Warning: Permanently added '[localhost]:6854' (ECDSA) to the list of known hosts. 2025/06/08 10:55:11 fuzzer started 2025/06/08 10:55:12 dialing manager at localhost:40003 syzkaller login: [ 102.030441] cgroup: Unknown subsys name 'net' [ 102.185687] cgroup: Unknown subsys name 'cpuset' [ 102.233770] cgroup: Unknown subsys name 'rlimit' 2025/06/08 10:55:36 syscalls: 2214 2025/06/08 10:55:36 code coverage: enabled 2025/06/08 10:55:36 comparison tracing: enabled 2025/06/08 10:55:36 extra coverage: enabled 2025/06/08 10:55:36 setuid sandbox: enabled 2025/06/08 10:55:36 namespace sandbox: enabled 2025/06/08 10:55:36 Android sandbox: enabled 2025/06/08 10:55:36 fault injection: enabled 2025/06/08 10:55:36 leak checking: enabled 2025/06/08 10:55:36 net packet injection: enabled 2025/06/08 10:55:36 net device setup: enabled 2025/06/08 10:55:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 10:55:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 10:55:36 USB emulation: enabled 2025/06/08 10:55:36 hci packet injection: enabled 2025/06/08 10:55:36 wifi device emulation: enabled 2025/06/08 10:55:36 802.15.4 emulation: enabled 2025/06/08 10:55:36 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 10:55:38 starting 8 fuzzer processes 10:55:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x3a) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "84d577ab0d960e7a1f00998c8d3df3701194a645"}, 0x15, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x100, 0xd20}}, './file0\x00'}) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000140)) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000180)) r2 = fsmount(r1, 0x1, 0x74) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000001c0)) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x2e, @dev={0xac, 0x14, 0x14, 0x41}, 0x4e22, 0x3, 'lc\x00', 0x18, 0xee4, 0x57}, {@multicast1, 0x4e21, 0x0, 0xff, 0x54c, 0x6}}, 0x44) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000280)={0x0, 0x401, 0x4}) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000006c0)={0x5e, 0x3, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @enc_lim={0x4, 0x1, 0x3f}]}, 0x20) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x80, 0x40, 0x100, 0x6, {{0x34, 0x4, 0x1, 0x2, 0xd0, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @local, {[@ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x17, 0x6, [@private=0xa010102, @multicast2, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}]}, @ssrr={0x89, 0xf, 0xde, [@multicast1, @private=0xa010101, @remote]}, @timestamp_addr={0x44, 0x14, 0xed, 0x1, 0xd, [{@rand_addr=0x64010102, 0xfffffff8}, {@empty, 0x3}]}, @generic={0x86, 0x2}, @noop, @timestamp_addr={0x44, 0x3c, 0x54, 0x1, 0x9, [{@private=0xa010100, 0x6}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x29b9}, {@local}, {@multicast2, 0x7f}, {@loopback, 0x4}, {@multicast1, 0x4}]}, @cipso={0x86, 0x3c, 0x0, [{0x6, 0x7, "aa1a174bfa"}, {0x1, 0xc, "12e7f004efd2f3c0318f"}, {0x7, 0xa, "3e80062b60de9dcb"}, {0x5, 0x4, "67ed"}, {0x5, 0x2}, {0x0, 0xd, "781f7597f0d9b34f96899d"}, {0x0, 0x6, "76eb3d17"}]}]}}}}}) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000840)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r4}, 0x14) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x80}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008000) r5 = syz_open_dev$mouse(&(0x7f0000000980), 0x0, 0x20000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) fsetxattr$security_evm(r3, &(0x7f0000000ac0), &(0x7f0000000b00)=@md5={0x1, "9e6545c868c7ea519f452c2c43a4bd5d"}, 0x11, 0x2) 10:55:38 executing program 1: r0 = eventfd(0x6) fallocate(r0, 0x50, 0x7fff, 0x8000) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x2d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r1 = signalfd(r0, &(0x7f0000000100), 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x230, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd, 0x3, "0bd18be57cb68d0b99"}, @TIPC_NLA_NODE_ID={0x96, 0x3, "3ff9b881a946c47ce08063e08d074be289cc176b3916e066ae09f823ee802e4835af64ab3016206e2c9b097511214155aedda3204c628a8cdb4be585b4a7fac4e6f896e1094436a177e84d0d6ca7fd0a1c854f18eb20fe37ff601567228ffa7d4c9890be4a080195f3209f8a101911e566b34b4f53fba5dce9b52ebeaaf86b8f2b622a13f634dc59d68c20c4c49284ae7e42"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x164, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "aef5bcaa6e5bbb6450b605daca50054cad1891755c"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "11601a2b8ad8b42011d90d5de3329ed00522bf2d3500ca0d9b0900dc5fef48e9"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ee78eafbec465e378fada1bb413e1e2a1373bcc865f1"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d0e30221a13cc1f84a436320cc833fa5a06dca616ed66adfd9"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "034a2a46ce198ae6f3d0e8e62a60f7c470e246ace405acac0ed98c"}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc0d0}, 0x20000000) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$FITHAW(r2, 0xc0045878) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000840) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000006c0)={0x1, 0x2, 0x1000, 0x73, &(0x7f00000005c0)="f4410fd48d49fe3ae20a341da3bf4640858b737682201a32a520945b0370ac793c389b78528e58aa06a5a8fb3d6ea7045eb1b304e1d24d9691a15cfe276d45d43e7a624bbbc0125ce5a0722b93f0c08d85411e3f5507e2114c4a7a248d8b5a2dccac0f1cb52c4ad017f18db6b03a440c8a036a", 0x56, 0x0, &(0x7f0000000640)="2bc9298c8f3c6c772ed4c3b7d5d90a633003adb708e4376b8960ccf66c2bedb79015d9c248874181dbe6841ca1d6bf3f6e138b15696d9a739730edd42f6728054ce6faa40c653ec64862ef66707190395e4032c78409"}) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x22000000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x70, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200080c0}, 0x80) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000c00)={{0x0, 0x1, 0x7, 0x87, 0x80000000, 0x5e52c37f, 0x0, 0x101, 0x42d9, 0x6, 0x10000, 0x2, 0x6, 0x59c2, 0x1}}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000001c00)={0x400, 0xfffffffffffffff7, 0x2, 0xfffffeff, 0x0, [0x2, 0xffff, 0xcb, 0x7]}) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001c40)) 10:55:38 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x84000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000040), {[{{@arp={@private=0xa010101, @empty, 0xff000000, 0x0, 0x9, 0x7, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x2, 0x37f9, 0x1, 0x1000, 0xb25, 'vcan0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x44}, 0xf, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0xffffffff, 0x10, 0xb, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x20, 0x8000, 0x9, 0x1, 0xfffa, 'macvlan0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x221}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @remote, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000500)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000700)=0xe8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002800)=[{{&(0x7f0000000740), 0x6e, &(0x7f0000000cc0)=[{&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f00000009c0)=""/200, 0xc8}, {&(0x7f0000000ac0)=""/201, 0xc9}, {&(0x7f0000000bc0)=""/166, 0xa6}, {&(0x7f0000000c80)=""/63, 0x3f}], 0x6, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000dc0), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000e40)=""/209, 0xd1}, {&(0x7f0000000f40)=""/92, 0x5c}], 0x2}}, {{&(0x7f0000001000), 0x6e, &(0x7f0000002600)=[{&(0x7f0000001080)=""/205, 0xcd}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/90, 0x5a}, {&(0x7f0000002200)=""/244, 0xf4}, {&(0x7f0000002300)=""/115, 0x73}, {&(0x7f0000002380)=""/44, 0x2c}, {&(0x7f00000023c0)=""/29, 0x1d}, {&(0x7f0000002400)=""/203, 0xcb}, {&(0x7f0000002500)=""/43, 0x2b}, {&(0x7f0000002540)=""/170, 0xaa}], 0xa, &(0x7f00000026c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002740)=""/49, 0x31}], 0x1, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}}], 0x4, 0x140, &(0x7f0000002900)={0x77359400}) fchown(0xffffffffffffffff, r2, r8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000002940)={0x0, 0x2, 0x81, 0x0, 0x1}) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000002980), 0x2, 0x0) mount$cgroup(0x0, &(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00), 0x14, &(0x7f0000002a40)={[{@noprefix}, {@subsystem='freezer'}, {@subsystem='pids'}, {@subsystem='rlimit'}, {@clone_children}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '])'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, '{!}%:@'}}, {@subj_type={'subj_type', 0x3d, 'macvlan0\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@audit}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) r9 = signalfd4(r6, &(0x7f0000002b40)={[0x8001]}, 0x8, 0x81000) getsockopt$inet6_udp_int(r9, 0x11, 0x1, &(0x7f0000002b80), &(0x7f0000002bc0)=0x4) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000002c00)={0x200}, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002c40)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000002d40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d80)={{0x1, 0x1, 0x18, r3, {r10, r7}}, './file0\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002dc0)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f00000054c0)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r12, 0x8934, &(0x7f0000005500)={'veth0_vlan\x00'}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000005540)='veth1_to_bridge\x00') 10:55:38 executing program 3: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x8, "1ff8897a87b83b9b342806a3b4c66ccb35096747626e7cea65fea25f006ef87dd0e2abd702264ebb8378903f7340f1e2d809735344b48eec467c897df9b951cdeaa5d3cec830dc7161f704d6aa2b5bdd4467b1674670858721dc394fd889071db6480a61041cad047e56d8dde68c58c8c4397ea481ba7115d4dfd1b8b6943c6a65f02a2d6a7fd709b0cafb18967d2e10633d598b7a9860841949392bd409726adc2a4ce7014f15ec327a717ecbdae6cdf6c7800111bc2b02d033e8b4d797c5159a22fd0d4d8625f4342d6ff1472465c4849d8f395603d534fcf5c8827b77b15edae59870c6404164b1fd67c1e4a70754c94f62a56dd76450c9db719eb03b1b051081e8755d647358cf0f4a42fd0c2a98d5233f84361aeec37b6ca8c4dd931a57d0cce31edb48e4166090ef0e507df5849d112e2f8d9e869acad414ea6ba1ed180d6c9b87caf0205168d056ed0bced5f21981a0b9bd586c9ae3019bcb5cb85fe4789edd93c5d2afae983b0b86dd29b9a6ea446ab0a3581963dde35dd39292e19aa0e4dbec731e34191c9deb0216815fd60dd17634e0c6fb417d690661d9186258fa9dde527d66c97d5add4a4618099ca245482f2a1f5381a846186d83127760023b5d3b15eef1800af19c68647de2ab1b1605fd489ba8464b280765e803560ff3c778f542b54613e7b09e6f47b16b664c3d583b0cf16458bfc2306ca0c5ccfe26"}) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3, 0x7, 0xf3, 0x90, 0x0, 0x8, 0x14280, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x1}, 0x42100, 0x6, 0x1000, 0x7, 0x0, 0xc1c1, 0x2, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x6, r0, 0x8) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000002, 0x810, r1, 0x81) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000002c0)=0x200, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0x7, 0x8000, 0x7ff, 0x7, 0x9}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000340)={0x7, 0x7, 0x3}, &(0x7f0000000380)=0x28) r2 = accept4$inet(r0, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000440)=0x3) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000480)=0x9, 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x402000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000000500)) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000005c0)={0xa, 0x3, {0x100, @struct={0x2}, 0x0, 0x1, 0x7, 0x2000000000000000, 0x80000000, 0x0, 0x22, @usage=0x7ff, 0x1, 0x96, [0x101, 0x1, 0x800, 0x7, 0x1000, 0x2]}, {0x1, @usage=0x4, 0x0, 0x6c, 0x100, 0x8, 0x2566, 0x100000001, 0x1, @usage=0x3ff, 0x6b, 0x7, [0x1ff, 0x5, 0x1, 0xfff, 0x619, 0xf2a6]}, {0xffffffffffff5b17, @struct={0x6, 0x1}, 0x0, 0x10000, 0x5, 0x6, 0x5, 0x200, 0x0, @usage=0x9, 0x42e1, 0x8001, [0x100000001, 0xfffffffffffffff7, 0x9, 0x400, 0x10000, 0x100]}, {0x4, 0x8000, 0x79c}}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f00000009c0)={{r0}, {@val={r5}, @actul_num={@val=0x2d, 0x10001, 0x67}}}) connect(r2, &(0x7f0000000a00)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000a80), 0x10) [ 128.593617] audit: type=1400 audit(1749380138.843:7): avc: denied { execmem } for pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:55:38 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x0, @desc2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x8, 0x100, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x68, 0x0, 0x2, 0x29, 0x0, @multicast2, @private=0xa010102, {[@lsrr={0x83, 0x7, 0x1d, [@remote]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004010}, 0x802) r2 = accept(r0, 0x0, &(0x7f0000000300)) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c3}, 0x40000) r3 = openat$cgroup_int(r0, &(0x7f0000000440)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) mq_getsetattr(r0, &(0x7f0000000480)={0x40000000000, 0x5, 0x119c, 0x7}, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000004c0)=""/182) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000980)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) openat$cgroup_pressure(r5, &(0x7f00000009c0)='memory.pressure\x00', 0x2, 0x0) r6 = signalfd(r3, &(0x7f0000000a00)={[0x1]}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000b80)={&(0x7f0000000a40), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r7, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x544f, 0x19}}}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000bc0)) r9 = pidfd_getfd(r4, r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000d40)={{0x3, 0x0, 0x8, 0x3, 0x7}, 0x6, 0x7fffffff, 'id0\x00', 'timer1\x00', 0x0, 0x6, 0x101, 0x0, 0x7fffffff}) ioctl$KDGKBLED(r9, 0x4b64, &(0x7f0000000e40)) openat$cgroup_subtree(r4, &(0x7f0000000e80), 0x2, 0x0) 10:55:38 executing program 6: fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2, 0x0, 0xfffffffffffff462, 0x7}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x42e}}, './file0\x00'}) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x1f}, 0x2) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140), 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000180)={0x0, 0x9, [0x46, 0x5, 0x1, 0xf98000000000000, 0x3, 0x4]}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x4000) r3 = pidfd_getfd(r1, r2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000002c0)={0x0, 0x8001, @start={0x0, 0x1, "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", "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"}, [0x8, 0x3, 0x800, 0x6, 0x5, 0xff, 0x5, 0x8, 0x4, 0xff, 0xca, 0xf1f2, 0xff, 0x40, 0x2, 0x7, 0x40, 0x8, 0x200000000000000, 0x40, 0xffffffffffffff13, 0xffffffff, 0x1, 0x2, 0x6, 0x6, 0x5, 0x3, 0x3, 0x5ef, 0x400, 0x5, 0x4000, 0x5, 0x61e, 0x9, 0x4, 0x3, 0x9cf1, 0x8, 0x3, 0x6, 0x1, 0x1, 0x4, 0x2, 0x200, 0x3, 0xfffffffffffffff7, 0x8001, 0x30dd, 0x8d9, 0x1, 0x7fff, 0x8, 0x3, 0x9, 0x8000, 0x7f, 0x6, 0x6, 0xfffffffffffffff8, 0xf1c, 0x6]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000d00)={0x8, 0x7, {0xb23, @usage=0x10001, 0x0, 0x2, 0x1, 0xfa, 0x4, 0x4, 0x40, @usage=0x100, 0x5, 0x71, [0x80000001, 0x569, 0x0, 0x9, 0x13, 0xfffffffffffffff9]}, {0x9, @struct={0x5, 0x3ff}, r4, 0x0, 0xbb0, 0x7, 0x0, 0x3, 0x48a, @struct={0x1, 0x27e}, 0xa35c, 0x8, [0x0, 0xffffffffffffffb6, 0x2, 0x100000000, 0x9, 0x8000000000000]}, {0x0, @struct={0x1, 0x3f}, 0x0, 0x3, 0x4, 0x4, 0x100000001, 0x2000000, 0x440, @struct={0xfffffff8, 0x20}, 0x20, 0x8, [0xfffffffffffffffa, 0x6, 0x9, 0x3, 0x1]}, {0x1, 0x8, 0x5}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000001100)={@desc={0x1, 0x0, @desc1}, 0x2, 0x0, '\x00', @auto=[0x39, 0x1d]}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001180), 0x400900, 0x0) fsetxattr$security_capability(r3, &(0x7f00000011c0), &(0x7f0000001200)=@v3={0x3000000, [{0xe88, 0x5}, {0x7fff, 0xfffffffd}], 0xee01}, 0x18, 0x3) memfd_secret(0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x302) r5 = syz_open_procfs(0x0, &(0x7f0000001240)='ns\x00') sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x6b}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x10) 10:55:38 executing program 5: sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80) getdents(0xffffffffffffff9c, &(0x7f0000000340)=""/4096, 0x1000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001340), r1) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000804) r2 = memfd_secret(0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x38, 0x3e9, 0x8, 0x70bd2a, 0x25dfdbfe, {0x8, 0x1, 0x1, 0xffffffffffffffff, 0xa0f, 0x7, 0x9, 0x1, 0x0, 0x7ff}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8004000}, 0x880) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000001580)={@id={0x2, 0x0, @auto="eaa45527c85d67ec37be6c0120f0b31c"}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001640), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001740), 0x800, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x98, r0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x91}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xb}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001a00), 0xc001, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000001a40)={0xfffffe00, 0x1ff, 0x7, 0x934e, 0x6, "cf8a772db51312c0d171b8adecdde4cf3fcb8d"}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000001a80)=0x3, 0x4) 10:55:38 executing program 7: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x2, 0x200, 0x2}) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x2402, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x1f}) fcntl$setlease(r0, 0x400, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x11, 0x1, '/dev/urandom\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048859) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000001c0)={0x2, 0x3, 0x80, 0x4, 0x20, 0x53b1f892}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200), &(0x7f0000000240)={'U+', 0x65}, 0x16, 0x1) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000280)) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000002c0)=0x37) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xeb}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000340)={0x0, "c386956df33274e40e58f9b5ca7e97a6"}) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000001340)=0x6) r3 = openat$cgroup_ro(r2, &(0x7f0000001380)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000001480)={&(0x7f00000013c0), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x38, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x69}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040080) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000014c0)) r4 = syz_open_dev$usbmon(&(0x7f0000001500), 0x7, 0x20800) fcntl$getown(r4, 0x9) r5 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x5c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c0) [ 130.106777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.111450] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.117370] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.124902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.129681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.182910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.201466] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.208789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.212226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.214796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.216919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.222532] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.231076] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.233967] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.239017] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.245140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.246687] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.250154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.252970] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.255555] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.264304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.268170] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.273446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.276024] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 130.285192] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.287869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.290470] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 130.293326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.298401] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 130.300529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.307316] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 130.309323] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.312268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.316366] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.337826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.355294] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 130.358689] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 130.381584] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.390312] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 130.394449] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.182527] Bluetooth: hci0: command tx timeout [ 132.309138] Bluetooth: hci4: command tx timeout [ 132.373170] Bluetooth: hci5: command tx timeout [ 132.438787] Bluetooth: hci3: command tx timeout [ 132.439513] Bluetooth: hci2: command tx timeout [ 132.440842] Bluetooth: hci1: command tx timeout [ 132.502153] Bluetooth: hci6: command tx timeout [ 132.502212] Bluetooth: hci7: command tx timeout [ 134.230229] Bluetooth: hci0: command tx timeout [ 134.357909] Bluetooth: hci4: command tx timeout [ 134.423753] Bluetooth: hci5: command tx timeout [ 134.485987] Bluetooth: hci2: command tx timeout [ 134.486064] Bluetooth: hci1: command tx timeout [ 134.487301] Bluetooth: hci3: command tx timeout [ 134.548953] Bluetooth: hci6: command tx timeout [ 134.549884] Bluetooth: hci7: command tx timeout [ 136.277815] Bluetooth: hci0: command tx timeout [ 136.405907] Bluetooth: hci4: command tx timeout [ 136.468792] Bluetooth: hci5: command tx timeout [ 136.534058] Bluetooth: hci1: command tx timeout [ 136.534528] Bluetooth: hci3: command tx timeout [ 136.535842] Bluetooth: hci2: command tx timeout [ 136.598767] Bluetooth: hci7: command tx timeout [ 136.598850] Bluetooth: hci6: command tx timeout [ 138.325147] Bluetooth: hci0: command tx timeout [ 138.453588] Bluetooth: hci4: command tx timeout [ 138.516954] Bluetooth: hci5: command tx timeout [ 138.581026] Bluetooth: hci3: command tx timeout [ 138.581055] Bluetooth: hci2: command tx timeout [ 138.581114] Bluetooth: hci1: command tx timeout [ 138.644867] Bluetooth: hci7: command tx timeout [ 138.644916] Bluetooth: hci6: command tx timeout [ 189.964799] syz-executor.2 (293) used greatest stack depth: 24992 bytes left [ 190.217576] syz-executor.7 (297) used greatest stack depth: 24832 bytes left [ 192.749624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.758140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.761057] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.771684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.783333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.811957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.828292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.833995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.852264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.869276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.876536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.879699] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.883099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.885937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.886249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.891284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.893773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.902836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.907205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.909288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.912255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.926976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.929380] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.941209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.953293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.977300] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.981233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.991286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.005077] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.014232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.063615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.086235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.101698] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.107596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.114208] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.116979] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.126127] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.135294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.144443] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.147345] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.838787] Bluetooth: hci0: command tx timeout [ 194.964826] Bluetooth: hci1: command tx timeout [ 195.029052] Bluetooth: hci3: command tx timeout [ 195.030892] Bluetooth: hci4: command tx timeout [ 195.093177] Bluetooth: hci2: command tx timeout [ 195.157034] Bluetooth: hci5: command tx timeout [ 195.221006] Bluetooth: hci6: command tx timeout [ 195.285901] Bluetooth: hci7: command tx timeout [ 196.885770] Bluetooth: hci0: command tx timeout [ 197.012854] Bluetooth: hci1: command tx timeout [ 197.076835] Bluetooth: hci3: command tx timeout [ 197.077320] Bluetooth: hci4: command tx timeout [ 197.141014] Bluetooth: hci2: command tx timeout [ 197.205750] Bluetooth: hci5: command tx timeout [ 197.268846] Bluetooth: hci6: command tx timeout [ 197.335750] Bluetooth: hci7: command tx timeout [ 198.932802] Bluetooth: hci0: command tx timeout [ 199.060953] Bluetooth: hci1: command tx timeout [ 199.125168] Bluetooth: hci4: command tx timeout [ 199.125666] Bluetooth: hci3: command tx timeout [ 199.189171] Bluetooth: hci2: command tx timeout [ 199.252781] Bluetooth: hci5: command tx timeout [ 199.317073] Bluetooth: hci6: command tx timeout [ 199.380785] Bluetooth: hci7: command tx timeout [ 200.981555] Bluetooth: hci0: command tx timeout [ 201.108807] Bluetooth: hci1: command tx timeout [ 201.172866] Bluetooth: hci4: command tx timeout [ 201.173354] Bluetooth: hci3: command tx timeout [ 201.237008] Bluetooth: hci2: command tx timeout [ 201.302758] Bluetooth: hci5: command tx timeout [ 201.364992] Bluetooth: hci6: command tx timeout [ 201.428958] Bluetooth: hci7: command tx timeout [ 252.610971] syz-executor.7 (2831) used greatest stack depth: 24256 bytes left [ 254.577273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.586257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.590830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.602584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.611768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.834238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.844414] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.848677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.874927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.888184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.909247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.914087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.919964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.928639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.943109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.972404] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.976292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.990880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.004209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.008120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.081247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.088563] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.094315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.099936] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 255.104567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.106868] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.108914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 255.114404] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 255.125441] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.129556] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.134944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.137069] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.156760] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.163330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.181550] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.194097] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 255.203965] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.208152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.233435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.240028] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.662072] Bluetooth: hci0: command tx timeout [ 256.980898] Bluetooth: hci2: command tx timeout [ 256.981642] Bluetooth: hci1: command tx timeout [ 257.110758] Bluetooth: hci3: command tx timeout [ 257.237984] Bluetooth: hci4: command tx timeout [ 257.238915] Bluetooth: hci5: command tx timeout [ 257.300922] Bluetooth: hci7: command tx timeout [ 257.365931] Bluetooth: hci6: command tx timeout [ 258.709617] Bluetooth: hci0: command tx timeout [ 259.029985] Bluetooth: hci2: command tx timeout [ 259.030489] Bluetooth: hci1: command tx timeout [ 259.157748] Bluetooth: hci3: command tx timeout [ 259.285173] Bluetooth: hci4: command tx timeout [ 259.285676] Bluetooth: hci5: command tx timeout [ 259.348862] Bluetooth: hci7: command tx timeout [ 259.413059] Bluetooth: hci6: command tx timeout [ 260.756815] Bluetooth: hci0: command tx timeout [ 261.078875] Bluetooth: hci1: command tx timeout [ 261.079370] Bluetooth: hci2: command tx timeout [ 261.205759] Bluetooth: hci3: command tx timeout [ 261.332826] Bluetooth: hci4: command tx timeout [ 261.333331] Bluetooth: hci5: command tx timeout [ 261.396877] Bluetooth: hci7: command tx timeout [ 261.460785] Bluetooth: hci6: command tx timeout [ 262.805342] Bluetooth: hci0: command tx timeout [ 263.124832] Bluetooth: hci2: command tx timeout [ 263.125341] Bluetooth: hci1: command tx timeout [ 263.253079] Bluetooth: hci3: command tx timeout [ 263.381574] Bluetooth: hci5: command tx timeout [ 263.382903] Bluetooth: hci4: command tx timeout [ 263.446126] Bluetooth: hci7: command tx timeout [ 263.508839] Bluetooth: hci6: command tx timeout [ 317.095782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.100895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.104372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.124269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.131577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.177883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.183965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.187422] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.197473] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.200489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.203095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.203387] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.211595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.232473] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.245534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.249447] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.250216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.258980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.282025] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.292137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.329564] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.337348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.339641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.348987] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.365827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.419284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.424436] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.449033] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.493841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.501321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.613606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 317.622628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.642363] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 317.715478] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 317.715528] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.725289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.741198] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.745455] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.758213] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 317.761334] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.189218] Bluetooth: hci0: command tx timeout [ 319.254128] Bluetooth: hci1: command tx timeout [ 319.316911] Bluetooth: hci2: command tx timeout [ 319.444868] Bluetooth: hci3: command tx timeout [ 319.636899] Bluetooth: hci4: command tx timeout [ 319.700906] Bluetooth: hci5: command tx timeout [ 319.893242] Bluetooth: hci6: command tx timeout [ 320.020852] Bluetooth: hci7: command tx timeout [ 321.236795] Bluetooth: hci0: command tx timeout [ 321.302105] Bluetooth: hci1: command tx timeout [ 321.365253] Bluetooth: hci2: command tx timeout [ 321.492794] Bluetooth: hci3: command tx timeout [ 321.684818] Bluetooth: hci4: command tx timeout [ 321.748777] Bluetooth: hci5: command tx timeout [ 321.942083] Bluetooth: hci6: command tx timeout [ 322.068780] Bluetooth: hci7: command tx timeout [ 323.284842] Bluetooth: hci0: command tx timeout [ 323.348813] Bluetooth: hci1: command tx timeout [ 323.413820] Bluetooth: hci2: command tx timeout [ 323.541986] Bluetooth: hci3: command tx timeout [ 323.734121] Bluetooth: hci4: command tx timeout [ 323.797764] Bluetooth: hci5: command tx timeout [ 323.990140] Bluetooth: hci6: command tx timeout [ 324.117081] Bluetooth: hci7: command tx timeout [ 325.332833] Bluetooth: hci0: command tx timeout [ 325.397009] Bluetooth: hci1: command tx timeout [ 325.460870] Bluetooth: hci2: command tx timeout [ 325.588844] Bluetooth: hci3: command tx timeout [ 325.780920] Bluetooth: hci4: command tx timeout [ 325.845488] Bluetooth: hci5: command tx timeout [ 326.037590] Bluetooth: hci6: command tx timeout [ 326.165338] Bluetooth: hci7: command tx timeout [ 379.242420] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.247034] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.251571] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.259645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.266312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.432144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.439166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.442269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.451602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.458300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.638586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.652672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.664257] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.670297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.684394] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.793785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.800299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.809037] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.815690] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.818645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.829353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.831103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.832304] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.853245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.870041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.888083] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.890443] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.902665] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.904355] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.906329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.906995] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.923996] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.926194] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.988180] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.994115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.055547] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.088277] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.132147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 380.200539] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 380.207942] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.334036] Bluetooth: hci0: command tx timeout [ 381.526254] Bluetooth: hci1: command tx timeout [ 381.717941] Bluetooth: hci2: command tx timeout [ 381.972821] Bluetooth: hci5: command tx timeout [ 382.100919] Bluetooth: hci6: command tx timeout [ 382.164898] Bluetooth: hci3: command tx timeout [ 382.165781] Bluetooth: hci4: command tx timeout [ 382.357630] Bluetooth: hci7: command tx timeout [ 383.381442] Bluetooth: hci0: command tx timeout [ 383.574778] Bluetooth: hci1: command tx timeout [ 383.764871] Bluetooth: hci2: command tx timeout [ 384.021860] Bluetooth: hci5: command tx timeout [ 384.148810] Bluetooth: hci6: command tx timeout [ 384.213447] Bluetooth: hci3: command tx timeout [ 384.214307] Bluetooth: hci4: command tx timeout [ 384.405050] Bluetooth: hci7: command tx timeout [ 385.428944] Bluetooth: hci0: command tx timeout [ 385.621796] Bluetooth: hci1: command tx timeout [ 385.813825] Bluetooth: hci2: command tx timeout [ 386.068777] Bluetooth: hci5: command tx timeout [ 386.196957] Bluetooth: hci6: command tx timeout [ 386.261073] Bluetooth: hci3: command tx timeout [ 386.261457] Bluetooth: hci4: command tx timeout [ 386.452790] Bluetooth: hci7: command tx timeout [ 387.476819] Bluetooth: hci0: command tx timeout [ 387.668953] Bluetooth: hci1: command tx timeout [ 387.860978] Bluetooth: hci2: command tx timeout [ 388.116781] Bluetooth: hci5: command tx timeout [ 388.244769] Bluetooth: hci6: command tx timeout [ 388.308804] Bluetooth: hci4: command tx timeout [ 388.308831] Bluetooth: hci3: command tx timeout [ 388.500793] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:00:39 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88802fff7968 RCX=0000000000000001 RDX=1ffff11005ffef2f RSI=ffff88802fff7a08 RDI=ffff88802fff7978 RBP=ffff88802fff7a08 RSP=ffff88802fff7870 R8 =ffffffff867b2d74 R9 =0000000000000000 R10=000000000003b6cd R11=00000000000043fe R12=0000000000000008 R13=ffff88802fff0000 R14=ffff88802fff7a10 R15=ffff88802fff7968 RIP=ffffffff81353be8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1f5178fc70 CR3=000000000c06e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000005000 RCX=ffffffff819c59e4 RDX=ffff8880369f8000 RSI=ffffffff819c5f57 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff888037e27358 R8 =0000000000000000 R9 =ffffed100327fdf1 R10=0000000000000000 R11=0000000000000001 R12=0000000000000005 R13=00007f5c03a26000 R14=ffff888037e27758 R15=ffff88802e0fe130 RIP=ffffffff81738af8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5c03f0e1f0 CR3=000000002b60d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000