Warning: Permanently added '[localhost]:35335' (ECDSA) to the list of known hosts. 2025/06/04 09:01:31 fuzzer started 2025/06/04 09:01:32 dialing manager at localhost:39055 syzkaller login: [ 102.757571] cgroup: Unknown subsys name 'net' [ 102.892359] cgroup: Unknown subsys name 'cpuset' [ 102.942460] cgroup: Unknown subsys name 'rlimit' 2025/06/04 09:01:49 syscalls: 2214 2025/06/04 09:01:49 code coverage: enabled 2025/06/04 09:01:49 comparison tracing: enabled 2025/06/04 09:01:49 extra coverage: enabled 2025/06/04 09:01:49 setuid sandbox: enabled 2025/06/04 09:01:49 namespace sandbox: enabled 2025/06/04 09:01:49 Android sandbox: enabled 2025/06/04 09:01:49 fault injection: enabled 2025/06/04 09:01:49 leak checking: enabled 2025/06/04 09:01:49 net packet injection: enabled 2025/06/04 09:01:49 net device setup: enabled 2025/06/04 09:01:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/04 09:01:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/04 09:01:49 USB emulation: enabled 2025/06/04 09:01:49 hci packet injection: enabled 2025/06/04 09:01:49 wifi device emulation: enabled 2025/06/04 09:01:49 802.15.4 emulation: enabled 2025/06/04 09:01:49 fetching corpus: 0, signal 0/0 (executing program) 2025/06/04 09:01:51 starting 8 fuzzer processes 09:01:51 executing program 0: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1fc, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x29c7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x41}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xca}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x45}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb567}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000440)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) io_cancel(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f00000005c0)="ff6d17", 0x3, 0x6, 0x0, 0x1}, &(0x7f0000000640)) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xfc, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xab18, 0x44}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x12, 0x115, "5482f6693fc09b4b6bbf355f25bd"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f7}]]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x82000, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x5c7891c8c0b7786e) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r3, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40008810) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x240408c0}, 0x4004045) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x60, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5d3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x141}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000dc0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x6c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r1) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x6c, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8091}, 0x8080) 09:01:52 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0x8, @inherit={0x78, &(0x7f0000000040)={0x1, 0x6, 0x79a, 0x100, {0x10, 0x3f, 0x8, 0x7f, 0x100}, [0x3, 0x5, 0x8000, 0xfff, 0x2, 0x5]}}, @devid}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) recvfrom$inet6(r2, &(0x7f00000010c0), 0x0, 0x0, &(0x7f0000001100)={0xa, 0x4e20, 0x0, @private1, 0x3}, 0x1c) openat$cgroup_type(r2, &(0x7f0000001140), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001200)={{r3}, 0x0, 0x2, @inherit={0x60, &(0x7f0000001180)={0x1, 0x3, 0x80000001, 0x0, {0x0, 0x1ff, 0xa6c, 0x2, 0x6}, [0x7a7, 0xff, 0x8]}}, @subvolid=0x8}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000002200)={0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x4, 0x16, 0x0, "46596e8dd7675e92b27d609b62d9cca2baa53617611e4e208fa64a2a17c2528f5b72048609b0d7f4e2ea5e08bb1c7729ae24539503c23e81c8c56e02c6fd3414", "3080bb1c341438dc1c18e1eb39e126ac6f4a518ab363a9f22584e3ba857fcd441df9f7681967bae1d2e36bd55306971634043191f16743263fab9fe26ecdb6fd", "f3ce7c2a6a589b20c2f19337827b4135c98922fb7745e533b85d1db32ca08144", [0x2, 0x9]}) r4 = syz_open_dev$vcsn(&(0x7f0000002300), 0x4, 0x410200) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000002340)) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000002380)) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f00000023c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xb) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x41}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000002580)={0x1, 0x5, 0x6}) pwrite64(r2, &(0x7f00000025c0)="fc73914964336c8e09a593153f4a4d", 0xf, 0x5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000002600)={0x345, @time={0x6, 0x6}, 0x2, {0x5, 0x1}, 0x5, 0x0, 0x3}) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000002640)) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002680), 0x41, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc804) 09:01:52 executing program 2: getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=""/146, &(0x7f00000000c0)=0x92) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/keycreate\x00') r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f8, 0x200, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20004040) fsetxattr(r0, &(0x7f0000000480)=@known='trusted.overlay.nlink\x00', &(0x7f00000004c0)='@&.\'%\xeb%-}\\,%}\x00', 0xe, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) read(r2, &(0x7f0000000540)=""/91, 0x5b) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f00000009c0)={0x2, 0x1, 0x1a, 0x8, 0xb8, &(0x7f00000005c0)="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"}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000a00), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x4040, 0x0) r6 = openat$cgroup(r1, &(0x7f0000000ac0)='syz1\x00', 0x200002, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0x50082, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000b40)={0xff, 0x1, 0x4, 0x0, 0x0, [{{r0}, 0x100000001}, {{r5}, 0x5}, {{r6}, 0x10001}, {{r7}, 0x401}]}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000001c00)={0x2, 0x4, 0x1000, &(0x7f0000000c00)=""/4096}) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x62}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfe00}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x4048040) bind(r3, &(0x7f0000001dc0)=@pppoe={0x18, 0x0, {0x2, @remote, 'tunl0\x00'}}, 0x80) 09:01:52 executing program 3: sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "24d1d239dcc30cb14ad6aeac2f1a321e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "38829a05df41fe32b5f43f0b1c3ee3b3"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440d5}, 0x40000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x12000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) ioctl$CDROMREADTOCENTRY(r2, 0x5306, &(0x7f0000000440)={0x3b, 0x1, 0x4, 0x0, @msf={0x8, 0xed, 0x1}, 0x6}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000004c0)={@local, @broadcast, 0x0}, &(0x7f0000000500)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x474dd6ffd6f5d2df}, 0x8080) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) read$hidraw(r6, &(0x7f0000000640)=""/46, 0x2e) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xfc, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x401) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000980)={'erspan0\x00', &(0x7f00000008c0)={'syztnl2\x00', r4, 0x8, 0x8, 0x245b, 0x0, {{0x1a, 0x4, 0x1, 0x2, 0x68, 0x68, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010102, {[@cipso={0x86, 0x15, 0x3, [{0x0, 0xd, "99cd04e188a377cdf49ccc"}, {0x7, 0x2}]}, @lsrr={0x83, 0xb, 0x7a, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x23, 0x25, [@broadcast, @empty, @empty, @broadcast, @rand_addr=0x64010102, @rand_addr=0x64010102, @multicast1, @empty]}, @noop, @noop, @noop, @generic={0x82, 0xb, "dd350e2f0f31b978af"}, @noop, @noop]}}}}}) getpeername$packet(r6, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'ip6gre0\x00', r4, 0x2f, 0x0, 0x7, 0x8, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x701, 0x2d18, 0x2}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000b00)={@dev, 0x0}, &(0x7f0000000b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000c80)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001280)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000000d80)={0x4b0, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0xc4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xff, 0x3f, 0x7}, {0x95, 0xff, 0x80, 0x4}, {0x6, 0x9, 0x1, 0x1f}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r4}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r11}, {0x1d0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0xc0, 0xb3, 0x101}, {0x6, 0x1, 0x7, 0x8001}, {0x3, 0xe0, 0x2, 0x6b}, {0x5, 0x9, 0x5, 0xffffada7}, {0x3f, 0x9, 0x1, 0x7ff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x24000085}, 0x80) 09:01:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'syzkaller1\x00', {'batadv0\x00'}, 0x800}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3c, @rand_addr=0x64010102, 0x4e24, 0x0, 'lblcr\x00', 0xb, 0xff, 0x3e}, 0x2c) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x440800, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x8001) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc8, r5, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x81}, 0x20000040) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000600)=0x544, 0x4) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000640)=0x98, &(0x7f0000000680)=0x2) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f00000006c0)) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000700)={0x52, 0x8, 0x8, {0xff, 0x9}, {0x7}, @ramp={0x4, 0x5, {0x5, 0x9, 0x800, 0x7fff}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x0, 0x8000, 0xc8f3, 0x6, {{0x12, 0x4, 0x0, 0x2, 0x48, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp_prespec={0x44, 0x14, 0x3a, 0x3, 0x0, [{@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffffe30a}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xe3, [@remote, @private=0xa010100, @remote, @remote, @multicast2, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x19c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x814) [ 122.135057] audit: type=1400 audit(1749027712.115:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:01:52 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="2d29d9d2346bb12cc3e667805655d0bfceb841b6ad88d0904595861ca76872816ad7cf9c44cc1e3003cc573ee4bc65dba1a46782dceb4b407b5af9f3f0cbdb28e71a0def82d61a9c80ac6c7c6dc13e35ff", 0x51, 0xaf58}], 0x2004, &(0x7f0000000140)={[{@dax}, {@data_writeback}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'root'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x9, 0x3f, 0x3}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r2 = getuid() r3 = syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x3ff, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000340)="63de5a9073c31f0b6a0ce4f7e19bbf8380bd6e11a36203a3cd6b61714876b511740cc16f2f22c1e003d8605d05b010db49451b9815d0f2a59f9f1d609faf1715ead883c600216bda60df61db204841af2d69c64ac72c4f2118b8e39e6f369d0842f1126ac2ebde7c", 0x68, 0x4}], 0x104001c, &(0x7f0000000400)={[{@huge_within_size}], [{@appraise_type}, {@appraise_type}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, 'y\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x38, 0x63, 0x31, 0x34, 0x37, 0x30], 0x2d, [0x31, 0x30, 0x63, 0x61], 0x2d, [0x31, 0x36, 0x62, 0x61], 0x2d, [0x66, 0x34, 0x35, 0x32], 0x2d, [0x60, 0x30, 0x37, 0x0, 0x62, 0x30, 0x38, 0x34]}}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@uid_gt={'uid>', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) syncfs(r3) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000500)={0x1, 0x2, 0x8}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000580)) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000780)) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffff8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x69}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x2000c000) mount$9p_unix(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='./file1\x00', &(0x7f0000000980), 0x200010, &(0x7f00000009c0)={'trans=unix,', {[{@fscache}, {@mmap}, {@fscache}, {@nodevmap}], [{@uid_gt={'uid>', r2}}]}}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000a40)) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000cc0), &(0x7f0000000d00)=0x10) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r5 = accept$inet6(r4, &(0x7f0000000d40)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000d80)=0x1c) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000e00)={0x2, 0x8, 0x37, &(0x7f0000000dc0)=""/55}) 09:01:52 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x40000) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$CDROMSTOP(r0, 0x5307) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004044) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="549391b682f3"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0xa479, 0x2, 0x3f, 0x3}}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_IE={0x18, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0xfffa, @val=0x7, @void, @void}}, @ibss={0x6, 0x2, 0x8}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c894}, 0x20040010) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x8000) r2 = dup3(r0, r0, 0x80000) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000600)=0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000640)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000680)={"13dc80ee83193c267dbc419666cf5cad", r3, r4, {0x8}, {0x5, 0x1}, 0x2de7, [0x5, 0xbb6, 0x6, 0x3f, 0x0, 0x18f, 0x80, 0x2020000000000, 0x5, 0x1, 0x2, 0x8001, 0x6, 0x100000001, 0x9, 0x3]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r5, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/22, 0x16}, {&(0x7f00000007c0)=""/243, 0xf3}], 0x2, 0x0, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8e}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xee71}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) write$binfmt_elf64(r5, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3, 0x8, 0x3, 0x6, 0x2, 0x3, 0x6, 0xb4, 0x40, 0xc5, 0x0, 0x2, 0x38, 0x1, 0x5, 0x402, 0xf3e3}, [{0x2, 0x7, 0x6, 0x7fff, 0x0, 0xfffffffffffffff9, 0x1, 0x100}], "94efa8cac28e583f02741e6da01eaacb450193ad82c8f6fc6419799257a35dc454e2effb79e914f1abc5fd3d32dc1f12367783db1ce1ac21b2b31e87d4ce729949ce9a718a0bac1c3680bcc984f15a754f4c047e7a3070123a089624f0ac7b00c349146b0f950f0076c37ddd76825bb0464ad96ea687bd6e244727d9413a61ea58148333003fad0faf4c18b9d9267b2b4b27dbc32ddf1077488960525c382cba003e6f144b02e200fbb8f2c1d02b9224c04ae7c9ecb137a3aa41ac28e92de8", ['\x00', '\x00', '\x00']}, 0x437) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000ec0), 0x107200, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, 0x0, 0xc00, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x880) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x68, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffff83e, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x90) 09:01:52 executing program 7: ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x7f80000000, 0x101, 0x1}) r2 = dup(r0) write$P9_RFLUSH(r2, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) preadv2(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/18, 0x12}, {&(0x7f0000000540)=""/38, 0x26}], 0xa, 0x7fff, 0x66655f61, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000740)={0x6, 'ip6tnl0\x00', {0xfffffffc}, 0xbc95}) read(r0, &(0x7f0000000780)=""/23, 0x17) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f00000007c0)={'\x00', 0x3, 0x3, 0x4}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/module/drm', 0x224100, 0x2) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000880)=""/100) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000900)) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1c0, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x745}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2e9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd, 0x3, "8c0418df9e25e016d8"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000c00), 0x80, 0x0) copy_file_range(r2, &(0x7f0000000bc0)=0x200, r4, &(0x7f0000000c40)=0x200000, 0x3, 0x0) recvmmsg$unix(r4, &(0x7f0000009d80)=[{{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000000d00)=""/26, 0x1a}, {&(0x7f0000000d40)=""/189, 0xbd}, {&(0x7f0000000e00)=""/125, 0x7d}, {&(0x7f0000000e80)=""/224, 0xe0}, {&(0x7f0000000f80)=""/130, 0x82}, {&(0x7f0000001040)=""/50, 0x32}, {&(0x7f0000001080)=""/117, 0x75}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/71, 0x47}, {&(0x7f0000002180)=""/4096, 0x1000}], 0xa, &(0x7f0000003240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003280)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f0000003300)=""/183, 0xb7}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/194, 0xc2}, {&(0x7f00000044c0)=""/41, 0x29}, {&(0x7f0000004500)=""/215, 0xd7}, {&(0x7f0000004600)=""/34, 0x22}, {&(0x7f0000004640)=""/52, 0x34}, {&(0x7f0000004680)=""/186, 0xba}], 0x8, &(0x7f00000047c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000004800)=@abs, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000004880)=""/185, 0xb9}, {&(0x7f0000004940)=""/123, 0x7b}, {&(0x7f00000049c0)=""/180, 0xb4}, {&(0x7f0000004a80)=""/170, 0xaa}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/117, 0x75}, {&(0x7f0000005bc0)=""/214, 0xd6}], 0x7, &(0x7f0000005d40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000005e00)=@abs, 0x6e, &(0x7f0000008040)=[{&(0x7f0000005e80)=""/4096, 0x1000}, {&(0x7f0000006e80)=""/68, 0x44}, {&(0x7f0000006f00)=""/4096, 0x1000}, {&(0x7f0000007f00)=""/72, 0x48}, {&(0x7f0000007f80)=""/137, 0x89}], 0x5, &(0x7f00000080c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}, {{&(0x7f0000008100)=@abs, 0x6e, &(0x7f0000009600)=[{&(0x7f0000008180)=""/173, 0xad}, {&(0x7f0000008240)=""/222, 0xde}, {&(0x7f0000008340)=""/135, 0x87}, {&(0x7f0000008400)=""/4096, 0x1000}, {&(0x7f0000009400)=""/83, 0x53}, {&(0x7f0000009480)=""/183, 0xb7}, {&(0x7f0000009540)=""/159, 0x9f}], 0x7, &(0x7f0000009680)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f00000097c0)=@abs, 0x6e, &(0x7f0000009a80)=[{&(0x7f0000009840)=""/205, 0xcd}, {&(0x7f0000009940)=""/34, 0x22}, {&(0x7f0000009980)=""/241, 0xf1}], 0x3, &(0x7f0000009ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x98}}, {{&(0x7f0000009b80)=@abs, 0x6e, &(0x7f0000009c00), 0x0, &(0x7f0000009c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x7, 0x10000, &(0x7f0000009f40)) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000009f80)={r5, 0x0, 0xfffffff8}) [ 123.604708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.607073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.618742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.619877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.623347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.624265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.637744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.641429] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.643685] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.647451] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.650888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.657069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.657239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.662104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.673530] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.714659] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.718255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.722183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.731982] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.733630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.739785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.740930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.742166] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.745283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.755985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.761286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.777375] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.784746] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.791727] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.795506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.804148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.806083] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.809311] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.813496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.818012] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.819801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.831347] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.832596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.839678] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 123.846616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 125.684519] Bluetooth: hci1: command tx timeout [ 125.747975] Bluetooth: hci0: command tx timeout [ 125.748881] Bluetooth: hci2: command tx timeout [ 125.813932] Bluetooth: hci3: command tx timeout [ 125.875971] Bluetooth: hci4: command tx timeout [ 125.875993] Bluetooth: hci5: command tx timeout [ 125.940451] Bluetooth: hci6: command tx timeout [ 125.940482] Bluetooth: hci7: command tx timeout [ 127.731961] Bluetooth: hci1: command tx timeout [ 127.796189] Bluetooth: hci2: command tx timeout [ 127.796997] Bluetooth: hci0: command tx timeout [ 127.859927] Bluetooth: hci3: command tx timeout [ 127.924618] Bluetooth: hci4: command tx timeout [ 127.925927] Bluetooth: hci5: command tx timeout [ 127.988279] Bluetooth: hci7: command tx timeout [ 127.989050] Bluetooth: hci6: command tx timeout [ 129.779950] Bluetooth: hci1: command tx timeout [ 129.843945] Bluetooth: hci2: command tx timeout [ 129.844298] Bluetooth: hci0: command tx timeout [ 129.908153] Bluetooth: hci3: command tx timeout [ 129.972955] Bluetooth: hci5: command tx timeout [ 129.973003] Bluetooth: hci4: command tx timeout [ 130.036262] Bluetooth: hci6: command tx timeout [ 130.036950] Bluetooth: hci7: command tx timeout [ 131.827974] Bluetooth: hci1: command tx timeout [ 131.892365] Bluetooth: hci0: command tx timeout [ 131.892398] Bluetooth: hci2: command tx timeout [ 131.956931] Bluetooth: hci3: command tx timeout [ 132.020278] Bluetooth: hci4: command tx timeout [ 132.021052] Bluetooth: hci5: command tx timeout [ 132.084005] Bluetooth: hci6: command tx timeout [ 132.087316] Bluetooth: hci7: command tx timeout [ 183.946198] syz-executor.4 (285) used greatest stack depth: 24960 bytes left [ 186.586196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.588498] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.594564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.602715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.607328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.732289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.735207] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.741133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.742213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.753455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.756394] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.760785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.763566] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.769387] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.781337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.783111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.786249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.790514] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.794241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.796786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.798400] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.804111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.804351] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.810105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.815655] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.816643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.823200] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.826137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.832685] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.852688] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.938773] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.953667] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.956096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.979099] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.985802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.356585] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.383435] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.391284] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.502561] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.524085] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 188.661348] Bluetooth: hci0: command tx timeout [ 188.854957] Bluetooth: hci4: command tx timeout [ 188.916048] Bluetooth: hci2: command tx timeout [ 188.982951] Bluetooth: hci1: command tx timeout [ 188.983047] Bluetooth: hci3: command tx timeout [ 189.044964] Bluetooth: hci5: command tx timeout [ 189.108183] Bluetooth: hci6: command tx timeout [ 189.747981] Bluetooth: hci7: command tx timeout [ 190.708258] Bluetooth: hci0: command tx timeout [ 190.901108] Bluetooth: hci4: command tx timeout [ 190.965234] Bluetooth: hci2: command tx timeout [ 191.030152] Bluetooth: hci3: command tx timeout [ 191.030784] Bluetooth: hci1: command tx timeout [ 191.093947] Bluetooth: hci5: command tx timeout [ 191.156219] Bluetooth: hci6: command tx timeout [ 191.796465] Bluetooth: hci7: command tx timeout [ 192.756914] Bluetooth: hci0: command tx timeout [ 192.948440] Bluetooth: hci4: command tx timeout [ 193.012200] Bluetooth: hci2: command tx timeout [ 193.076393] Bluetooth: hci3: command tx timeout [ 193.077103] Bluetooth: hci1: command tx timeout [ 193.139975] Bluetooth: hci5: command tx timeout [ 193.204886] Bluetooth: hci6: command tx timeout [ 193.843920] Bluetooth: hci7: command tx timeout [ 194.804073] Bluetooth: hci0: command tx timeout [ 194.995936] Bluetooth: hci4: command tx timeout [ 195.059976] Bluetooth: hci2: command tx timeout [ 195.124210] Bluetooth: hci3: command tx timeout [ 195.125232] Bluetooth: hci1: command tx timeout [ 195.187981] Bluetooth: hci5: command tx timeout [ 195.252007] Bluetooth: hci6: command tx timeout [ 195.892231] Bluetooth: hci7: command tx timeout [ 248.676369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.682630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.687602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.691560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.702272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.718702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.726273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.733787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.742141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.746949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.838425] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.852698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.857544] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.866413] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.875594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.877122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.881797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.886357] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.892377] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.906805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.917351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.924377] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.933321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.953112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.959799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.049309] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.066600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.085016] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.087102] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.105381] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.113762] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.134988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.152386] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.157791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.162554] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.167453] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.172442] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.177526] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 249.182985] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.197008] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.804053] Bluetooth: hci0: command tx timeout [ 250.805042] Bluetooth: hci1: command tx timeout [ 250.997216] Bluetooth: hci4: command tx timeout [ 250.998983] Bluetooth: hci3: command tx timeout [ 251.060053] Bluetooth: hci2: command tx timeout [ 251.316462] Bluetooth: hci6: command tx timeout [ 251.317478] Bluetooth: hci7: command tx timeout [ 251.317538] Bluetooth: hci5: command tx timeout [ 252.851967] Bluetooth: hci0: command tx timeout [ 252.852091] Bluetooth: hci1: command tx timeout [ 253.045419] Bluetooth: hci3: command tx timeout [ 253.045451] Bluetooth: hci4: command tx timeout [ 253.108245] Bluetooth: hci2: command tx timeout [ 253.365869] Bluetooth: hci7: command tx timeout [ 253.365968] Bluetooth: hci5: command tx timeout [ 253.366373] Bluetooth: hci6: command tx timeout [ 254.900131] Bluetooth: hci0: command tx timeout [ 254.901014] Bluetooth: hci1: command tx timeout [ 255.092905] Bluetooth: hci4: command tx timeout [ 255.093413] Bluetooth: hci3: command tx timeout [ 255.155901] Bluetooth: hci2: command tx timeout [ 255.411934] Bluetooth: hci5: command tx timeout [ 255.412454] Bluetooth: hci6: command tx timeout [ 255.413188] Bluetooth: hci7: command tx timeout [ 256.948912] Bluetooth: hci1: command tx timeout [ 256.949419] Bluetooth: hci0: command tx timeout [ 257.140258] Bluetooth: hci3: command tx timeout [ 257.140761] Bluetooth: hci4: command tx timeout [ 257.204071] Bluetooth: hci2: command tx timeout [ 257.460022] Bluetooth: hci7: command tx timeout [ 257.460588] Bluetooth: hci6: command tx timeout [ 257.461120] Bluetooth: hci5: command tx timeout [ 311.563859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.571853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.573553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.576760] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.579147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.580889] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.581732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.584641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.587678] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.591386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.591525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.600126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.602245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.608109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.627578] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.702718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.708278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.716715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.728415] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.731163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.777724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.789505] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.792723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.832351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.840793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.884453] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.889607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.895412] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.905219] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.918388] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.024970] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.033494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.042327] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.075317] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.081577] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.103123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.114540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.152726] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.162421] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.172735] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.652314] Bluetooth: hci0: command tx timeout [ 313.652372] Bluetooth: hci1: command tx timeout [ 313.715945] Bluetooth: hci2: command tx timeout [ 313.782022] Bluetooth: hci3: command tx timeout [ 313.972074] Bluetooth: hci6: command tx timeout [ 314.035934] Bluetooth: hci4: command tx timeout [ 314.228230] Bluetooth: hci5: command tx timeout [ 314.291979] Bluetooth: hci7: command tx timeout [ 315.700339] Bluetooth: hci1: command tx timeout [ 315.700535] Bluetooth: hci0: command tx timeout [ 315.763932] Bluetooth: hci2: command tx timeout [ 315.828326] Bluetooth: hci3: command tx timeout [ 316.019912] Bluetooth: hci6: command tx timeout [ 316.084225] Bluetooth: hci4: command tx timeout [ 316.275934] Bluetooth: hci5: command tx timeout [ 316.340054] Bluetooth: hci7: command tx timeout [ 317.748254] Bluetooth: hci0: command tx timeout [ 317.749198] Bluetooth: hci1: command tx timeout [ 317.812258] Bluetooth: hci2: command tx timeout [ 317.877117] Bluetooth: hci3: command tx timeout [ 318.068950] Bluetooth: hci6: command tx timeout [ 318.133109] Bluetooth: hci4: command tx timeout [ 318.325004] Bluetooth: hci5: command tx timeout [ 318.387908] Bluetooth: hci7: command tx timeout [ 319.797577] Bluetooth: hci1: command tx timeout [ 319.797672] Bluetooth: hci0: command tx timeout [ 319.861915] Bluetooth: hci2: command tx timeout [ 319.924022] Bluetooth: hci3: command tx timeout [ 320.116251] Bluetooth: hci6: command tx timeout [ 320.179952] Bluetooth: hci4: command tx timeout [ 320.372524] Bluetooth: hci5: command tx timeout [ 320.435977] Bluetooth: hci7: command tx timeout [ 374.147530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.154739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.158467] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.159242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.164662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.169118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.169685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.173246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.187401] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.190569] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.293170] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.307761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.312847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.317404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.320438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.337900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.342293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.344641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.352351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.364965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.548493] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.553860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.556784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.580040] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.593194] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.651000] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.655659] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.664001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.683269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.687213] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.758515] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.761421] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.765183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.772190] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.773364] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.779432] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.818518] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.823536] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.835225] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.873081] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.246061] Bluetooth: hci1: command tx timeout [ 376.247014] Bluetooth: hci0: command tx timeout [ 376.372050] Bluetooth: hci2: command tx timeout [ 376.437228] Bluetooth: hci3: command tx timeout [ 376.755987] Bluetooth: hci5: command tx timeout [ 376.756993] Bluetooth: hci4: command tx timeout [ 376.820946] Bluetooth: hci6: command tx timeout [ 376.948095] Bluetooth: hci7: command tx timeout [ 378.293553] Bluetooth: hci0: command tx timeout [ 378.294607] Bluetooth: hci1: command tx timeout [ 378.421008] Bluetooth: hci2: command tx timeout [ 378.483911] Bluetooth: hci3: command tx timeout [ 378.804302] Bluetooth: hci4: command tx timeout [ 378.805067] Bluetooth: hci5: command tx timeout [ 378.869051] Bluetooth: hci6: command tx timeout [ 378.998371] Bluetooth: hci7: command tx timeout [ 380.340036] Bluetooth: hci1: command tx timeout [ 380.340678] Bluetooth: hci0: command tx timeout [ 380.467933] Bluetooth: hci2: command tx timeout [ 380.533161] Bluetooth: hci3: command tx timeout [ 380.852952] Bluetooth: hci4: command tx timeout [ 380.853494] Bluetooth: hci5: command tx timeout [ 380.916895] Bluetooth: hci6: command tx timeout [ 381.043920] Bluetooth: hci7: command tx timeout [ 382.388166] Bluetooth: hci0: command tx timeout [ 382.388794] Bluetooth: hci1: command tx timeout [ 382.518018] Bluetooth: hci2: command tx timeout [ 382.580872] Bluetooth: hci3: command tx timeout [ 382.899992] Bluetooth: hci5: command tx timeout [ 382.900541] Bluetooth: hci4: command tx timeout [ 382.965094] Bluetooth: hci6: command tx timeout [ 383.093025] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:07:00 Registers: info registers vcpu 0 RAX=ffff88802fcf8001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802fcf7f01 RSI=ffff88802fcf7f28 RDI=ffff88802fcf7608 RBP=ffff88802fcf7650 RSP=ffff88802fcf7588 R8 =ffffffff86882cd8 R9 =ffff88802fcf7638 R10=000000000003b6bd R11=0000000000026d6c R12=ffff88802fcf7658 R13=ffff88802fcf7640 R14=ffff88802fcf7f30 R15=ffff88802fcf75f8 RIP=ffffffff813548f8 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd60aea3008 CR3=0000000032c78000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000002 RCX=ffffffff81356831 RDX=0000000000003568 RSI=0000000000003568 RDI=ffffffff86c7febc RBP=ffff88806cf08ad0 RSP=ffff88806cf089b8 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6bd R11=0000000000000001 R12=ffff88806cf08ad8 R13=ffff88806cf08ac0 R14=ffff88806cf08ab9 R15=ffff88806cf08a78 RIP=ffffffff81353f42 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f587d8cf000 CR3=0000000032c48000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000