Warning: Permanently added '[localhost]:47718' (ECDSA) to the list of known hosts. 2025/06/11 13:43:56 fuzzer started 2025/06/11 13:43:56 dialing manager at localhost:37235 syzkaller login: [ 111.706152] cgroup: Unknown subsys name 'net' [ 111.848024] cgroup: Unknown subsys name 'cpuset' [ 111.878611] cgroup: Unknown subsys name 'rlimit' 2025/06/11 13:44:14 syscalls: 2214 2025/06/11 13:44:14 code coverage: enabled 2025/06/11 13:44:14 comparison tracing: enabled 2025/06/11 13:44:14 extra coverage: enabled 2025/06/11 13:44:14 setuid sandbox: enabled 2025/06/11 13:44:14 namespace sandbox: enabled 2025/06/11 13:44:14 Android sandbox: enabled 2025/06/11 13:44:14 fault injection: enabled 2025/06/11 13:44:14 leak checking: enabled 2025/06/11 13:44:14 net packet injection: enabled 2025/06/11 13:44:14 net device setup: enabled 2025/06/11 13:44:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/11 13:44:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/11 13:44:14 USB emulation: enabled 2025/06/11 13:44:14 hci packet injection: enabled 2025/06/11 13:44:14 wifi device emulation: enabled 2025/06/11 13:44:14 802.15.4 emulation: enabled 2025/06/11 13:44:14 fetching corpus: 0, signal 0/0 (executing program) 2025/06/11 13:44:16 starting 8 fuzzer processes 13:44:16 executing program 0: r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xbd, 0x68}}}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x4}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xc2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8155}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3ff}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x8}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10000}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000d4}, 0x44080) fsetxattr(r0, &(0x7f0000000140)=@known='user.incfs.id\x00', &(0x7f0000000180)='+\\:.W,::\x00', 0x9, 0x3) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x211, 0x57}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040081}, 0x400) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000300)={0x5, 0xff}) r2 = syz_open_dev$rtc(&(0x7f0000000340), 0x9, 0x501000) recvmsg$unix(r1, &(0x7f0000001900)={&(0x7f0000000380), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/143, 0x8f}, {&(0x7f0000001580)=""/80, 0x50}, {&(0x7f0000001600)=""/128, 0x80}, {&(0x7f0000001680)=""/46, 0x2e}, {&(0x7f00000016c0)=""/215, 0xd7}], 0x7, &(0x7f0000001840)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x20) fcntl$setown(r2, 0x8, r4) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000001940), &(0x7f0000001980), 0x2, 0x3) setsockopt$inet6_tcp_buf(r7, 0x6, 0xd, &(0x7f00000019c0)="3a8730d39553d5926a6c5568a1e6a4ea207e66d6a2a9df43d4f9b73a0485efcced06640d6a1c75067a147365e32205a31c2abdce9f6a9573deda6eb491bf89", 0x3f) ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f0000001a00)={0x0, 0x6, 0x0, 0x0, 0x800, 0x8, 0xe055}) setitimer(0x3, &(0x7f0000001a40)={{0x0, 0xea60}}, 0x0) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000001a80)) clock_gettime(0x0, &(0x7f0000004340)={0x0, 0x0}) recvmmsg$unix(r6, &(0x7f0000004280)=[{{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000001b40)=""/73, 0x49}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/124, 0x7c}, {&(0x7f0000002c40)=""/60, 0x3c}, {&(0x7f0000002c80)=""/149, 0x95}, {&(0x7f0000002d40)=""/220, 0xdc}, {&(0x7f0000002e40)=""/198, 0xc6}], 0x7}}, {{&(0x7f0000002fc0)=@abs, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000003040)=""/47, 0x2f}, {&(0x7f0000003080)=""/49, 0x31}], 0x2, &(0x7f0000003100)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}}, {{&(0x7f0000003140)=@abs, 0x6e, &(0x7f0000004240)=[{&(0x7f00000031c0)=""/77, 0x4d}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x2}}], 0x3, 0x1, &(0x7f0000004380)={r8, r9+10000000}) setgid(r10) io_getevents(0x0, 0x5, 0xa, &(0x7f00000043c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000004500)={0x77359400}) lchown(&(0x7f0000004540)='./file0\x00', r3, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000004680)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004640)={&(0x7f0000004600)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x20000810) 13:44:16 executing program 2: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x5) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000000)={0x0, 0x3ff, 0x8}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x4) r2 = fcntl$getown(r0, 0x9) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)=r2) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x20, 0x6, 0xffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000140)) faccessat2(r1, &(0x7f0000000180)='./file0\x00', 0x148, 0x1100) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) fremovexattr(r4, &(0x7f0000000200)=@random={'btrfs.', '\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000340)={0x4, 0x22b, 0x80000001}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000380)={0xfd18, 0x77, 0x8, 0x5, 0x16, "b0142bb25a0f3a98a3deda254288a7bba5bcb3"}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000600)={r3, 0x7ff, 0x29e1dde1, 0x3f}) write$P9_RREADLINK(r5, &(0x7f0000000640)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 13:44:16 executing program 1: ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x1, @desc1}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x3) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'L+', 0xb3e}, 0x16, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xd, 0x40000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x35400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000410}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x5044) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240088c5) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000540)={r0, 0x4, 0x1000, 0x7}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xddc}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000680)=0x100000000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000006c0)={@desc={0x1, 0x0, @desc3}}) getpeername$inet6(r1, &(0x7f0000000740)={0xa, 0x0, 0x0, @local}, &(0x7f0000000780)=0x1c) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x2a, 0xb6f7, 0x41, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3f960efd3cee823b, 0x8, 0x101, 0x100}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x94, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x34}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000080}, 0x80) shutdown(r1, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000a40)={@desc={0x1, 0x0, @desc1}}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000a80)=""/41) 13:44:16 executing program 3: read(0xffffffffffffffff, &(0x7f0000000000)=""/129, 0x81) fdatasync(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c084}, 0x4000) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000002c0)=0xfffffe01) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10000, 0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x8, 0x6, 0x800, 0x7fffffff, 0x6, 0xfffffffffffffff8}, {0xfff, 0x7f, 0xfffffffffffeffff, 0x400, 0x100, 0x100000001}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r1, &(0x7f0000000b80)={&(0x7f0000000600)=@phonet={0x23, 0x24, 0x8, 0x7}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)="56c580b386610ec9f900b0ea76275a4e4c3e39a4c7825b06e30be2f2b614af1f2eb953081239ff7096e8921b48bfc33732388dc87bee183297e26b451e324ea6260b1e7ec4a8e1df6f0af03721e4914482ae0a9f99", 0x55}, {&(0x7f0000000700)="d5977b862ad9228d4d683a517bbd19fbc5e48c05586f048129777b76325efe52c46693fcc38fda1ccde742681dd75ae4436d1e043a829f547b881148d1d118e4dfce2c54f7ff7ba5cab839eea149cbf634cb7c5cd8d630755fac5ad2b95ba5228d86f6b1aa736b854bb992d390282fe45703676f4d1d44f1a1e8007af60eaec0f902e06191de2ff61df10a4f4f81cfb4ea4dd6daae4f144b09c489b849474df7957720d9b1b3a361f275a0bcf70a", 0xae}, {&(0x7f00000007c0)="7b17e4c9ee689cde5a7a6f4bbf25e3f2724786ad581b9fd9bb464396b5e3eeb60af2737e10d2c848071e2269e8860a7339829033d223859132c1897b3688c3053d60b4f4a497e2fedf421d4e3bd0265c8125eb9ae20aede1ba3db0bf129c8d227613ebc50bbb7b5bca698ff3bcbc3f9d5f9f897881212c87fd6027144c3bb97d374e423bd43759309d69d7f7d622dfcd60027ba7edf479f76c9b6589a791cb525ed911", 0xa3}, {&(0x7f0000000880)="3ef022d65c030697a1d167a249833fd938b196f8d73289f5a3fac2b0f69cc378512f6f423b45c50a5ab207937c8b039eb69a89ef4afb19864d560461ff4f1c0470183c3cbfc76487993bc51123808181ac4f4c3259", 0x55}, {&(0x7f0000000900)="baf0c5613a78feadc22a8bb39f75524179f4d8a905f2e0f9f55b4a3d3df0fa1ca3fcadc777c45a0f05d67e77b4265f43e91d6baa11ac1582dab580ab1b3850c252ec8ff6a07c7f89cccf01be5e14c7120e0d62e2a5ac8efaeea77e92c87f5d04ca260d6c9c12f531562b1a5f04321a1880990468ca00752aea35afd27c", 0x7d}, {&(0x7f0000000980)="5227307be7483bb9536514c6db162d7ed39ce97d6c748a7b5d644f1b2d7fd8b691eabe98236039327628020b", 0x2c}, {&(0x7f00000009c0)="556763cde404ebfb90a2a72a7451191d025d865e6cfbb888c003", 0x1a}, {&(0x7f0000000a00)="2a3630dcb9098dbf738677df", 0xc}], 0x8, &(0x7f0000000ac0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0xa8}, 0x20040000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000bc0), 0x490000, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) r3 = open(&(0x7f0000000c00)='./file0\x00', 0x50201, 0x48) fadvise64(0xffffffffffffffff, 0x99, 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c40)={'syzkaller1\x00'}) openat$cgroup_int(r2, &(0x7f0000000c80)='cpu.weight.nice\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000cc0)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000d00), &(0x7f0000000d40)=0x8) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000d80), 0x2, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000dc0)={0x0, r4}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000e00)={0x4, 0x0, 0x1, 0x4, 0x1}) 13:44:16 executing program 4: socketpair(0x21, 0x800, 0x947, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)=0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000080)={0x0, @multicast1, 0x4e22, 0x3, 'sh\x00', 0x0, 0x5, 0x7b}, 0x2c) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000000c0)={0x6, 0x2}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "9529d73374f4d2afeca366853f92fe97"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x40080) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000850}, 0x20008040) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8ea4a481abf29edb}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x49}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x3}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff1e}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x9}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xfff}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3a}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xfd}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x7}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x55}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xe8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xd3}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x80000000}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x800}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x58}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x21}, 0x81) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000005c0)=0x3, 0x4) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1, 0x4e24, 0xfe01, 0x4e20, 0x1, 0x0, 0x80, 0x49d46c79506fcdf9, 0x38, 0x0, r5}, {0x8, 0xffffffffffff0000, 0x0, 0x3f, 0xcaa, 0x7, 0x3, 0x800}, {0x2, 0x4, 0x8000, 0x7fffffff}, 0xffffffe1, 0x6e6bb7, 0x2, 0x0, 0x2, 0x1}, {{@in=@remote, 0x4d5, 0xff}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x4, 0x0, 0x80, 0x9, 0x3, 0x200}}, 0xe8) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000007c0)=0x80) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000800)={0x43, 0x9, 0x2, {0x8, 0x6, 0x9, 0x0, 0x0, 0x100000000, 0x3, 0x1, 0x8}}, 0x43) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x40000, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xd8, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xbc, 0x5b, "e04b6343e53114a172ed13d9ca98589e15743d1f5c1949d76cd501fc0ea8a91a12f8cbf42a3c121a2384e079fc2b4965e5d81fa101ca19ef45b0b7e6cbea5475601ba699866551099aebb62012c8a435e7ff96ce305e82d30bcec78c564dc323fa37fb10c4780d839dcdef79b29f7c49fd16d3dbe7b12468b90201b7af8f95072f5c668790286257de1d1779da5f6f2d5d2fff2fc14650bb27336c66b451415bfc43fe93b8f6460a486c73d669b69734517c0b11fb61a184"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x0, 0x3, 0x800, 0xfffffeff, 0x9, 0x80000001, 0x5, 0x3, 0x20]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000094) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x1bc, r3, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2f}, @NL80211_ATTR_IE={0x170, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x1, 0x78, 0x50}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5e, 0x74, 0x3f}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x10, 0x4, @device_a, 0x3, 0x3, 0x1}}, @mic={0x8c, 0x18, {0xf4b, "d422b4aefa51", @long="831dbd4fcaf01bfb034a00c28cf7e915"}}, @random={0x5, 0xc6, "d8873069f8362f879c80d0b7e6720f4d68dae9981e3643d03c8c2a0d68187f21219051a29e4425b5fbd496738e29965ebe9f28b6b2737db8653970a640751f56f84e98fcc7a0f78d5855eaeaecb86622f2f68fa1d6e5e33deab8eb83867f2d30e1392016ecd340f9536e3fcd64d72d90842118b76ee55c73dd00e493dcc430fe55ea7870ac3901738dcd3a9bd80fbbcf19b9baf08f4461f370c38d531190cc891795089e7e2ac13fdaf1c8d7d5f218459d6dc372a6391ca6ccfb9c8e0db2e0203999e98bf0be"}, @erp={0x2a, 0x1, {0x1, 0x1}}, @random_vendor={0xdd, 0x58, "57ffbe922e895d44bb94c311a72bd6c86ea9464052af83a0090e1c2da0742d907ec20df78f2d99af0c5548915528d00d48c4a5c741909c181f37250edfd4d31a8ab4db808968ae302256fcfc793e86bd5e47a458734cc9ab"}, @cf={0x4, 0x6, {0x81, 0xb2, 0x31a9, 0x4}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x26}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x14, 0x2a, [@mesh_chsw={0x76, 0x6, {0x8, 0x80, 0x27, 0x160}}, @challenge={0x10, 0x1, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0xab}}]}]}, 0x1bc}}, 0x20084801) [ 130.681663] audit: type=1400 audit(1749649456.126:7): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:44:16 executing program 5: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000000c0)={{}, r0, 0x18, @inherit={0x60, &(0x7f0000000040)={0x0, 0x3, 0x7fff, 0x1, {0x2d, 0x2, 0x7, 0x101, 0x9}, [0x5, 0x7f, 0x4bc6]}}, @devid}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000010c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r3 = creat(&(0x7f0000001100)='./file0\x00', 0x82) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001140)={0x10, 0x1, {0x1ff, @usage=0x3, 0x0, 0x4, 0x2, 0x8, 0x3ff, 0x5, 0x491, @usage=0x3ff, 0x40, 0x5, [0x8000, 0x100000001, 0xc42, 0x0, 0x9, 0x8f]}, {0x3, @usage=0x7, 0x0, 0x963, 0x5, 0x800, 0xffff, 0xcb9, 0x83, @usage=0xfffffffffffffffb, 0x9, 0x8, [0x8000, 0x20, 0x0, 0x800, 0xffffffffffffff91, 0x3]}, {0x5, @usage=0x4, 0x0, 0x93ecaf880, 0x9, 0x0, 0x80, 0x3dba, 0x81, @struct={0x6, 0x9}, 0xfffffffa, 0x5, [0x0, 0x4, 0x6, 0x7, 0x269c, 0x85f1]}, {0x7fffffff, 0xfb, 0xc92}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000001540)={{r3}, {@val={r4}, @max}}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001580), 0x4000, 0x0) clock_gettime(0x0, &(0x7f0000001640)={0x0, 0x0}) ppoll(&(0x7f00000015c0)=[{r1, 0xc040}, {r1, 0x4}, {r1, 0x4000}, {r2, 0xc00}, {r1}, {r3, 0x8022}, {r1, 0x4007}, {r3, 0x520}, {r5, 0x8001}], 0x9, &(0x7f0000001680)={r6, r7+60000000}, &(0x7f00000016c0)={[0x6]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r8, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x20, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3f}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000022}, 0x40000a0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x80, 0x0, 0x308, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '*)-\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0xff}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000019c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001a40), 0x10000, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r11, 0x40049421, 0x3) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x30, r12, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x60}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040885}, 0x2004c826) 13:44:16 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) fdatasync(0xffffffffffffffff) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000040)={0x1, 0x4537, @status={[0x2, 0x0, 0x5, 0x2, 0x2, 0x36]}, [0x2, 0x5, 0x3, 0x0, 0x51cd, 0x100000000, 0xa6, 0x0, 0x5, 0x2, 0xffffffffffffffff, 0x7, 0x3, 0x6, 0x800, 0xfffffffffffffffc, 0x3fc, 0x8, 0x10001, 0x80000001, 0x7, 0xc000000000000000, 0xac1, 0x80000000, 0x22e, 0x1f, 0x0, 0xcd, 0x3, 0x401, 0x1, 0x3, 0x80, 0x1, 0xfffffffffffff19f, 0x3f, 0x1, 0x40000000, 0x3713, 0x7ff, 0x7f, 0x7, 0x9, 0x2, 0x2, 0x1, 0x9cc1, 0x5, 0x43, 0x43, 0x7fffffff, 0x61, 0x6, 0x5, 0xff, 0x5, 0x40, 0x3, 0x1, 0x737, 0x0, 0x100000000, 0x8, 0x8a2]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000ac0)=""/224) r1 = openat$incfs(r0, &(0x7f0000000bc0)='.log\x00', 0x10100, 0x1) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000c00)={{}, 'port0\x00', 0x40, 0x421, 0xf957, 0x0, 0xfffffff7, 0x4a, 0x9, 0x0, 0x2, 0x27}) write$binfmt_elf64(r1, &(0x7f0000000cc0)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x7f, 0xff, 0x40, 0x365, 0x3, 0x3e, 0x80000000, 0x46, 0x40, 0x288, 0x7fffffff, 0x2, 0x38, 0x2, 0x400, 0xc23, 0x3}, [{0x2, 0x101, 0xfff, 0x8, 0x878, 0x8, 0xa6ea, 0x200}], "fa8e58a6fd3eca81595aa791e2a199ad919151eb75d04a1179a52b477e5e1ac7c9b5cb3fb8fceb760c9e4a93b8224c14ea4a72c8c195942afdd085ec1e49c5898cdf578ce31c31f255b9cde81032a151ec8a276581449fc6e828ea1b7f5121743862a5511d792f89c7aae8408e7d0a6ab378d045dbc43f32e75bbb53459cdba020fbe8bc697dc1eeed10278bac18a43eb7fa134facdc69b31b0bb7a9cab6c7a32ed04ed389f4c94ac5b41b0c9d8fc29d675cea9bf47a81a372e0e11f57907be916c36204c624f611222b7d39dbb6e9231706eda27762826b7916ca5e1921d006b974b9aa08", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x95d) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) syz_io_uring_setup(0x3a83, &(0x7f0000001640)={0x0, 0x3f, 0x2, 0x3, 0xd}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000016c0)=0x0, &(0x7f0000001700)) r3 = syz_io_uring_setup(0x63f7, &(0x7f0000001740)={0x0, 0x609b, 0x20, 0x1, 0x226, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000017c0), &(0x7f0000001800)=0x0) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) syz_io_uring_submit(r2, r4, &(0x7f00000018c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000001880)={r5, r6+10000000}}, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001900)={{0x1, 0x1, 0x18, r3, {0x80000001}}, './file0\x00'}) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000001980)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @local}, 0x80, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000001940)='veth1_virt_wifi\x00', 0x197b, 0x869, 0x9}) pipe2(&(0x7f0000001a00)={0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r9, 0xc0505405, &(0x7f0000001a80)={{0x1, 0x3, 0x7fff, 0x2, 0x100}, 0x0, 0x0, 0x80000001}) r10 = open_tree(r8, &(0x7f0000001b00)='./file0\x00', 0x81001) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r10, 0xc08c5336, &(0x7f0000001b40)={0x10000, 0x8001, 0x1, 'queue1\x00', 0xfffffff9}) 13:44:16 executing program 7: prctl$PR_GET_DUMPABLE(0x3) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x6]}, &(0x7f0000000040), 0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x8, 0x7, 0x800, 0x1, 0x8, "fc22c71597d436ab"}) io_uring_enter(0xffffffffffffffff, 0x390c, 0x7b6a, 0x0, &(0x7f0000000100)={[0x2]}, 0x8) ioprio_get$pid(0x3, 0xffffffffffffffff) r1 = fork() pidfd_open(r1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40011}, 0x4001) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f00000014c0)={0x1c0, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x100}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @remote, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @private1, 0x1ff}}}}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001700), 0x202000, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000001740)={'custom0\x00'}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000001880)={0x1f, 0xe00, @none, 0x5, 0x2}, 0xe) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000018c0)) lstat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000001c80)=0x0, &(0x7f0000001cc0), &(0x7f0000001d00)) recvmmsg$unix(r3, &(0x7f00000026c0)=[{{&(0x7f0000001d40), 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001dc0)=""/85, 0x55}, {&(0x7f0000001e40)=""/211, 0xd3}], 0x2, &(0x7f0000001f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000002040)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f00000020c0)=""/194, 0xc2}, {&(0x7f00000021c0)=""/127, 0x7f}, {&(0x7f0000002240)=""/141, 0x8d}], 0x3}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002340)=""/223, 0xdf}, {&(0x7f0000002440)=""/89, 0x59}, {&(0x7f00000024c0)=""/241, 0xf1}], 0x3, &(0x7f0000002600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x3, 0x10043, &(0x7f0000002780)) lstat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000001900)='system.posix_acl_default\x00', &(0x7f0000002940)={{}, {}, [{0x2, 0x7, r4}, {0x2, 0x1}, {0x2, 0x4, r5}], {0x4, 0x4}, [{}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x7}]}, 0x5c, 0x2) [ 132.124675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.126328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.134155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.143866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.144756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.147161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.149156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.161291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.162191] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.170023] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.186329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.193567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.203088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.216071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.218970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.233372] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.235084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.237394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.240464] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.243962] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.247375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.249928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.259898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.262299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.264059] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 132.265396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.266322] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.268934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 132.271786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.273276] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 132.273336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.277064] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.278681] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 132.279407] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 132.284871] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 132.287441] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 132.294399] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.297427] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.316033] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 132.327086] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 134.207326] Bluetooth: hci0: command tx timeout [ 134.208028] Bluetooth: hci1: command tx timeout [ 134.335143] Bluetooth: hci6: command tx timeout [ 134.335801] Bluetooth: hci3: command tx timeout [ 134.336356] Bluetooth: hci4: command tx timeout [ 134.336971] Bluetooth: hci5: command tx timeout [ 134.337529] Bluetooth: hci2: command tx timeout [ 134.398986] Bluetooth: hci7: command tx timeout [ 136.255903] Bluetooth: hci0: command tx timeout [ 136.256429] Bluetooth: hci1: command tx timeout [ 136.382946] Bluetooth: hci6: command tx timeout [ 136.383452] Bluetooth: hci4: command tx timeout [ 136.384130] Bluetooth: hci2: command tx timeout [ 136.384602] Bluetooth: hci5: command tx timeout [ 136.385106] Bluetooth: hci3: command tx timeout [ 136.446835] Bluetooth: hci7: command tx timeout [ 138.302825] Bluetooth: hci1: command tx timeout [ 138.303361] Bluetooth: hci0: command tx timeout [ 138.431137] Bluetooth: hci5: command tx timeout [ 138.431676] Bluetooth: hci2: command tx timeout [ 138.433423] Bluetooth: hci3: command tx timeout [ 138.434887] Bluetooth: hci4: command tx timeout [ 138.434975] Bluetooth: hci6: command tx timeout [ 138.495939] Bluetooth: hci7: command tx timeout [ 140.351284] Bluetooth: hci0: command tx timeout [ 140.352549] Bluetooth: hci1: command tx timeout [ 140.478802] Bluetooth: hci2: command tx timeout [ 140.479324] Bluetooth: hci6: command tx timeout [ 140.480280] Bluetooth: hci4: command tx timeout [ 140.480798] Bluetooth: hci3: command tx timeout [ 140.481051] Bluetooth: hci5: command tx timeout [ 140.544866] Bluetooth: hci7: command tx timeout [ 192.565099] syz-executor.4 (301) used greatest stack depth: 24800 bytes left [ 195.027178] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.062747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.079871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.104002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.105903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.153342] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.156982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.161415] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.164049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.165710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.175211] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.182300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.188109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.188427] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.192058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.227438] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.250839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 195.256459] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.257502] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.260155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.273107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.279510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.285153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.289073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.290384] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 195.293267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.294309] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.295359] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.299861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 195.302116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.304414] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.308390] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.311642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.319383] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.324027] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.327618] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 195.330427] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 195.333606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 195.337830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 195.340147] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 197.119038] Bluetooth: hci0: command tx timeout [ 197.246887] Bluetooth: hci2: command tx timeout [ 197.246933] Bluetooth: hci1: command tx timeout [ 197.374928] Bluetooth: hci3: command tx timeout [ 197.438838] Bluetooth: hci4: command tx timeout [ 197.438863] Bluetooth: hci5: command tx timeout [ 197.439395] Bluetooth: hci7: command tx timeout [ 197.439944] Bluetooth: hci6: command tx timeout [ 199.167778] Bluetooth: hci0: command tx timeout [ 199.295007] Bluetooth: hci2: command tx timeout [ 199.295566] Bluetooth: hci1: command tx timeout [ 199.423781] Bluetooth: hci3: command tx timeout [ 199.486984] Bluetooth: hci7: command tx timeout [ 199.487525] Bluetooth: hci5: command tx timeout [ 199.488137] Bluetooth: hci4: command tx timeout [ 199.488609] Bluetooth: hci6: command tx timeout [ 201.215739] Bluetooth: hci0: command tx timeout [ 201.343315] Bluetooth: hci1: command tx timeout [ 201.343902] Bluetooth: hci2: command tx timeout [ 201.470801] Bluetooth: hci3: command tx timeout [ 201.536802] Bluetooth: hci6: command tx timeout [ 201.537350] Bluetooth: hci4: command tx timeout [ 201.537900] Bluetooth: hci5: command tx timeout [ 201.538372] Bluetooth: hci7: command tx timeout [ 203.262787] Bluetooth: hci0: command tx timeout [ 203.392339] Bluetooth: hci1: command tx timeout [ 203.392920] Bluetooth: hci2: command tx timeout [ 203.518787] Bluetooth: hci3: command tx timeout [ 203.582853] Bluetooth: hci7: command tx timeout [ 203.583288] Bluetooth: hci5: command tx timeout [ 203.583822] Bluetooth: hci4: command tx timeout [ 203.584295] Bluetooth: hci6: command tx timeout [ 255.230653] syz-executor.0 (2522) used greatest stack depth: 24544 bytes left [ 257.517498] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.521588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.524081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.528132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.534427] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.740166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.747015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.749068] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.760290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.763973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.886408] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.890372] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.895137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.903384] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.908098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.957667] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.964006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.965273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.979387] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.981990] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.986877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.001050] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.008005] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 258.021858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.026870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.037477] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.040819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.041663] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.055298] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.059660] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.260205] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.266046] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.269611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.279633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.288424] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.300349] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 258.345119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 258.353998] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.401147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.452049] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.583980] Bluetooth: hci0: command tx timeout [ 259.838805] Bluetooth: hci1: command tx timeout [ 259.966817] Bluetooth: hci2: command tx timeout [ 260.094828] Bluetooth: hci5: command tx timeout [ 260.158940] Bluetooth: hci3: command tx timeout [ 260.160392] Bluetooth: hci4: command tx timeout [ 260.367740] Bluetooth: hci7: command tx timeout [ 260.547543] Bluetooth: hci6: command tx timeout [ 261.630787] Bluetooth: hci0: command tx timeout [ 261.886823] Bluetooth: hci1: command tx timeout [ 262.014940] Bluetooth: hci2: command tx timeout [ 262.143019] Bluetooth: hci5: command tx timeout [ 262.206864] Bluetooth: hci3: command tx timeout [ 262.207379] Bluetooth: hci4: command tx timeout [ 262.398865] Bluetooth: hci7: command tx timeout [ 262.591131] Bluetooth: hci6: command tx timeout [ 263.679060] Bluetooth: hci0: command tx timeout [ 263.935747] Bluetooth: hci1: command tx timeout [ 264.062965] Bluetooth: hci2: command tx timeout [ 264.190910] Bluetooth: hci5: command tx timeout [ 264.254878] Bluetooth: hci3: command tx timeout [ 264.255399] Bluetooth: hci4: command tx timeout [ 264.447970] Bluetooth: hci7: command tx timeout [ 264.639065] Bluetooth: hci6: command tx timeout [ 265.726916] Bluetooth: hci0: command tx timeout [ 265.982942] Bluetooth: hci1: command tx timeout [ 266.111085] Bluetooth: hci2: command tx timeout [ 266.240211] Bluetooth: hci5: command tx timeout [ 266.302941] Bluetooth: hci4: command tx timeout [ 266.304758] Bluetooth: hci3: command tx timeout [ 266.495139] Bluetooth: hci7: command tx timeout [ 266.686762] Bluetooth: hci6: command tx timeout [ 320.147076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.150417] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.152405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.163954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.168332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.336511] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.339266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.348043] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.353171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.355456] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.532889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.535224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.537066] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.541035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.545028] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.608010] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.617426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.624740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.632650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.640538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.645378] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.650555] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.652979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.662752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.696503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.704058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.709228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.710447] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.711793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.732414] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.733413] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.743111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.743425] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.747237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.759155] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.771666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.776039] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.804482] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 320.814671] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.816563] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 322.239264] Bluetooth: hci0: command tx timeout [ 322.432747] Bluetooth: hci1: command tx timeout [ 322.624190] Bluetooth: hci2: command tx timeout [ 322.750781] Bluetooth: hci4: command tx timeout [ 322.878838] Bluetooth: hci7: command tx timeout [ 322.879571] Bluetooth: hci3: command tx timeout [ 322.879765] Bluetooth: hci6: command tx timeout [ 322.943087] Bluetooth: hci5: command tx timeout [ 324.286981] Bluetooth: hci0: command tx timeout [ 324.479741] Bluetooth: hci1: command tx timeout [ 324.671709] Bluetooth: hci2: command tx timeout [ 324.799086] Bluetooth: hci4: command tx timeout [ 324.928134] Bluetooth: hci7: command tx timeout [ 324.928203] Bluetooth: hci3: command tx timeout [ 324.928635] Bluetooth: hci6: command tx timeout [ 324.992107] Bluetooth: hci5: command tx timeout [ 326.335160] Bluetooth: hci0: command tx timeout [ 326.527752] Bluetooth: hci1: command tx timeout [ 326.718812] Bluetooth: hci2: command tx timeout [ 326.849776] Bluetooth: hci4: command tx timeout [ 326.974962] Bluetooth: hci3: command tx timeout [ 326.974995] Bluetooth: hci7: command tx timeout [ 326.976471] Bluetooth: hci6: command tx timeout [ 327.038942] Bluetooth: hci5: command tx timeout [ 328.382766] Bluetooth: hci0: command tx timeout [ 328.575199] Bluetooth: hci1: command tx timeout [ 328.766795] Bluetooth: hci2: command tx timeout [ 328.894790] Bluetooth: hci4: command tx timeout [ 329.023799] Bluetooth: hci3: command tx timeout [ 329.024338] Bluetooth: hci6: command tx timeout [ 329.025191] Bluetooth: hci7: command tx timeout [ 329.087125] Bluetooth: hci5: command tx timeout [ 382.997798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.001134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.008490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.023585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.027366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.242418] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.251494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.253344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.259141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.262037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.322087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.324212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.328381] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.328922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.333268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.338962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.339802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.344198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.365875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.373396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.407966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.412533] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.416189] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.450632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 383.462878] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 383.470574] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 383.472272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.483043] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.489732] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 383.493067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.500157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 383.502572] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 383.506148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.506315] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 383.509122] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 383.510189] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.517435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 383.539884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.540169] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 383.563005] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.087758] Bluetooth: hci0: command tx timeout [ 385.343076] Bluetooth: hci1: command tx timeout [ 385.408726] Bluetooth: hci3: command tx timeout [ 385.470839] Bluetooth: hci2: command tx timeout [ 385.600178] Bluetooth: hci4: command tx timeout [ 385.601344] Bluetooth: hci7: command tx timeout [ 385.666058] Bluetooth: hci6: command tx timeout [ 385.666922] Bluetooth: hci5: command tx timeout [ 387.135848] Bluetooth: hci0: command tx timeout [ 387.390835] Bluetooth: hci1: command tx timeout [ 387.455219] Bluetooth: hci3: command tx timeout [ 387.518948] Bluetooth: hci2: command tx timeout [ 387.647954] Bluetooth: hci7: command tx timeout [ 387.648471] Bluetooth: hci4: command tx timeout [ 387.710881] Bluetooth: hci6: command tx timeout [ 387.712882] Bluetooth: hci5: command tx timeout [ 389.183329] Bluetooth: hci0: command tx timeout [ 389.438770] Bluetooth: hci1: command tx timeout [ 389.504786] Bluetooth: hci3: command tx timeout [ 389.566807] Bluetooth: hci2: command tx timeout [ 389.695797] Bluetooth: hci4: command tx timeout [ 389.697255] Bluetooth: hci7: command tx timeout [ 389.759243] Bluetooth: hci6: command tx timeout [ 389.760567] Bluetooth: hci5: command tx timeout [ 391.232044] Bluetooth: hci0: command tx timeout [ 391.487337] Bluetooth: hci1: command tx timeout [ 391.550772] Bluetooth: hci3: command tx timeout [ 391.615087] Bluetooth: hci2: command tx timeout [ 391.744751] Bluetooth: hci4: command tx timeout [ 391.745298] Bluetooth: hci7: command tx timeout [ 391.807033] Bluetooth: hci5: command tx timeout [ 391.807578] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:49:26 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806ce08e68 RCX=ffff88806ce089cc RDX=0000000000000002 RSI=ffffffff85c1cbc0 RDI=ffff88800f910aa8 RBP=ffff88806ce01000 RSP=ffff88806ce08a00 R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b71d R11=00000000000232fb R12=ffff88806ce08a01 R13=ffff88806ce08ac0 R14=ffff88806ce08e58 R15=ffff88806ce08a78 RIP=ffffffff815baf40 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561a000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3f74efa4a1 CR3=000000003293f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff815f9bb2 RDI=ffffffff85c1cbc0 RBP=ffffffff85c1cbc0 RSP=ffff88803866f900 R8 =0000000000000000 R9 =0000000000000000 R10=00007fe850da1000 R11=00000000000002f3 R12=0000000000000002 R13=ffffffff815f9bb2 R14=0000000000000000 R15=0000000000000cc0 RIP=ffffffff81aecd14 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe850988540 00000000 00000000 GS =0000 ffff8880e571a000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe850e69f88 CR3=000000001c71a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000