Warning: Permanently added '[localhost]:16009' (ECDSA) to the list of known hosts. 2025/05/28 11:35:19 fuzzer started 2025/05/28 11:35:20 dialing manager at localhost:36005 syzkaller login: [ 101.164647] cgroup: Unknown subsys name 'net' [ 101.301208] cgroup: Unknown subsys name 'cpuset' [ 101.336714] cgroup: Unknown subsys name 'rlimit' 2025/05/28 11:35:41 syscalls: 2214 2025/05/28 11:35:41 code coverage: enabled 2025/05/28 11:35:41 comparison tracing: enabled 2025/05/28 11:35:41 extra coverage: enabled 2025/05/28 11:35:41 setuid sandbox: enabled 2025/05/28 11:35:41 namespace sandbox: enabled 2025/05/28 11:35:41 Android sandbox: enabled 2025/05/28 11:35:41 fault injection: enabled 2025/05/28 11:35:41 leak checking: enabled 2025/05/28 11:35:41 net packet injection: enabled 2025/05/28 11:35:41 net device setup: enabled 2025/05/28 11:35:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/28 11:35:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/28 11:35:41 USB emulation: enabled 2025/05/28 11:35:41 hci packet injection: enabled 2025/05/28 11:35:41 wifi device emulation: enabled 2025/05/28 11:35:41 802.15.4 emulation: enabled 2025/05/28 11:35:41 fetching corpus: 0, signal 0/0 (executing program) 2025/05/28 11:35:43 starting 8 fuzzer processes 11:35:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x7, [@multicast, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @local, @random="b104b6a8bdd2", @empty, @multicast]}) r1 = signalfd(r0, &(0x7f0000000080), 0x8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[r0, 0xffffffffffffffff, r0, r2]}, 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000180)={0x0, 0x20, 0x9, 0x1}) r3 = syz_open_dev$mouse(&(0x7f0000000580), 0xaec7, 0x121000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f00000005c0)={0x0, 0x1, [0x1ff, 0x0, 0x2, 0xad, 0xed, 0x8000]}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) r4 = open_tree(r3, &(0x7f0000000600)='./file0\x00', 0x100) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000640)={0x4, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x0, 0x3, [{{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e20, @multicast1}}]}, 0x210) getsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000880), &(0x7f00000008c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f0000000940)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000980)=0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000009c0)={0x24ac00, 0x101, 0x3, 0x1b0b, 0x1, 0x400}) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000a00), 0x4) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000a80)) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000b00)) 11:35:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x400202) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/4096) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000001040)) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40048) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000012c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) read$hiddev(r2, &(0x7f0000001500)=""/228, 0xe4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffe00}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x146}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001740)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r2, &(0x7f0000001780)={0xffffffffffffffff, r2, 0x20}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000017c0), 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001840)=""/213, 0xd5}, {&(0x7f0000001940)=""/246, 0xf6}], 0x2, &(0x7f0000001a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x20) r8 = socket$inet_udplite(0x2, 0x2, 0x88) copy_file_range(r6, &(0x7f0000001b80)=0x80000001, r8, &(0x7f0000001bc0)=0x1f, 0x7, 0x0) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000001c00)=""/129) ioctl$FIONCLEX(r7, 0x5450) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x78, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x808) 11:35:43 executing program 1: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0x13, {0x9, 0x1, 0x30d, 0x40, 0xaa8}}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = dup(r0) ioctl$TIOCEXCL(r1, 0x540c) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f00000000c0)="7a4dd70ebf7e3d9a354289d15c43c44b91f202f90c9c0c96d84a83b7f3c13fc53d098e7a494e6ceced26dcc4ef050c5c61835211b2864b5227174ef27053f8618d0e94714188ee1ec427bb2a04c2807506f819597ac0a24b4a9e4f0825d225de2785a691da56f5682d23486e36d4c967ddcf0c728ab6441efc0030921d51042c25b7e85ad68ba99f5b5cea3cbc18638bd608d87ae21275de1a285fec684760f8eeb960f3248f19659f28719fa6159b1f03fb17a31eccc0824447806225acf3fd076dc45908ef9649649a58163830c1", 0xcf, 0x40}, &(0x7f0000000200)) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x10000, 0x6, 0x10001, 0x2, 0x100000001, 0x200, 0x29f4, 0x0, 0x6, 0x6, 0x5, 0x0, 0x86, 0x9}}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000001280)=""/17) write$P9_RLOPEN(r2, &(0x7f00000012c0)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x8}, 0x80000001}}, 0x18) fsetxattr$security_selinux(r2, &(0x7f0000001300), &(0x7f0000001340)='system_u:object_r:run_init_exec_t:s0\x00', 0x25, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000001380)) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f00000013c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000001700)={&(0x7f0000001400), 0xc, &(0x7f00000016c0)={&(0x7f0000001480)={0x21c, r3, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5c, 0x4b}}}}, [@NL80211_ATTR_IE={0x10c, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @mic={0x8c, 0x18, {0xdd, "33b15ef80393", @long="6193322334bd07eb3f06444af1859ac0"}}, @perr={0x84, 0xcf, {0x89, 0xd, [@not_ext={{}, @device_b, 0x4, "", 0xf}, @not_ext={{}, @broadcast, 0x6, "", 0x4}, @ext={{}, @device_b, 0x4, @device_b, 0x11}, @ext={{}, @device_b, 0x200, @device_b, 0x22}, @ext={{}, @device_b, 0x20, @device_a, 0xa}, @ext={{}, @broadcast, 0x2, @device_b, 0xc}, @not_ext={{}, @device_a, 0x1, "", 0x20}, @not_ext={{}, @device_a, 0x1ff, "", 0x9}, @not_ext={{}, @broadcast, 0xec41, "", 0x1}, @ext={{}, @broadcast, 0x6, @device_a, 0xc}, @not_ext={{}, @device_b, 0x7fffffff}, @not_ext={{}, @broadcast, 0x8, "", 0x3a}, @ext={{}, @broadcast, 0x1b2, @device_b, 0xa}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @tim={0x5, 0xb, {0x5, 0xa7, 0x0, "724cb140ad5a8321"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x2, 0x7, 0xf, 0x3}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1f}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0x8e, 0x2a, [@random={0x9, 0x60, "57aed39ec8774fa037cdd034c871d25c9be831436c94377d2eeaf6f673d7d966a3377506853637a45a99f78dc77bc600c762e70362fda8dd3410ccf3e965dc1f23a314faebe67676cff487b12feb1171cca4dfe32cdc09da310d36bac5ef53bc"}, @sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mic={0x8c, 0x18, {0x831, "e91bd7e1f46c", @long="6255188327d15d43cebe582b73825b40"}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x27, 0x2a, [@cf={0x4, 0x6, {0x5, 0x1, 0x7d5, 0x8}}, @channel_switch={0x25, 0x3, {0x0, 0x68}}, @peer_mgmt={0x75, 0x8, {0x1, 0x3, @val=0x8fd8, @val=0xb, @void}}, @ibss={0x6, 0x2, 0xfff}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x800}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x7, 0x75, 0xffff, 0x5}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x4064800) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000001780)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x7, 0x3, 0x4c2, 0x9, 0x1ff], 0x3, &(0x7f0000001740)=[{}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000001c40)={0x2, 0x1, 0xc, 0x0, 0x10, &(0x7f0000001840)="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"}) fchown(0xffffffffffffffff, 0x0, 0xee00) 11:35:43 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ieee802154={0x24, @short}, &(0x7f0000000080)=0x80) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e23, 0x1ff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfff}, {0xa, 0x4e21, 0x0, @remote, 0x4}, 0x1f, [0x5e9, 0x5eec, 0x5, 0xffff, 0x3, 0x81, 0x7fc00, 0x20]}, 0x5c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000180)=0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000001c0)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0xc0, 0x4, 0x7ff, 0x9, 0x15, "e7aee8d463a17da0756838967d9a0b4a2d0530"}) timer_delete(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x120, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="1661730add3cb2066d76edeb6205b2fb05e187706d2e8c08"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f00000003c0)) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000400)) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000440)) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x4}, 0x16, 0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRK(r4, 0x5409, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000500)) signalfd4(r4, &(0x7f0000000540)={[0x7fff]}, 0x8, 0x80000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000580)) inotify_init() [ 124.311480] audit: type=1400 audit(1748432143.672:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:35:43 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6040}, 0x20000000) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b23044c712147ca9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8b}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8001}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2517cd311804f46a"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6804dd3dcff10242"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a903bd19eac961e022dbee98562f5f7f6d24d56086ef4f782180b140bf31b0a8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7e70b55caf54207dba5c91730e09906f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7ef54c432ee0aa43"}]}]}, 0xbc}}, 0x4880) lremovexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'btrfs.', 'nl80211\x00'}) getresuid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x80000000, 0x1, &(0x7f0000000480)=[{&(0x7f0000000400)="aa5cd0863202ffb69b1d82f71413aa3f3eb363c11c3bc3060b2f58d81c2dfe92a876a204b99fa4e57525584087950aa8b4dca61bf5c6a0f508ae5b48b165f805bfe7007f66952002ec2e9638c32b77d0e97085e33abd00ea7426eb63dd32df116fa42a82975a3190416c75767a6067f9fed7757f7823d9c7961231d3b5aceffa", 0x80, 0x2}], 0x2105407, &(0x7f0000000580)={[{@size={'size', 0x3d, [0x0, 0x6b, 0x0, 0x78, 0x30, 0x38]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x38, 0x67, 0x33, 0x36]}}, {@mode={'mode', 0x3d, 0x80000001}}, {@huge_always}, {@huge_advise}, {@uid={'uid', 0x3d, r3}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32, 0x33, 0x39]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34, 0x65]}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '*'}}, {@hash}]}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) chown(&(0x7f0000000740)='./file0\x00', r2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x105000, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x8c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa85, 0x1}}}}, [@NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9c}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x81, 0x2, 0x1c, 0x2, 0x4]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x27}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000804) r5 = open(&(0x7f0000000940)='./file0\x00', 0x24040, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r6, 0xa00, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x6e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) r7 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x100000001, 0x80200) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x90, r8, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x20, 0x50}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x90}, 0x1, 0x0, 0x0, 0x400c0}, 0x40000d1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r7, {r3, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r9, 0xc04c5349, &(0x7f0000000d00)={0x5, 0x6, 0x5}) 11:35:43 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x6, 0x16, 0xe, 0x1, 0x2, 0x9, 0x6, 0x4c, 0xfffffffffffffffe}}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000000c0)=0x1, 0x4) socketpair(0x2a, 0x6, 0x3ff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', r2, 0x29, 0x3f, 0xe0, 0x800, 0x8, @loopback, @loopback, 0x7800, 0x1, 0x4, 0x8}}) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000200)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000240)={0x6, 'geneve1\x00', {0x10001}, 0x2}) r5 = signalfd4(r4, &(0x7f0000000280)={[0xffffffff00000000]}, 0x8, 0x80000) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000002c0)=0x5) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000300)) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0xc) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x51, 0x3, "7091620c90325acccce52abe450edb5c97eab8ab7561af758e682ff6a2e99d1b743bc03e2c6bb5196e9d60582030602c921a5878d9a6afaa8bee3591e55771a390fa929548733de84c456b3311"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000540)={0x5e, @broadcast, 0x4e21, 0x2, 'sh\x00', 0x20, 0xfffffc00, 0x1e}, 0x2c) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000580)={0x7ff, 0x1, 0xff}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000005c0)={0x3e, 0x0, 0x1, "00798d5a96b4fdb8f602252b50fe03d1792121d9ea20dd75de32d4b2aaf136067a3c582854fa4375ad5b77e8a4c38fb9da41b45316fa780c5fbc8d9e0e54"}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000800)={0x444, 0x3f3, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x21, [0x9, 0x7, 0x10001, 0xffffffc0, 0x2, 0x4, 0x4, 0x81, 0x101, 0x2, 0x9, 0xf1f, 0x80, 0x4, 0x1aef, 0x85, 0xfffffd63, 0x7, 0x4, 0x2, 0x1ff, 0x8, 0x531, 0x2, 0x8, 0x101, 0xe54, 0x9, 0x3, 0x9, 0xcfccdc1, 0x7, 0x25e, 0x7fffffff, 0x1, 0x7, 0x4d, 0x0, 0x7, 0x3f, 0x8, 0x2, 0x20, 0x7fffffff, 0x1, 0x7, 0x8, 0x3, 0x5, 0xfffffff9, 0x43b5, 0x6, 0x3e000000, 0x80, 0x9, 0xb5, 0x8, 0x1, 0x6, 0x10001, 0x9, 0xbbd0, 0x800], [0x5, 0x5, 0x55e9fc3d, 0xfffffffd, 0x0, 0x5, 0x7b0, 0x0, 0x0, 0x0, 0x6, 0x8000, 0x7, 0xd35, 0x5, 0x0, 0x80000000, 0xc3, 0xffffd96e, 0x501907e6, 0xfffffbff, 0x5, 0x3, 0x80000001, 0xffff, 0x32d1, 0x0, 0x6, 0x2, 0xfffffec2, 0xde, 0x7, 0x6, 0x7, 0x9, 0x40, 0x200, 0x13ab, 0x6, 0x80000000, 0xe1, 0x401, 0x9, 0x2, 0x5, 0x5e2b, 0x115, 0x0, 0x66c3, 0x0, 0x8, 0x0, 0x4, 0xffffffa2, 0xffffffae, 0x5, 0xffff, 0x1, 0x81, 0x1, 0x4, 0xe000000, 0x5, 0x6], [0x200, 0x92c, 0x716, 0x3f, 0x56, 0x0, 0x3a6, 0x9, 0x0, 0x7fffffff, 0x7fffffff, 0x7fffffff, 0x8000, 0x5, 0x2, 0x8000, 0x6, 0x5, 0x2, 0x80000000, 0x1, 0xffffffff, 0x10001, 0x64, 0xc3e6, 0xffffffc0, 0xd43, 0x100, 0x2, 0x20, 0x2, 0x8, 0x7, 0x2, 0x1f, 0x401, 0x8, 0x2, 0x1, 0x4, 0x7fffffff, 0x3, 0x7, 0x7fff, 0x8, 0x7, 0x1f8, 0x5, 0x474, 0x3, 0x0, 0x3, 0x8, 0x7f, 0x17, 0x4, 0xfffff800, 0x6, 0x9, 0xfffff801, 0x3, 0x6, 0x4, 0x4], [0x0, 0x3, 0xffffe098, 0xa0, 0x4, 0x20, 0xf2, 0x80000000, 0x8, 0xffffffff, 0x65, 0x2, 0x1, 0x8, 0x2, 0x4, 0x401, 0x0, 0x2, 0x100, 0xe, 0x80000001, 0x8, 0x0, 0x7, 0x8, 0x80000001, 0x5, 0x7, 0x3, 0x401, 0x0, 0x7, 0x0, 0x8, 0xb490, 0xa5, 0x5, 0x7, 0x0, 0x3f, 0x6, 0xe7b0, 0xffffffff, 0x46c, 0x8, 0xd2d8, 0x9, 0x3, 0x401, 0x3, 0x3, 0x67, 0x0, 0x7, 0xf591, 0x5, 0x4, 0x8, 0x31, 0x9, 0x80000000, 0x20993803, 0x4], 0x22, ['\x00', 'TIPC\x00', 'wg2\x00', '%\x00', 'ip6gre0\x00', 'sh\x00', '[!}:&}F]_\'\x00']}, ["", ""]}, 0x444}}, 0x9045) 11:35:43 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x130, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x1d}}}}, [@NL80211_ATTR_IE={0x21, 0x2a, [@challenge={0x10, 0x1, 0xb8}, @mic={0x8c, 0x18, {0xe84, "b5681ba3eeff", @long="916783eaf3bd3209c74c006c3f644b9e"}}]}, @NL80211_ATTR_IE={0x21, 0x2a, [@cf={0x4, 0x6, {0x20, 0x80, 0x6821, 0x100}}, @mesh_chsw={0x76, 0x6, {0x80, 0x1f, 0x16, 0x9}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x9, 0x3d}}, @channel_switch={0x25, 0x3, {0x0, 0xb6, 0x7}}]}, @NL80211_ATTR_KEYS={0x98, 0x51, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "66022500ca8b2b2910b81a29dc"}, @NL80211_KEY_SEQ={0xe, 0x4, "7e07e418da684c3b8f2f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7626445c9c363bfd338ae136d6"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xb, 0x4, "8b2d2aab382af4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xa, 0x4, "33fb8c474b20"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e464986c94cccf86cce9884245"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x8, 0x3, 0x7, 0x0, {0x9, 0x8d, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x7f}}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000003c0)={0x0, 0x6, 0x6}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000007c0)={{r0}, 0x0, 0x2, @unused=[0x5, 0xfffffffffffffffe, 0x8001, 0x401], @devid=r3}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x24, r2, 0x81c, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x5c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "632bb47ce6b12e8f7379d467f3"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7c3db63578e0424e44b2b2d2a4"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8064010}, 0xb2ff2b8a2f354cf2) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000001c40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a40)={0x1a0, 0x17, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x164, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffff001}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x6050}, 0x8800) r4 = openat(r0, &(0x7f0000001c80)='./file0\x00', 0x4000, 0x100) ioctl$CDROMPLAYMSF(r4, 0x5303, &(0x7f0000001cc0)={0x44, 0x6, 0xff, 0x2, 0x80, 0x1}) ioctl$CDROM_CHANGER_NSLOTS(r4, 0x5328) lsetxattr$trusted_overlay_redirect(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40), &(0x7f0000001d80)='./file0\x00', 0x8, 0x2) mknod$loop(&(0x7f0000001dc0)='./file0\x00', 0xc000, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e40), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x1) ioctl$CDROMREADCOOKED(r4, 0x5315, &(0x7f0000001f40)) io_cancel(0x0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000002a00)="1f405a593862fdc6f2c2393c6f87bc79a570af2d88791ec9f036fbf0052796d485891a1853cf792d11bf5be8a220c48418ac3770aefeaa91e34c4e286f36a5f24a45c74f5f72efe0b9f9cb60fb2c3f460cc1a456d2b9b8791c27b36a63d2a7c35a4f571f8144f72c4373f89a3963b299f26f942ad6c01c56c669ef5afab5e19212650150606d5a92bcdb60197db80fbd6ed32c24cb9241dfef9c5da28f70ec32fa649d5de7a8", 0xa6, 0xffffffffffff0001, 0x0, 0x1}, &(0x7f0000002b40)) 11:35:43 executing program 7: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='@[#\x00', &(0x7f0000000040)) r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "eaa69ce7cf7be1a07b0c93893ea487b9182c07c5c47ab55f8ce19a210db869ba572a76f4bd1aa3b1dd767be5d61b99c9948432d8dfbb3d42942f2f09dfec692f", 0x25}, 0x48, 0x0) keyctl$revoke(0x3, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "9c04e8a7467e670c54e1facf392c3eada41ff99d5924a6ef7e53c5479822785e4119fc009d140b6d6c71266da5b7643e4b1b2f87409aea010b6fad80357b5a6c", 0x1a}, 0x48, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @auto="fd1593a61a4d8fe3"}, 0x40, r1, '\x00', @a}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x480002, 0xfc8041abf6e2cdac) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "1f3869127a49d4c9462a3951cc16815c30795af2ef2485ce589070d0244b6dd90384928d36e3acbc608c616bfe9cf96d4bd7d5c70042752fca0ea62f302664bb", 0x20}, 0x48, 0xfffffffffffffffb) keyctl$setperm(0x5, r5, 0x100000) r6 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$unlink(0x9, r6, r0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, {0x1000, 0x7fff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0x1, 0x7e}}, './file0\x00'}) keyctl$invalidate(0x15, r0) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000600)={@empty, 0x25}) r9 = request_key(&(0x7f0000000640)='cifs.idmap\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)='fscrypt:', r6) keyctl$instantiate(0xc, r9, &(0x7f0000000700)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '-+'}, 0x1b, 0xfffffffffffffffb) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000780)={0x4, {0x8, 0x6, 0x80000001, 0xffffffff, 0x7}}) [ 125.707460] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.738157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.769754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.775282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.801937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.805310] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.810907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.813469] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.844270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.852202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.889720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.891384] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.893735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.895669] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.901436] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.903393] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.912263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.913600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.917294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.920330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.945521] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.955369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.961520] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.968627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.975820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.988739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.001536] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 126.005759] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 126.008457] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.010776] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 126.015265] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.019613] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 126.028288] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 126.033416] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 126.039573] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 126.042706] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 126.047665] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 126.050730] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 126.074259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.084436] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.894528] Bluetooth: hci0: command tx timeout [ 127.896135] Bluetooth: hci1: command tx timeout [ 127.958614] Bluetooth: hci2: command tx timeout [ 128.021222] Bluetooth: hci3: command tx timeout [ 128.086099] Bluetooth: hci6: command tx timeout [ 128.088259] Bluetooth: hci4: command tx timeout [ 128.213424] Bluetooth: hci7: command tx timeout [ 128.215235] Bluetooth: hci5: command tx timeout [ 129.943524] Bluetooth: hci0: command tx timeout [ 129.945245] Bluetooth: hci1: command tx timeout [ 130.005399] Bluetooth: hci2: command tx timeout [ 130.070049] Bluetooth: hci3: command tx timeout [ 130.134035] Bluetooth: hci6: command tx timeout [ 130.135393] Bluetooth: hci4: command tx timeout [ 130.262301] Bluetooth: hci5: command tx timeout [ 130.263863] Bluetooth: hci7: command tx timeout [ 131.989535] Bluetooth: hci0: command tx timeout [ 131.991341] Bluetooth: hci1: command tx timeout [ 132.053072] Bluetooth: hci2: command tx timeout [ 132.119031] Bluetooth: hci3: command tx timeout [ 132.181668] Bluetooth: hci4: command tx timeout [ 132.182179] Bluetooth: hci6: command tx timeout [ 132.309269] Bluetooth: hci5: command tx timeout [ 132.310717] Bluetooth: hci7: command tx timeout [ 134.037114] Bluetooth: hci0: command tx timeout [ 134.038679] Bluetooth: hci1: command tx timeout [ 134.101240] Bluetooth: hci2: command tx timeout [ 134.165399] Bluetooth: hci3: command tx timeout [ 134.229468] Bluetooth: hci4: command tx timeout [ 134.229570] Bluetooth: hci6: command tx timeout [ 134.358031] Bluetooth: hci5: command tx timeout [ 134.358987] Bluetooth: hci7: command tx timeout [ 188.715432] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.723404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.724763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.736476] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.738696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.792671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.801512] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.804108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.809659] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.813638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.829543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.831582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.836739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.842925] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.848276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.849653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.859548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 188.862534] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.877373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.892565] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.911759] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.920558] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 188.925727] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 188.932564] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.939868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.941876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.957270] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.958924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.973201] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.977870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.017620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.029318] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.036275] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.080258] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.091277] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.189206] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.192021] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.194318] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 189.211544] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 189.256305] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.805179] Bluetooth: hci0: command tx timeout [ 190.870475] Bluetooth: hci1: command tx timeout [ 190.933820] Bluetooth: hci3: command tx timeout [ 190.997343] Bluetooth: hci4: command tx timeout [ 191.061643] Bluetooth: hci5: command tx timeout [ 191.063118] Bluetooth: hci2: command tx timeout [ 191.637052] Bluetooth: hci6: command tx timeout [ 192.149320] Bluetooth: hci7: command tx timeout [ 192.853374] Bluetooth: hci0: command tx timeout [ 192.917089] Bluetooth: hci1: command tx timeout [ 192.981028] Bluetooth: hci3: command tx timeout [ 193.045136] Bluetooth: hci4: command tx timeout [ 193.109402] Bluetooth: hci5: command tx timeout [ 193.111059] Bluetooth: hci2: command tx timeout [ 193.686020] Bluetooth: hci6: command tx timeout [ 194.198988] Bluetooth: hci7: command tx timeout [ 194.901087] Bluetooth: hci0: command tx timeout [ 194.966035] Bluetooth: hci1: command tx timeout [ 195.029379] Bluetooth: hci3: command tx timeout [ 195.093048] Bluetooth: hci4: command tx timeout [ 195.157348] Bluetooth: hci5: command tx timeout [ 195.158732] Bluetooth: hci2: command tx timeout [ 195.734066] Bluetooth: hci6: command tx timeout [ 196.245071] Bluetooth: hci7: command tx timeout [ 196.949707] Bluetooth: hci0: command tx timeout [ 197.013395] Bluetooth: hci1: command tx timeout [ 197.077111] Bluetooth: hci3: command tx timeout [ 197.141312] Bluetooth: hci4: command tx timeout [ 197.207240] Bluetooth: hci5: command tx timeout [ 197.209299] Bluetooth: hci2: command tx timeout [ 197.781043] Bluetooth: hci6: command tx timeout [ 198.293396] Bluetooth: hci7: command tx timeout [ 249.292540] syz-executor.7 (2454) used greatest stack depth: 25072 bytes left [ 251.392093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.394399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.402465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.411237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.418128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.579216] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.582125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.583445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.586806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.588687] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.646459] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.648337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.650397] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.653578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.657461] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.663420] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.668851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.674326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.684731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.689160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.694269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.705144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.715606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.717419] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.721289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 251.728795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 251.731633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.756497] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.759777] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 251.765692] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.767830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 251.769437] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 251.773112] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 251.777205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.810526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.810575] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 251.814534] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 251.832426] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.892485] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 251.898445] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.461233] Bluetooth: hci0: command tx timeout [ 253.653128] Bluetooth: hci1: command tx timeout [ 253.781098] Bluetooth: hci2: command tx timeout [ 253.781710] Bluetooth: hci4: command tx timeout [ 253.846698] Bluetooth: hci5: command tx timeout [ 253.846738] Bluetooth: hci7: command tx timeout [ 253.910382] Bluetooth: hci3: command tx timeout [ 253.973558] Bluetooth: hci6: command tx timeout [ 255.509381] Bluetooth: hci0: command tx timeout [ 255.701396] Bluetooth: hci1: command tx timeout [ 255.829811] Bluetooth: hci2: command tx timeout [ 255.830396] Bluetooth: hci4: command tx timeout [ 255.893234] Bluetooth: hci5: command tx timeout [ 255.894233] Bluetooth: hci7: command tx timeout [ 255.957492] Bluetooth: hci3: command tx timeout [ 256.021459] Bluetooth: hci6: command tx timeout [ 257.557219] Bluetooth: hci0: command tx timeout [ 257.749931] Bluetooth: hci1: command tx timeout [ 257.877360] Bluetooth: hci4: command tx timeout [ 257.877862] Bluetooth: hci2: command tx timeout [ 257.941060] Bluetooth: hci7: command tx timeout [ 257.941584] Bluetooth: hci5: command tx timeout [ 258.005055] Bluetooth: hci3: command tx timeout [ 258.069225] Bluetooth: hci6: command tx timeout [ 259.605132] Bluetooth: hci0: command tx timeout [ 259.797041] Bluetooth: hci1: command tx timeout [ 259.925067] Bluetooth: hci2: command tx timeout [ 259.925567] Bluetooth: hci4: command tx timeout [ 259.990273] Bluetooth: hci5: command tx timeout [ 259.990771] Bluetooth: hci7: command tx timeout [ 260.053468] Bluetooth: hci3: command tx timeout [ 260.117975] Bluetooth: hci6: command tx timeout [ 314.060454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.065308] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.073282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.081181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.091978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.153113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.167814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.170166] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.180515] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.182929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.473768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.484027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.491288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.495617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.501410] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.508248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.514346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.514391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.529210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.541479] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.567319] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.593724] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.602398] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.604687] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.615793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 314.626168] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.628793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 314.633599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 314.638715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.649703] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.652395] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.656856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.660921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.668437] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 314.671284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 314.721870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 314.725808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 314.728438] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 314.733539] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 314.748858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.181271] Bluetooth: hci0: command tx timeout [ 316.246167] Bluetooth: hci1: command tx timeout [ 316.565519] Bluetooth: hci3: command tx timeout [ 316.629061] Bluetooth: hci2: command tx timeout [ 316.694109] Bluetooth: hci6: command tx timeout [ 316.763212] Bluetooth: hci5: command tx timeout [ 316.763227] Bluetooth: hci4: command tx timeout [ 316.821163] Bluetooth: hci7: command tx timeout [ 318.229483] Bluetooth: hci0: command tx timeout [ 318.294772] Bluetooth: hci1: command tx timeout [ 318.613683] Bluetooth: hci3: command tx timeout [ 318.677112] Bluetooth: hci2: command tx timeout [ 318.741317] Bluetooth: hci6: command tx timeout [ 318.805378] Bluetooth: hci4: command tx timeout [ 318.805894] Bluetooth: hci5: command tx timeout [ 318.869185] Bluetooth: hci7: command tx timeout [ 320.279266] Bluetooth: hci0: command tx timeout [ 320.341125] Bluetooth: hci1: command tx timeout [ 320.661136] Bluetooth: hci3: command tx timeout [ 320.727005] Bluetooth: hci2: command tx timeout [ 320.789204] Bluetooth: hci6: command tx timeout [ 320.853100] Bluetooth: hci4: command tx timeout [ 320.856008] Bluetooth: hci5: command tx timeout [ 320.917063] Bluetooth: hci7: command tx timeout [ 322.326022] Bluetooth: hci0: command tx timeout [ 322.389995] Bluetooth: hci1: command tx timeout [ 322.710073] Bluetooth: hci3: command tx timeout [ 322.773187] Bluetooth: hci2: command tx timeout [ 322.837339] Bluetooth: hci6: command tx timeout [ 322.903060] Bluetooth: hci5: command tx timeout [ 322.904416] Bluetooth: hci4: command tx timeout [ 322.965399] Bluetooth: hci7: command tx timeout [ 376.682505] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.688746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.692621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.719981] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.725386] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.929807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.933814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.938836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.946376] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.955270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.070379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.076193] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.080428] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.087239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.091530] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.136463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.154408] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.158346] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.163250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.167531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.199221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.202851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 377.205099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.211141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.215879] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 377.238305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.260732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.266907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.274647] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 377.276681] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.290674] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 377.293919] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 377.300759] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 377.305245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.309263] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 377.316401] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.338385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.338454] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 377.344749] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 377.378261] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.773214] Bluetooth: hci0: command tx timeout [ 379.032088] Bluetooth: hci1: command tx timeout [ 379.157145] Bluetooth: hci2: command tx timeout [ 379.288040] Bluetooth: hci3: command tx timeout [ 379.349263] Bluetooth: hci4: command tx timeout [ 379.414042] Bluetooth: hci6: command tx timeout [ 379.477061] Bluetooth: hci7: command tx timeout [ 379.478537] Bluetooth: hci5: command tx timeout [ 380.821485] Bluetooth: hci0: command tx timeout [ 381.077022] Bluetooth: hci1: command tx timeout [ 381.205168] Bluetooth: hci2: command tx timeout [ 381.333726] Bluetooth: hci3: command tx timeout [ 381.397089] Bluetooth: hci4: command tx timeout [ 381.461116] Bluetooth: hci6: command tx timeout [ 381.525051] Bluetooth: hci5: command tx timeout [ 381.525971] Bluetooth: hci7: command tx timeout [ 382.872011] Bluetooth: hci0: command tx timeout [ 383.125438] Bluetooth: hci1: command tx timeout [ 383.253283] Bluetooth: hci2: command tx timeout [ 383.381209] Bluetooth: hci3: command tx timeout [ 383.446400] Bluetooth: hci4: command tx timeout [ 383.509380] Bluetooth: hci6: command tx timeout [ 383.575009] Bluetooth: hci5: command tx timeout [ 383.575069] Bluetooth: hci7: command tx timeout [ 384.918080] Bluetooth: hci0: command tx timeout [ 385.174181] Bluetooth: hci1: command tx timeout [ 385.303162] Bluetooth: hci2: command tx timeout [ 385.430034] Bluetooth: hci3: command tx timeout [ 385.493405] Bluetooth: hci4: command tx timeout [ 385.557972] Bluetooth: hci6: command tx timeout [ 385.621057] Bluetooth: hci7: command tx timeout [ 385.622374] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 11:40:49 Registers: info registers vcpu 0 RAX=0000000080000000 RBX=dffffc0000000000 RCX=ffffffff81a9377f RDX=ffff88802648b700 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffea00001d3ac0 RSP=ffff8880166c78e8 R8 =0000000000000000 R9 =fffff9400003a758 R10=0000000000000000 R11=ffff88806ce3c500 R12=00000000000001fc R13=000000000000000b R14=000000000000000b R15=00000000000001fd RIP=ffffffff81738377 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f07b431fa8 CR3=000000000eba5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=0000000000000001 RCX=ffffffff81aec4a3 RDX=0000000000000038 RSI=ffffffff86875e90 RDI=ffffffff864f16cc RBP=ffffffff864f16cc RSP=ffff888009747810 R8 =ffffffff86875e90 R9 =0000000000000000 R10=000000000003b6ad R11=0000000000024a7c R12=ffffffff864f1704 R13=ffffffff864f16cc R14=ffffffff864f16cc R15=dffffc0000000000 RIP=ffffffff81353240 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd63b347170 CR3=000000002b840000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000