknown subsys name 'cpuset' [ 99.592823] cgroup: Unknown subsys name 'rlimit' 2025/05/28 00:50:12 syscalls: 2214 2025/05/28 00:50:12 code coverage: enabled 2025/05/28 00:50:12 comparison tracing: enabled 2025/05/28 00:50:12 extra coverage: enabled 2025/05/28 00:50:12 setuid sandbox: enabled 2025/05/28 00:50:12 namespace sandbox: enabled 2025/05/28 00:50:12 Android sandbox: enabled 2025/05/28 00:50:12 fault injection: enabled 2025/05/28 00:50:12 leak checking: enabled 2025/05/28 00:50:12 net packet injection: enabled 2025/05/28 00:50:12 net device setup: enabled 2025/05/28 00:50:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/28 00:50:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/28 00:50:12 USB emulation: enabled 2025/05/28 00:50:12 hci packet injection: enabled 2025/05/28 00:50:12 wifi device emulation: enabled 2025/05/28 00:50:12 802.15.4 emulation: enabled 2025/05/28 00:50:12 fetching corpus: 0, signal 0/0 (executing program) 2025/05/28 00:50:14 starting 8 fuzzer processes 00:50:14 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x5, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800c}, 0x20000000) r1 = eventfd2(0x1, 0x80c01) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x45}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x15) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x80) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x94, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac7}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/crypto\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000580)={0x3, 0x2}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000005c0)=0x200, 0x4) r4 = open(&(0x7f0000000600)='./file0\x00', 0x40400, 0x40) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000640)) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x44}}, 0x4000000) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000840)={0x441, 0x8d, 0x1, 0x6}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f00000008c0)=0x1) exit(0x9) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x134, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x61}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4c}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x18000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) fcntl$setown(r3, 0x8, 0xffffffffffffffff) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000b00)) 00:50:14 executing program 2: capget(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x2, 0x207fb69d, 0x2, 0x7, 0x1000, 0x7fff}) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x5, 0x14101) ioctl$VT_DISALLOCATE(r0, 0x5608) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/113, 0x71}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x1d1000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000240)) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={0x0, @nfc={0x27, 0x1, 0x0, 0x1}, @tipc=@name={0x1e, 0x2, 0x3, {{0x40}}}, @rc={0x1f, @any, 0x3}, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x0, 0x80000000, 0x40}) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) readahead(r3, 0x80000000, 0x200) read(r2, &(0x7f0000000340)=""/18, 0x12) setreuid(0xee01, 0xee01) fchdir(r1) r4 = signalfd4(r3, &(0x7f0000000380)={[0x7]}, 0x8, 0xc0000) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) rt_tgsigqueueinfo(r5, 0xffffffffffffffff, 0x2f, &(0x7f0000000440)={0x34, 0x4, 0xae}) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000004c0)=0x1) 00:50:14 executing program 1: prctl$PR_SET_UNALIGN(0x6, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x8000, 0x0, 0x7f, 0x100}, {0x12, 0xdb, 0xf6, 0x6ca4}, {0x3, 0x0, 0x3}, {0x61, 0x7, 0x1, 0xffffd2c8}]}) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008a1}, 0x50) r4 = dup(r0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000380)={0x6, 0x3f, 0x81, 0x6, 0x5, "9237beb3aec2b372"}) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000007c0)={0x1, 0x0, 0x7, 0x6, 0x1a1, &(0x7f00000003c0)}) r5 = openat$cgroup_ro(r4, &(0x7f0000000800)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000840)) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x1, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000980), 0x8) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x80, r6, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x54, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x85}, 0x8000) r7 = pidfd_getfd(r4, r5, 0x0) getsockopt$inet_int(r7, 0x0, 0x31, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) 00:50:14 executing program 3: r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x280501, 0x1, 0x9}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="44258560d6198bb364fda4cf0d9613554e68c4a13296705617abec4c26b92ab31004cdc570d8590517370210ad9145616930b1f44186c53ca7edb170a0fecd91ec7c34dcb6345cf39927f101733f89a5aeab7f35706e94ebd0a1178180b9615a928c04b772c68e2a23f080e7d5297a24a332c57fa2ac5154af8ffebdbf") mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x5836ed4, &(0x7f0000fff000/0x1000)=nil, 0x5) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) lsetxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x2) statfs(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)=""/4096) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000001340)={0x2, 0x1, 0x1000, 0x7, 0x2, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4, 0x80000) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x70, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x9}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb4}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="02b343c73b5a569cfa"}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000014c0)={'vcan0\x00'}) link(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0/file0\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001580)={{0x1, 0x1, 0x18, r2, {0x9, 0x2}}, './file0\x00'}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000015c0)={0x20, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, {{0xa, 0x4e23, 0x6, @mcast2, 0x8}}}, 0x108) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000001700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mmap$binder(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x1, 0x11, r3, 0xe522) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000001940)={0x9, 0x5}) 00:50:14 executing program 4: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x6) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x60}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x4048805) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) copy_file_range(r2, &(0x7f0000000200)=0x5, r3, &(0x7f0000000240)=0x20, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x362}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe952}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x15) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/mnt\x00') ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {0x200}}, './file0\x00'}) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000480)=""/114) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000500)={0x1, 0x2e, "6da943afe240859ad8e0749cee5d1f7995d899d5b88019de8884b0779d071fada591082c461a82a74b09c36f2389"}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x200200, 0x0) r8 = socket(0x11, 0x80000, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0xcc, 0x0, &(0x7f00000007c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/59, 0x3b, 0x1, 0x19}, @fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0xa, 0x1, 0x12}}, &(0x7f0000000640)={0x0, 0x28, 0x40}}, 0x40}, @increfs_done={0x40106308, 0x3}, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@flat=@handle={0x73682a85, 0xa}, @fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/88, 0x58, 0x2, 0xb}}, &(0x7f0000000780)={0x0, 0x18, 0x30}}, 0x1000}, @decrefs={0x40046307, 0x1}, @decrefs], 0x1c, 0x0, &(0x7f00000008c0)="c57da4b4e97757997f80642f3d3d5677e868f93923ce77fc7baac479"}) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000940)) fsetxattr$system_posix_acl(r6, &(0x7f0000000980)='system.posix_acl_default\x00', &(0x7f0000003740)={{}, {}, [{0x2, 0x4}, {0x2, 0x6}, {0x2, 0x1, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x2, 0xee01}, {0x2, 0x5}, {0x2, 0x7, 0xee01}, {0x2, 0x7, 0xee01}], {0x4, 0x2}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x3}, {0x8, 0x7}, {0x8, 0x1, 0xee01}, {0x8, 0x6, 0xee00}, {0x8, 0x2, 0xee01}, {0x8, 0x7, 0xee00}, {0x8, 0x3, 0xee00}, {0x8, 0x0, 0xee01}, {0x8, 0x4}], {0x10, 0x2}, {0x20, 0x3}}, 0xb4, 0x0) [ 117.384720] audit: type=1400 audit(1748393414.663:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:50:14 executing program 5: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xc0, 0x3, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2d40000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa9eb}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2f63ca48}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000180)=""/120) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000200)={0x1, 'vlan1\x00', 0x1}, 0x18) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000480)=""/114, 0x72}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x1, 0x82, &(0x7f0000000640)={0x0, 0x989680}) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0xd, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3fb6f882db14424e}, ["", "", ""]}, 0x14}}, 0x8004) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x9}}]}, 0x54}}, 0x4) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a00), 0x800) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000a40)={@broadcast, @initdev}, &(0x7f0000000a80)=0xc) r6 = openat$cgroup_ro(r1, &(0x7f0000000ac0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x1) fcntl$getflags(r2, 0x1) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x4, 0xc}, 0x18) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x70, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r8 = pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000cc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000ec0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000f00)={"e6a3667daf1b6faab5bb45feb292ca67", r9, r10, {0x1, 0x81}, {0x1d, 0x7}, 0x7, [0x3, 0x0, 0x1, 0x2, 0xd05d, 0x0, 0x26, 0x3ff, 0x6, 0x10000, 0x9, 0x6, 0x9, 0x7ff, 0x9, 0x9b71]}) 00:50:14 executing program 6: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x402, 0x128, 0xd}, 0x18) finit_module(r0, &(0x7f0000000080)='[!-,\xbd*/\'!.-\x00', 0x2) r1 = epoll_create(0x5) fcntl$setsig(r1, 0xa, 0x20) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) sync_file_range(r3, 0x2, 0x6, 0x1) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x24) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000240)={r0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x0, 0x186, 0x14}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7110ebf43e3dc946d4b092a8cfa23186"}, @NL80211_ATTR_PMK={0x14, 0xfe, "66a03522fd8f82d94e7950c7dc8cf41c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ff31fde90a09fc59349c3376d053d6c5"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f1904d24ef40aed9589387a915d976eb"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x62dd}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x24000800) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x158, r8, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x40, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x81}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x5, 0x2, 0xffff, 0x9}}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@mic={0x8c, 0x18, {0x4fe, 'm &H\"H', @long="582fdf8766f64b751a01d50e71b11d0b"}}, @measure_req={0x26, 0x7a, {0x7f, 0x4, 0xf5, "35b7a6e11a7665c671b56dbc7052ea10594a0ecd18eff11f9397a907057d4a6addfdbfcf06e87435a502634fe137c0efae0d9d3915a52e2cf5b93d6c71c9db731dff1c9f6788f3cbcbcb4e64f566fb982a0dfc7389207f40c523def109f9700df60bf0646de19c8c78f5051b6e3ea998d55475d85fd7fa"}}, @preq={0x82, 0x4c, @ext={{}, 0x3, 0x1, 0x5, @device_a, 0x3, @device_b, 0x80000000, 0xe2f, 0x4, [{{0x0, 0x0, 0x1}, @broadcast, 0xe4}, {{0x0, 0x0, 0x1}, @device_a, 0x6d}, {{0x0, 0x0, 0x1}, @device_a, 0x5}, {{0x1}, @device_a, 0x4}]}}, @challenge={0x10, 0x1, 0x7b}, @peer_mgmt={0x75, 0x18, {0x0, 0x80, @val, @val=0x13, @val="8ab3f7f994c703205e045520d380ce79"}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000900), &(0x7f0000000940)=0xc) 00:50:14 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0xaac0, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x7, 0x4) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@isofs_parent={0x14, 0x2, {0x100, 0x200, 0x81, 0xc3e, 0x3, 0x8}}, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x40408c4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) connect(r1, &(0x7f00000002c0)=@sco={0x1f, @none}, 0x80) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4044044) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x3abb9cabbdcc19f7}}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x5810) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x805) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) open_by_handle_at(r1, &(0x7f0000000800)=@xfs={0x1c, 0x81, {0x1, 0x7, 0x80, 0x3ff}}, 0x408080) r5 = accept4$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000008c0)={{r5}, 0x0, 0x8, @unused=[0x80, 0x4, 0x80], @devid}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000001900)={0x110, 0x0, &(0x7f00000018c0)=[r1]}, 0x1) fstat(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r0, {r6, 0xee01}}, './file0\x00'}) [ 118.905983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.910608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.913569] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.922579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.926990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.938523] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.953678] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.978423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.980398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.999135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.004206] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.006262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.033942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.038547] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.043599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.046475] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.048360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.057685] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.061706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.068693] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.076673] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.076761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.094171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.099330] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.108503] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.110398] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.120365] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.136741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.143625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.155809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.165865] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.171529] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.174381] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.177670] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.182753] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.186831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 119.189086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.200518] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.202916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.223591] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 121.040118] Bluetooth: hci1: command tx timeout [ 121.166448] Bluetooth: hci0: command tx timeout [ 121.166628] Bluetooth: hci2: command tx timeout [ 121.167400] Bluetooth: hci4: command tx timeout [ 121.294164] Bluetooth: hci6: command tx timeout [ 121.294194] Bluetooth: hci3: command tx timeout [ 121.295741] Bluetooth: hci5: command tx timeout [ 121.295753] Bluetooth: hci7: command tx timeout [ 123.086105] Bluetooth: hci1: command tx timeout [ 123.215352] Bluetooth: hci4: command tx timeout [ 123.215838] Bluetooth: hci2: command tx timeout [ 123.216687] Bluetooth: hci0: command tx timeout [ 123.342194] Bluetooth: hci5: command tx timeout [ 123.342238] Bluetooth: hci7: command tx timeout [ 123.342620] Bluetooth: hci3: command tx timeout [ 123.343975] Bluetooth: hci6: command tx timeout [ 125.134597] Bluetooth: hci1: command tx timeout [ 125.262552] Bluetooth: hci0: command tx timeout [ 125.263004] Bluetooth: hci4: command tx timeout [ 125.264196] Bluetooth: hci2: command tx timeout [ 125.390507] Bluetooth: hci7: command tx timeout [ 125.390938] Bluetooth: hci3: command tx timeout [ 125.391394] Bluetooth: hci5: command tx timeout [ 125.391792] Bluetooth: hci6: command tx timeout [ 127.182145] Bluetooth: hci1: command tx timeout [ 127.310195] Bluetooth: hci0: command tx timeout [ 127.310657] Bluetooth: hci2: command tx timeout [ 127.311122] Bluetooth: hci4: command tx timeout [ 127.438411] Bluetooth: hci6: command tx timeout [ 127.438843] Bluetooth: hci3: command tx timeout [ 127.439314] Bluetooth: hci5: command tx timeout [ 127.439388] Bluetooth: hci7: command tx timeout [ 178.781504] syz-executor.1 (283) used greatest stack depth: 24712 bytes left [ 181.476477] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.480443] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.484415] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.484564] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.488166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.489921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.490128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.493093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.493634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.499456] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.504547] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.504665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.510431] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.515867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.518778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.611826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.620560] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.623733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.639931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.643837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.654564] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.656417] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.658402] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.660168] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.673701] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.684490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.704958] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.706720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.709262] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.711773] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.721977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.733317] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.734837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.734884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.751876] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 181.754850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.756582] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 181.761803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.786662] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.786678] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.566172] Bluetooth: hci0: command tx timeout [ 183.566408] Bluetooth: hci2: command tx timeout [ 183.566990] Bluetooth: hci1: command tx timeout [ 183.822264] Bluetooth: hci3: command tx timeout [ 183.822631] Bluetooth: hci4: command tx timeout [ 183.886333] Bluetooth: hci5: command tx timeout [ 183.886478] Bluetooth: hci7: command tx timeout [ 183.951131] Bluetooth: hci6: command tx timeout [ 185.615095] Bluetooth: hci2: command tx timeout [ 185.615606] Bluetooth: hci1: command tx timeout [ 185.616088] Bluetooth: hci0: command tx timeout [ 185.870403] Bluetooth: hci3: command tx timeout [ 185.871392] Bluetooth: hci4: command tx timeout [ 185.934948] Bluetooth: hci5: command tx timeout [ 185.935705] Bluetooth: hci7: command tx timeout [ 185.999264] Bluetooth: hci6: command tx timeout [ 187.662263] Bluetooth: hci0: command tx timeout [ 187.662416] Bluetooth: hci1: command tx timeout [ 187.662940] Bluetooth: hci2: command tx timeout [ 187.920116] Bluetooth: hci4: command tx timeout [ 187.920143] Bluetooth: hci3: command tx timeout [ 187.984233] Bluetooth: hci7: command tx timeout [ 187.984444] Bluetooth: hci5: command tx timeout [ 188.046152] Bluetooth: hci6: command tx timeout [ 189.712303] Bluetooth: hci0: command tx timeout [ 189.712786] Bluetooth: hci2: command tx timeout [ 189.713271] Bluetooth: hci1: command tx timeout [ 189.966112] Bluetooth: hci3: command tx timeout [ 189.967138] Bluetooth: hci4: command tx timeout [ 190.030116] Bluetooth: hci7: command tx timeout [ 190.031290] Bluetooth: hci5: command tx timeout [ 190.094352] Bluetooth: hci6: command tx timeout [ 244.312314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.314521] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.316270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.322208] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.326826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.446830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.448997] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.453294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.459933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.462963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.659024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.661367] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.662746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.680373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.690407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.759850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.768670] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.779349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.804592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.808798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.810534] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.826592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.830387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.855502] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.872545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.911467] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.916584] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.931416] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.938351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.958355] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.973263] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.990230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.022373] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.025258] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.032340] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.056590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 245.149327] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 245.154433] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 245.175681] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 245.218832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.414272] Bluetooth: hci0: command tx timeout [ 246.542414] Bluetooth: hci1: command tx timeout [ 246.798235] Bluetooth: hci2: command tx timeout [ 246.862129] Bluetooth: hci3: command tx timeout [ 247.055114] Bluetooth: hci4: command tx timeout [ 247.118139] Bluetooth: hci5: command tx timeout [ 247.182570] Bluetooth: hci6: command tx timeout [ 247.310278] Bluetooth: hci7: command tx timeout [ 248.462237] Bluetooth: hci0: command tx timeout [ 248.591059] Bluetooth: hci1: command tx timeout [ 248.846123] Bluetooth: hci2: command tx timeout [ 248.911377] Bluetooth: hci3: command tx timeout [ 249.103098] Bluetooth: hci4: command tx timeout [ 249.166293] Bluetooth: hci5: command tx timeout [ 249.233237] Bluetooth: hci6: command tx timeout [ 249.359168] Bluetooth: hci7: command tx timeout [ 250.510422] Bluetooth: hci0: command tx timeout [ 250.639101] Bluetooth: hci1: command tx timeout [ 250.895138] Bluetooth: hci2: command tx timeout [ 250.960628] Bluetooth: hci3: command tx timeout [ 251.150488] Bluetooth: hci4: command tx timeout [ 251.215302] Bluetooth: hci5: command tx timeout [ 251.279075] Bluetooth: hci6: command tx timeout [ 251.407314] Bluetooth: hci7: command tx timeout [ 252.558226] Bluetooth: hci0: command tx timeout [ 252.686120] Bluetooth: hci1: command tx timeout [ 252.942370] Bluetooth: hci2: command tx timeout [ 253.006146] Bluetooth: hci3: command tx timeout [ 253.198143] Bluetooth: hci4: command tx timeout [ 253.263096] Bluetooth: hci5: command tx timeout [ 253.326124] Bluetooth: hci6: command tx timeout [ 253.454263] Bluetooth: hci7: command tx timeout [ 306.464281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.468676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.471268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.479676] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.485346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.544534] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.556402] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.565458] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.577113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.588548] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.820888] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.826597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.831560] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.843597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.862943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.885657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.924136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.950706] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.953651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.977296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.004838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.007632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.020521] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.024515] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.032948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.037949] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.040795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.049658] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.052771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.055467] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.063475] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.067873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.076840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.078896] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.084321] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.088556] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.126526] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.149005] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.159310] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.174422] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.558373] Bluetooth: hci0: command tx timeout [ 308.622330] Bluetooth: hci1: command tx timeout [ 308.943086] Bluetooth: hci2: command tx timeout [ 309.135144] Bluetooth: hci4: command tx timeout [ 309.135853] Bluetooth: hci3: command tx timeout [ 309.136425] Bluetooth: hci5: command tx timeout [ 309.262403] Bluetooth: hci7: command tx timeout [ 309.329159] Bluetooth: hci6: command tx timeout [ 310.606142] Bluetooth: hci0: command tx timeout [ 310.670087] Bluetooth: hci1: command tx timeout [ 310.990345] Bluetooth: hci2: command tx timeout [ 311.182458] Bluetooth: hci5: command tx timeout [ 311.182948] Bluetooth: hci3: command tx timeout [ 311.183845] Bluetooth: hci4: command tx timeout [ 311.311178] Bluetooth: hci7: command tx timeout [ 311.374450] Bluetooth: hci6: command tx timeout [ 312.654113] Bluetooth: hci0: command tx timeout [ 312.719178] Bluetooth: hci1: command tx timeout [ 313.038104] Bluetooth: hci2: command tx timeout [ 313.231449] Bluetooth: hci4: command tx timeout [ 313.231937] Bluetooth: hci3: command tx timeout [ 313.232599] Bluetooth: hci5: command tx timeout [ 313.358356] Bluetooth: hci7: command tx timeout [ 313.423125] Bluetooth: hci6: command tx timeout [ 314.702125] Bluetooth: hci0: command tx timeout [ 314.766811] Bluetooth: hci1: command tx timeout [ 315.086135] Bluetooth: hci2: command tx timeout [ 315.278365] Bluetooth: hci5: command tx timeout [ 315.278856] Bluetooth: hci3: command tx timeout [ 315.279633] Bluetooth: hci4: command tx timeout [ 315.406409] Bluetooth: hci7: command tx timeout [ 315.470118] Bluetooth: hci6: command tx timeout [ 369.443932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.450722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.456138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.463161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.471690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.634449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.639489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.645689] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.657549] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.663460] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.718950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.725973] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.728495] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.745142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.758537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.944204] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.953824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.967575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.988531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.014877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.124710] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.128826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.134520] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.151322] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.159626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.170806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 370.174944] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 370.176996] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 370.182475] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.185645] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 370.186524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.188903] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.190698] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 370.204602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.214789] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.284947] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.292509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.297819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.346536] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.349795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.534183] Bluetooth: hci0: command tx timeout [ 371.726367] Bluetooth: hci1: command tx timeout [ 371.855176] Bluetooth: hci2: command tx timeout [ 372.175308] Bluetooth: hci4: command tx timeout [ 372.238180] Bluetooth: hci3: command tx timeout [ 372.238507] Bluetooth: hci7: command tx timeout [ 372.366261] Bluetooth: hci6: command tx timeout [ 372.431197] Bluetooth: hci5: command tx timeout [ 373.583446] Bluetooth: hci0: command tx timeout [ 373.775130] Bluetooth: hci1: command tx timeout [ 373.902110] Bluetooth: hci2: command tx timeout [ 374.223294] Bluetooth: hci4: command tx timeout [ 374.286181] Bluetooth: hci7: command tx timeout [ 374.289106] Bluetooth: hci3: command tx timeout [ 374.414128] Bluetooth: hci6: command tx timeout [ 374.478100] Bluetooth: hci5: command tx timeout [ 375.630116] Bluetooth: hci0: command tx timeout [ 375.822109] Bluetooth: hci1: command tx timeout [ 375.950287] Bluetooth: hci2: command tx timeout [ 376.271068] Bluetooth: hci4: command tx timeout [ 376.334419] Bluetooth: hci3: command tx timeout [ 376.334581] Bluetooth: hci7: command tx timeout [ 376.462375] Bluetooth: hci6: command tx timeout [ 376.529251] Bluetooth: hci5: command tx timeout [ 377.678141] Bluetooth: hci0: command tx timeout [ 377.870232] Bluetooth: hci1: command tx timeout [ 377.998396] Bluetooth: hci2: command tx timeout [ 378.320259] Bluetooth: hci4: command tx timeout [ 378.382208] Bluetooth: hci3: command tx timeout [ 378.383259] Bluetooth: hci7: command tx timeout [ 378.511236] Bluetooth: hci6: command tx timeout [ 378.575229] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 00:55:24 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=bde53094b5b1327e RDX=00000000db688f6a RSI=000000000b6dc639 RDI=00000000d61cd15b RBP=ffffffff85c1d1c0 RSP=ffff88806ce088d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=00000000e6d655a3 R14=0000000000000000 R15=bde53094b5b1327e RIP=ffffffff815190f5 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005592435354c8 CR3=0000000026c54000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000956e5835 RBX=000000002f3fa1fb RCX=0000000099d149c6 RDX=000000000000000e RSI=ffff88802f2cf598 RDI=000000000000000a RBP=0000000000000001 RSP=ffff88802f2cf4e8 R8 =0000000040df1f82 R9 =0000000000000000 R10=000000000003b6ad R11=0000000000000534 R12=0000000000000000 R13=0000000000002800 R14=ffff88802f2cf550 R15=000000000000000e RIP=ffffffff825daf19 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556068e13080 CR3=000000002e036000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000