Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:60926' (ECDSA) to the list of known hosts. 2025/06/10 09:01:59 fuzzer started 2025/06/10 09:01:59 dialing manager at localhost:40003 syzkaller login: [ 92.105441] cgroup: Unknown subsys name 'net' [ 92.221341] cgroup: Unknown subsys name 'cpuset' [ 92.263148] cgroup: Unknown subsys name 'rlimit' 2025/06/10 09:02:14 syscalls: 205 2025/06/10 09:02:14 code coverage: enabled 2025/06/10 09:02:14 comparison tracing: enabled 2025/06/10 09:02:14 extra coverage: enabled 2025/06/10 09:02:14 setuid sandbox: enabled 2025/06/10 09:02:14 namespace sandbox: enabled 2025/06/10 09:02:14 Android sandbox: enabled 2025/06/10 09:02:14 fault injection: enabled 2025/06/10 09:02:14 leak checking: enabled 2025/06/10 09:02:14 net packet injection: enabled 2025/06/10 09:02:14 net device setup: enabled 2025/06/10 09:02:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/10 09:02:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/10 09:02:14 USB emulation: enabled 2025/06/10 09:02:14 hci packet injection: enabled 2025/06/10 09:02:14 wifi device emulation: enabled 2025/06/10 09:02:14 802.15.4 emulation: enabled 2025/06/10 09:02:14 fetching corpus: 0, signal 0/0 (executing program) 2025/06/10 09:02:15 starting 8 fuzzer processes 09:02:16 executing program 0: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x35c, 0xf98, {{0x48, 0x4, 0x2, 0x7, 0x120, 0x65, 0x0, 0xf9, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@timestamp={0x44, 0xc, 0xc8, 0x0, 0x3, [0xffff, 0xfff]}, @lsrr={0x83, 0x1b, 0xd6, [@empty, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1e}]}, @rr={0x7, 0x1b, 0x18, [@local, @remote, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0xb}, @empty]}, @timestamp_prespec={0x44, 0x54, 0xf6, 0x3, 0x1, [{@multicast1, 0x4}, {@private=0xa010100, 0xffffffff}, {@multicast2, 0x6}, {@broadcast, 0x3}, {@rand_addr=0x64010102, 0x9}, {@multicast1, 0x6}, {@private=0xa010100, 0x71d3}, {@broadcast, 0x8}, {@multicast2, 0x2}, {@local, 0x1}]}, @noop, @rr={0x7, 0xb, 0xb6, [@rand_addr=0x64010100, @empty]}, @timestamp_prespec={0x44, 0x4, 0x2f, 0x3, 0x9}, @lsrr={0x83, 0x1b, 0x47, [@local, @local, @private=0xa010101, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x48, 0x2, [{0x2, 0xa, "9b73ea076d27b270"}, {0x0, 0x4, "910f"}, {0x6, 0xb, "d8c4ff015b4d5a7eff"}, {0x1, 0x4, "dc8c"}, {0x0, 0xa, "f4dd75c3912ff991"}, {0x2, 0xd, "7e7306afd6722ba7e0a5ba"}, {0x0, 0xe, "ebcf7360fba1a5c29d7794b2"}]}]}}}}}) clock_nanosleep(0x3, 0x0, &(0x7f0000000200), &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', r2, 0x2f, 0x0, 0x3f, 0x8, 0x40, @rand_addr=' \x01\x00', @remote, 0x1, 0x7, 0x1, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', r3, 0x8080, 0x47, 0x4, 0xffffffff, {{0x38, 0x4, 0x1, 0x6, 0xe0, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp={0x44, 0xc, 0x3a, 0x0, 0xe, [0x3ff, 0xfff]}, @ssrr={0x89, 0x13, 0xd8, [@local, @private=0xa010100, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x2d, 0x3, 0x3, [{@empty}, {@multicast1, 0x1}, {@remote, 0x7}]}, @rr={0x7, 0x13, 0x90, [@dev={0xac, 0x14, 0x14, 0x1d}, @broadcast, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @timestamp={0x44, 0x14, 0x7e, 0x0, 0x4, [0x40, 0x7fff, 0x4, 0x0]}, @cipso={0x86, 0x32, 0x3, [{0x4, 0x5, "62c5f1"}, {0x1, 0x5, "2cdda3"}, {0x6, 0xa, "a2a1300757ebf5d1"}, {0x2, 0x8, "d93a01f62016"}, {0x2, 0x6, "c7297352"}, {0x1, 0xa, "722e39131f9f481b"}]}, @cipso={0x86, 0x2b, 0x2, [{0x1, 0xd, "5e0b504b9145f121962247"}, {0x7, 0x8, "aaac1ae59b79"}, {0x6, 0x10, "08e4e35de6b69a7aa07bcf25421e"}]}, @timestamp={0x44, 0xc, 0xbb, 0x0, 0x7, [0x6, 0x3]}]}}}}}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000480)) r4 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x7f, 0x6, 0x0, 0x4, 0x0, 0x6, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x42e8, 0x7fffffff}, 0x200, 0x8, 0xffffff21, 0x4, 0x6, 0xa54, 0x7, 0x0, 0xffff0000, 0x0, 0x2}, 0x0, 0x3, r1, 0x1) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x22280, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000005c0)) syz_open_dev$evdev(&(0x7f0000000600), 0x8, 0x0) io_uring_setup(0x6ff7, &(0x7f0000000640)={0x0, 0xee36, 0x4, 0x0, 0xf0, 0x0, r5}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x0, 0x110) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0xddca) clock_gettime(0x0, &(0x7f0000000740)) 09:02:16 executing program 1: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x200, 0x61) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x101) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xc4f) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) r2 = syz_io_uring_complete(0x0) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000440)={0x2, 0x7, 0x101, 0x9, 0x40, 0x4}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b15, &(0x7f0000000480)={0x0, 0xf8f6, 0x8, 0x0, 0xf0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x8ae, 0x0, 0x0, {0x0, 0x0, r0}}, 0x5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20098801}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8020}, 0x44080) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40880}, 0x1) 09:02:16 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/233, 0xe9}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000280)=""/224, 0xe0}], 0x4, &(0x7f00000003c0)=""/152, 0x98}, 0x100) r0 = syz_mount_image$msdos(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0xb, 0x5, &(0x7f0000000840)=[{&(0x7f0000000540)="89c9c7575bb976da23904bbd1a43570770651a8c9b126a67abf791feff846508c5257f0ea32a9153ad52434523e5c5f612d5f4632ffa9c324b62942dda716582623043d1dec1245085527dd13e480d041a38fb149fd176ffc7bb7044a387f3f357bd00c6be143617a72e7540573a3e59478db671a52128ba0322f9c1f9fdf9", 0x7f, 0x800}, {&(0x7f00000005c0)="521fa2049c481d2d7d3c1f676924aa81d005be2f531d4c6970992c3415c838ddba0835a0d95b89374bb0214fbcc1bb531c873b821ec4e0572a1b7e3c3aea58becf3198294788733715f1f5103fbbeb", 0x4f, 0x755}, {&(0x7f0000000640)='`]W(', 0x4}, {&(0x7f0000000680)="5fe2a741e0b1074d5c3f51a86e0a5c122340f51e713c75123b7a8f2f0eafb5d09dcd56ef6d9741a315b0cde185191eabcd13ee23fb40a434fa997f8f59c51d0f4b112e9d3212816f836202dad509d7e59770ef51624b483bb382e536e6ad725ac6407aa746dae85f25f59d4959fbd8d39e624438c7cc75bd9018c6ffb8ec5f9e8cdb787ac6c662432862b100fcab86400908a90f9b3355f0f28a1c2fb1f0c609ef4acfe587f75ae8444c28e3c703bdb15d647370491d7c4840bf19f37d600a606f584e9af7485d92b911a51b7a16b17b13bf1a149205f4ee384eb09480d2d1b31db7484a", 0xe4, 0x1}, {&(0x7f0000000780)="e7688a852ee0cd46f496c240da9cf066c758d457a23a5df22df30f43b3303bd74c9029e36008bfe62e11c1d94960d9012234b4092e1985339ded6062c95a9339572cf1cb8a4f9d84e15c235d4cd55e2db3fbbfe113f0d82ac646b02a1659443b3f8e7b1ffd090d65c6eaa78f4d5ba00963f3650dd3204464a1abcac14b06950c50e77aa5f2e49008d102ff50c383b5415a639c52df44037cd0d3da36dd6987a9c4ff3c526763b1", 0xa7, 0x401}], 0x100000, &(0x7f00000008c0)={[{@nodots}, {@fat=@dos1xfloppy}, {@dots}], [{@obj_type={'obj_type', 0x3d, ':'}}, {@smackfsroot={'smackfsroot', 0x3d, ':['}}]}) faccessat2(r0, &(0x7f0000000900)='./file0\x00', 0x1, 0x1200) renameat2(r0, &(0x7f0000000940)='./file0\x00', r0, &(0x7f0000000980)='./file0\x00', 0x1) r1 = open$dir(&(0x7f00000009c0)='./file0\x00', 0x8000, 0x1ae) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00', 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000a80)=0x2, 0x4) socketpair(0x3b, 0x5, 0x2, &(0x7f0000000ac0)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000003840)=[{{&(0x7f0000000b00)=@nfc, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000b80)=""/196, 0xc4}, {&(0x7f0000000c80)=""/156, 0x9c}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/118, 0x76}, {&(0x7f0000001dc0)=""/162, 0xa2}], 0x5, &(0x7f0000001f00)=""/151, 0x97}, 0x5}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000002040)=""/3, 0x3}, {&(0x7f0000002080)=""/76, 0x4c}], 0x2, &(0x7f0000002140)=""/79, 0x4f}, 0x8000}, {{&(0x7f00000021c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002240)=""/48, 0x30}, {&(0x7f0000002280)=""/135, 0x87}], 0x2, &(0x7f0000002380)=""/33, 0x21}}, {{&(0x7f00000023c0)=@alg, 0x80, &(0x7f0000002480)=[{&(0x7f0000002440)=""/64, 0x40}], 0x1, &(0x7f00000024c0)=""/36, 0x24}, 0x3}, {{&(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002580)=""/148, 0x94}, {&(0x7f0000002640)=""/232, 0xe8}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x3, &(0x7f0000003780)=""/167, 0xa7}, 0x6}], 0x5, 0x1, &(0x7f00000039c0)={r4, r5+60000000}) open$dir(&(0x7f0000003a00)='./file0\x00', 0x1e3101, 0x0) syz_io_uring_setup(0x2e0, &(0x7f0000003a40)={0x0, 0x3601, 0x0, 0x2, 0xb7, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000003ac0)=0x0, &(0x7f0000003b00)=0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000003b40)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000003b80), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000003bc0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$incfs(r1, &(0x7f0000003c00)='.pending_reads\x00', 0x8000, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000003c80)=@IORING_OP_WRITE={0x17, 0x3, 0x0, @fd=r0, 0x93, &(0x7f0000003c40)="9bfa259c5e059235b6c511336f40217ee30c660176483d1078efa59095e1745758941db89df3dc8fcb7fd4e70a46d18a6556e5c0032d9a76a59d516056", 0x3d, 0x1, 0x1}, 0x4) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003d00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000003f00)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003d40)={0x178, r9, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x14c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xdfc}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb6a}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0xc0}, 0x20005084) 09:02:16 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x51, 0x5, 0xe6, 0x0, 0x1, 0x8341, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x1101e, 0x5, 0x5, 0x5, 0x7, 0x7fffffff, 0x7ff, 0x0, 0xb5d70c3c, 0x0, 0x23ea800000}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffff801) sched_rr_get_interval(0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) clock_gettime(0x1, &(0x7f0000000100)) clock_getres(0x2, &(0x7f0000000140)) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='\x83+*.}\x00') ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4) r2 = openat$incfs(r1, &(0x7f00000002c0)='.pending_reads\x00', 0x80000, 0x8) clock_nanosleep(0x6, 0x0, &(0x7f0000000300)={0x77359400}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r1, 0x6, 0x0, 0x764, 0x5}, 0x8) r3 = io_uring_setup(0xc86, &(0x7f0000000380)={0x0, 0xd483, 0x2, 0x2, 0x1ff, 0x0, r1}) syz_io_uring_setup(0x51e5, &(0x7f0000000400)={0x0, 0x5e28, 0x0, 0x1, 0x121, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000500)={0x3, 0x80, 0x44, 0xdf, 0x1, 0x9, 0x0, 0x8, 0x400, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x8, 0xffff}, 0x42904, 0x6, 0x9, 0x3, 0x6, 0x81, 0x6, 0x0, 0x3, 0x0, 0x8}) r4 = perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x7f, 0x0, 0x7f, 0x1f, 0x0, 0x3, 0x10160, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x71d5, 0xc0}, 0x201, 0x5, 0x9, 0x2, 0x8, 0x2, 0x7fc5, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xf, r2, 0x12) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xfc, 0xb8, 0x7, 0x5, 0x0, 0xfffffffffffffeff, 0xc8800, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x3, @perf_config_ext={0x20, 0x4}, 0x84, 0x5, 0xfffffff8, 0x1, 0xdc02, 0xc96a, 0x7f, 0x0, 0x7, 0x0, 0x48}, 0x0, 0xf, r4, 0x2) 09:02:16 executing program 4: r0 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"5bd0f5eaa51cd7707dc91321f7934198", 0x0, 0x0, {0x0, 0x8}, {0x101, 0x8001}, 0x1, [0x7fffffff, 0x6, 0x401, 0x1f, 0xa667, 0x5, 0x4, 0x3ff, 0x9000000000000000, 0xfffffffffffffffe, 0xf7be, 0x1, 0x5, 0x200, 0x2, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"9b4724eb26566e3a13c3a47efd13a109", 0x0, r1, {0x7f, 0x3ff}, {0x5, 0x7}, 0x6, [0x4, 0x0, 0x3, 0x3db15b11, 0x619, 0x11a5, 0x80, 0xfaf1, 0x8, 0x2, 0x3ff, 0x81, 0xff, 0xfffffffffffffff6, 0x6, 0x9]}) r2 = io_uring_setup(0x55e7, &(0x7f0000000200)={0x0, 0x7a7c, 0x20, 0x2, 0x28d, 0x0, r0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000002c0)=""/122) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RAUTH(r4, &(0x7f0000000380)={0x14, 0x67, 0x2, {0x10, 0x3, 0x5}}, 0x14) wait4(0x0, &(0x7f00000003c0), 0x40000000, &(0x7f0000000400)) r5 = syz_io_uring_setup(0x5af5, &(0x7f00000004c0)={0x0, 0xaa1c, 0x8, 0x0, 0x177, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) write$P9_RGETATTR(r4, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x591, {0x1, 0x4, 0x8}, 0x80, 0x0, 0xee01, 0xf8d, 0x6, 0x1, 0xac4a, 0x1, 0x3d3, 0x0, 0x52bf, 0xfff, 0xe06, 0x4, 0x2, 0x9, 0xfffffffffffffff8, 0x4}}, 0xa0) write$P9_RWSTAT(r3, &(0x7f0000000680)={0x7, 0x7f, 0x1}, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000006c0)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) waitid(0x1, 0xffffffffffffffff, &(0x7f00000009c0), 0x8, &(0x7f0000000a40)) r6 = syz_io_uring_setup(0x7d2b, &(0x7f0000000b00)={0x0, 0xd983, 0x0, 0x0, 0x3bf, 0x0, r5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) io_uring_setup(0x31a2, &(0x7f0000000c00)={0x0, 0xa311, 0x0, 0x0, 0x2d5, 0x0, r6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) mkdirat(r7, &(0x7f0000000cc0)='./file0\x00', 0x84) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x9) [ 108.149582] audit: type=1400 audit(1749546136.086:7): avc: denied { execmem } for pid=274 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:02:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x0, 0xcfbd, 0x8, @mcast2, @private0, 0x7800, 0x7800, 0x65, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'ip_vti0\x00', r1, 0x8000, 0x1, 0x800, 0x7, {{0x38, 0x4, 0x1, 0x5, 0xe0, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x8e, 0x1, 0x4, [{@broadcast, 0x7fffffff}, {@remote, 0x8}, {@loopback, 0x4}, {@empty, 0x81}, {@multicast1, 0x1000}, {@multicast2, 0x34e7}, {@rand_addr=0x64010100}, {@local, 0x3}]}, @noop, @noop, @rr={0x7, 0x3, 0x28}, @rr={0x7, 0x2b, 0x7a, [@empty, @rand_addr=0x64010100, @loopback, @private=0xa010101, @multicast2, @empty, @remote, @broadcast, @broadcast, @local]}, @end, @timestamp_prespec={0x44, 0x54, 0x3f, 0x3, 0xb, [{@remote, 0x7}, {@loopback, 0x5}, {@local, 0x80}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x100}, {@remote}, {@rand_addr=0x64010100, 0x7}, {@rand_addr=0x64010101, 0x89c}, {@rand_addr=0x64010100, 0x44d0}, {@rand_addr=0x64010102, 0x10001}, {@broadcast, 0xe}]}]}}}}}) socketpair(0x3, 0x80001, 0x40, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/104, 0x68}], 0x6, &(0x7f0000001640)=""/5, 0x5}, 0x2001) write$evdev(0xffffffffffffffff, &(0x7f00000016c0)=[{{}, 0x16, 0xff, 0x1}, {{0x0, 0x2710}, 0x1, 0x4, 0x9}, {{0x0, 0xea60}, 0x3, 0x3e, 0x7}, {{}, 0x0, 0x0, 0x8}, {{0x0, 0xea60}, 0x16, 0xcb9, 0x3f}, {{0x77359400}, 0x0, 0x9, 0x1}], 0x90) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000001780), &(0x7f00000017c0)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000001800)) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x38d3, &(0x7f0000001840)={0x0, 0x4bff, 0x10, 0x1, 0x154}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000018c0)=0x0, &(0x7f0000001900)=0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000019c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x34, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44090}, 0x80) inotify_init() ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001b80)={'ip_vti0\x00', &(0x7f0000001ac0)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x8, 0x3, {{0x23, 0x4, 0x0, 0x1a, 0x8c, 0x68, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ssrr={0x89, 0x17, 0x34, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty]}, @ssrr={0x89, 0x17, 0xee, [@broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @remote, @broadcast]}, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x5, 0x5, "92ba53"}, {0x5, 0x6, "0a1a5d1a"}, {0x7, 0x9, "ff2928da01bbc8"}, {0x1, 0x6, "f6d54c8a"}, {0x0, 0xc, "4ba08f7797168a67a7f7"}, {0x5, 0x4, '\x00p'}, {0x2, 0x6, "cbfa2f0c"}]}, @lsrr={0x83, 0x13, 0xbd, [@rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast]}]}}}}}) clock_gettime(0x0, &(0x7f0000001bc0)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000001c00)=[{{}, 0x11, 0x4, 0xce8}, {{r8, r9/1000+10000}, 0x15, 0x6, 0x380}], 0x30) syz_io_uring_submit(r4, r5, &(0x7f0000001cc0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r2, 0x80, &(0x7f0000001c40)=@hci={0x1f, 0x3}, 0x0, 0x0, 0x1}, 0x2) openat$incfs(0xffffffffffffff9c, &(0x7f0000001d00)='.pending_reads\x00', 0x101000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001dc0)={'tunl0\x00', &(0x7f0000001d40)={'gretap0\x00', r7, 0x20, 0x700, 0x2, 0x2334, {{0x12, 0x4, 0x1, 0x5, 0x48, 0x65, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@cipso={0x86, 0x2f, 0x2, [{0x0, 0xa, "e90a576b79066869"}, {0x0, 0xb, "3a341eb17b881d8fd5"}, {0x1, 0x2}, {0x2, 0x6, "93fcdf3e"}, {0x5, 0x3, "0e"}, {0x0, 0x9, "fb7103c51fb72a"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) 09:02:16 executing program 6: write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x2, 0x0, 0x6}}, 0x14) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0506617, &(0x7f0000000040)={@id, 0x40, 0x0, '\x00', @b}) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getdents(r0, &(0x7f0000000180)=""/196, 0xc4) write$P9_RRENAME(r0, &(0x7f0000000280)={0x7, 0x15, 0x1}, 0x7) renameat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00') write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xd, 0x2, {{0x40, 0x2, 0x7}, 0x9}}, 0x18) getgroups(0x9, &(0x7f0000000540)=[0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xee00, 0xee00]) r2 = syz_mount_image$msdos(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0xff0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000400)="1ee6dcfeb9ec8105ab8f6e21b9c7fd5603879483481c6abd1a554ca0c779831e34d6bf51374bdf24ca93399c81272015acefbbbcef0633a80c25c83d9a88ef4563732432fc2dbfe7a85e2aeba36570607e9149c4e684d9c917c7877286f51c81025b976e48720f01464912c410f177dc3a31da3c90eac7b2c7ae1608f40b6d2f460378e2b1b73ad79be751e50fa904897fefd57d5069fc24ff5f2cdbe466d5a13983d8e835d104f9f1dd8f72f2a7a53124d44333d9b1254b2b462f7f5baeb12849d9d556b378f657eb1d84febde241ac8c7a9a", 0xd3, 0x8c}], 0x12002, &(0x7f0000000580)={[{@dots}, {@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@gid={'gid', 0x3d, r1}}], [{@audit}]}) syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x2, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000680)="980c7ada8b0629aa07ed54e93d07c348a865f05b99979b", 0x17, 0x800}], 0x10000, &(0x7f0000000700)={[{@nodots}, {@dots}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000740)) open$dir(&(0x7f0000000780)='./file0\x00', 0x501040, 0x40) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) write$P9_RWSTAT(r0, &(0x7f00000007c0)={0x7, 0x7f, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7f6) write$P9_RWALK(r0, &(0x7f0000000800)={0x23, 0x6f, 0x2, {0x2, [{0x40, 0x0, 0x2}, {0xffd1d17758ebd432, 0x4, 0x8}]}}, 0x23) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$P9_RLCREATE(r3, &(0x7f0000000880)={0x18, 0xf, 0x1, {{0x2, 0x4, 0x2}, 0x80000000}}, 0x18) getdents(r0, &(0x7f00000008c0)=""/80, 0x50) 09:02:16 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'sit0\x00', r0, 0x2f, 0x20, 0x2, 0x80000000, 0x44, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x10, 0x40, 0x1, 0x10001}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', r1, 0x2f, 0x7, 0x1, 0x6, 0x80, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) r3 = syz_io_uring_complete(0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) recvmmsg(r3, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f0000000440)=""/136, 0x88}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f0000000580)=""/20, 0x14}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/231, 0xe7}], 0x8, &(0x7f0000000840)=""/209, 0xd1}, 0x4}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, &(0x7f0000001980)=""/224, 0xe0}, 0x8}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000001a80)=""/174, 0xae}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/208, 0xd0}, {&(0x7f0000002c40)=""/46, 0x2e}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x5, &(0x7f0000003d00)=""/4096, 0x1000}, 0x76992ed6}, {{&(0x7f0000004d00)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000004d80)=""/181, 0xb5}, {&(0x7f0000004e40)=""/52, 0x34}, {&(0x7f0000004e80)=""/113, 0x71}, {&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/129, 0x81}], 0x5}, 0x7}, {{0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000006040)=""/90, 0x5a}, {&(0x7f00000060c0)=""/255, 0xff}, {&(0x7f00000061c0)=""/174, 0xae}, {&(0x7f0000006280)=""/128, 0x80}, {&(0x7f0000006300)=""/19, 0x13}], 0x5, &(0x7f00000063c0)=""/236, 0xec}, 0xff}, {{&(0x7f00000064c0)=@isdn, 0x80, &(0x7f0000006a00)=[{&(0x7f0000006540)=""/90, 0x5a}, {&(0x7f00000065c0)=""/154, 0x9a}, {&(0x7f0000006680)=""/225, 0xe1}, {&(0x7f0000006780)=""/169, 0xa9}, {&(0x7f0000006840)=""/222, 0xde}, {&(0x7f0000006940)=""/143, 0x8f}], 0x6, &(0x7f0000006a80)=""/138, 0x8a}, 0x67}, {{&(0x7f0000006b40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006c80)=[{&(0x7f0000006bc0)=""/189, 0xbd}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000006d00)=[{&(0x7f0000006cc0)=""/60, 0x3c}], 0x1, &(0x7f0000006d40)=""/226, 0xe2}, 0x4f}, {{&(0x7f0000006e40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000007300)=[{&(0x7f0000006ec0)=""/55, 0x37}, {&(0x7f0000006f00)=""/106, 0x6a}, {&(0x7f0000006f80)=""/165, 0xa5}, {&(0x7f0000007040)=""/136, 0x88}, {&(0x7f0000007100)=""/203, 0xcb}, {&(0x7f0000007200)=""/59, 0x3b}, {&(0x7f0000007240)=""/85, 0x55}, {&(0x7f00000072c0)=""/8, 0x8}], 0x8}, 0x8}, {{&(0x7f0000007380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000076c0)=[{&(0x7f0000007400)=""/224, 0xe0}, {&(0x7f0000007500)=""/70, 0x46}, {&(0x7f0000007580)=""/115, 0x73}, {&(0x7f0000007600)=""/116, 0x74}, {&(0x7f0000007680)=""/36, 0x24}], 0x5, &(0x7f0000007740)=""/164, 0xa4}, 0x6d}], 0xa, 0x80000063, &(0x7f0000007a80)={0x77359400}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000007ac0), 0x301002, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000007b00), 0x400200, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000007b40), 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000007b80)={0xffffffffffffffff}) r9 = openat$incfs(r3, &(0x7f000000b340)='.log\x00', 0x220f00, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f000000b380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b3c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f000000b500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000b4c0)={&(0x7f000000b400)={0xb4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r3}, {0x8, 0x1, r9}, {0x8, 0x1, r3}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20}, 0x4081) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f000000b580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f000000b640)={&(0x7f000000b540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000b600)={&(0x7f000000b5c0)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1f}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4000011) mknodat$null(r5, &(0x7f000000b680)='./file0\x00', 0x1000, 0x103) [ 109.602287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.604303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.607334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.614133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.617021] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.673892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.675633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.689116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.697510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.699398] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.700867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.702152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.703492] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.704922] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.706062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.707347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.708409] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.709583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.716158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.721071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.722840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.732012] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.734476] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.736864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.739295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.742711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.747177] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 109.749577] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.753164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.755287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.768019] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.771300] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 109.773837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 109.775964] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.777246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.785983] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 109.794130] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 109.808956] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.825567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.844140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.632847] Bluetooth: hci0: command tx timeout [ 111.822901] Bluetooth: hci3: command tx timeout [ 111.823748] Bluetooth: hci5: command tx timeout [ 111.824345] Bluetooth: hci1: command tx timeout [ 111.887086] Bluetooth: hci7: command tx timeout [ 111.887895] Bluetooth: hci6: command tx timeout [ 111.888494] Bluetooth: hci2: command tx timeout [ 111.889832] Bluetooth: hci4: command tx timeout [ 113.679230] Bluetooth: hci0: command tx timeout [ 113.871039] Bluetooth: hci1: command tx timeout [ 113.871617] Bluetooth: hci5: command tx timeout [ 113.872994] Bluetooth: hci3: command tx timeout [ 113.935949] Bluetooth: hci7: command tx timeout [ 113.936528] Bluetooth: hci6: command tx timeout [ 113.937613] Bluetooth: hci2: command tx timeout [ 113.938167] Bluetooth: hci4: command tx timeout [ 115.728236] Bluetooth: hci0: command tx timeout [ 115.918829] Bluetooth: hci5: command tx timeout [ 115.919453] Bluetooth: hci3: command tx timeout [ 115.920992] Bluetooth: hci1: command tx timeout [ 115.983603] Bluetooth: hci2: command tx timeout [ 115.984309] Bluetooth: hci7: command tx timeout [ 115.985210] Bluetooth: hci4: command tx timeout [ 115.985758] Bluetooth: hci6: command tx timeout [ 117.774828] Bluetooth: hci0: command tx timeout [ 117.967011] Bluetooth: hci3: command tx timeout [ 117.967546] Bluetooth: hci1: command tx timeout [ 117.967863] Bluetooth: hci5: command tx timeout [ 118.031173] Bluetooth: hci4: command tx timeout [ 118.031941] Bluetooth: hci2: command tx timeout [ 118.032449] Bluetooth: hci6: command tx timeout [ 118.033018] Bluetooth: hci7: command tx timeout [ 172.651097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.655153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.658473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.665034] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.675275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.772945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.782181] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.784310] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.789607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.792232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.863114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.865075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.874088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.875309] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.876168] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.879427] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.883824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.891111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.892562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.896738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.937330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.945584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.967611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.971945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.002248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.003458] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.013809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.018165] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.036907] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.059371] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.066631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.068494] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.070006] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.073433] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.076134] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.077963] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.084995] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.089159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.098262] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.102564] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.736763] Bluetooth: hci0: command tx timeout [ 174.863051] Bluetooth: hci1: command tx timeout [ 174.990808] Bluetooth: hci4: command tx timeout [ 175.055080] Bluetooth: hci3: command tx timeout [ 175.056304] Bluetooth: hci2: command tx timeout [ 175.118814] Bluetooth: hci7: command tx timeout [ 175.182819] Bluetooth: hci6: command tx timeout [ 175.183682] Bluetooth: hci5: command tx timeout [ 176.782783] Bluetooth: hci0: command tx timeout [ 176.911773] Bluetooth: hci1: command tx timeout [ 177.041079] Bluetooth: hci4: command tx timeout [ 177.102994] Bluetooth: hci2: command tx timeout [ 177.103605] Bluetooth: hci3: command tx timeout [ 177.167282] Bluetooth: hci7: command tx timeout [ 177.230860] Bluetooth: hci5: command tx timeout [ 177.231435] Bluetooth: hci6: command tx timeout [ 178.831063] Bluetooth: hci0: command tx timeout [ 178.960941] Bluetooth: hci1: command tx timeout [ 179.087760] Bluetooth: hci4: command tx timeout [ 179.151850] Bluetooth: hci3: command tx timeout [ 179.152463] Bluetooth: hci2: command tx timeout [ 179.215281] Bluetooth: hci7: command tx timeout [ 179.278766] Bluetooth: hci5: command tx timeout [ 179.279302] Bluetooth: hci6: command tx timeout [ 180.879935] Bluetooth: hci0: command tx timeout [ 181.006742] Bluetooth: hci1: command tx timeout [ 181.135250] Bluetooth: hci4: command tx timeout [ 181.200168] Bluetooth: hci3: command tx timeout [ 181.201726] Bluetooth: hci2: command tx timeout [ 181.263776] Bluetooth: hci7: command tx timeout [ 181.327854] Bluetooth: hci6: command tx timeout [ 181.328464] Bluetooth: hci5: command tx timeout [ 235.454912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.457601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.462499] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.464167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.468226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.470632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.473201] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.478055] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.481458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.500191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.559179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.568126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.570313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.590455] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.594262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.626093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.630562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.641860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.646237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.648572] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.704739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.706247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.708190] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.712523] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.716166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.717476] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.720175] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.721139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.738087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.759296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.868181] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.870237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.871461] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.874793] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.876937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.899203] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.902042] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.904083] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.919480] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.922791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.518795] Bluetooth: hci0: command tx timeout [ 237.582790] Bluetooth: hci1: command tx timeout [ 237.648435] Bluetooth: hci2: command tx timeout [ 237.710772] Bluetooth: hci3: command tx timeout [ 237.774869] Bluetooth: hci4: command tx timeout [ 237.903014] Bluetooth: hci5: command tx timeout [ 237.967472] Bluetooth: hci6: command tx timeout [ 237.967795] Bluetooth: hci7: command tx timeout [ 239.567258] Bluetooth: hci0: command tx timeout [ 239.630756] Bluetooth: hci1: command tx timeout [ 239.695044] Bluetooth: hci2: command tx timeout [ 239.758892] Bluetooth: hci3: command tx timeout [ 239.822932] Bluetooth: hci4: command tx timeout [ 239.951853] Bluetooth: hci5: command tx timeout [ 240.014888] Bluetooth: hci7: command tx timeout [ 240.015169] Bluetooth: hci6: command tx timeout [ 241.614765] Bluetooth: hci0: command tx timeout [ 241.680036] Bluetooth: hci1: command tx timeout [ 241.743582] Bluetooth: hci2: command tx timeout [ 241.808734] Bluetooth: hci3: command tx timeout [ 241.870750] Bluetooth: hci4: command tx timeout [ 241.999073] Bluetooth: hci5: command tx timeout [ 242.062778] Bluetooth: hci7: command tx timeout [ 242.063379] Bluetooth: hci6: command tx timeout [ 243.662950] Bluetooth: hci0: command tx timeout [ 243.727696] Bluetooth: hci1: command tx timeout [ 243.791867] Bluetooth: hci2: command tx timeout [ 243.855841] Bluetooth: hci3: command tx timeout [ 243.920026] Bluetooth: hci4: command tx timeout [ 244.047747] Bluetooth: hci5: command tx timeout [ 244.112968] Bluetooth: hci7: command tx timeout [ 244.113602] Bluetooth: hci6: command tx timeout [ 298.213241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.216607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.224575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.230581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.236052] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.277780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.286165] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.287840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.290029] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.292084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.295445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.297819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.302983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.305022] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.307143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.484178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.492735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.495589] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.511035] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.515903] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.583839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.590340] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.605748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.606763] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.624467] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.630662] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.631549] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.646094] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.669867] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.681371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.686044] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.705623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.727842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.731498] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.737298] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.748878] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.764028] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.792086] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.855961] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.864354] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.304156] Bluetooth: hci0: command tx timeout [ 300.367842] Bluetooth: hci2: command tx timeout [ 300.368840] Bluetooth: hci1: command tx timeout [ 300.622917] Bluetooth: hci3: command tx timeout [ 300.814847] Bluetooth: hci6: command tx timeout [ 300.816109] Bluetooth: hci5: command tx timeout [ 300.878969] Bluetooth: hci4: command tx timeout [ 300.943002] Bluetooth: hci7: command tx timeout [ 302.350820] Bluetooth: hci0: command tx timeout [ 302.416871] Bluetooth: hci1: command tx timeout [ 302.417450] Bluetooth: hci2: command tx timeout [ 302.671808] Bluetooth: hci3: command tx timeout [ 302.863762] Bluetooth: hci6: command tx timeout [ 302.864384] Bluetooth: hci5: command tx timeout [ 302.927854] Bluetooth: hci4: command tx timeout [ 302.990774] Bluetooth: hci7: command tx timeout [ 304.398945] Bluetooth: hci0: command tx timeout [ 304.464066] Bluetooth: hci1: command tx timeout [ 304.465084] Bluetooth: hci2: command tx timeout [ 304.719722] Bluetooth: hci3: command tx timeout [ 304.910988] Bluetooth: hci5: command tx timeout [ 304.911549] Bluetooth: hci6: command tx timeout [ 304.974734] Bluetooth: hci4: command tx timeout [ 305.039028] Bluetooth: hci7: command tx timeout [ 306.446871] Bluetooth: hci0: command tx timeout [ 306.510927] Bluetooth: hci1: command tx timeout [ 306.511483] Bluetooth: hci2: command tx timeout [ 306.766733] Bluetooth: hci3: command tx timeout [ 306.959839] Bluetooth: hci6: command tx timeout [ 306.960470] Bluetooth: hci5: command tx timeout [ 307.023758] Bluetooth: hci4: command tx timeout [ 307.088562] Bluetooth: hci7: command tx timeout [ 360.737510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.743921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.746128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.753244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.757417] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.860420] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.862486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.864035] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.870074] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.873669] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.929135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.933021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.937616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.949104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.951964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.127176] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.133305] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.136398] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.143290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.145596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.199574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.201997] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.204038] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.209195] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.212431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.261474] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.266274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.272450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.278375] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.282559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.343402] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.357351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.372202] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.390085] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.394329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.397460] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.402139] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.406184] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.448138] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.458338] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.831263] Bluetooth: hci0: command tx timeout [ 362.958834] Bluetooth: hci1: command tx timeout [ 363.023764] Bluetooth: hci2: command tx timeout [ 363.215429] Bluetooth: hci3: command tx timeout [ 363.343070] Bluetooth: hci4: command tx timeout [ 363.406983] Bluetooth: hci5: command tx timeout [ 363.470903] Bluetooth: hci7: command tx timeout [ 363.599027] Bluetooth: hci6: command tx timeout [ 364.878853] Bluetooth: hci0: command tx timeout [ 365.007207] Bluetooth: hci1: command tx timeout [ 365.071314] Bluetooth: hci2: command tx timeout [ 365.262862] Bluetooth: hci3: command tx timeout [ 365.390995] Bluetooth: hci4: command tx timeout [ 365.455075] Bluetooth: hci5: command tx timeout [ 365.519853] Bluetooth: hci7: command tx timeout [ 365.647055] Bluetooth: hci6: command tx timeout [ 366.927119] Bluetooth: hci0: command tx timeout [ 367.055755] Bluetooth: hci1: command tx timeout [ 367.119745] Bluetooth: hci2: command tx timeout [ 367.311890] Bluetooth: hci3: command tx timeout [ 367.438958] Bluetooth: hci4: command tx timeout [ 367.503729] Bluetooth: hci5: command tx timeout [ 367.567867] Bluetooth: hci7: command tx timeout [ 367.694978] Bluetooth: hci6: command tx timeout [ 368.975034] Bluetooth: hci0: command tx timeout [ 369.103521] Bluetooth: hci1: command tx timeout [ 369.167004] Bluetooth: hci2: command tx timeout [ 369.358796] Bluetooth: hci3: command tx timeout [ 369.487761] Bluetooth: hci4: command tx timeout [ 369.550742] Bluetooth: hci5: command tx timeout [ 369.616102] Bluetooth: hci7: command tx timeout [ 369.742759] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 09:07:18 Registers: info registers vcpu 0 RAX=1ffffffff0c8ff8a RBX=ffffffff8647fc54 RCX=ffffffff813b5f4d RDX=0000000000000000 RSI=ffffffff867cbb08 RDI=ffffffff8647fc48 RBP=ffffffff8647fc48 RSP=ffff888009617810 R8 =ffffffff867cbb08 R9 =0000000000000000 R10=000000000003b6cd R11=0000000000008646 R12=ffffffff8647fc60 R13=ffffffff8647fc48 R14=ffffffff8647fc48 R15=dffffc0000000000 RIP=ffffffff8135340f RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4e5675d6f4 CR3=000000002d78b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f4e5676c47000007f4e5676bf20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff8880096f3700 RCX=0000000000000002 RDX=0000000088307f01 RSI=0000000000000000 RDI=ffffffff85c1cbc0 RBP=ffff8880096f4158 RSP=ffff888009747720 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000002 RIP=ffffffff81518ec1 RFL=00000817 [-O--APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f22d21ce570 CR3=0000000007282000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000001000000010000000000000000 XMM02=00000000000000ff0000000000000000 XMM03=000000000000000000ff000000000000 XMM04=0000ff00000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000