Warning: Permanently added '[localhost]:54563' (ECDSA) to the list of known hosts. 2025/06/09 23:47:35 fuzzer started 2025/06/09 23:47:35 dialing manager at localhost:40003 syzkaller login: [ 105.940601] cgroup: Unknown subsys name 'net' [ 106.077079] cgroup: Unknown subsys name 'cpuset' [ 106.132742] cgroup: Unknown subsys name 'rlimit' 2025/06/09 23:48:00 syscalls: 2214 2025/06/09 23:48:00 code coverage: enabled 2025/06/09 23:48:00 comparison tracing: enabled 2025/06/09 23:48:00 extra coverage: enabled 2025/06/09 23:48:00 setuid sandbox: enabled 2025/06/09 23:48:00 namespace sandbox: enabled 2025/06/09 23:48:00 Android sandbox: enabled 2025/06/09 23:48:00 fault injection: enabled 2025/06/09 23:48:00 leak checking: enabled 2025/06/09 23:48:00 net packet injection: enabled 2025/06/09 23:48:00 net device setup: enabled 2025/06/09 23:48:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/09 23:48:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/09 23:48:00 USB emulation: enabled 2025/06/09 23:48:00 hci packet injection: enabled 2025/06/09 23:48:00 wifi device emulation: enabled 2025/06/09 23:48:00 802.15.4 emulation: enabled 2025/06/09 23:48:00 fetching corpus: 0, signal 0/0 (executing program) 2025/06/09 23:48:03 starting 8 fuzzer processes 23:48:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)={0x5, 0x1, 0x6, 0x0, 0x0, [{{r0}, 0x2}, {{r0}, 0x1}, {{r0}, 0x2}, {{r0}, 0x2}, {{r2}, 0xfffffffffffffffb}, {{r0}, 0x1}]}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x2]}, 0x8, 0x80800) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe7}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x24}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4917}]}]}, 0xa8}}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={r1, 0x7fff00000000, 0x5, 0x2}) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f00000003c0)={0x4, 0x0, 0x5, 0x80, 0x88, 0x7}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r5, 0x510, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffffff77}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008040) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) sendmsg$802154_raw(r3, &(0x7f0000001080)={&(0x7f0000000fc0)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14, &(0x7f0000001040)={&(0x7f0000001000)}, 0x1, 0x0, 0x0, 0x40}, 0x20044040) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000010c0)) r7 = memfd_secret(0x80000) sendmsg$AUDIT_TTY_SET(r7, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x0, 0x70bd2d, 0x25dfdbfc, {0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x9) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r8, 0xc0285443, &(0x7f0000001240)={0x0, 0xffff, 0x7, 0x20}) 23:48:03 executing program 1: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0xc054) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_settime(0x4, &(0x7f00000002c0)={r2, r3+60000000}) r4 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@ethernet={0x0, @link_local}, &(0x7f0000000380)=0x80, 0x80000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x40}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x73}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="f283388821719fda02ba29a782"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xc4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40004}, 0x400c014) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f00000005c0)={0x3a8, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x378, 0x8, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "28de4a1d061f37be7853785ab46d96e30fbf0e0595e0971f643a88d8459cb0c6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffa5b, @loopback, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1f}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x278, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffff, @private1, 0x600}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x24c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x40801}, 0x20000004) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000a40)={r6, r7+60000000}, &(0x7f0000000a80)) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000ac0)={[0x401]}, &(0x7f0000000b00), &(0x7f0000000bc0)={r8, r9+60000000}, 0x8) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x0, 0x402, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SG_SET_TIMEOUT(r10, 0x2201, &(0x7f0000000d40)=0x1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r11, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x45}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8090) [ 133.465590] audit: type=1400 audit(1749512883.421:7): avc: denied { execmem } for pid=279 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:48:03 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x108, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7c, 0x3c}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x8880) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1b4, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x61bd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3dbb0784}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x48081}, 0x20000000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000440)={@id={0x2, 0x0, @c}, 0x40, 0x0, '\x00', @a}) r4 = fspick(r1, &(0x7f0000000500)='./file0\x00', 0x0) r5 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0xc000000, 0x2, &(0x7f0000000700)=[{&(0x7f00000005c0)="e1bcbe68cd82a15d0e3da9312872dd74d0c2aa51cb8168c363e0c064c880e5137602e7e1ae076ad703099a895479b978e7d33ebb6967929fcf4e78895f0290836b1eb8cb45f423fc4b2c987c868dcbf89b1c999fdef76f7d15b5717f968d29", 0x5f, 0x5}, {&(0x7f0000000640)="d38057ab4cf9271ac38210af1e2ff00f6e50e458be8ae22589797da4c836413636afcf6a2f180d7a5154f30e41b59254bd2a8d2e5c73cf0f3362ce153bcd78d1844eaba8529916b392a307e7b82b7287a480ffa5206ebd1a75d41637d1a509565cc2657e9d8905aa26a93ca1cb64b55cecb69a9e1cff102b904dc45e3619233011c1edfeef3696b6cd7a7b50ffd5b445b5926aafbadb9710e348162153c9266cc9fa76889b7a041e70b17b7d905d840059e2e8253890df5e", 0xb8, 0x7}], 0x400, &(0x7f0000000740)={[{@huge_never}, {@size={'size', 0x3d, [0x78, 0x78]}}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x32, 0x32, 0x35, 0x58]}}], [{@obj_role={'obj_role', 0x3d, 'syz0\x00'}}, {@euid_eq={'euid', 0x3d, r2}}, {@fsname={'fsname', 0x3d, ')'}}, {@euid_gt={'euid>', 0xee01}}]}) r6 = accept4(r1, &(0x7f00000007c0)=@qipcrtr, &(0x7f0000000840)=0x80, 0x80000) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0x101001, 0x0) poll(&(0x7f00000008c0)=[{r1, 0x2002}, {r1, 0x2202}, {r4, 0x49}, {r1, 0x200}, {r5, 0xa080}, {r6, 0x4430}, {r7, 0x46a}, {r1, 0x400}], 0x8, 0x39bdb081) mkdirat(r7, &(0x7f0000000900)='\x00', 0x0) r8 = creat(&(0x7f0000000940)='./file0\x00', 0x1ea) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4004084) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000b40), 0x2) ioctl$FICLONE(r7, 0x40049409, r1) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000b80)='hsr0\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xaa78}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r7, {r6}}, './file0\x00'}) 23:48:03 executing program 3: pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000140)=':*):+$.:\x00', 0x9, 0x2) r1 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0/file0\x00', 0x3ff, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000280)="d33cac669c7f917525b2e37f5e", 0xd, 0x3ff}], 0x180000, &(0x7f0000000300)={[{@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbd9}}, {@fat=@discard}, {@fat=@tz_utc}, {@nodots}, {@dots}, {@dots}], [{@fowner_lt}]}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)=':*):+$.:\x00', &(0x7f00000001c0)='./file1/file0\x00', r1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/partitions\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000600)={0xff}, 0x4) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r3) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), r0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb0, r4, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8810}, 0x1) ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f0000000880)={0x3, 0x3, 0x3f, 0x9, 0x2, 0x4}) r5 = signalfd(r1, &(0x7f0000001300)={[0x2]}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x4c, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x39}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0xc8c0) getpeername(r5, &(0x7f00000014c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001540)=0x80) r7 = socket$inet(0x2, 0x80000, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000001580)) msgrcv(0x0, &(0x7f00000015c0)={0x0, ""/66}, 0x4a, 0x0, 0x1000) 23:48:03 executing program 4: r0 = semget$private(0x0, 0x4, 0x2) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000000)=""/237) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7a}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4001) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x218, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x893}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x38, 0x3, "039b9b85323cd53553278ff68ccfa4ed02784e63b19a3754cd2736db8e47dbe35a263c826c389ae99fd7b8ce4965ecb5e06f34a6"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "ad4aa8d371a21e43ca8200023ad79b72d6ee4493de5615b96cb11853"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "19da69cab400c960d879259229de4231a1532c6a3e"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "a5e49bf12413be063922f2e9a60082219aaa5f993e8bbf86f397924483"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "2e3f322344fd0a0086668ed3e735a86eccf9961b"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4051}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x8015) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6f}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4084) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6a5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x24000847) r3 = socket$inet6(0xa, 0x2, 0x8) fcntl$getownex(r3, 0x10, &(0x7f0000000880)) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x2400c0d4) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000b40)) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000b80)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x4}}}, 0x88) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000c40)={0x11, "0cc51674ab46f36d17e51c4a5cadcf0aad"}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r5, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x65}, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) 23:48:03 executing program 5: r0 = syz_io_uring_complete(0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x9}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000040)={0x0, 0x80000000, 0x40}) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0xee) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000000c0)={0x1, 0x10000, 0x7f}) sendto$unix(r2, &(0x7f0000000100)="90cda088c9aa56f79f27902a392c39cfe90667e2bfd0b5014bb588eb7953ac4bfcf4a26d116fde17f2ea80bb366811a9c626f74652f7643471fd576164303877a4db7c4803dde7e3682519df4390538cb877444090c06e56e15278c924bf3303fcc71e305bc3bae84f2ea1472ff66004d379ee609d10294bd4cfe896506e89703f68774cf41b27dc5cabb5e43f0ca86594ebf91ad6212b96ca6638c44faf37", 0x9f, 0x40, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = open_tree(r2, &(0x7f0000000240)='./file0\x00', 0x800) ioctl$CDROM_DISC_STATUS(r3, 0x5327) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f00000002c0)) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0xa, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xb87}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) pwritev2(r4, &(0x7f0000000580)=[{&(0x7f0000000440)="78014f4632e5dc0295b550586726d768091bdf6ca52d85175466b290e67cce10be550ba9cc5031e7fb0cbbe4179b20e62762cf3348a6f11cd680cd00ef4f0b798a1367110c4daeba211f3eda9d13a6bf513fba128be8c1e296d20eb6130e27462934", 0x62}, {&(0x7f00000004c0)="efdf636ce4598be1995e70ae8e754f15738c7ac62df2bd7a4049e0991bec59ca24b1e71241c3668efd35e60d5b58377eb0ecbb73caff047006eab3b40fa2aa2f773cc486539ef5ba3ca0abc631707b70663df860c8735acbef7a5c1102f96a3b37ddc95717dccbf90d8b14459282e5bd1793632541e1b23a75c678175dde837749fe91ee4d3a8301d38e3da4f60d3b4fd9be314cf5af60", 0x97}], 0x2, 0xcd, 0x1ff, 0x7) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000005c0)={0x0, 0x2, 0x0, 0x1}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000600)) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000640)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x6) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000700)=0x9a43) 23:48:03 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = fcntl$getown(r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000001c0)=""/177) r4 = dup(r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x10000}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) recvfrom$unix(r5, &(0x7f0000000400), 0x0, 0x20000000, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r6 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x200, 0x80) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x2043, 0x0) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000780)) r7 = openat$incfs(r6, &(0x7f00000007c0)='.pending_reads\x00', 0x840, 0x1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$RTC_PLL_GET(r5, 0x80207011, &(0x7f0000000900)) fcntl$setownex(r6, 0xf, &(0x7f0000000940)={0x1, r1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) 23:48:03 executing program 7: getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100)={r1, r2/1000+10000}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6, 0x62}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3b7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x60000004) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x980, 0x2) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in6=@local}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000000380)=0xe8) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000440)) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000480)="53d36c3b519e29f72f9e75015413e8a8b7228576b67e80e2c15ab0346b1d33c02ec139b8f9a0dca55180618471ce8ddaa0d736879fa38f16b4c7a4318a9d9d4d2e08e7bb83c98cbbd22689558c6cfed7e150d4278efa745ad0525c32d20ac1ee1353c5259dfa15cbd68145249c4dd451004392227d392c57ff4086da32ee393ea5139bf669e259e65d853960b6933f7bc5f0c20852f5", 0x96) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000540)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x37, 0xa8, @random="20ecf0de451506945f386729b66b7ca68178fdd77690712e6872f82a7a2b1c8bab131e2aaf41b07d45196ed5fd994b270c8065"}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000780)={{r3}, 0x2, &(0x7f0000000740)=[0x6, 0xfc], 0x10001, 0x0, [0x64, 0x0, 0x40, 0x9]}) r5 = openat$incfs(r0, &(0x7f0000000800)='.pending_reads\x00', 0x0, 0x8) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000940)=@get={0x1, &(0x7f0000000840)=""/209, 0x7}) write$rfkill(r0, &(0x7f0000000980)={0x8, 0x9, 0x2, 0x1}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r6, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x39}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000b00)) [ 135.007268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.012470] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.016457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.023316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.029476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.065373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.068818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.071095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.077709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.081519] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.122105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.127648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.138794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.151319] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.162867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.202431] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.207422] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.211622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.245602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.259403] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.278126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.295651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.298066] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.316350] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.320043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.390804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.403858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.405608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 135.415536] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 135.418335] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 135.431277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.467843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 135.474554] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 135.476754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 135.493906] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 135.499237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 135.500729] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.504878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 135.522624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.535720] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.078488] Bluetooth: hci0: command tx timeout [ 137.142198] Bluetooth: hci1: command tx timeout [ 137.270291] Bluetooth: hci2: command tx timeout [ 137.334076] Bluetooth: hci3: command tx timeout [ 137.399006] Bluetooth: hci4: command tx timeout [ 137.590242] Bluetooth: hci7: command tx timeout [ 137.654132] Bluetooth: hci6: command tx timeout [ 137.655237] Bluetooth: hci5: command tx timeout [ 139.127130] Bluetooth: hci0: command tx timeout [ 139.190056] Bluetooth: hci1: command tx timeout [ 139.320154] Bluetooth: hci2: command tx timeout [ 139.383189] Bluetooth: hci3: command tx timeout [ 139.446086] Bluetooth: hci4: command tx timeout [ 139.638905] Bluetooth: hci7: command tx timeout [ 139.703003] Bluetooth: hci5: command tx timeout [ 139.703451] Bluetooth: hci6: command tx timeout [ 141.174195] Bluetooth: hci0: command tx timeout [ 141.239952] Bluetooth: hci1: command tx timeout [ 141.365999] Bluetooth: hci2: command tx timeout [ 141.430000] Bluetooth: hci3: command tx timeout [ 141.496071] Bluetooth: hci4: command tx timeout [ 141.685994] Bluetooth: hci7: command tx timeout [ 141.749987] Bluetooth: hci6: command tx timeout [ 141.752174] Bluetooth: hci5: command tx timeout [ 143.223959] Bluetooth: hci0: command tx timeout [ 143.286020] Bluetooth: hci1: command tx timeout [ 143.415124] Bluetooth: hci2: command tx timeout [ 143.478305] Bluetooth: hci3: command tx timeout [ 143.542377] Bluetooth: hci4: command tx timeout [ 143.734996] Bluetooth: hci7: command tx timeout [ 143.799064] Bluetooth: hci5: command tx timeout [ 143.799506] Bluetooth: hci6: command tx timeout [ 197.578846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.583990] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.588656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.605033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.610271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.717703] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.720459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.729415] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.740566] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.743373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.750115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.756781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.792510] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.808475] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.843967] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.846777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.849322] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.851291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.860350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 197.861378] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 197.873843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.881141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.883501] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 197.894707] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.900428] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.902859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 197.909632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.912486] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 197.913539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.927505] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.937628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 197.943216] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 197.945046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.947762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.952260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 197.962401] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 197.974660] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.991120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.993648] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 198.023844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.671011] Bluetooth: hci0: command tx timeout [ 199.863990] Bluetooth: hci1: command tx timeout [ 199.926028] Bluetooth: hci2: command tx timeout [ 199.990672] Bluetooth: hci4: command tx timeout [ 200.054042] Bluetooth: hci3: command tx timeout [ 200.054764] Bluetooth: hci5: command tx timeout [ 200.119826] Bluetooth: hci7: command tx timeout [ 200.120824] Bluetooth: hci6: command tx timeout [ 201.718896] Bluetooth: hci0: command tx timeout [ 201.910168] Bluetooth: hci1: command tx timeout [ 201.974133] Bluetooth: hci2: command tx timeout [ 202.038258] Bluetooth: hci4: command tx timeout [ 202.102745] Bluetooth: hci5: command tx timeout [ 202.103778] Bluetooth: hci3: command tx timeout [ 202.166426] Bluetooth: hci6: command tx timeout [ 202.167675] Bluetooth: hci7: command tx timeout [ 203.766985] Bluetooth: hci0: command tx timeout [ 203.958116] Bluetooth: hci1: command tx timeout [ 204.023336] Bluetooth: hci2: command tx timeout [ 204.086492] Bluetooth: hci4: command tx timeout [ 204.151848] Bluetooth: hci5: command tx timeout [ 204.152377] Bluetooth: hci3: command tx timeout [ 204.214285] Bluetooth: hci7: command tx timeout [ 204.214776] Bluetooth: hci6: command tx timeout [ 205.814335] Bluetooth: hci0: command tx timeout [ 206.005998] Bluetooth: hci1: command tx timeout [ 206.070037] Bluetooth: hci2: command tx timeout [ 206.134081] Bluetooth: hci4: command tx timeout [ 206.198054] Bluetooth: hci3: command tx timeout [ 206.198558] Bluetooth: hci5: command tx timeout [ 206.262393] Bluetooth: hci7: command tx timeout [ 206.262893] Bluetooth: hci6: command tx timeout [ 259.592888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.599555] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.602758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.613372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.621561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.675129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.682139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.686492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.694265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.697818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.784749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.787696] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.790178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.798174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.803658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.881084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.885905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.929341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.938136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 259.941540] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 259.943499] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 259.946069] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 259.948452] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 259.951321] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 259.957290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 259.964481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 259.969378] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 259.971625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.984220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.001611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.020769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.056506] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 260.059358] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 260.061498] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 260.066830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 260.070656] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 260.072676] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.085306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.094526] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.098806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.687105] Bluetooth: hci0: command tx timeout [ 261.752022] Bluetooth: hci1: command tx timeout [ 261.878394] Bluetooth: hci2: command tx timeout [ 262.070171] Bluetooth: hci5: command tx timeout [ 262.136146] Bluetooth: hci3: command tx timeout [ 262.137858] Bluetooth: hci6: command tx timeout [ 262.198213] Bluetooth: hci4: command tx timeout [ 262.199526] Bluetooth: hci7: command tx timeout [ 263.734292] Bluetooth: hci0: command tx timeout [ 263.798083] Bluetooth: hci1: command tx timeout [ 263.926785] Bluetooth: hci2: command tx timeout [ 264.118053] Bluetooth: hci5: command tx timeout [ 264.183217] Bluetooth: hci6: command tx timeout [ 264.184207] Bluetooth: hci3: command tx timeout [ 264.247060] Bluetooth: hci7: command tx timeout [ 264.248369] Bluetooth: hci4: command tx timeout [ 265.782174] Bluetooth: hci0: command tx timeout [ 265.847580] Bluetooth: hci1: command tx timeout [ 265.974580] Bluetooth: hci2: command tx timeout [ 266.166032] Bluetooth: hci5: command tx timeout [ 266.231389] Bluetooth: hci3: command tx timeout [ 266.232475] Bluetooth: hci6: command tx timeout [ 266.294759] Bluetooth: hci4: command tx timeout [ 266.295387] Bluetooth: hci7: command tx timeout [ 267.830148] Bluetooth: hci0: command tx timeout [ 267.895130] Bluetooth: hci1: command tx timeout [ 268.023298] Bluetooth: hci2: command tx timeout [ 268.214155] Bluetooth: hci5: command tx timeout [ 268.278202] Bluetooth: hci3: command tx timeout [ 268.278658] Bluetooth: hci6: command tx timeout [ 268.342168] Bluetooth: hci4: command tx timeout [ 268.342615] Bluetooth: hci7: command tx timeout [ 321.997675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.003787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.008449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.020153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.026316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.322213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.327215] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.329827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.337363] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.343509] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.462562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.469634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.480627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.507856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.536614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.557276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.569324] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 322.587303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.591105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.592562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.595659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.598510] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.610788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.614534] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 322.644259] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 322.653759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.659841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 322.661829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.685666] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 322.695681] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 322.702209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.730706] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 322.735643] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 322.750258] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 322.756079] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.767253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 322.770487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.794069] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.849480] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.860471] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.086061] Bluetooth: hci0: command tx timeout [ 324.406174] Bluetooth: hci1: command tx timeout [ 324.662058] Bluetooth: hci2: command tx timeout [ 324.790032] Bluetooth: hci6: command tx timeout [ 324.790181] Bluetooth: hci3: command tx timeout [ 324.857208] Bluetooth: hci4: command tx timeout [ 324.919569] Bluetooth: hci7: command tx timeout [ 324.982046] Bluetooth: hci5: command tx timeout [ 326.134194] Bluetooth: hci0: command tx timeout [ 326.454086] Bluetooth: hci1: command tx timeout [ 326.711963] Bluetooth: hci2: command tx timeout [ 326.838356] Bluetooth: hci6: command tx timeout [ 326.839025] Bluetooth: hci3: command tx timeout [ 326.903331] Bluetooth: hci4: command tx timeout [ 326.967047] Bluetooth: hci7: command tx timeout [ 327.030045] Bluetooth: hci5: command tx timeout [ 328.183305] Bluetooth: hci0: command tx timeout [ 328.502124] Bluetooth: hci1: command tx timeout [ 328.759965] Bluetooth: hci2: command tx timeout [ 328.886996] Bluetooth: hci3: command tx timeout [ 328.887018] Bluetooth: hci6: command tx timeout [ 328.949991] Bluetooth: hci4: command tx timeout [ 329.014211] Bluetooth: hci7: command tx timeout [ 329.079974] Bluetooth: hci5: command tx timeout [ 330.230139] Bluetooth: hci0: command tx timeout [ 330.551238] Bluetooth: hci1: command tx timeout [ 330.806188] Bluetooth: hci2: command tx timeout [ 330.936134] Bluetooth: hci3: command tx timeout [ 330.936203] Bluetooth: hci6: command tx timeout [ 330.999105] Bluetooth: hci4: command tx timeout [ 331.063333] Bluetooth: hci7: command tx timeout [ 331.127980] Bluetooth: hci5: command tx timeout [ 385.167285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.170459] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.173132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.182509] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.190804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.289280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.301447] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.304389] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.319333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.324437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.422735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.434627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.447568] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.455571] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.465699] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.483765] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.489518] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.492013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.498500] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.505638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.582841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.616559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.642410] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.646838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.671491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.683235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.690567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.706626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.722875] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 385.741173] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 385.743665] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 385.746212] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 385.752096] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 385.755595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 385.792217] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.820437] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.845121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 385.866077] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 385.932433] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 385.982424] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 387.254493] Bluetooth: hci0: command tx timeout [ 387.382994] Bluetooth: hci1: command tx timeout [ 387.510010] Bluetooth: hci2: command tx timeout [ 387.574271] Bluetooth: hci3: command tx timeout [ 387.830018] Bluetooth: hci6: command tx timeout [ 387.958005] Bluetooth: hci5: command tx timeout [ 388.022978] Bluetooth: hci4: command tx timeout [ 388.086085] Bluetooth: hci7: command tx timeout [ 389.302139] Bluetooth: hci0: command tx timeout [ 389.430163] Bluetooth: hci1: command tx timeout [ 389.558070] Bluetooth: hci2: command tx timeout [ 389.623949] Bluetooth: hci3: command tx timeout [ 389.879117] Bluetooth: hci6: command tx timeout [ 390.006032] Bluetooth: hci5: command tx timeout [ 390.070163] Bluetooth: hci4: command tx timeout [ 390.134518] Bluetooth: hci7: command tx timeout [ 391.350035] Bluetooth: hci0: command tx timeout [ 391.478041] Bluetooth: hci1: command tx timeout [ 391.606339] Bluetooth: hci2: command tx timeout [ 391.671986] Bluetooth: hci3: command tx timeout [ 391.926219] Bluetooth: hci6: command tx timeout [ 392.054272] Bluetooth: hci5: command tx timeout [ 392.118361] Bluetooth: hci4: command tx timeout [ 392.182152] Bluetooth: hci7: command tx timeout [ 393.398355] Bluetooth: hci0: command tx timeout [ 393.526189] Bluetooth: hci1: command tx timeout [ 393.654038] Bluetooth: hci2: command tx timeout [ 393.717977] Bluetooth: hci3: command tx timeout [ 393.973996] Bluetooth: hci6: command tx timeout [ 394.102060] Bluetooth: hci5: command tx timeout [ 394.166105] Bluetooth: hci4: command tx timeout [ 394.230093] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:53:03 Registers: info registers vcpu 0 RAX=ffffffff81b61edf RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802c85ff01 RSI=ffff88802c85ff08 RDI=ffff88802c85f950 RBP=ffff88802c85f950 RSP=ffff88802c85f888 R8 =ffffffff86884654 R9 =ffff88802c85f938 R10=000000000003b6cd R11=00000000000272d2 R12=ffff88802c85f958 R13=ffff88802c85f940 R14=ffff88802c85ff10 R15=ffff88802c85f8f8 RIP=ffffffff81354910 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcf29263540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055852524f4c8 CR3=0000000037ee4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff86860375 RBX=0000000000000001 RCX=ffffffff86860374 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88802fd0f8f0 RSP=ffff88802fd0f828 R8 =ffffffff86860378 R9 =0000000000000000 R10=000000000003b6cd R11=0000000000021252 R12=ffff88802fd0f8f8 R13=ffff88802fd0f8e0 R14=ffff88802fd0fcc8 R15=ffff88802fd0f898 RIP=ffffffff813542b0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2516948580 CR3=0000000029026000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000