Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:19786' (ECDSA) to the list of known hosts. 2025/06/05 23:44:50 fuzzer started 2025/06/05 23:44:50 dialing manager at localhost:39689 syzkaller login: [ 94.387175] cgroup: Unknown subsys name 'net' [ 94.514910] cgroup: Unknown subsys name 'cpuset' [ 94.557009] cgroup: Unknown subsys name 'rlimit' 2025/06/05 23:45:06 syscalls: 209 2025/06/05 23:45:06 code coverage: enabled 2025/06/05 23:45:06 comparison tracing: enabled 2025/06/05 23:45:06 extra coverage: enabled 2025/06/05 23:45:06 setuid sandbox: enabled 2025/06/05 23:45:06 namespace sandbox: enabled 2025/06/05 23:45:06 Android sandbox: enabled 2025/06/05 23:45:06 fault injection: enabled 2025/06/05 23:45:06 leak checking: enabled 2025/06/05 23:45:06 net packet injection: enabled 2025/06/05 23:45:06 net device setup: enabled 2025/06/05 23:45:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/05 23:45:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/05 23:45:06 USB emulation: enabled 2025/06/05 23:45:06 hci packet injection: enabled 2025/06/05 23:45:06 wifi device emulation: enabled 2025/06/05 23:45:06 802.15.4 emulation: enabled 2025/06/05 23:45:06 fetching corpus: 0, signal 0/0 (executing program) 2025/06/05 23:45:08 starting 8 fuzzer processes 23:45:08 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x204183, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f00000000c0)=0x9, 0x12) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='wlan1\x00', 0x5, 0xd307, 0x6}) r3 = accept4$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10, 0x800) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000002c0)={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x10}}, 0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)=""/47, &(0x7f0000000340)=0x2f) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x410642, 0x0) r5 = inotify_init1(0x80000) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {r1, r6}}, './file0\x00'}) connect$netlink(r0, &(0x7f0000000480)=@unspec, 0xc) setsockopt$inet_mreqsrc(r7, 0x0, 0x25, &(0x7f00000004c0)={@multicast2, @multicast1, @multicast1}, 0xc) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000640)={'filter\x00', 0x0, 0x4, 0xed, [0x1, 0x0, 0x9, 0xfff, 0xffffffff9b3429c5, 0x914b], 0x2, &(0x7f0000000500)=[{}, {}], &(0x7f0000000540)=""/237}, &(0x7f00000006c0)=0x78) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x1e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r9, {r8, r2}}, './file0\x00'}) ioctl$LOOP_CLR_FD(r10, 0x4c01) 23:45:08 executing program 0: r0 = fsopen(&(0x7f0000000000)='jffs2\x00', 0x1) r1 = fsmount(r0, 0x0, 0x80) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = openat$cgroup_int(r1, &(0x7f0000001040)='cpuset.mems\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)="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", 0x1000, r2}, 0x68) r3 = inotify_add_watch(r1, &(0x7f0000001100)='./file0\x00', 0x2000004) inotify_rm_watch(r1, r3) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000001140)={0x4}) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x40010, r1, 0x336) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40040c0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) write$vga_arbiter(r1, &(0x7f0000001280)=@unlock_all, 0xb) recvmmsg$unix(r1, &(0x7f0000001800)=[{{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001340)=""/224, 0xe0}, {&(0x7f0000001440)=""/214, 0xd6}, {&(0x7f0000001540)=""/61, 0x3d}, {&(0x7f0000001580)=""/244, 0xf4}], 0x4, &(0x7f00000016c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}], 0x1, 0x10020, &(0x7f0000001840)={0x77359400}) recvmmsg$unix(r1, &(0x7f0000004140)=[{{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000001900)=""/251, 0xfb}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/9, 0x9}, {&(0x7f0000002a40)=""/167, 0xa7}, {&(0x7f0000002b00)=""/95, 0x5f}], 0x5}}, {{&(0x7f0000002c00), 0x6e, &(0x7f0000004000)=[{&(0x7f0000002c80)=""/166, 0xa6}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/57, 0x39}, {&(0x7f0000003d80)=""/112, 0x70}, {&(0x7f0000003e00)=""/198, 0xc6}, {&(0x7f0000003f00)=""/235, 0xeb}], 0x6, &(0x7f0000004080)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x2, 0x0, &(0x7f00000041c0)) setgroups(0x5, &(0x7f0000004200)=[r5, r7, 0xffffffffffffffff, 0xee00, 0x0]) r8 = fsopen(&(0x7f0000004240)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000004280)={0x0, 0xd37c, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000004680)={r9, 0x9a9a, 0x0, [0x3ff, 0x2, 0x6, 0x8, 0x6], [0x8000, 0x0, 0xa85d, 0x7f, 0x70, 0x5, 0x5, 0x0, 0x8, 0xf7, 0xfff, 0x1c00000000, 0x100000001, 0x9, 0x6, 0xbde, 0x2, 0x7fff, 0x5, 0x87f, 0x5, 0x3, 0xe2d, 0x8001, 0x0, 0xc95e, 0xffffffffffffff62, 0x0, 0x200, 0x0, 0x0, 0x3d1c3197, 0x1, 0x1, 0x2, 0x2, 0x481, 0xa3, 0xff, 0x1f, 0xffffffffffffffc9, 0x9, 0x6, 0xd916, 0x800, 0x700fa463, 0x1, 0xffff, 0x2, 0x7, 0x20, 0x8, 0x2000, 0x4400000000000, 0x1f, 0xffffffff, 0x6, 0x2, 0x2, 0x2, 0x8000, 0x3, 0xf0, 0x0, 0x4, 0x7d6f, 0x1, 0x4, 0x6e90, 0x8d9b, 0x6, 0x1, 0x8001, 0x3, 0x40, 0x83, 0x10000, 0xff, 0x27b, 0x7, 0x2, 0xd9e, 0x0, 0x8, 0x75b, 0xffff, 0xff, 0x6, 0x5, 0x9, 0x6, 0x4, 0x5, 0x9, 0xe, 0x7, 0x8, 0x0, 0x7fff, 0x4, 0x7fffffff, 0x4, 0x5, 0x100000001, 0x81, 0x5, 0xfff, 0xcf0e, 0x1000, 0x7, 0x9, 0x8, 0x9, 0x10000, 0x0, 0x9, 0xe4, 0x9, 0x80000000, 0x8, 0x5]}) 23:45:08 executing program 2: r0 = inotify_init() ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000000)={{}, 0x0, 0x18, @unused=[0x9, 0x8, 0x3], @subvolid=0x800}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001000)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) statx(r1, &(0x7f0000001040)='./file0\x00', 0x800, 0x80, &(0x7f0000001080)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001180), 0x18002, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0xd000008}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xc4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r2, &(0x7f0000005240)=[{{&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000002580)=[{0xffffffffffffffff}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/253, 0xfd}, {&(0x7f0000002500)=""/111, 0x6f}], 0x4, &(0x7f00000025c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000002680), 0x6e, &(0x7f0000003940)=[{&(0x7f0000002700)=""/98, 0x62}, {&(0x7f0000002780)=""/58, 0x3a}, {&(0x7f00000027c0)=""/178, 0xb2}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/169, 0xa9}], 0x5, &(0x7f00000039c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003ac0)=""/81, 0x51}], 0x1, &(0x7f0000003b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003bc0)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000003c40)=""/146, 0x92}, {&(0x7f0000003d00)=""/26, 0x1a}, {&(0x7f0000003d40)=""/68, 0x44}, {&(0x7f0000003dc0)=""/43, 0x2b}, {&(0x7f0000003e00)=""/118, 0x76}, {&(0x7f0000003e80)=""/147, 0x93}, {&(0x7f0000003f40)=""/183, 0xb7}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/66, 0x42}, {&(0x7f0000005080)=""/137, 0x89}], 0xa, &(0x7f0000005200)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x10000, &(0x7f0000005340)) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000005380)='\x00', &(0x7f00000053c0)='./file0\x00', 0xffffffffffffff9c) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000054c0)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005480)={&(0x7f0000005440)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8885}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000005540)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000056c0)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005680)={&(0x7f0000005580)={0xcc, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb2ded47768d34663}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1a}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000044}, 0x4810) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000005700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000005b00)={0x2, 0x0, {0x4, @struct={0x4, 0x1}, r10, 0x4, 0xf5d5, 0x8, 0x1, 0x3, 0x10, @usage=0x5, 0x8, 0x20, [0x800, 0x6, 0x86, 0x7fff, 0x401, 0x1]}, {0x100000000, @usage=0x8, 0x0, 0xffffffffffffffc1, 0x36, 0x3fe6, 0xfffffffffffff000, 0xe7, 0x800, @usage=0x8f0000, 0x0, 0x1, [0x100000000, 0x3, 0x2, 0x1]}, {0x9, @usage, 0x0, 0x4, 0x5, 0x4, 0x101, 0x5ee9, 0x2, @usage=0x4, 0x1, 0x8, [0x3ff, 0x2, 0x4, 0x0, 0x20, 0x18c]}, {0x1, 0x7, 0x9}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000006000)={&(0x7f0000005f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f40)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x14) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000060c0), 0x10800, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000006040)='\x00', &(0x7f0000006080)='./file0\x00', r12) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000006100)=0x5, 0x4) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000006200)={&(0x7f0000006140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000061c0)={&(0x7f0000006180)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000062c0)={0x1}, 0x4) [ 111.390116] audit: type=1400 audit(1749167108.093:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:45:08 executing program 3: timer_gettime(0x0, &(0x7f0000000000)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/208, 0xd0}], 0x1, &(0x7f0000000200)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xa8}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000440)=""/104, 0x68}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/112, 0x70}, {&(0x7f0000000700)=""/129, 0x81}, {&(0x7f00000007c0)=""/151, 0x97}, {&(0x7f0000000880)=""/96, 0x60}], 0x8}}], 0x2, 0x1, &(0x7f0000000a00)={0x0, 0x989680}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000a40)) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r5) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, r10, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf128}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r4, {r8, r9}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r11, 0x4c02, &(0x7f0000000c80)={0x0, {}, 0x0, {}, 0x7, 0x4, 0x9, 0x19, "ddb63c96d953fb4e5c26f91f097a873a521f475a91158799e0eb4723465856bbf0954b8c198607d9bcbf229c39b150d91b24ace6642feee647f812fd0059c15e", "9e119667b528cc6f7bddec7e4ac541ae71b593e647dfe583ee694b32474df03c", [0x3000000, 0x6]}) ioctl$LOOP_SET_FD(r11, 0x4c00, r11) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x64, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4e}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x64}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000e80)={'batadv_slave_1\x00'}) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ec0), 0x84001, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x501, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000880}, 0x20000040) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x98, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) accept$packet(r13, 0x0, &(0x7f00000011c0)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000001200)=0x8, 0x4) r14 = accept$packet(r11, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001280)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f00000012c0)) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) 23:45:08 executing program 4: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) r0 = socket$inet(0x2, 0xa, 0x5c) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0xff, 0x7, 0x6]}, &(0x7f0000000180)=0x44) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x4, 0xd, [0x353, 0x1, 0x4, 0x8, 0x7fffffff, 0x9], 0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/13}, &(0x7f0000000300)=0x78) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x17}, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) r1 = socket(0x1d, 0x5, 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmmsg$unix(r1, &(0x7f0000001c40)=[{{&(0x7f0000001a40), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001ac0)=""/54, 0x36}], 0x1, &(0x7f0000001b40)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}], 0x1, 0x1, &(0x7f0000001c80)={0x77359400}) ioctl$LOOP_CLR_FD(r2, 0x4c01) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001cc0)='dctcp\x00', 0x6) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000001d00), &(0x7f0000001d40)=0x4) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000001d80), &(0x7f0000001dc0)=0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x4010, r2, 0x5102d000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x8b8aa000) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000001e00)={@local, @remote, @multicast1}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001e80), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x58, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x84) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x24, r8, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x15) 23:45:08 executing program 5: getuid() r0 = getuid() r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_persistent(0x16, r0, r1) getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) r3 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x6, 0x5, &(0x7f0000000500)=[{&(0x7f00000000c0)="e4783bda12c4e26d064289b99c447be55fe153c93827c5497956cbd830314e1f36197096349db47e808688376985ad2be935a77ae2adf69b0cee491b2ba184abc801472ba0c1ecc11568fcbd3a4f6ef8a9d9681dc116590bfb1ef86cf733dc83fb8649510af15be8469bda9e525fd75abea8721056369d62b5dc51e5bbef654e728741f3f00d8e4f75f30acf85a7a5aaacfb24d9779f070ec24240c1d754ed56026b02663b016c2c0b1a329717c62d3a709e3223375ed5df34ab28758b4d8f24b0e2cc5b36fa92520c556176d3b84115d8814dcb6f", 0xd5, 0x9}, {&(0x7f00000001c0)="58f7048fb1f07b3708cee008a934d7b09340973471ca0454efd353429a951c0a6dcd75c5b6796d56883b9b140b2cb9b2adcbe06985e76d5518462bb3be6e2ba74ccae3e44037f5124f2019474a429eb80673f93ffa9b5bf3478bfd1f53da4411088608e13baed724e9f9a966eda20d7589b5f588227f793a7b3731431ffb880a8346b000acc63879335ab51ae7079c8c537add923f0be5ec48f36920f83a41eb81ef9e5887ca91a7473f66e674c1107b340bdd162ad88de2f4b496d33ed765a82bfd34daad38", 0xc6, 0x8}, {&(0x7f00000002c0)="2f3276feae7d290f83a606cd1d71c75c04aca4dcd95d183d4263a944", 0x1c, 0x1000}, {&(0x7f0000000300)="8adcb6f72f95af03a67227158055fa9edc7ed2d820b9394abd9a5952da05a0790951964efd1dea7761c94ffb31e8d5e0b4bc970172330f5bcecb7a9ba564b6e4acdf31c2d52e0dc1d3659872506a8f418b5936e8abc2191e1952f2327543106db7bf5bf7cb6bebb6d3bbd8490129cd4746d2206c63b80a3ad4c65ff4bbebe08d82750c213efbf4d81b2b777ca1c2c50f8ad9005d598cff5ea43885a8b5244ffe2c0fe2008f70a1f9a42e70b2dfcdbea19913acafa2198afd72eaa68172aa712e1a888e", 0xc3, 0x312}, {&(0x7f0000000400)="3b1cb9b6a51871042ea4e075ab3c3b959ff899f6ddb415566e7889c9b0fe149b29a9db3279af58d4b1f72806b86337a3ff04b4331bc1af52badfe11b39ecfcf40f6e1e11fc64f7eb20a33e531c6532e406fda049897af7b1975940597fdc9913b1598ecf0bbd98b5391e57a46ce4829348ae031a245bc924a991e43a0377a21130b146085dc2fd1e0c28a014e0bbf9e92422d15663da83b31a8692e743aba2f9cd3a14fd69b0d72ed439cbbf7defaff9946a657bb89d25c1538c5e7d6f5c7bff28b8555338ef7a77c7378fed2758302e4f8ea67810c06eb272d32a12", 0xdc, 0x80000001}], 0x8000, &(0x7f0000000640)={[{'keyring\x00'}, {'keyring\x00'}, {'*'}, {}, {'keyring\x00'}], [{@context={'context', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r0}}, {@subj_user}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '-:\x92'}}, {@uid_eq={'uid', 0x3d, r2}}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x35, 0x39, 0x64, 0x30, 0x39], 0x2d, [0x35, 0x34, 0x33], 0x2d, [0x36, 0x31, 0x32, 0x51], 0x2d, [0x33, 0x32, 0x65, 0x66], 0x2d, [0x5e9065fb71911d03, 0x63, 0x37, 0x36, 0x35, 0x35, 0x38, 0x32]}}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) r4 = syz_mount_image$nfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x8, 0x7, &(0x7f0000000d00)=[{&(0x7f00000007c0)="f4606fa7f23e631342fe95647519377238382d868a010013c0ad2479", 0x1c, 0x10000}, {&(0x7f0000000800)="1c7776614708882a1b44b7a4fa757bec42367e1fabde090eaa3d5ce9961712b87ca3335c30826d5d1563966760903d9b1a2126afcf1a164bef7f654f94530a2b9be92cc6add7d5b89c4ed83894e2d1f14dacd91f7dc04ae44dcd896ad2a9fa0f300c1794d36b20be1f8b4a39baee93506737631596aa5d49823815902a245427dd07b979524b7d50e1e106db90e9063886b64012360b63eb776dda434b840c88ca20ed93962dbfc309daa8380127164f232c6de71470f00779910c6846d18f427ddcdfb9e9b5e95ea0991d3391fd15c3f78219d0d2259cebb07e83cdbd8fe77dda32ac86b75e782f29a68fea2f756d", 0xef, 0x3f}, {&(0x7f0000000900)="65c83007a29da83f2726c1674c0ba1e9abf7b9a88ec75bebde96ee3d98d6f5af834c720632a0ed8badb0e8f0f2d6f06cb55b8d5ed9c9fa7fff54b613edeac35bcf25ce7ca71771d14a21c40f545737dc10db12e0800f626063003c5b33ac7c9dce7e833e28a623a916df58598453e5df8c1214a2507a439db31c9ba15d0210d076b92c39dd415c05d5fc7d80b9f7f35c3c265c3a80cd310f0d305e537398130e4bdd592ff5dc1e420d788f1fe7701df5df4148ea477dff034af07bcfe9a44e357119eabb99d9dff5dd88cbef3ea48ff1780ab77c8952eee7a93c4f481bffaacf706c", 0xe2, 0xfffffffffffffffd}, {&(0x7f0000000a00)="16e7e0a137d7e0edcd6790bcde10b9d56f98ebfb8bb8c4af4e283173dc00c8500bab33165e645b8561ff7cc1c0bbf9377e9216a73598f5aed770b5f4fce0e7a34073c6a3cb7a492ce631964b9f9c8419e1b481de54f502d14feece80bb39e31297b4a85260dc92415d06a92ea273d15de27134cea6b39691b184e933fe7ed7d9618463bbd698e185227db4a49365df95fe04378e618f1de8fbaab96233bf41e779cb24ca5f26340c218dc91bdc7727fbab4d9bd043e3dca275f08d8af9ccf839f70c2b4850af5d2416ee11c6ce6befe7980de032556ac368ab1a94418c2f0f61854e3a09636dc1bb52", 0xe9, 0x9}, {&(0x7f0000000b00)="9d619a9cee11298e9be2a0de79cbee62b5a19499508bb177474cd02e06a68b58fc4df2438cae45bb3019ec9c45a931a76906c6aabe95926de8505047c2002c36", 0x40, 0xb1cf}, {&(0x7f0000000b40)="0c033d97d9f068470006d53212e1696dcbb7f46300731298628e7cf9cdfaa4c07dc87ace319f9913f90e7d9b91bc7f633b905e4f75fa137efe35c6a5c34900a4526eca9993c52e7dd5b752aa5039404c441fdd15c517f95b586b5ae4548b541da2304016c885f0db28fa16eaaa46d474b4e23213f8fa67b6e7262e4b0289c8a43bec2799eb0b00a5d2ac54beee83f600efea5ccc35952ab8a7e51e2de0623e953570e44b47401d60c512e17dd70afc95d7df3f4caa03e3504bdad926eef530e706320043a9c157598ef92b3785c81bafd1", 0xd1, 0x1f}, {&(0x7f0000000c40)="9b690aa63c29ef70131f1a77e4bd0f396bf08da57796eba08f99ac7652ab14e030ae7d28812a2f3c9f88f82677c4aa1596e3ade478f9bff3ad7ae6210b68f1cf7642eefa09378da0cfdd79e754b3d03a6f6ac6358a619f8e82503ec98a949fb1d32ceab9edf23f3c59af5a202d2add62904b06c2c5c1640d67011825dbd6b26ead0082c1ef34492506805539dd9d27d3b487cb8521a0bd3eb459f77c06cf2f1dfce83a98155530", 0xa7, 0x8000}], 0x10004, &(0x7f0000000dc0)={[{'-:\x92'}, {'\'\\\\^:[@'}, {'user_u'}, {}, {'-[]!{'}], [{@euid_eq={'euid', 0x3d, r0}}, {@smackfshat}]}) fspick(r4, &(0x7f0000000e40)='./file0\x00', 0x0) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000f00)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000f40)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000e80)="c113b2bb3e247f8f8556738be1102f88b5a5b87d80ee893bcb373d332b27dac6da98407f7f2a9ae02127a648bf29b9448f3553344440153a0935b43f6990e8793c5147b657f93aae94d2c5a2a540f1816ddbdc88a0bfe1eb2e", 0x59, r5}, 0x68) r6 = fsopen(&(0x7f0000000fc0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000001000)='*', 0x0, r4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001040), 0x303800, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000001080)='lazytime\x00', 0x0, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000010c0), 0x840, 0x0) r9 = fspick(r3, &(0x7f0000001100)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f0000001140)={{r9}, 0x0, 0x4, @unused=[0x80000001, 0xe8, 0x5, 0x9], @subvolid=0x4}) r10 = accept4$inet(r7, &(0x7f0000002140)={0x2, 0x0, @private}, &(0x7f0000002180)=0x10, 0x80800) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000021c0), &(0x7f0000002200)=0xc) 23:45:08 executing program 6: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xdb}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x400c0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6068118c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x2c}}, 0x4000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) r2 = accept$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000c0) r4 = socket(0x0, 0x5, 0x47399739) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001cc0)=0xe5, 0x4) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x5c}}, 0x20000001) connect$inet(r0, &(0x7f0000001e80)={0x2, 0x4e20, @local}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x2c, r5, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}}, 0x24004000) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044940) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000002200)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000002400)={{r8, 0x0, 0x7, 0x9, 0x5, 0x200, 0x401, 0x5, 0xffff, 0x38, 0x0, 0x4, 0x6, 0x8, 0x81}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000003540)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003500)={&(0x7f0000003440)={0x94, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x400d0}, 0x844) 23:45:08 executing program 7: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) mmap(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x8, 0x4084132, r0, 0xb5845000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000080)="f68a9219ec2a31c0feb5c99f1bdd07126b312254c2f30a927769bbd90bc13ad287b98f9cb7915d066154b21d2473388819962373bd06090ea8f3fa5dbeb082d056820151a70a80c991da0c49071ef880e936de05e0344f9326f20a22fdbf57566dce2369bfdfbf6457436e7a7d782597268936e34323606c2dd367f18b5537502a5788b3098442caf7848ac464713806263e8a38cc615a26d5e8c530e270af3d7b01d547fcd495815d2242366b17dbf84d5a076b01d2228c56cbb3d40f7dfb2b288786add9", 0xc5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fspick(r1, &(0x7f00000005c0)='./file0\x00', 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000600)='sync\x00', 0x0, 0x0) r3 = fspick(r1, &(0x7f0000000640)='./file0\x00', 0x0) r4 = getgid() statx(r1, &(0x7f0000000740)='./file0\x00', 0x2000, 0x40, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x10000, &(0x7f0000000880)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@afid}], [{@dont_hash}, {@uid_gt={'uid>', r2}}, {@audit}, {@uid_gt={'uid>', r2}}, {@smackfshat={'smackfshat', 0x3d, 'sync\x00'}}, {@fowner_gt={'fowner>', r2}}]}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getresuid(&(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00)) recvmmsg$unix(r3, &(0x7f0000002b00)=[{{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000ac0)=""/8, 0x8}, {&(0x7f0000000b00)=""/132, 0x84}, {&(0x7f0000000bc0)=""/117, 0x75}, {&(0x7f0000000c40)=""/16, 0x10}, {&(0x7f0000000c80)=""/173, 0xad}], 0x5, &(0x7f0000000dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000e00)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000e80)=""/39, 0x27}, {&(0x7f0000000ec0)=""/229, 0xe5}, {&(0x7f0000000fc0)=""/149, 0x95}, {&(0x7f0000001080)=""/95, 0x5f}, {&(0x7f0000001100)=""/130, 0x82}, {&(0x7f00000011c0)=""/249, 0xf9}], 0x6}}, {{&(0x7f0000001340), 0x6e, &(0x7f00000014c0)=[{&(0x7f00000013c0)=""/223, 0xdf}], 0x1, &(0x7f0000001500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000002600)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, &(0x7f0000002640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000026c0)=""/192, 0xc0}], 0x1, &(0x7f00000027c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000002880)=@abs, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002900)=""/88, 0x58}, {&(0x7f0000002980)=""/38, 0x26}], 0x2, &(0x7f0000002a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}], 0x6, 0x12000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002c80)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './file0\x00'}) r9 = fspick(0xffffffffffffffff, &(0x7f0000002cc0)='./file0\x00', 0x1) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002d40)='./binderfs2/binder0\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000002d00)='\x00', 0x0, r10) [ 112.844074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.850904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.853890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.864906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.872671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.918854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.928130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.930880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.944053] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.962977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.966856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.968961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.972191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.994210] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.002523] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.020118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.052654] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.066236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.073305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.078919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.083783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.086487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.089090] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.095942] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.102998] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.105852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.122014] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.129123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.132371] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.147634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.150147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.166305] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.188136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.196219] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.208395] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.209639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.212413] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.235797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.240287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.281410] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.927000] Bluetooth: hci0: command tx timeout [ 115.054017] Bluetooth: hci1: command tx timeout [ 115.118941] Bluetooth: hci2: command tx timeout [ 115.182022] Bluetooth: hci7: command tx timeout [ 115.309705] Bluetooth: hci6: command tx timeout [ 115.310407] Bluetooth: hci4: command tx timeout [ 115.373961] Bluetooth: hci5: command tx timeout [ 115.374602] Bluetooth: hci3: command tx timeout [ 116.976601] Bluetooth: hci0: command tx timeout [ 117.102780] Bluetooth: hci1: command tx timeout [ 117.166713] Bluetooth: hci2: command tx timeout [ 117.229632] Bluetooth: hci7: command tx timeout [ 117.358977] Bluetooth: hci4: command tx timeout [ 117.359439] Bluetooth: hci6: command tx timeout [ 117.422798] Bluetooth: hci5: command tx timeout [ 117.423242] Bluetooth: hci3: command tx timeout [ 119.022846] Bluetooth: hci0: command tx timeout [ 119.150617] Bluetooth: hci1: command tx timeout [ 119.214894] Bluetooth: hci2: command tx timeout [ 119.278824] Bluetooth: hci7: command tx timeout [ 119.406775] Bluetooth: hci6: command tx timeout [ 119.407236] Bluetooth: hci4: command tx timeout [ 119.470651] Bluetooth: hci3: command tx timeout [ 119.471100] Bluetooth: hci5: command tx timeout [ 121.070639] Bluetooth: hci0: command tx timeout [ 121.197631] Bluetooth: hci1: command tx timeout [ 121.262631] Bluetooth: hci2: command tx timeout [ 121.327592] Bluetooth: hci7: command tx timeout [ 121.454154] Bluetooth: hci4: command tx timeout [ 121.454629] Bluetooth: hci6: command tx timeout [ 121.518649] Bluetooth: hci5: command tx timeout [ 121.519087] Bluetooth: hci3: command tx timeout [ 175.235098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.240432] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.243438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.252829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.257313] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.292139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.293606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.294633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.304204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.307301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.491461] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.498148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.522964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.531121] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.535175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.538255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.543323] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.547171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.564519] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.565371] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.578082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.579013] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.590679] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.606806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.626183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.643220] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.663729] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.669105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.681820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.731109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.731201] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.770707] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.777089] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.779409] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.783583] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.793899] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.796523] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.813895] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.828444] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.833894] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.325905] Bluetooth: hci1: command tx timeout [ 177.326878] Bluetooth: hci0: command tx timeout [ 177.581861] Bluetooth: hci3: command tx timeout [ 177.646077] Bluetooth: hci2: command tx timeout [ 177.773909] Bluetooth: hci4: command tx timeout [ 177.837678] Bluetooth: hci5: command tx timeout [ 177.837730] Bluetooth: hci6: command tx timeout [ 177.902223] Bluetooth: hci7: command tx timeout [ 179.374406] Bluetooth: hci0: command tx timeout [ 179.374501] Bluetooth: hci1: command tx timeout [ 179.629841] Bluetooth: hci3: command tx timeout [ 179.694487] Bluetooth: hci2: command tx timeout [ 179.821700] Bluetooth: hci4: command tx timeout [ 179.885706] Bluetooth: hci5: command tx timeout [ 179.885738] Bluetooth: hci6: command tx timeout [ 179.951613] Bluetooth: hci7: command tx timeout [ 181.421715] Bluetooth: hci1: command tx timeout [ 181.422306] Bluetooth: hci0: command tx timeout [ 181.678760] Bluetooth: hci3: command tx timeout [ 181.741661] Bluetooth: hci2: command tx timeout [ 181.869703] Bluetooth: hci4: command tx timeout [ 181.933648] Bluetooth: hci5: command tx timeout [ 181.934064] Bluetooth: hci6: command tx timeout [ 181.997837] Bluetooth: hci7: command tx timeout [ 183.469682] Bluetooth: hci1: command tx timeout [ 183.470859] Bluetooth: hci0: command tx timeout [ 183.725653] Bluetooth: hci3: command tx timeout [ 183.790892] Bluetooth: hci2: command tx timeout [ 183.919929] Bluetooth: hci4: command tx timeout [ 183.981636] Bluetooth: hci6: command tx timeout [ 183.981655] Bluetooth: hci5: command tx timeout [ 184.045713] Bluetooth: hci7: command tx timeout [ 235.665290] syz-executor.1 (2906) used greatest stack depth: 24912 bytes left [ 237.564070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.567300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.571115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.576610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.580106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.650953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.653745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.659011] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.664105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.670189] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.800589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.811163] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.831724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.842708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.845069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.851169] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.852725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.855418] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.864748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.868838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.898529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.909111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.937390] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.946258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.950420] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.982421] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.010235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.019078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.033276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.062051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.280826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.292092] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.297672] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.348274] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.378063] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.786518] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.812338] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.829821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.870092] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.875962] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.599207] Bluetooth: hci0: command tx timeout [ 239.727702] Bluetooth: hci1: command tx timeout [ 239.918852] Bluetooth: hci4: command tx timeout [ 239.983663] Bluetooth: hci2: command tx timeout [ 240.175507] Bluetooth: hci5: command tx timeout [ 240.238856] Bluetooth: hci3: command tx timeout [ 240.560692] Bluetooth: hci6: command tx timeout [ 241.005982] Bluetooth: hci7: command tx timeout [ 241.647117] Bluetooth: hci0: command tx timeout [ 241.773664] Bluetooth: hci1: command tx timeout [ 241.966623] Bluetooth: hci4: command tx timeout [ 242.029720] Bluetooth: hci2: command tx timeout [ 242.221901] Bluetooth: hci5: command tx timeout [ 242.285798] Bluetooth: hci3: command tx timeout [ 242.605684] Bluetooth: hci6: command tx timeout [ 243.053638] Bluetooth: hci7: command tx timeout [ 243.693659] Bluetooth: hci0: command tx timeout [ 243.821652] Bluetooth: hci1: command tx timeout [ 244.013738] Bluetooth: hci4: command tx timeout [ 244.077775] Bluetooth: hci2: command tx timeout [ 244.269621] Bluetooth: hci5: command tx timeout [ 244.333910] Bluetooth: hci3: command tx timeout [ 244.653683] Bluetooth: hci6: command tx timeout [ 245.102740] Bluetooth: hci7: command tx timeout [ 245.741906] Bluetooth: hci0: command tx timeout [ 245.870686] Bluetooth: hci1: command tx timeout [ 246.061702] Bluetooth: hci4: command tx timeout [ 246.125638] Bluetooth: hci2: command tx timeout [ 246.317640] Bluetooth: hci5: command tx timeout [ 246.381865] Bluetooth: hci3: command tx timeout [ 246.701766] Bluetooth: hci6: command tx timeout [ 247.149662] Bluetooth: hci7: command tx timeout [ 299.844706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.853618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.858384] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.866135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.870314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.984459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.988403] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.990359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.998158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.002153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.036076] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.053134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.056980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.077643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.094907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.226025] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.240097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.247220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.250181] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.253171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.258339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.264775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.268184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.285800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.299017] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.302786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.302996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.310872] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.326062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.332499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.346990] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.348740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.374244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.381250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.385578] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.397007] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.412992] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.417602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.477672] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.488523] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.934731] Bluetooth: hci0: command tx timeout [ 302.062850] Bluetooth: hci1: command tx timeout [ 302.190755] Bluetooth: hci2: command tx timeout [ 302.318830] Bluetooth: hci4: command tx timeout [ 302.445829] Bluetooth: hci5: command tx timeout [ 302.701890] Bluetooth: hci7: command tx timeout [ 302.702707] Bluetooth: hci3: command tx timeout [ 302.829961] Bluetooth: hci6: command tx timeout [ 303.981686] Bluetooth: hci0: command tx timeout [ 304.111628] Bluetooth: hci1: command tx timeout [ 304.238702] Bluetooth: hci2: command tx timeout [ 304.365686] Bluetooth: hci4: command tx timeout [ 304.494732] Bluetooth: hci5: command tx timeout [ 304.749788] Bluetooth: hci7: command tx timeout [ 304.750744] Bluetooth: hci3: command tx timeout [ 304.878640] Bluetooth: hci6: command tx timeout [ 306.029621] Bluetooth: hci0: command tx timeout [ 306.157660] Bluetooth: hci1: command tx timeout [ 306.286832] Bluetooth: hci2: command tx timeout [ 306.413839] Bluetooth: hci4: command tx timeout [ 306.541630] Bluetooth: hci5: command tx timeout [ 306.798696] Bluetooth: hci3: command tx timeout [ 306.798961] Bluetooth: hci7: command tx timeout [ 306.926656] Bluetooth: hci6: command tx timeout [ 308.077857] Bluetooth: hci0: command tx timeout [ 308.207579] Bluetooth: hci1: command tx timeout [ 308.334884] Bluetooth: hci2: command tx timeout [ 308.463617] Bluetooth: hci4: command tx timeout [ 308.589634] Bluetooth: hci5: command tx timeout [ 308.845634] Bluetooth: hci7: command tx timeout [ 308.845658] Bluetooth: hci3: command tx timeout [ 308.973722] Bluetooth: hci6: command tx timeout [ 360.185274] syz-executor.6 (8112) used greatest stack depth: 24544 bytes left [ 362.184381] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.193279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.196416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.217101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.231873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.363459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.368778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.374184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.390517] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.394512] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.498240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.501197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.503436] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.510636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.516128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.580095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.586273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.591129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.599153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.624480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.691948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.705096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.713396] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.746050] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.754896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.772233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.775687] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.778148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.787118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.790781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.804980] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.815436] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.826689] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.829441] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.835518] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.844031] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.858808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.897157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.961139] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.973863] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.270588] Bluetooth: hci0: command tx timeout [ 364.461727] Bluetooth: hci1: command tx timeout [ 364.589639] Bluetooth: hci2: command tx timeout [ 364.781952] Bluetooth: hci3: command tx timeout [ 364.974674] Bluetooth: hci5: command tx timeout [ 365.165796] Bluetooth: hci6: command tx timeout [ 365.165863] Bluetooth: hci7: command tx timeout [ 365.166606] Bluetooth: hci4: command tx timeout [ 366.319748] Bluetooth: hci0: command tx timeout [ 366.509751] Bluetooth: hci1: command tx timeout [ 366.637809] Bluetooth: hci2: command tx timeout [ 366.830582] Bluetooth: hci3: command tx timeout [ 367.021671] Bluetooth: hci5: command tx timeout [ 367.213697] Bluetooth: hci7: command tx timeout [ 367.214367] Bluetooth: hci6: command tx timeout [ 367.215076] Bluetooth: hci4: command tx timeout [ 368.365752] Bluetooth: hci0: command tx timeout [ 368.557869] Bluetooth: hci1: command tx timeout [ 368.685739] Bluetooth: hci2: command tx timeout [ 368.877793] Bluetooth: hci3: command tx timeout [ 369.070648] Bluetooth: hci5: command tx timeout [ 369.261768] Bluetooth: hci6: command tx timeout [ 369.262255] Bluetooth: hci4: command tx timeout [ 369.263329] Bluetooth: hci7: command tx timeout [ 370.413619] Bluetooth: hci0: command tx timeout [ 370.605873] Bluetooth: hci1: command tx timeout [ 370.733643] Bluetooth: hci2: command tx timeout [ 370.927581] Bluetooth: hci3: command tx timeout [ 371.119892] Bluetooth: hci5: command tx timeout [ 371.309721] Bluetooth: hci7: command tx timeout [ 371.309923] Bluetooth: hci4: command tx timeout [ 371.310159] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 23:50:09 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=00000000ffffffff RCX=ffffffff8138a8dd RDX=1ffff110028d8ca6 RSI=ffffffff8138a8eb RDI=ffff8880146c6530 RBP=ffff8880146c5c40 RSP=ffff888017737d98 R8 =0000000000000000 R9 =ffffed10028d8bac R10=0000000000000000 R11=0000000000000001 R12=ffffffff85afa120 R13=ffffffff85afa20c R14=ffff8880146c61e0 R15=0000000000000000 RIP=ffffffff81738ac4 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1f37998170 CR3=000000000f1fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff818c704c RDX=ffff88800c0e18c0 RSI=ffffffff818c7068 RDI=0000000000000007 RBP=ffff8880315cfc40 RSP=ffff8880315cfac0 R8 =0000000000000001 R9 =fffff9400003bdce R10=0000000000000000 R11=0000000000000001 R12=000000000000005e R13=000000000000005e R14=ffff88800c0e18c0 R15=ffff8880315cfd88 RIP=ffffffff818c7075 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f781ecb3540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f781eef0000 CR3=000000000dab9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000