Warning: Permanently added '[localhost]:24714' (ECDSA) to the list of known hosts. 2025/06/21 08:12:49 fuzzer started 2025/06/21 08:12:50 dialing manager at localhost:33119 syzkaller login: [ 93.718745] cgroup: Unknown subsys name 'net' [ 93.853653] cgroup: Unknown subsys name 'cpuset' [ 93.913934] cgroup: Unknown subsys name 'rlimit' 2025/06/21 08:13:08 syscalls: 2214 2025/06/21 08:13:08 code coverage: enabled 2025/06/21 08:13:08 comparison tracing: enabled 2025/06/21 08:13:08 extra coverage: enabled 2025/06/21 08:13:08 setuid sandbox: enabled 2025/06/21 08:13:08 namespace sandbox: enabled 2025/06/21 08:13:08 Android sandbox: enabled 2025/06/21 08:13:08 fault injection: enabled 2025/06/21 08:13:08 leak checking: enabled 2025/06/21 08:13:08 net packet injection: enabled 2025/06/21 08:13:08 net device setup: enabled 2025/06/21 08:13:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/21 08:13:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/21 08:13:08 USB emulation: enabled 2025/06/21 08:13:08 hci packet injection: enabled 2025/06/21 08:13:08 wifi device emulation: enabled 2025/06/21 08:13:08 802.15.4 emulation: enabled 2025/06/21 08:13:08 fetching corpus: 0, signal 0/0 (executing program) 2025/06/21 08:13:10 starting 8 fuzzer processes 08:13:10 executing program 0: ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x1, '\x00', @a}) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000040)={{}, "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"}) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)={0x11c, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48094}, 0x4c5f1e1d5beb394b) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x118, r0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x118}, 0x1, 0x0, 0x0, 0x820}, 0x4000010) pipe2(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000014c0)='cpuset.mems\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) pipe2(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000001580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x44, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x39}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000801) getxattr(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)=@known='com.apple.FinderInfo\x00', &(0x7f0000001780)=""/231, 0xe7) syz_mount_image$tmpfs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x5, 0x3, &(0x7f0000001ac0)=[{&(0x7f0000001900)="77b0d3e843b62afe1c1425d022a910b84e8656285a2bbe128cdcb0da813d1508bdd8aba7190865afa2a066097800ba1713e8a6354b13808f59e833f4eff182ac8a3b3082b0c1691556d53507fe", 0x4d, 0xf5}, {&(0x7f0000001980)="8ed7bb6b439a4bee6f6b9b1a1e34eb468284a658209792dc495b4b329efd32ef65491616bf06372bf670713d2b97271d23092f3c34b183e76b3367045bc65d", 0x3f, 0x401}, {&(0x7f00000019c0)="11d8d62368257cc031ab0886f161941630c8b82407a13cd256dcc2fabf7929a7a4aad572ea5a280ab792493567218c70441a699a97a4cb52c08872b6547b111167a671d1a4baec1b22bdc501b6c273958f7d20e1664ee95d7d908433906e92676300ab9edd7d6c077649de45e26edb3100f6040c7de744b6d83a4186b1fe449a6bd0e1e76753480285da9c63f1d6ca69540cba794bcfc3ea7c14d6e9ee8e771729971a97ed78d7baa7517cc70dbf94c0af6924b7b71906c19fb0e7ccfb3ab01253c4dd760823b63237f6591de640ce5fa4dcee2b03a624db63cd35eced3aa366", 0xe0, 0xfffffffffffffffc}], 0x130030, &(0x7f0000001b40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x34, 0x6b, 0x30, 0x67, 0x37]}}, {@size={'size', 0x3d, [0x35, 0x70, 0x39, 0x65, 0x78, 0x36, 0x74, 0x2d]}}, {@huge_always}, {@mode={'mode', 0x3d, 0x6}}, {@size={'size', 0x3d, [0x0, 0x3e, 0x0, 0x0, 0x36, 0x6d, 0x35]}}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x59, 0x70]}}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x37, 0x36, 0x34, 0x34, 0x70, 0x6d, 0x2d, 0x78]}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x2c, 0x33, 0x3a, 0x34, 0x3a, 0x33]}}}}], [{@fowner_eq}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@appraise}]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r1) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x14, r7, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8c0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000001fc0)={&(0x7f0000001e80), 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x44, r9, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xfe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x44040) 08:13:10 executing program 1: fchown(0xffffffffffffffff, 0xee01, 0x0) r0 = socket$inet(0x2, 0xd1d2f5b1c84f00b5, 0x1) getpeername(r0, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x210, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x6, 0x2) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f2, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x18}, 0x5) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x40004) fdatasync(r0) accept(r0, &(0x7f0000000440)=@can={0x1d, 0x0}, &(0x7f00000004c0)=0x80) getpeername$packet(r1, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001880)=0x14) getpeername$packet(r1, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000019c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001a00)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000001b00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001b40)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001d00)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000001e00)=0xe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001f40)={'erspan0\x00', &(0x7f0000001e40)={'syztnl2\x00', r2, 0x700, 0x40, 0x1, 0x5a, {{0x2d, 0x4, 0x1, 0x6, 0xb4, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0xb, 0x9b, [@local, @multicast2]}, @noop, @lsrr={0x83, 0x27, 0xd3, [@remote, @multicast1, @private=0xa010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @remote]}, @ssrr={0x89, 0xf, 0x21, [@loopback, @private=0xa010100, @private=0xa010100]}, @cipso={0x86, 0x5a, 0xffffffffffffffff, [{0x0, 0x9, "05ab86849e1cf8"}, {0x0, 0x10, "d0e61c38c3c5bca6227e8e9a1e9a"}, {0x5, 0x5, "36dbe3"}, {0x6, 0xe, "19c46d57e91400853a34695a"}, {0x5, 0x7, "271ae5aa79"}, {0x1, 0x12, "b4cdadbb82d0b6ed8014072f0e60e70d"}, {0x5, 0xf, "c4192e6eae58f5e6aae9290823"}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002080)={'erspan0\x00', &(0x7f0000002000)={'ip_vti0\x00', r2, 0x7, 0x7801, 0x49, 0x81, {{0x16, 0x4, 0x0, 0x38, 0x58, 0x64, 0x0, 0x8a, 0x2f, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x1c, 0x74, 0x1, 0x5, [{@rand_addr=0x64010100, 0x1ff}, {@broadcast, 0x5}, {@broadcast, 0x6}]}, @end, @rr={0x7, 0x23, 0x34, [@multicast1, @remote, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @empty, @local]}, @noop]}}}}}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000020c0)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000002200)={@loopback, @local, 0x0}, &(0x7f0000002240)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002bc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002b80)={&(0x7f0000002280)={0x8e0, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r3}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7d68}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x50000000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r5}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x80, 0x3, 0x195b}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd3f}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0xff, 0x3f, 0x6}, {0x400, 0x1, 0x0, 0x3f}, {0x254, 0xa9, 0x6, 0x7f}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2bd9}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8001, 0x61, 0x81, 0x24}, {0x1000, 0xdc, 0x1f, 0xbd}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}]}}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4008814}, 0x4040) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000002c40)=0x4, 0x4) 08:13:10 executing program 2: fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='}\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@remote}, 0x14) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x6f5c22e3}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000200), &(0x7f0000000240)=0x10) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000280), &(0x7f00000002c0)=0x8) recvmmsg$unix(r2, &(0x7f0000001600)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)=""/50, 0x32}, {&(0x7f00000003c0)=""/17, 0x11}], 0x2, &(0x7f0000000440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000600)=""/195, 0xc3}, {&(0x7f0000000700)=""/65, 0x41}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/116, 0x74}, {&(0x7f0000000840)=""/162, 0xa2}, {&(0x7f0000000900)=""/78, 0x4e}, {&(0x7f0000000980)=""/57, 0x39}, {&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f0000000ac0)=""/123, 0x7b}], 0x6, &(0x7f0000000bc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000cc0), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000d40)=""/79, 0x4f}, {&(0x7f0000000dc0)=""/159, 0x9f}, {&(0x7f0000000e80)=""/124, 0x7c}, {&(0x7f0000000f00)=""/129, 0x81}, {&(0x7f0000000fc0)=""/141, 0x8d}], 0x5, &(0x7f0000001100)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000001180), 0x6e, &(0x7f0000001280)=[{&(0x7f0000001200)=""/114, 0x72}], 0x1}}, {{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001340)=""/129, 0x81}, {&(0x7f0000001400)=""/54, 0x36}], 0x2, &(0x7f0000001480)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x170}}], 0x6, 0x20, &(0x7f0000001780)) ioctl$HIDIOCGFIELDINFO(r8, 0xc038480a, &(0x7f00000017c0)={0x1, 0x101, 0x40, 0x2, 0x20, 0x0, 0xfffffffc, 0x4, 0xf46b, 0x19a, 0x3, 0x9b2ae53, 0x0, 0x7ff}) recvmsg(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001800)}, {&(0x7f0000001840)=""/171, 0xab}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/157, 0x9d}], 0x4}, 0x12160) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001b00)={{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000001c00)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001cc0)={'ip6tnl0\x00', &(0x7f0000001c40)={'syztnl1\x00', r10, 0x4, 0x3f, 0x7f, 0xa9, 0x21, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x20, 0x9, 0x20}}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001d00)={0x0}, &(0x7f0000001d40)=0xc) lstat(&(0x7f0000001ec0)='./file0/file0\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002080)={r11, r12, r13}, 0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r3, {0x465}}, './file0/file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x40082406, &(0x7f0000002100)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02') [ 114.040121] audit: type=1400 audit(1750493590.687:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:13:10 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51, 0x1, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000380)=""/9, 0x9}, {&(0x7f00000003c0)=""/71, 0x47}], 0x4, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x40000020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r0}}, './file0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/10, 0xa}, {&(0x7f00000006c0)=""/19, 0x13}, {&(0x7f0000000700)=""/16, 0x10}, {&(0x7f0000000740)=""/66, 0x42}, {&(0x7f00000007c0)=""/178, 0xb2}], 0x6, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000001d00)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/149, 0x95}, {&(0x7f0000001a80)=""/230, 0xe6}, {&(0x7f0000001b80)=""/182, 0xb6}, {&(0x7f0000001c40)=""/151, 0x97}], 0x5}}, {{&(0x7f0000001d80), 0x6e, &(0x7f00000042c0)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/190, 0xbe}, {&(0x7f0000002ec0)=""/204, 0xcc}, {&(0x7f0000002fc0)=""/130, 0x82}, {&(0x7f0000003080)=""/116, 0x74}, {&(0x7f0000003100)=""/216, 0xd8}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/69, 0x45}, {&(0x7f0000004280)=""/12, 0xc}], 0x9, &(0x7f0000004380)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000004400), 0x6e, &(0x7f0000004580)=[{&(0x7f0000004480)=""/199, 0xc7}], 0x1}}], 0x4, 0x40000001, &(0x7f00000046c0)={0x77359400}) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000004700)=0x3, 0x4) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r9 = syz_open_procfs(r4, &(0x7f0000004740)='fd\x00') ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000004780)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000048c0)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004880)={&(0x7f0000004800)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xfffffffffffffffa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x84) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000004900)) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000004940)) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000004b40)={{{@in=@loopback, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000004c40)=0xe8) r10 = openat$cgroup_ro(r1, &(0x7f0000005140)='memory.current\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000005180)={0x0, 0x0}) setsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f00000051c0)={r11, r12/1000+10000}, 0x10) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f00000052c0)={&(0x7f0000005200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005280)={&(0x7f0000005240)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) 08:13:10 executing program 4: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0x13, "fde490127da59624ab7b13b4"}, 0xe, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x6) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'U+', 0x20}, 0x16, 0x1) setxattr$incfs_size(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0x6, 0x8, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0xa, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3b}, {0xa, 0x4e22, 0x7, @mcast1, 0x4}, 0x7, [0x7, 0x200, 0x80, 0x80000000, 0xffff, 0x8, 0x1000, 0x6]}, 0x5c) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd0, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1c000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x1e}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4000000}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000a00)={0x1, 0x0, 0x9, 0x0, 0x5b, &(0x7f0000000600)}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000b40)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000b80)={@mcast1, 0x38, r4}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x94, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x10, 0x3f2, 0x200, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000e80)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000f80)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000fc0)={@loopback, 0x79, r6}) 08:13:10 executing program 5: ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/246) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000100)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x101, 0x9, 0x2}) ioctl$TCXONC(r0, 0x540a, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000180)={0x20000002}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000200)=0x5) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000240)={0x8, 0x2, 0xff}) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000280)=0x20) write$P9_RREMOVE(r0, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r1 = accept4$unix(r0, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x81000) ioctl$FITHAW(r1, 0xc0045878) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000400)=0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getpeername$unix(r3, &(0x7f0000000480), &(0x7f0000000500)=0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000005c0)={0xabd2, 0x8, '\x00', 0xb158be85740dcfb3, &(0x7f0000000580)=[0x0]}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000640)) 08:13:10 executing program 6: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000000c0)={{}, r0, 0xc, @inherit={0x80, &(0x7f0000000040)={0x0, 0x7, 0x8, 0x2, {0x1, 0x7fffffff, 0x3, 0x2, 0x3}, [0xa54f, 0x2, 0x2, 0x101, 0x2, 0x1d, 0x81]}}, @subvolid=0x8}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x20, r1, 0xc00, 0x70bd2b, 0xffff7fff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000069) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ae0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000015c0)={&(0x7f0000001480)={0x114, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x708}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10001}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3f3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x9, 0x80, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6b2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x6, 0xcc, 0x0, 0x1, 0x0, 0x7fffffff, 0x401, 0x0, 0x7]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4e0}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x200, 0x9) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x20, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x4]}]}, 0x20}}, 0x4000) sched_setparam(0xffffffffffffffff, &(0x7f00000017c0)=0x1) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000001800)=0x5, 0x4) r4 = syz_open_dev$hidraw(&(0x7f0000001840), 0xedc3, 0x1) r5 = syz_mount_image$iso9660(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x10000, 0x9, &(0x7f0000001e80)=[{&(0x7f0000001900)="14b4c6c23515eb2d3a37b0109895166a7ab626", 0x13, 0x2}, {&(0x7f0000001940)="3ce77061df2153b7ce0f2fb8e93c012f9e323417fb275fc525120759b7cff9498752482347ffa252582c", 0x2a, 0x2}, {&(0x7f0000001980)="7d1436398979aaf8014758a8a3d9092954d32e3db563cef8c8f389201959eeea4d8f51f746c523e0efce5c4832aeb40f4595d6156ba1839c1366a865b1499a0993fac4ea46b2c403e52cc88514d72dc6978de7b279cd5fe0aa05e04a7d6c08b2c7b26011c321f36cbcaabec065275040b2fa900f3b9e15b9", 0x78, 0x1}, {&(0x7f0000001a00)="8d949d7711ed0ab0ac76f48816137aa74803742475a44e1b538fe1aa5e1d81369266679e4805b385aa265dab09ef91b709f3048622a1c93012c60db644ed78eef57660994e07e9f0b454dc87874bb30c3d642e7c26c03ab9773c16ac527a8bbf1fb6c6ec16a92469767824dfe15e4ce1f1481a7f6e8885bbca87e5d475a44510c23ac01c", 0x84, 0x2}, {&(0x7f0000001ac0)="7f4f4b3e48d10ed59864f9614cfe0a0dbf6001bb1d1f5d6f44b9e88096716d360f778c97e6c9411d32f1e1d1b763f47e34a9aaa6a3f318b1cf3ceeac57912108bb69daa158eeb71b9935d7b63b512dd04729527a4bb3e822242dd7eeafdadb25753bbd42a13a8691f5622376b64e0f637b2531b115a9cf4c53c5c3279ec2626322fe80ae8ed9d9ee5533e2d186cf952485209cf0af86fcf9fd2be482bdad71cc863e1fbc400d7958015d4a334ceee57e", 0xb0, 0x3}, {&(0x7f0000001b80)="853737276990c15c726e6d54b2b188a04bc0375753e6b74c38fde393870d3b525e3f43880c5b73ff26727e9c3a88065c673ddba2c7b94a553c0bd875a755de407f595b3687de4cc80af2f3bd23748abe898e30d215ec454e029bac8a83ef5969a4ec02deaf874b085458f9b82cf70490be4e650da04ea6a026204c78bb3619fd58185950a6f6ca6b4d3604a3f42ef63c3cf8cedf400583dee470c2a5ca19d603ee5522af82af3d988679ea035ca49f86175fd990a6e778ce65468f94ac2defc9d7893c284757a51d6bacadd4e6c05a3fa662be6646c4b2280bc9d3481bb822d49ed99ce5a6d46cfc5daa99f8ca", 0xed, 0x6}, {&(0x7f0000001c80)="436368b3511603ab286e08bfd96ac47f3ea00999a33f9533bcd158297d9473d63d233ee2fab1ecfcd8404625185dad4108005cabd44f115e3bcf10b076d4e392a45fea54a9848f00d2cdef6dfbaf428e2871dfa80046fa692cb048e3c7a2fa25669aa4597e4fdf6cab19eaea58d79619c3ca4022d68ae65f97c05387e5caac3d9827c461b5a6d285784caecb7cd5f7897616c7ca80077e985aac7e337dc7a1df0c717eb040c3db4ab4b768b759fa5af4625af2345e33bb00ee9b28ab9b524f83fb81b94a58e77ba6207b020ecad0485a271754aededcd3277b756e0cfbc96a0de0aa4b245115575378dad90c0ee2516bbed8e5bbe375a375a0", 0xf9, 0x2}, {&(0x7f0000001d80)="21f8013d4387fd14437da06938118365a81e3f8e298dd4464c62f49ab53c8d3b358cb06d14c971464866a1a57c42589b75ff85a105f9319a8ab219347b4c407fc8d8958131f5eb020dc1cc0aaea2b8665052", 0x52, 0x65}, {&(0x7f0000001e00)="476e58fa76da17575ed80cb28c105b9dcd1affc963b528f617c8eba3921e33ba36ab8f2fe9007a17791fb91e6d6cd212b2c72953b8980c26ead333430d0e7ea816085878bf43", 0x46}], 0xbe5d7d7ce0d23f69, &(0x7f0000001f80)={[{@map_acorn}, {@map_normal}, {@nocompress}, {@nojoliet}, {@hide}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@overriderock}, {@check_strict}, {@nojoliet}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@hash}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_role={'subj_role', 0x3d, 'syz1\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}) sendfile(r4, r5, 0x0, 0x9) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002080), 0x4c00c2, 0x0) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f00000020c0)) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x7, 0x401, @l2={'ib', 0x3a, 'vxcan1\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 08:13:10 executing program 7: getsockname$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40900, 0x8) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, 0xb, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1f}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}]}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5b}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x40014) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x8, 0x5, 0x6, 0x1e86}, {0xddb4, 0x6, 0x81, 0xb}, {0x5, 0x94, 0x0, 0x4}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/8250_core', 0x8000, 0x6e) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='personality\x00') ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f00000005c0)=0xc19) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000600)={'ah\x00'}, &(0x7f0000000640)=0x1e) socketpair(0x10, 0x800, 0x80000000, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0), 0x10200, 0x0) write$binfmt_script(r5, &(0x7f0000000700)={'#! ', './file0', [{0x20, '+[@:-&\xf9'}, {0x20, 'ah\x00'}], 0xa, "d2811b4f00b8532d9bbb8eb2895db3cbd0eecfdfdee497d18cf25d02e2757f207c5308e3fc7fc1abe2b0bc29bbf7a37a63ca1f01edc33be03c71fcf913ee0a031c2da27052a36a943f49eba35ef447cf0200ddfb0fc7d866bd20e737788d92f68d2bd11f4d6ebc2b1096b8e62235bdf71513588b69f7f82081bb22bc900d5c6cdf92d02644afd18c865adf164a61c5d90437b08ac424a2ae0271d2c11260b30f7753482f6888058b7fd8eab24ad97b706de69970be79c8f8e63f971e9feb26a6392a8759107f3a1210c1ff93c4a48aa93f26aafc72bd816359f541b09097ff6a54d7ee5676107babe097e4f78c820a"}, 0x106) r6 = fsmount(r1, 0x0, 0x86) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000840)={0x7, 'veth0_macvtap\x00', {0x2}, 0x85}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000880)={0x2, 0x2f, 0x10001, 0x8, 0x8}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) [ 115.274932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.281379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.286220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.294754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.300402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.402035] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.406208] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.416445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.426267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.432373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.438987] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.450763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.457796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.486469] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.499552] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.637088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.644462] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.652098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.659880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.662063] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.671629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.676947] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.678337] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.680127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.688076] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.690521] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.692107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.695422] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.700022] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.726206] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.728246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.728536] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.736095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.740319] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.744348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.746314] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.748365] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.752631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.755374] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.780696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.359347] Bluetooth: hci0: command tx timeout [ 117.486994] Bluetooth: hci1: command tx timeout [ 117.615552] Bluetooth: hci2: command tx timeout [ 117.742974] Bluetooth: hci7: command tx timeout [ 117.871200] Bluetooth: hci3: command tx timeout [ 117.872091] Bluetooth: hci4: command tx timeout [ 117.935396] Bluetooth: hci6: command tx timeout [ 117.935411] Bluetooth: hci5: command tx timeout [ 119.408571] Bluetooth: hci0: command tx timeout [ 119.536208] Bluetooth: hci1: command tx timeout [ 119.663975] Bluetooth: hci2: command tx timeout [ 119.790984] Bluetooth: hci7: command tx timeout [ 119.920580] Bluetooth: hci4: command tx timeout [ 119.920608] Bluetooth: hci3: command tx timeout [ 119.983311] Bluetooth: hci6: command tx timeout [ 119.984009] Bluetooth: hci5: command tx timeout [ 121.455073] Bluetooth: hci0: command tx timeout [ 121.584843] Bluetooth: hci1: command tx timeout [ 121.713114] Bluetooth: hci2: command tx timeout [ 121.839092] Bluetooth: hci7: command tx timeout [ 121.966935] Bluetooth: hci4: command tx timeout [ 121.967984] Bluetooth: hci3: command tx timeout [ 122.030938] Bluetooth: hci6: command tx timeout [ 122.031902] Bluetooth: hci5: command tx timeout [ 123.503957] Bluetooth: hci0: command tx timeout [ 123.631121] Bluetooth: hci1: command tx timeout [ 123.759162] Bluetooth: hci2: command tx timeout [ 123.886881] Bluetooth: hci7: command tx timeout [ 124.016238] Bluetooth: hci3: command tx timeout [ 124.016260] Bluetooth: hci4: command tx timeout [ 124.080877] Bluetooth: hci5: command tx timeout [ 124.081316] Bluetooth: hci6: command tx timeout [ 175.362453] syz-executor.0 (281) used greatest stack depth: 24784 bytes left [ 178.054073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.059221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.063279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.065975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.068616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.072068] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.073708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.076043] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.077938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.094539] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.100836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.101724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.105866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.110159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.112328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.114533] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.115484] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.116878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.119111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.124455] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.125619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.131206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.138101] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.139142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.143518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.145249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.158744] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.165574] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.168545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.170221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.206211] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.229364] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.240259] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.247392] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.249947] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.384582] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.392673] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.397245] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.435375] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.440254] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.206911] Bluetooth: hci3: command tx timeout [ 180.207652] Bluetooth: hci2: command tx timeout [ 180.208221] Bluetooth: hci1: command tx timeout [ 180.271627] Bluetooth: hci4: command tx timeout [ 180.272233] Bluetooth: hci5: command tx timeout [ 180.272745] Bluetooth: hci0: command tx timeout [ 180.335923] Bluetooth: hci6: command tx timeout [ 180.528907] Bluetooth: hci7: command tx timeout [ 182.255205] Bluetooth: hci1: command tx timeout [ 182.257868] Bluetooth: hci3: command tx timeout [ 182.258044] Bluetooth: hci2: command tx timeout [ 182.319962] Bluetooth: hci5: command tx timeout [ 182.320015] Bluetooth: hci0: command tx timeout [ 182.320471] Bluetooth: hci4: command tx timeout [ 182.383017] Bluetooth: hci6: command tx timeout [ 182.575181] Bluetooth: hci7: command tx timeout [ 184.303156] Bluetooth: hci3: command tx timeout [ 184.303642] Bluetooth: hci1: command tx timeout [ 184.304938] Bluetooth: hci2: command tx timeout [ 184.368843] Bluetooth: hci0: command tx timeout [ 184.369267] Bluetooth: hci5: command tx timeout [ 184.369669] Bluetooth: hci4: command tx timeout [ 184.431967] Bluetooth: hci6: command tx timeout [ 184.624050] Bluetooth: hci7: command tx timeout [ 186.351941] Bluetooth: hci1: command tx timeout [ 186.352423] Bluetooth: hci2: command tx timeout [ 186.354081] Bluetooth: hci3: command tx timeout [ 186.416047] Bluetooth: hci4: command tx timeout [ 186.416341] Bluetooth: hci5: command tx timeout [ 186.416933] Bluetooth: hci0: command tx timeout [ 186.479865] Bluetooth: hci6: command tx timeout [ 186.670912] Bluetooth: hci7: command tx timeout [ 240.271180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.277535] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.285050] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.297797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.308476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.331789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.347970] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.350766] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.358347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.361742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.380281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.390651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.396385] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.407220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.413590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.469978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.475248] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.478045] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.483327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.490625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.494610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.503093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.512551] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.522562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.526460] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.531150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.537211] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.541156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.567108] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.601174] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.613350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.621353] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.628481] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.636942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.649772] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.667684] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.682037] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.692418] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.707170] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.736574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.352736] Bluetooth: hci0: command tx timeout [ 242.415086] Bluetooth: hci1: command tx timeout [ 242.479864] Bluetooth: hci2: command tx timeout [ 242.607344] Bluetooth: hci4: command tx timeout [ 242.670912] Bluetooth: hci5: command tx timeout [ 242.798949] Bluetooth: hci6: command tx timeout [ 242.799643] Bluetooth: hci3: command tx timeout [ 242.862960] Bluetooth: hci7: command tx timeout [ 244.400842] Bluetooth: hci0: command tx timeout [ 244.464205] Bluetooth: hci1: command tx timeout [ 244.528147] Bluetooth: hci2: command tx timeout [ 244.655982] Bluetooth: hci4: command tx timeout [ 244.719953] Bluetooth: hci5: command tx timeout [ 244.847855] Bluetooth: hci6: command tx timeout [ 244.849856] Bluetooth: hci3: command tx timeout [ 244.911915] Bluetooth: hci7: command tx timeout [ 246.447902] Bluetooth: hci0: command tx timeout [ 246.511884] Bluetooth: hci1: command tx timeout [ 246.575924] Bluetooth: hci2: command tx timeout [ 246.703970] Bluetooth: hci4: command tx timeout [ 246.768837] Bluetooth: hci5: command tx timeout [ 246.895906] Bluetooth: hci3: command tx timeout [ 246.896168] Bluetooth: hci6: command tx timeout [ 246.960127] Bluetooth: hci7: command tx timeout [ 248.496880] Bluetooth: hci0: command tx timeout [ 248.560877] Bluetooth: hci1: command tx timeout [ 248.624405] Bluetooth: hci2: command tx timeout [ 248.750999] Bluetooth: hci4: command tx timeout [ 248.816337] Bluetooth: hci5: command tx timeout [ 248.943874] Bluetooth: hci3: command tx timeout [ 248.943897] Bluetooth: hci6: command tx timeout [ 249.006980] Bluetooth: hci7: command tx timeout [ 302.721223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.727889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.731791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.743278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.750044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.799544] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.805530] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.808569] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.818732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.823897] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.918313] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.921622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.930379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.947379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.966879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.992466] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.004136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.020863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.067333] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.073326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.088116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.089645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.100022] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.105415] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.136616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.140804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.142497] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.159658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.170429] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.183728] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.193143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.195688] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.242693] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.296100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.309256] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.356087] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.363369] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.410333] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.423065] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.433296] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.816236] Bluetooth: hci0: command tx timeout [ 304.878967] Bluetooth: hci1: command tx timeout [ 305.071290] Bluetooth: hci2: command tx timeout [ 305.199072] Bluetooth: hci3: command tx timeout [ 305.262881] Bluetooth: hci4: command tx timeout [ 305.327890] Bluetooth: hci5: command tx timeout [ 305.390906] Bluetooth: hci6: command tx timeout [ 305.582910] Bluetooth: hci7: command tx timeout [ 306.863892] Bluetooth: hci0: command tx timeout [ 306.928862] Bluetooth: hci1: command tx timeout [ 307.118874] Bluetooth: hci2: command tx timeout [ 307.248158] Bluetooth: hci3: command tx timeout [ 307.312235] Bluetooth: hci4: command tx timeout [ 307.374874] Bluetooth: hci5: command tx timeout [ 307.440217] Bluetooth: hci6: command tx timeout [ 307.632110] Bluetooth: hci7: command tx timeout [ 308.912299] Bluetooth: hci0: command tx timeout [ 308.975712] Bluetooth: hci1: command tx timeout [ 309.168212] Bluetooth: hci2: command tx timeout [ 309.295872] Bluetooth: hci3: command tx timeout [ 309.362065] Bluetooth: hci4: command tx timeout [ 309.422908] Bluetooth: hci5: command tx timeout [ 309.487260] Bluetooth: hci6: command tx timeout [ 309.680100] Bluetooth: hci7: command tx timeout [ 310.959864] Bluetooth: hci0: command tx timeout [ 311.023889] Bluetooth: hci1: command tx timeout [ 311.214955] Bluetooth: hci2: command tx timeout [ 311.343866] Bluetooth: hci3: command tx timeout [ 311.407866] Bluetooth: hci4: command tx timeout [ 311.470918] Bluetooth: hci5: command tx timeout [ 311.535155] Bluetooth: hci6: command tx timeout [ 311.728344] Bluetooth: hci7: command tx timeout [ 362.773913] syz-executor.7 (8079) used greatest stack depth: 24232 bytes left [ 364.865614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.870551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.874289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.884460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.889904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.998000] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.012314] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.021306] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.044302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.056693] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.078618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.086296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.088391] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.091324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.099340] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.104547] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.114544] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.149695] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.170741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.185164] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.224458] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.227579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.240671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.242499] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.251249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.253728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.261023] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.273270] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.278086] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.286521] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.292776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.294912] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.299908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.303401] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.326426] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.350062] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.353708] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.361585] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.368399] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.371707] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.960036] Bluetooth: hci0: command tx timeout [ 367.151319] Bluetooth: hci2: command tx timeout [ 367.151340] Bluetooth: hci1: command tx timeout [ 367.278898] Bluetooth: hci3: command tx timeout [ 367.343866] Bluetooth: hci4: command tx timeout [ 367.534904] Bluetooth: hci7: command tx timeout [ 367.664864] Bluetooth: hci6: command tx timeout [ 367.665534] Bluetooth: hci5: command tx timeout [ 369.007003] Bluetooth: hci0: command tx timeout [ 369.198941] Bluetooth: hci2: command tx timeout [ 369.200069] Bluetooth: hci1: command tx timeout [ 369.328251] Bluetooth: hci3: command tx timeout [ 369.391051] Bluetooth: hci4: command tx timeout [ 369.584093] Bluetooth: hci7: command tx timeout [ 369.710895] Bluetooth: hci5: command tx timeout [ 369.711358] Bluetooth: hci6: command tx timeout [ 371.055015] Bluetooth: hci0: command tx timeout [ 371.247147] Bluetooth: hci1: command tx timeout [ 371.247550] Bluetooth: hci2: command tx timeout [ 371.374920] Bluetooth: hci3: command tx timeout [ 371.439999] Bluetooth: hci4: command tx timeout [ 371.632156] Bluetooth: hci7: command tx timeout [ 371.759079] Bluetooth: hci6: command tx timeout [ 371.759117] Bluetooth: hci5: command tx timeout [ 373.103937] Bluetooth: hci0: command tx timeout [ 373.295294] Bluetooth: hci2: command tx timeout [ 373.295380] Bluetooth: hci1: command tx timeout [ 373.423376] Bluetooth: hci3: command tx timeout [ 373.486985] Bluetooth: hci4: command tx timeout [ 373.678957] Bluetooth: hci7: command tx timeout [ 373.807314] Bluetooth: hci5: command tx timeout [ 373.807850] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 08:18:18 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff81a8051d RCX=ffff888038a3725c RDX=1ffff11007146e6c RSI=ffffffff85c1cc40 RDI=ffffffff81a8051d RBP=ffffffff81a8051d RSP=ffff888038a372c0 R8 =0000000000000001 R9 =ffff888038a37348 R10=000000000003b53d R11=0000000000025a07 R12=ffff888038a373d0 R13=0000000000000000 R14=ffff8880317e1b80 R15=0000000000092cc0 RIP=ffffffff8142f9a0 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f085bc9b540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd8472f6020 CR3=000000002d02d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880162d0000 RCX=ffff888038c0f20c RDX=0000000000000000 RSI=ffffffff84ad7ad4 RDI=ffff8880162d03fc RBP=ffff888038c0f310 RSP=ffff888038c0f230 R8 =0000000000000001 R9 =ffff888038c0f2f8 R10=000000000003b53d R11=00000000000c2e44 R12=0000000000000000 R13=ffff888038c0f300 R14=ffff8880162d0000 R15=ffff888038c0f2b8 RIP=ffffffff815abe0a RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1928c70368 CR3=000000002f110000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000