Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:40348' (ECDSA) to the list of known hosts. 2025/06/27 15:23:38 fuzzer started 2025/06/27 15:23:39 dialing manager at localhost:45637 syzkaller login: [ 103.333244] cgroup: Unknown subsys name 'net' [ 103.458653] cgroup: Unknown subsys name 'cpuset' [ 103.529758] cgroup: Unknown subsys name 'rlimit' 2025/06/27 15:24:01 syscalls: 207 2025/06/27 15:24:01 code coverage: enabled 2025/06/27 15:24:01 comparison tracing: enabled 2025/06/27 15:24:01 extra coverage: enabled 2025/06/27 15:24:01 setuid sandbox: enabled 2025/06/27 15:24:01 namespace sandbox: enabled 2025/06/27 15:24:01 Android sandbox: enabled 2025/06/27 15:24:01 fault injection: enabled 2025/06/27 15:24:01 leak checking: enabled 2025/06/27 15:24:01 net packet injection: enabled 2025/06/27 15:24:01 net device setup: enabled 2025/06/27 15:24:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/27 15:24:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/27 15:24:01 USB emulation: enabled 2025/06/27 15:24:01 hci packet injection: enabled 2025/06/27 15:24:01 wifi device emulation: enabled 2025/06/27 15:24:01 802.15.4 emulation: enabled 2025/06/27 15:24:01 fetching corpus: 0, signal 0/0 (executing program) 2025/06/27 15:24:02 starting 8 fuzzer processes 15:24:02 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd, 0xe5, &(0x7f0000000040)=[{&(0x7f0000000000)="11f36579974c5889028c8781067d3608360112bea023453d0b4891cb1bb0bb661a0567", 0x23}], 0x1, 0x1d, 0x1, {0x2}}, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/158, 0x9e}, {&(0x7f0000000200)=""/210, 0xd2}, {&(0x7f0000000300)=""/237, 0xed}], 0x3, &(0x7f0000000440)=""/4096, 0x1000}, 0x80012001) r0 = syz_open_procfs(0x0, &(0x7f0000001480)='net/sco\x00') r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000001500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x54, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001680)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000001780)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'ip6_vti0\x00', r3, 0x2f, 0x5, 0x1f, 0x10000, 0x0, @private1, @private2, 0x1, 0x1, 0x80000000, 0xfffffffe}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001940)={'sit0\x00', r4, 0x10, 0x7f, 0x5, 0x81, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x10, 0x8, 0x48000}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001a80)={'syztnl1\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r5, 0x29, 0x2, 0x8, 0xffffffb0, 0x4, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x20, 0x4, 0x9}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001bc0)='net/wireless\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000001ac0), r7) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000001c40)={0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, @llc={0x1a, 0x10e, 0x1, 0x3, 0x1, 0xd2, @local}, @ax25={0x3, @bcast, 0x7}, 0x7ff, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000001c00)='erspan0\x00', 0x0, 0x5, 0xffff}) r8 = syz_open_dev$evdev(&(0x7f0000001cc0), 0x8001, 0x200000) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000001d00)=0x8) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001d40), 0x8480, 0x0) getsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, &(0x7f0000001d80), &(0x7f0000001dc0)=0x4) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000001e00), 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001ec0)={'syztnl0\x00', &(0x7f0000001e40)={'ip6tnl0\x00', r6, 0x2f, 0x3, 0x3, 0x101, 0x40, @loopback, @mcast2, 0x8, 0x700, 0x9, 0x7}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001f40)={0x0, 0x3, 0x400}) 15:24:02 executing program 1: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x28, 0x81, 0x7, 0x40, @loopback, @local, 0x700, 0x1, 0x5, 0x7}}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r0, 0x4, 0x12, 0x2, 0xfffffffb, 0x61, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x7, 0x5, 0x6ae}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', r1, 0x29, 0x7f, 0x8, 0x62, 0x10, @remote, @mcast1, 0x1, 0x80, 0x6, 0x80000000}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = fsmount(r3, 0x1, 0x82) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x29, 0x2, 0x92, 0xffffff49, 0x40, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x2b1dfe06e1dfc6b, 0x1, 0x9a4, 0x6}}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x24}}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008044}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r1, 0x4, 0x40, 0x4, 0x1, 0xa, @mcast1, @local, 0x8, 0x7, 0x6, 0x2}}) recvmsg$unix(r4, &(0x7f0000000980)={&(0x7f00000006c0), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f0000000840)=""/128, 0x80}, {&(0x7f00000008c0)=""/48, 0x30}], 0x3, &(0x7f0000000940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x1) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f00000009c0)={{r3}, {@val, @max}}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'ip6_vti0\x00', r5, 0x29, 0x40, 0x1c, 0x8, 0x17, @remote, @mcast1, 0x8040, 0x700, 0x9, 0x3ff}}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x680, 0x0) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000b40)=0x5) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x301880, 0x0) ioctl$BTRFS_IOC_SCRUB(r9, 0xc400941b, &(0x7f0000000bc0)={0x0, 0x1ff, 0x4, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000fc0)={'ip6gre0\x00', r0, 0x4, 0x1, 0x20, 0xff000000, 0x1, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x7, 0x5, 0x1c7}}) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000001080)=0x1, 0x4) 15:24:02 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0xfffff3b9, 0x3, 'client1\x00', 0xffffffff80000005, "6bebc283621ba853", "2dc79689414fd0a01ff4d0ff1bb4763ce2d694ce30eb8cadc1f3c6db8e73958b", 0x1f}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000000c0)={{0x4, 0x80}, 'port1\x00', 0x84, 0x11, 0x0, 0x55a, 0x3, 0x5, 0x8, 0x0, 0x3, 0x3f}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x2}, 'port0\x00', 0x80, 0x4, 0x8, 0x4, 0x78, 0x8, 0x8, 0x0, 0x0, 0xfb}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x5, 0xffffffff, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x1, 0x3, 0x6}}) semget(0x2, 0x6, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x4, 0xff, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x80, 0x700, 0x4, 0x7}}) write$sndseq(r0, &(0x7f0000000440)=[{0xfc, 0x34, 0x0, 0x0, @tick=0x2, {0x3, 0x40}, {0x0, 0x3}, @control={0x0, 0xe06b, 0x5}}, {0x84, 0x3, 0x3, 0x2, @time={0x80, 0x20}, {0x9, 0x56}, {0x1, 0x81}, @ext={0x29, &(0x7f0000000400)="0a5895440e90386d6178d82b49e056b1daf48973c8217e5df654ac2c471caf0821cce7cbb0db1a8bc1"}}, {0x48, 0x4, 0x40, 0xe5, @tick=0x800, {0x20, 0x1}, {0x20, 0x3f}, @queue={0x1, {0x4279, 0x5e34}}}, {0x40, 0x2, 0x40, 0x4, @time={0x7, 0xffffffff}, {0x0, 0x3f}, {0x2, 0x3f}, @raw8={"041ed7d97b690461ee7d4dcd"}}, {0x20, 0x8, 0x0, 0x8, @time={0x9, 0x8000}, {0x20, 0x81}, {0x8}, @addr={0x2}}, {0xd8, 0x0, 0x40, 0xfb, @tick=0x5, {0x6, 0x2}, {0x81, 0x80}, @time=@tick=0x3}, {0x3, 0xf9, 0x6, 0x6, @tick=0x7ff, {0x8, 0x6}, {0x2, 0x4}, @queue={0x1f, {0x1, 0x6}}}], 0xc4) r3 = syz_open_dev$evdev(&(0x7f0000000540), 0xffffffffffffff98, 0xc642) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000580)=""/62) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x242440, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r2, 0x29, 0x7f, 0x1, 0xbac, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x8, 0x7800, 0x5d, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r2, 0x4, 0x4, 0x6, 0x9, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, @loopback, 0x20, 0x80, 0x9, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'syztnl2\x00', r5, 0x4, 0x7f, 0x5, 0x4, 0x2, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7800, 0x2, 0xfffffffb}}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000900)='sit0\x00', 0x0, r0) recvmmsg$unix(r0, &(0x7f0000006e40)=[{{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/182, 0xb6}, {&(0x7f0000000a80)=""/251, 0xfb}, {&(0x7f0000000b80)=""/131, 0x83}, {&(0x7f0000000c40)=""/47, 0x2f}, {&(0x7f0000000c80)=""/73, 0x49}], 0x5}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000000e00)=""/171, 0xab}, {&(0x7f0000000ec0)=""/62, 0x3e}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/240, 0xf0}, {&(0x7f0000002000)=""/188, 0xbc}], 0x5, &(0x7f0000002140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000021c0), 0x6e, &(0x7f00000035c0)=[{&(0x7f0000002240)=""/50, 0x32}, {&(0x7f0000002280)=""/92, 0x5c}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/135, 0x87}, {&(0x7f00000033c0)=""/243, 0xf3}, {&(0x7f00000034c0)}, {&(0x7f0000003500)=""/157, 0x9d}], 0x7, &(0x7f0000003640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003740)=""/19, 0x13}, {&(0x7f0000003780)=""/127, 0x7f}, {&(0x7f0000003800)=""/218, 0xda}, {&(0x7f0000003900)=""/159, 0x9f}, {&(0x7f00000039c0)=""/61, 0x3d}], 0x5, &(0x7f0000003a80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003b00)=@abs, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003b80)=""/106, 0x6a}, {&(0x7f0000003c00)=""/73, 0x49}], 0x2, &(0x7f0000003cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000003d00), 0x6e, &(0x7f0000005380)=[{&(0x7f0000003d80)=""/159, 0x9f}, {&(0x7f0000003e40)=""/182, 0xb6}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/218, 0xda}, {&(0x7f0000005000)=""/157, 0x9d}, {&(0x7f00000050c0)=""/247, 0xf7}, {&(0x7f00000051c0)=""/230, 0xe6}, {&(0x7f00000052c0)=""/167, 0xa7}], 0x8}}, {{&(0x7f0000005400), 0x6e, &(0x7f00000058c0)=[{&(0x7f0000005480)=""/208, 0xd0}, {&(0x7f0000005580)=""/231, 0xe7}, {&(0x7f0000005680)=""/19, 0x13}, {&(0x7f00000056c0)=""/249, 0xf9}, {&(0x7f00000057c0)=""/201, 0xc9}], 0x5, &(0x7f0000005940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/57, 0x39}, {&(0x7f0000006a40)=""/110, 0x6e}, {&(0x7f0000006ac0)=""/141, 0x8d}, {&(0x7f0000006b80)=""/235, 0xeb}, {&(0x7f0000006c80)=""/87, 0x57}, {&(0x7f0000006d00)=""/3, 0x3}], 0x7, &(0x7f0000006dc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x8, 0x40010022, &(0x7f0000007040)={0x0, 0x989680}) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000007080)=""/4096) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f0000008080)={0x0, 0x8001, 0xc}) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f00000080c0), 0x4) 15:24:02 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x3, 0x7fffffff, 0x47, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x40, 0x20, 0x4}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', r0, 0x4, 0x0, 0x6, 0x0, 0x49, @loopback, @remote, 0x80, 0x1, 0x401, 0xff}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@getae={0xc8, 0x1f, 0xc09, 0x70bd27, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4d6, 0x2, 0x33}, @in6=@mcast1, 0x4000, 0x3503}, [@replay_val={0x10, 0xa, {0x70bd29, 0x70bd2c, 0x6}}, @etimer_thresh={0x8, 0xc, 0x8}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@remote, 0x0, 0x2}}, @offload={0xc, 0x1c, {r0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xa}}, @lastused={0xc, 0xf, 0x7fffffff}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000380), 0xfff, 0x2400) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) set_thread_area(&(0x7f00000003c0)={0x10001, 0xffffffffffffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0xa00, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x7, 0x1f, 0x1f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000005c0)={0x0, 0x3, r1, 0xea, 0x80000}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r3) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x121000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0x71, 0x0, 0x5, 0x22, @remote, @empty, 0x40, 0x80, 0x10001, 0xa03}}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x6c}}, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r10, 0xa2b, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10800}, 0x4015) r11 = syz_open_procfs(0x0, &(0x7f0000000a40)='net/ip6_tables_matches\x00') ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r11, 0x89fb, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'syztnl2\x00', r8, 0x29, 0x5, 0x1, 0x5, 0x10, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x1, 0x8, 0x7fff}}) 15:24:02 executing program 3: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x6, 0x1, 'client1\x00', 0x0, "41ce2ebe1e3633d8", "fa096123c70f4548c18e285c52a23b5aa65afe1b8888a47c68f322816e6283d6", 0x9, 0x800}) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1f, 0xf7, 0x80, 0x8, 0x0, 0x80, 0x74201, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0xb2, 0x401}, 0x480, 0x22, 0x200, 0x1, 0xf119, 0x71d8, 0x7, 0x0, 0x1f, 0x0, 0xebfe}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000140)=""/202) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000240)=""/18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x6, 0x6, 0x2, @mcast1, @mcast1, 0x1, 0x40, 0xfffffffe, 0x8001}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/timers\x00', 0x0, 0x0) write$sndseq(r2, &(0x7f0000000440)=[{0x0, 0x9, 0x40, 0x2, @tick=0x9, {0x7, 0xcc}, {0x40, 0x80}, @control={0x8, 0x81, 0x9}}, {0x8e, 0x1, 0x81, 0x7f, @time={0x0, 0x6956fe9}, {0x7f, 0x1}, {0x8, 0x40}, @control={0xff, 0x5, 0x1}}, {0x0, 0x3, 0x2, 0x7, @tick=0x6, {0x3f, 0x2}, {0x79, 0x8}, @addr={0xc6, 0x7f}}, {0x9, 0x1f, 0x3f, 0x8, @tick=0x80000000, {0x3f}, {0x0, 0x3}, @note={0x2, 0xf9, 0x40, 0xfb, 0x6}}], 0x70) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000004c0)={{r2}, {@void, @max}}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000500)=0x100) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000540)=""/4) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0xc2040, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000006c0)={0x16, 0x77, &(0x7f0000000640)="334518d9f3f5dd2cec65739746410a090fbce173068b41c8f09a34af77aa71f79e69d22f4a60737ec5be8472355d56e43718270acf51c24186e864aefdd996f9b6076a4e8905577c69d9c558f201487b552c627f3b57becbb297a02e8f685367de5f6adfdffc6e8b048c8933aa462847eb6701537403de"}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001980)={0x44, 0x0, &(0x7f0000001800)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001740)={@ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/60, 0x3c, 0x0, 0x2a}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/4096, 0x1000, 0x2, 0xc}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000017c0)={0x0, 0x28, 0x50}}}], 0xf2, 0x0, &(0x7f0000001880)="87a366245cc0c6704cf88efd99f091b9a68237bdf53003379c4f90e0bbe819b7b989b9f6ec4496f5fe51cdc85f2e8d6de1cfdf91918193639fda5c8cdb7e281cf0ed4ad9b76f62928102dc2a0399323523f9fa227710d4f74c2c56731012278000a1742ac88d595762344b4eae07170237f7999204a8d8efc77a2650e7840e79faa99fe132e1e33fc5585946402d6463e9ca722aa593264ae3a7d9e9a78f5e5e07060c8e2f0f76a87eea3c7f61e0b57833b64a4d6354fa9939b45092dfe7628d2f3d214c1e7a56351923b09c294e792c3c538360522bb4ba26236c817d80ad103c0b9751ed32cff672c6226d75c817ddd7d9"}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000019c0)={{0x8, 0x8}, {0x95, 0x36}, 0x6, 0x2, 0x6}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000001b80)={'ip6_vti0\x00', &(0x7f0000001b00)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0x0, 0x1, 0xc, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x700, 0xffffffff, 0xffffffff}}) [ 126.810754] audit: type=1400 audit(1751037842.815:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:24:02 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$tcp_congestion(r0, &(0x7f0000000440)='highspeed\x00', 0xa) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001a80), 0x12000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x10000000) clock_gettime(0x0, &(0x7f0000001ac0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001b00)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001b40)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001b80)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001bc0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000001c00)=[{{r2, r3/1000+60000}, 0x11, 0xff, 0x6}, {{0x0, 0x2710}, 0x15, 0x1, 0xfffffff8}, {{0x77359400}, 0x0, 0x3, 0x7}, {{}, 0x12, 0x2, 0x80000001}, {{r4, r5/1000+60000}, 0x1, 0xffff, 0x6b}, {{r6, r7/1000+10000}, 0x17, 0x4, 0x4fe4}, {{r8, r9/1000+60000}, 0x4, 0x40, 0x5}, {{r10, r11/1000+10000}, 0x3, 0x5a1, 0x4dc}, {{0x77359400}, 0x4, 0x0, 0x5ad}, {{0x77359400}, 0x11, 0x5, 0x7}], 0xf0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000001d00)=""/42) clock_gettime(0x0, &(0x7f0000001d40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d80)) clock_gettime(0x0, &(0x7f0000001e80)={0x0, 0x0}) pselect6(0x40, &(0x7f0000001dc0)={0x9, 0x401, 0x6, 0xffffffffffff1919, 0x4, 0x7f, 0x3, 0x100000001}, &(0x7f0000001e00)={0x8, 0x200, 0x8019, 0x5, 0x800, 0x3, 0x2, 0x101}, &(0x7f0000001e40)={0x0, 0x9, 0x1, 0x4, 0x6, 0xfffffffffffffffd, 0x7, 0x1e0b}, &(0x7f0000001ec0)={r12, r13+10000000}, &(0x7f0000001f40)={&(0x7f0000001f00)={[0x10001]}, 0x8}) syz_io_uring_setup(0x71de, &(0x7f0000001f80)={0x0, 0xc700, 0x710e61d93ab5440a, 0x3, 0x210}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002000), &(0x7f0000002040)) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r14, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x6528c1219550557f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002300)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd, 0x400, &(0x7f0000002280)=""/80, 0x50, 0x3, 0xbb25b9240ae4b95c}, 0x7) 15:24:02 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0xa, 0xff, 0x7f, 0x7ff, 0x8, @private0, @local, 0x700, 0x8000, 0x595a, 0x7ff}}) recvmmsg$unix(r0, &(0x7f0000001a00)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000180)=""/103, 0x67}, {&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/1, 0x1}, {&(0x7f00000013c0)=""/163, 0xa3}, {&(0x7f0000001480)=""/136, 0x88}], 0x7, &(0x7f00000015c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f00000016c0), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001740)=""/209, 0xd1}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/36, 0x24}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xd0}}], 0x2, 0x40018140, 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000001a80)='!-+\x00', 0x0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/crypto\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r9, 0x8018456f, &(0x7f0000001b00)=""/165) recvmsg(r1, &(0x7f0000001ec0)={&(0x7f0000001bc0)=@sco, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)=""/173, 0xad}, {&(0x7f0000001d00)=""/72, 0x48}, {&(0x7f0000001d80)=""/141, 0x8d}, {&(0x7f0000001e40)=""/33, 0x21}], 0x4}, 0x100) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000001f00)=0x8) r12 = socket$inet(0x2, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000002200)={&(0x7f0000001f40)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/250, 0xfa}], 0x1, &(0x7f0000002100)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x60) ioctl$BTRFS_IOC_RESIZE(r12, 0x50009403, &(0x7f0000002240)={{r13}, {@void, @actul_num={@val=0x2b, 0x101, 0x6b}}}) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r14, 0x84009422, &(0x7f0000002280)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000002680)='\x00', 0x0, r10) r16 = io_uring_setup(0x2e4d, &(0x7f00000026c0)={0x0, 0x32e7, 0x2, 0x2, 0x38b, 0x0, r6}) ioctl$BTRFS_IOC_SCRUB(r16, 0xc400941b, &(0x7f0000002740)={r15, 0x801d, 0x8222}) ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000002b40)={r15, 0x100, 0x1, [0x6, 0xf8a, 0x3, 0x4, 0x1000], [0x1, 0x8, 0x0, 0x9, 0x1000, 0x1ff, 0x6c, 0x3, 0x20, 0x1, 0x1, 0x5, 0x4746152b, 0x4, 0x8, 0x3f, 0x0, 0x77ed, 0x7, 0x8, 0x7, 0x312, 0x101, 0x4, 0xaf02, 0x1, 0x2, 0x4, 0x8, 0x7, 0x7, 0x7fffffff, 0x80000001, 0x0, 0x0, 0x83, 0xfcd, 0x9, 0xffffffffffffff01, 0x433, 0x1, 0x3, 0x0, 0x1, 0xee, 0x7, 0x2, 0x1, 0x6, 0x81, 0x8, 0x100000000, 0x0, 0x1, 0x6, 0x47, 0x2, 0xfff, 0xfffffffffffffffb, 0x960, 0xfff, 0x0, 0x200, 0xbb, 0x3, 0x3, 0x9, 0x0, 0x9, 0x2, 0x6, 0x8, 0x100, 0x7, 0x2, 0x100000001, 0x0, 0x101, 0x9, 0x240d, 0x5, 0xfff, 0x1, 0x8000, 0xda5, 0xed4, 0x5, 0x5, 0xff, 0xb5d7, 0x400, 0x0, 0x8, 0x7, 0x7ff, 0x1, 0x1, 0x2, 0x4, 0x9, 0x8, 0x7, 0x4, 0x9, 0x2, 0x7b, 0x3ff, 0x7fff, 0x1ff, 0x6, 0x5c0465f5, 0x3, 0xd09, 0x4, 0x80000000, 0x5, 0xb46, 0x0, 0x3, 0x3ff, 0x5]}) 15:24:02 executing program 7: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000400)={0x10, 0x7, {0x80000000, @struct={0x101, 0x6}, 0x0, 0x1, 0x9, 0x4, 0x0, 0x33cb, 0x12, @usage=0x6, 0xffff0000, 0x101, [0x20, 0x163, 0x3, 0x3, 0x38c7, 0x3]}, {0xfff, @usage=0x80000001, 0x0, 0x3, 0x9ff200000, 0x0, 0x0, 0x5, 0x8, @struct={0xfffffffc, 0x7}, 0x6, 0x101, [0x50, 0x4f46, 0x666a, 0x1, 0x7, 0x902]}, {0x80000000, @usage, r0, 0x6, 0x6, 0x1ff, 0x100000000, 0x3, 0x1b, @usage, 0xc435, 0xfff, [0x0, 0x8, 0x44, 0x3, 0x9, 0x2]}, {0x5}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x44) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40141}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x85) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000a40)='\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000a80)={0x0, 0x2, 'client0\x00', 0xffffffff80000000, "6e55dec9582e092e", "52caf2a89cf9a6fb475807d347408c500126ea2e4b23d10a5c243a5834aef3f4", 0x2, 0x401}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x9875e7b46ca5cd99}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffd}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x66}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xda}]}, 0x74}, 0x1, 0x0, 0x0, 0x4840}, 0x8005) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/block/loop3', 0x28002, 0x136) io_uring_setup(0x3ace, &(0x7f0000000d00)={0x0, 0xc8d0, 0x4, 0x2, 0x393, 0x0, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000d80)={{r4}, {@val, @max}}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r6, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1f}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x5}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x44) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f00), 0x8000, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r1) [ 128.163356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.210589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.213051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.222951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.225145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.227795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.268185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.270446] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.275896] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.279256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.281765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.283859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.288080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.290658] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.304323] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.307045] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.312453] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.314455] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.329332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.333377] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.335467] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.340782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.344354] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.348851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.350406] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.351795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.354108] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.355687] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.359471] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.361837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.363200] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.367012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.367856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.371307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.373826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.376352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 128.380532] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.383554] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.385830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.410692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.293333] Bluetooth: hci0: command tx timeout [ 130.357323] Bluetooth: hci1: command tx timeout [ 130.357369] Bluetooth: hci3: command tx timeout [ 130.421191] Bluetooth: hci2: command tx timeout [ 130.421302] Bluetooth: hci6: command tx timeout [ 130.421803] Bluetooth: hci7: command tx timeout [ 130.485313] Bluetooth: hci5: command tx timeout [ 130.486021] Bluetooth: hci4: command tx timeout [ 132.343024] Bluetooth: hci0: command tx timeout [ 132.405161] Bluetooth: hci1: command tx timeout [ 132.405672] Bluetooth: hci3: command tx timeout [ 132.469734] Bluetooth: hci7: command tx timeout [ 132.470855] Bluetooth: hci6: command tx timeout [ 132.471475] Bluetooth: hci2: command tx timeout [ 132.535029] Bluetooth: hci4: command tx timeout [ 132.535543] Bluetooth: hci5: command tx timeout [ 134.391145] Bluetooth: hci0: command tx timeout [ 134.454401] Bluetooth: hci3: command tx timeout [ 134.454889] Bluetooth: hci1: command tx timeout [ 134.517106] Bluetooth: hci6: command tx timeout [ 134.517592] Bluetooth: hci7: command tx timeout [ 134.518294] Bluetooth: hci2: command tx timeout [ 134.581201] Bluetooth: hci5: command tx timeout [ 134.581673] Bluetooth: hci4: command tx timeout [ 136.437422] Bluetooth: hci0: command tx timeout [ 136.501568] Bluetooth: hci3: command tx timeout [ 136.502062] Bluetooth: hci1: command tx timeout [ 136.565516] Bluetooth: hci6: command tx timeout [ 136.567013] Bluetooth: hci2: command tx timeout [ 136.567469] Bluetooth: hci7: command tx timeout [ 136.629411] Bluetooth: hci4: command tx timeout [ 136.629897] Bluetooth: hci5: command tx timeout [ 191.179566] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.184892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.187687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.194270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.199323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.202901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.204554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.211741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.217574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.223569] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.265629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.270407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.271749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.280214] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.289269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.325617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.333100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.335335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.336912] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.338493] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.342407] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.345317] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.352445] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.390425] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.392374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.394389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.398383] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.401148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.443384] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.445714] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.801690] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.805482] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.806875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.866336] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.886364] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.042850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.091680] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.107408] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.195753] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 192.199496] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.269143] Bluetooth: hci0: command tx timeout [ 193.269150] Bluetooth: hci1: command tx timeout [ 193.334040] Bluetooth: hci2: command tx timeout [ 193.461354] Bluetooth: hci4: command tx timeout [ 193.461454] Bluetooth: hci3: command tx timeout [ 193.653073] Bluetooth: hci5: command tx timeout [ 194.037482] Bluetooth: hci6: command tx timeout [ 194.357072] Bluetooth: hci7: command tx timeout [ 195.317125] Bluetooth: hci0: command tx timeout [ 195.319062] Bluetooth: hci1: command tx timeout [ 195.381054] Bluetooth: hci2: command tx timeout [ 195.509433] Bluetooth: hci4: command tx timeout [ 195.510376] Bluetooth: hci3: command tx timeout [ 195.702046] Bluetooth: hci5: command tx timeout [ 196.085046] Bluetooth: hci6: command tx timeout [ 196.405391] Bluetooth: hci7: command tx timeout [ 197.365229] Bluetooth: hci1: command tx timeout [ 197.365495] Bluetooth: hci0: command tx timeout [ 197.431019] Bluetooth: hci2: command tx timeout [ 197.557403] Bluetooth: hci3: command tx timeout [ 197.558036] Bluetooth: hci4: command tx timeout [ 197.751030] Bluetooth: hci5: command tx timeout [ 198.133192] Bluetooth: hci6: command tx timeout [ 198.454065] Bluetooth: hci7: command tx timeout [ 199.413088] Bluetooth: hci1: command tx timeout [ 199.413629] Bluetooth: hci0: command tx timeout [ 199.477309] Bluetooth: hci2: command tx timeout [ 199.605548] Bluetooth: hci4: command tx timeout [ 199.606438] Bluetooth: hci3: command tx timeout [ 199.797249] Bluetooth: hci5: command tx timeout [ 200.181253] Bluetooth: hci6: command tx timeout [ 200.502991] Bluetooth: hci7: command tx timeout [ 253.451408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.452858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.459369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.467471] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.475440] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.646998] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.652834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.654257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.658304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.661623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.837283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.839449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.845302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.861850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.864585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.867570] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.868703] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.871504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.883281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.891894] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.933571] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.937937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.946278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.966755] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.968795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.971169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.989347] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.993782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.994339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.996935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.144678] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.149717] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.153072] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.180714] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.204606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.324532] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.342583] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.360109] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.407338] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.414736] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.541734] Bluetooth: hci0: command tx timeout [ 255.733534] Bluetooth: hci1: command tx timeout [ 255.925184] Bluetooth: hci2: command tx timeout [ 255.926232] Bluetooth: hci3: command tx timeout [ 256.117062] Bluetooth: hci5: command tx timeout [ 256.437301] Bluetooth: hci6: command tx timeout [ 256.439038] Bluetooth: hci4: command tx timeout [ 256.631112] Bluetooth: hci7: command tx timeout [ 257.591005] Bluetooth: hci0: command tx timeout [ 257.781582] Bluetooth: hci1: command tx timeout [ 257.974464] Bluetooth: hci2: command tx timeout [ 257.975029] Bluetooth: hci3: command tx timeout [ 258.165067] Bluetooth: hci5: command tx timeout [ 258.486096] Bluetooth: hci6: command tx timeout [ 258.486649] Bluetooth: hci4: command tx timeout [ 258.677421] Bluetooth: hci7: command tx timeout [ 259.638114] Bluetooth: hci0: command tx timeout [ 259.829078] Bluetooth: hci1: command tx timeout [ 260.022126] Bluetooth: hci3: command tx timeout [ 260.023849] Bluetooth: hci2: command tx timeout [ 260.213220] Bluetooth: hci5: command tx timeout [ 260.533167] Bluetooth: hci4: command tx timeout [ 260.534677] Bluetooth: hci6: command tx timeout [ 260.725376] Bluetooth: hci7: command tx timeout [ 261.685110] Bluetooth: hci0: command tx timeout [ 261.877083] Bluetooth: hci1: command tx timeout [ 262.069128] Bluetooth: hci3: command tx timeout [ 262.069661] Bluetooth: hci2: command tx timeout [ 262.261142] Bluetooth: hci5: command tx timeout [ 262.581136] Bluetooth: hci4: command tx timeout [ 262.581656] Bluetooth: hci6: command tx timeout [ 262.775034] Bluetooth: hci7: command tx timeout [ 316.110539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.118666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.121201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.131461] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.134313] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.291558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.294046] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.295295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.299205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.301590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.360171] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.368776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.370594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.376427] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.378357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.441889] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.448488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.452912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.460289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.464637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.525991] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.538331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.543328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.568432] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.575416] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.576625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.579351] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.588646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.590379] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.602136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.725236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.732515] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.734170] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.740536] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.745579] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.766624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.788486] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.818602] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.827392] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.847866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.197585] Bluetooth: hci0: command tx timeout [ 318.325148] Bluetooth: hci1: command tx timeout [ 318.454224] Bluetooth: hci2: command tx timeout [ 318.583249] Bluetooth: hci3: command tx timeout [ 318.851306] Bluetooth: hci5: command tx timeout [ 318.965190] Bluetooth: hci7: command tx timeout [ 319.029094] Bluetooth: hci4: command tx timeout [ 319.029900] Bluetooth: hci6: command tx timeout [ 320.246086] Bluetooth: hci0: command tx timeout [ 320.373370] Bluetooth: hci1: command tx timeout [ 320.503010] Bluetooth: hci2: command tx timeout [ 320.629269] Bluetooth: hci3: command tx timeout [ 320.885318] Bluetooth: hci5: command tx timeout [ 321.013104] Bluetooth: hci7: command tx timeout [ 321.077063] Bluetooth: hci4: command tx timeout [ 321.077203] Bluetooth: hci6: command tx timeout [ 322.296096] Bluetooth: hci0: command tx timeout [ 322.421300] Bluetooth: hci1: command tx timeout [ 322.549372] Bluetooth: hci2: command tx timeout [ 322.677082] Bluetooth: hci3: command tx timeout [ 322.933510] Bluetooth: hci5: command tx timeout [ 323.061064] Bluetooth: hci7: command tx timeout [ 323.125501] Bluetooth: hci6: command tx timeout [ 323.126193] Bluetooth: hci4: command tx timeout [ 324.342029] Bluetooth: hci0: command tx timeout [ 324.469332] Bluetooth: hci1: command tx timeout [ 324.597050] Bluetooth: hci2: command tx timeout [ 324.725074] Bluetooth: hci3: command tx timeout [ 324.981053] Bluetooth: hci5: command tx timeout [ 325.109370] Bluetooth: hci7: command tx timeout [ 325.173438] Bluetooth: hci6: command tx timeout [ 325.173460] Bluetooth: hci4: command tx timeout [ 378.759904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.761564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.765783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.770244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.779288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.957491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.963360] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.967608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.972680] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.975080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.146241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.151066] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.161391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.162671] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.167664] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.170168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.171001] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.175472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.177264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.179882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.186680] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.192472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.203590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.212726] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.217480] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.219120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.220350] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.221832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.222672] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.223906] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.230216] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.231624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.232479] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.238506] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.241803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.267640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.278888] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.281673] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.290756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.291738] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 380.853346] Bluetooth: hci0: command tx timeout [ 381.045077] Bluetooth: hci1: command tx timeout [ 381.301079] Bluetooth: hci5: command tx timeout [ 381.301171] Bluetooth: hci3: command tx timeout [ 381.301714] Bluetooth: hci4: command tx timeout [ 381.366402] Bluetooth: hci7: command tx timeout [ 381.367301] Bluetooth: hci6: command tx timeout [ 381.493102] Bluetooth: hci2: command tx timeout [ 382.901251] Bluetooth: hci0: command tx timeout [ 383.094055] Bluetooth: hci1: command tx timeout [ 383.349504] Bluetooth: hci4: command tx timeout [ 383.350180] Bluetooth: hci3: command tx timeout [ 383.350550] Bluetooth: hci5: command tx timeout [ 383.413208] Bluetooth: hci7: command tx timeout [ 383.413226] Bluetooth: hci6: command tx timeout [ 383.542939] Bluetooth: hci2: command tx timeout [ 384.949039] Bluetooth: hci0: command tx timeout [ 385.142073] Bluetooth: hci1: command tx timeout [ 385.397262] Bluetooth: hci5: command tx timeout [ 385.404925] Bluetooth: hci4: command tx timeout [ 385.405020] Bluetooth: hci3: command tx timeout [ 385.461424] Bluetooth: hci6: command tx timeout [ 385.463282] Bluetooth: hci7: command tx timeout [ 385.590326] Bluetooth: hci2: command tx timeout [ 386.997499] Bluetooth: hci0: command tx timeout [ 387.189179] Bluetooth: hci1: command tx timeout [ 387.446058] Bluetooth: hci5: command tx timeout [ 387.447725] Bluetooth: hci3: command tx timeout [ 387.449169] Bluetooth: hci4: command tx timeout [ 387.509757] Bluetooth: hci6: command tx timeout [ 387.511264] Bluetooth: hci7: command tx timeout [ 387.637995] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 15:29:07 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff815fa072 RDI=fffffbfff0b83978 RBP=ffffffff85c1cbc0 RSP=ffff88806ce08930 R8 =0000000000000000 R9 =0000000000000000 R10=00007f364820a000 R11=0000000000000003 R12=0000000000000001 R13=ffffffff815fa072 R14=0000000000000000 R15=ffff88800ddbdd80 RIP=ffffffff81aea2df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f364811b540 00000000 00000000 GS =0000 ffff8880e55f6000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562b744044c8 CR3=0000000027229000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c1cb60 RDI=ffff8880133b8a58 RBP=ffffffff857d200e RSP=ffff88801622fce0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000141 R13=0000000000000cc0 R14=00000000000000b8 R15=ffffffff8144a6ac RIP=ffffffff8146445c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56f6000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f010590e438 CR3=000000002d800000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249 XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000