Warning: Permanently added '[localhost]:46300' (ECDSA) to the list of known hosts. 2024/10/29 20:20:37 fuzzer started 2024/10/29 20:20:38 dialing manager at localhost:45639 syzkaller login: [ 68.466650] cgroup: Unknown subsys name 'net' [ 68.562872] cgroup: Unknown subsys name 'cpuset' [ 68.613506] cgroup: Unknown subsys name 'rlimit' 2024/10/29 20:20:55 syscalls: 208 2024/10/29 20:20:55 code coverage: enabled 2024/10/29 20:20:55 comparison tracing: enabled 2024/10/29 20:20:55 extra coverage: enabled 2024/10/29 20:20:55 setuid sandbox: enabled 2024/10/29 20:20:55 namespace sandbox: enabled 2024/10/29 20:20:55 Android sandbox: enabled 2024/10/29 20:20:55 fault injection: enabled 2024/10/29 20:20:55 leak checking: enabled 2024/10/29 20:20:55 net packet injection: enabled 2024/10/29 20:20:55 net device setup: enabled 2024/10/29 20:20:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/29 20:20:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/29 20:20:55 USB emulation: enabled 2024/10/29 20:20:55 hci packet injection: enabled 2024/10/29 20:20:55 wifi device emulation: enabled 2024/10/29 20:20:55 802.15.4 emulation: enabled 2024/10/29 20:20:55 fetching corpus: 0, signal 0/0 (executing program) 2024/10/29 20:20:57 starting 8 fuzzer processes 20:20:57 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000000)={{0x7, 0x81}, 'port0\x00', 0x42, 0x100001, 0x9, 0x7fff, 0x81, 0xa6, 0x80, 0x0, 0x4, 0x8}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x2, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000140)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x111800, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x50}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "3a2c144ccb66320d2c04cf3ab4a579dd"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xff00}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000811) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)={0x428, 0x3f3, 0x20, 0x70bd2c, 0x25dfdbfd, {0x6, 0x2, 0x1d, [0x5, 0xffff, 0x3, 0x7, 0x10001, 0xec, 0x81, 0x6, 0x4, 0x10000, 0x7fff, 0x2, 0xfe, 0x20, 0x101, 0x5, 0x55e5d9c5, 0x7f, 0xfffffffb, 0x3, 0x9, 0x973, 0x7f, 0x2, 0x1, 0x7fffffff, 0x6fd, 0x1, 0x7f, 0xc90f, 0x3, 0x0, 0x9, 0x5, 0x4, 0x261, 0x200, 0x6, 0x6, 0x1f, 0x77e, 0x6, 0x7f, 0x40, 0x7, 0xffff, 0x0, 0x8, 0x10000, 0xfff, 0x7, 0x0, 0x1, 0x8, 0x82, 0x7f, 0xb9f, 0x80000000, 0xffff, 0x800, 0xfffffffc, 0x1, 0xb11, 0xcc], [0xe92, 0x19e1, 0x100, 0x1000, 0xffffffff, 0x0, 0x1, 0x0, 0x3ff, 0x6, 0x7, 0x5, 0xb2, 0xfe3f, 0x1, 0xc90, 0xfc6d, 0x3, 0x7, 0x6936, 0x8001, 0x0, 0xffffffff, 0x101, 0x3e1f, 0x0, 0x400, 0x8, 0x2, 0x6, 0x3ff, 0x4, 0x401, 0x0, 0x5, 0xd383, 0x1000, 0xff, 0x6, 0x7fffffff, 0x1000, 0x4, 0x6, 0x1, 0x10001, 0x2, 0x2, 0x9a9, 0x6, 0x9f9, 0xfffffffb, 0x3, 0x1ff, 0x0, 0x5, 0x9, 0x7, 0xff, 0x3ff, 0x200, 0x6, 0x8, 0x2, 0x1], [0x7, 0x3, 0xeb, 0xfffffffa, 0x3, 0x0, 0x5, 0x81, 0x4, 0x7f, 0x80000001, 0x10001, 0x4, 0x40, 0x2, 0x200, 0xf9, 0x42, 0x7, 0xc0000, 0x2, 0xfffffff7, 0x200, 0x8001, 0xcb, 0x1, 0x2, 0xff, 0x0, 0x4, 0x7ff, 0x1, 0x3f, 0x10000, 0x8a5, 0x7f, 0x5b, 0x0, 0x800, 0x1, 0x7f, 0x5, 0x6, 0x2, 0x1, 0x401, 0x7, 0x800, 0x2, 0x7, 0x80000001, 0x40, 0x22, 0xfffffff8, 0x20, 0x81, 0x3e, 0x1ff, 0x7fffffff, 0x2, 0x9ad8, 0x401, 0x80, 0x7ff], [0x46ae, 0x2, 0x81, 0x922, 0x15, 0x1, 0x2, 0x98, 0x4, 0x5, 0xc316, 0x7, 0xffff7fff, 0x80000001, 0x8001, 0x115, 0x4, 0x7fff, 0x6, 0x1000, 0xa9, 0x0, 0x3, 0x2, 0x1, 0x10000, 0x1, 0x4, 0x8000000, 0x4f87, 0xfff, 0x80000001, 0x2, 0x1, 0x8, 0xfff, 0x6, 0x401, 0x7, 0x3, 0x1, 0x63, 0x7076c234, 0x2, 0x7ff, 0x10000, 0xa, 0x2, 0x7, 0xffffffbf, 0x6, 0xffffff79, 0xd7da, 0x8, 0x3, 0x1, 0x45, 0x9, 0x40, 0x8, 0xd0, 0x4000, 0x8, 0x6], 0x6, ['\x00', ')\x00', ']{\x00']}, ["", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x24}, 0x40810) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "eb38921843bdbda040427ef9d1be1063"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000980)={0x5, 0xda, 0x1, 'queue1\x00', 0x8001}) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0xb4b342aaa444bbaa}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x10, 0x3f2, 0x100, 0x70bd2c, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) name_to_handle_at(r0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=@reiserfs_2={0x8, 0x2, {0x4, 0x4}}, &(0x7f0000000bc0), 0x1400) syz_mount_image$msdos(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x5, 0x7, &(0x7f0000001080)=[{&(0x7f0000000c80)="9fe32953f5c56b749d2bd80b771a", 0xe, 0xf2b}, {&(0x7f0000000cc0)="bd8e41ba39f94ff481a0b8d2cbb9afdfd76e17dfb5ff4b5edaef4ba865c1320bbc85d57a9e7df7f826e5018efd34a7f15789b073b702b61ab2a9578adf0a71a438b009382271d8c4f21e3ca829eb8105f72c7205ee306f551a20601ac65a477c6fa365c695ab9112e520bd437a24e02fe8fe87a2c4e70ef8b3669af0e0b6600733bde5052a02587e2d3d", 0x8a, 0x4}, {&(0x7f0000000d80)="73624b39301396b98cb1cd883db252da90ffc426f5cf3d7c0ab901e58b0361ab009d439cd20f4df2543d0b111152fb75c346447ae28fd6fcb41efac32a4e4e6afedef8ac101b7f03d9cb00e480", 0x4d, 0x3}, {&(0x7f0000000e00)="6778289b10d86bc2340861ee9a2ad4ec88d1d9f54e0a24f667cb23016ca540679ef3f15641a214d0986e7d8c0791394807efe7eabc19c70fba65f83e5212f6123b5b0ffadb4621bc9003a1d6c2d1cd80c01476e6807251a9fd408c19286b8e966871afc9c43ac744164ef71e733c7bfe614d3ab57ab1d68d03524b6981a4dc1604a250fe23e903f6f02e194fc91af3f0f51a64d611325fe119d1a980425217f1b0ff7d18c1ddc901f1aea227d0a4b9f1629470c2ebfb61e3659691310b83c6bc8289241062dfb6f888918baaeaf510c51b28df680119207020ab3c", 0xdb, 0x6}, {&(0x7f0000000f00)="ca0324f85b10204ffd8606d6e19b5b0ed0458025eaa48822ae215bed80535c8c9d0ed8745eaf987ff5fa473f51f47cecaa0b0af816bc03d167ac7d389b850375c56e54b8b6b0f0aaeb73dce5546d868194afd8831c2f635c8719f30088a55ffe11023311749d0143d12ad1f8faddcc38beb0e6a4088b815f0fc0c9a1ea5baaceb35a0fd368161471deb7f233e3a9db7a6a4017cdbe950fa10b85602e76744e55cedb6d4c7c903ce22ab9", 0xaa}, {&(0x7f0000000fc0)="cb4ec529fbea9f2543b870e7ed414ad8a02f94880b283230b60919a8cab226704cbdd47395e7533008c62ac926878ffe94254d656b8ebea41072f72cd8a445717da6103f04002e0fb0", 0x49, 0x9}, {&(0x7f0000001040)="4594455150933b0728c1f68c415e309e15d911712783bb6c0b00e3f4da3b0e062347023ce86f", 0x26, 0x5}], 0x2004, &(0x7f0000001140)={[{@dots}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x80000000}}, {@fat=@umask}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, 'port0\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000001700)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000016c0)={&(0x7f0000001240)={0x458, 0x3f3, 0x200, 0x70bd2d, 0x25dfdbfe, {0x6, 0x2, 0x1b, [0x6, 0x0, 0x7, 0x800, 0x2, 0x93b1, 0x6c20, 0x1, 0x7fff, 0x10000, 0x1511, 0x0, 0x9, 0xeda0, 0x10001, 0x9, 0x2, 0x0, 0xfffffffd, 0x101, 0x7, 0x5, 0xfffffffa, 0x5b, 0x9, 0x5, 0x5, 0x3f, 0xffffffff, 0x7, 0x2, 0x9, 0x7, 0xac, 0x1, 0x0, 0x9, 0x7, 0x1, 0x1, 0x5, 0x817, 0x5, 0x0, 0x3, 0x36e, 0x800, 0x4, 0x3ff, 0x0, 0xd25f, 0x1, 0x10001, 0x8, 0xfffffff9, 0x7f, 0x2, 0x1, 0x1, 0x80000000, 0x7, 0x7, 0xc2, 0x2], [0x7, 0x3, 0x3, 0x6e, 0x0, 0x9, 0x8001, 0x9, 0x9, 0x50, 0x3, 0x8, 0x6598, 0x10, 0x40, 0x8, 0x2, 0x9, 0x3, 0x2, 0xff, 0x9, 0x9, 0x5, 0x3f, 0xfffffff8, 0xa577, 0xffffffff, 0xf8, 0x40, 0x4, 0x9, 0x6, 0x3, 0x3, 0x7, 0x1, 0x7, 0x3, 0x8, 0x1, 0x1, 0x6, 0x8, 0x7f, 0xd13, 0x1ff, 0x8, 0x3, 0x7, 0x80000, 0x3, 0x4, 0x4, 0x6, 0x588b59c0, 0x9, 0xb412, 0x7fff, 0x6be6c695, 0x7, 0x6, 0x8, 0x6], [0x2, 0x4, 0xd03742bd, 0x120, 0x0, 0x6561, 0x9, 0x3, 0x637, 0x4, 0x8000, 0x7, 0x9, 0x1, 0xfffff801, 0x7f, 0xffff, 0x10000, 0x80000001, 0x7, 0x9, 0x866b, 0x9, 0x435ea06b, 0x3, 0x7, 0x8, 0xe00000, 0x1ff, 0x9, 0x1ff, 0x5, 0x779755d1, 0xff, 0x4, 0x7ff, 0xffffff53, 0x5, 0x20, 0x2, 0x1, 0x56b3, 0x20, 0x1, 0x3, 0x5, 0x3, 0xffffffff, 0x8c, 0x5, 0x2, 0x6, 0x30, 0x0, 0x1, 0x0, 0x1000, 0x3, 0x20, 0x3, 0x8001, 0x97, 0xc9, 0x40], [0x2, 0x2, 0x9, 0xfffffbff, 0x554e, 0x7, 0x9b5, 0x81, 0x10001, 0xfc, 0x7, 0x8, 0x6, 0x40, 0xa2, 0x7, 0x4, 0x6, 0x100, 0x481, 0x0, 0x4, 0x3, 0x0, 0x4, 0xce, 0x3, 0x8, 0x6, 0x3f, 0x2, 0x1, 0x7, 0xff, 0x6, 0x8, 0xfff, 0x81, 0xff, 0xff, 0xf0f0, 0xfffffff7, 0x774, 0x9, 0x6, 0x8c, 0x0, 0xef, 0xa41, 0x2, 0x1f, 0x7fcbabdb, 0x13e40, 0x9, 0x8, 0x7, 0x0, 0x8, 0x2c9, 0x9, 0x6, 0xb0, 0x3f, 0x6], 0x35, ['obj_type', '^\'/@\x00', '$#&\x00', './binderfs2/binder-control\x00', '\x00', '!^[):\x00', ')\x00']}, ["", "", "", "", ""]}, 0x458}, 0x1, 0x0, 0x0, 0x20010000}, 0x44001) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001740), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000001780)={0x3f, 0x2, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x5}, 0x3}) syz_mount_image$msdos(&(0x7f0000001800), &(0x7f0000001840)='./file0\x00', 0x1, 0x1, &(0x7f00000018c0)=[{&(0x7f0000001880), 0x0, 0x5}], 0x0, &(0x7f0000001900)={[{@dots}, {@fat=@debug}, {@nodots}, {@nodots}], [{@appraise_type}, {@dont_measure}, {@hash}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@audit}, {@obj_type={'obj_type', 0x3d, 'umask'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001a00), 0x22002, 0x0) sendmsg$AUDIT_GET(r5, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x10, 0x3e8, 0x8, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x841}, 0x0) 20:20:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x54}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x6}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xe4}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040081}, 0x20040080) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x840) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x6}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x23}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x3}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xe0}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000091}, 0x34000015) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x67}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004030}, 0x800) timer_getoverrun(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x41}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40040) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}]}, 0x50}}, 0x40000c0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x28}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4e001}, 0xc000) timer_gettime(0x0, &(0x7f0000000980)) timer_delete(0x0) timer_delete(0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a00), 0xffffffffffffffff) 20:20:57 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x6, 0xff, 0xcfd, {0x9, 0x7e}, 0xb438, 0x8001}) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x10201, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000000c0)={0x3, 0x7, 0x0, 'queue1\x00', 0x4}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000001c0)={'custom1\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6bf}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xaa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48011}, 0x4040000) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x408000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000480)={0x1, 0x0, 0x6, 0x1, 0x1f9}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040855) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008810}, 0x8000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000740), 0x341040) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f0000000780)) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000800), 0x2502, 0x0) write$cgroup_devices(r8, &(0x7f0000000840)={'c', ' *:* ', 'm\x00'}, 0x8) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000d80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f00000008c0)={0x478, 0x3f3, 0x10, 0x70bd2b, 0x25dfdbfc, {0x3, 0x1, 0x26, [0x7fffffff, 0x2, 0x2, 0xfffff1b5, 0x4, 0xb5e2, 0x99, 0xd31, 0x100, 0x94, 0x7, 0x20, 0x3, 0x9, 0x10000, 0x20, 0x30000000, 0x2, 0x6, 0x9, 0x1, 0x861, 0x9, 0x6, 0xd50f, 0xfffffffc, 0x1f, 0xc1a5, 0x45, 0xfffffffa, 0x702, 0xdfa0, 0xff, 0x0, 0x1, 0x3037547f, 0xffffffff, 0x80, 0x4, 0xe6, 0x3, 0x8, 0x3, 0x6, 0x8000, 0x20, 0x1, 0x5, 0x3, 0x2, 0x92d9, 0x8, 0x20, 0x6, 0x8001, 0x101, 0x8000, 0x6, 0x1, 0x1, 0x1f, 0x400000, 0xfffffc01, 0x4], [0x1, 0x7fffffff, 0xff9, 0x81, 0x80, 0x6, 0x4, 0x10000, 0xda, 0xff, 0x8, 0x8, 0xd247, 0x7, 0x10000, 0x9da5, 0xff, 0xd0d6, 0x3, 0x7aa, 0x6, 0x8000, 0xff, 0xfffffffa, 0x7, 0xae, 0x3f, 0x0, 0x7, 0x3, 0x0, 0x7, 0x1, 0xeed, 0x0, 0x8, 0x4, 0x40000000, 0x200, 0x5, 0x7, 0x9, 0x7845, 0x80000000, 0x101, 0xf033, 0x4, 0x75, 0x1ff, 0x8, 0x1, 0x0, 0x7, 0xed8, 0x80a, 0x5, 0x1, 0x7fff, 0xde9, 0x8, 0x2, 0x40, 0x7b83, 0x5], [0xffff8001, 0xfffffdad, 0x8, 0x7, 0xb186, 0xfffffff8, 0x6, 0x9, 0xe000, 0x7, 0x4, 0x46a, 0x10001, 0xb0, 0x7f, 0x190a, 0x0, 0xb4fb, 0x3, 0x0, 0x4, 0x3, 0x8, 0x6, 0x20, 0x2, 0x8, 0x5, 0x5, 0x1, 0x3, 0x6, 0x4, 0x5, 0xf9, 0xffffffff, 0x76f209ac, 0x8, 0x7, 0x5, 0x6, 0x0, 0x4, 0x3, 0xb2b, 0x8001, 0x7f, 0x401, 0x7, 0x3, 0x9, 0x9, 0x1, 0x3, 0x4, 0xff, 0x4, 0x9, 0x2100fb61, 0xaf, 0x97a, 0x80000000, 0x5, 0x200], [0x40, 0x6, 0x66b6, 0x6, 0x2, 0x7, 0xfb1, 0x9efe, 0x300000, 0x7ff, 0x8, 0x156e, 0x20, 0xc51, 0x3, 0x200, 0xfffffffe, 0x8116, 0x7fff, 0x7, 0x4, 0x2, 0x2, 0x10001, 0xff, 0xca, 0x4, 0x7, 0x3, 0x1, 0x19, 0x0, 0x17fa, 0x5, 0xeca8, 0x9, 0x81, 0x86f5, 0x7f, 0x5, 0x0, 0x7, 0xfffffff8, 0x5, 0x54a7, 0x6, 0xf8, 0x9, 0x7, 0x2, 0xfffffffa, 0x1, 0x80000001, 0x4, 0x7, 0x80, 0xc5cf, 0x94e6, 0xffffffff, 0x5, 0x80000001, 0x1000, 0x3, 0x1f], 0x58, ['./binderfs/binder-control\x00', 'custom1\x00', './binderfs/binder-control\x00', 'wpan4\x00', 'nl802154\x00', '\\\'[$\x00', 'nl80211\x00']}, ["", ""]}, 0x478}, 0x1, 0x0, 0x0, 0x2400c841}, 0x4) 20:20:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x51ea}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x200, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040085}, 0x4004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x3f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c000}, 0x26a04adcc832d46f) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x3f5, 0x100, 0x70bd2c, 0x25dfdbfc, "", [""]}, 0x10}}, 0x20000800) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x174, r6, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xce57}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x193}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x333a}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffff000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff7cb}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x20004088) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r7) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r9, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x12e0}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004804}, 0x20000000) 20:20:57 executing program 4: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)={0x7, 0xf, "e85244da7b3c2218d448f292f4447c"}) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xaeb}]}, 0x30}}, 0x40000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c002}, 0x45) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000300)) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x202, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x24c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x4, 0x2]}]}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x44, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x1b5, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x16, 0x7f, [@mic={0x8c, 0x10, {0xe10, "d689cdfecbe3", @short="e235f56e610607a3"}}]}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x24c}, 0x1, 0x0, 0x0, 0x44041}, 0x880) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) socketpair(0xb, 0x6, 0x7, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x44040) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000880)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x12400) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000980)) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000a00)={0x6ee9, 0xfc, "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"}) socketpair(0x2b, 0x4, 0x4, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xb0, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x49}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x84, 0xc5, "fb7f03cb434df69ac8164d512e662c98d082967853da193dee22dd1e4184daa8e56a050873b73a01d00f8982940f6a7e4caa2d06e4a4f81e55465f1d579efe2b3fca8bdb59d288b5fb92a7011e0252fbb4c6207b0dc625f0c5a744f2f77c8c4f7df10c5071913d13039b2b49d77447c9cf79618371a3ef09fe1fa0fd2bf14c20"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20:20:57 executing program 5: r0 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) timer_delete(0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x453, 0x2, 0x70bd2c, 0x25dfdbff, "7e14701cf983b418032aeeeb0455be7d58dc503eea898bf9d7530c1521a336982de23ac2979079e51aa69c9235fb8ba8b3842e510a127847a2debcde6e364e784f0d3bebcea837e70922a97d69f5f17761d5f403c0500c2e0c91ab5d9214760699ef438e3ca8fd4edb267a1d715e66200f80e722", ["", "", "", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) pkey_alloc(0x0, 0x2) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f2, 0x300, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8804}, 0x20000040) r3 = syz_open_dev$loop(&(0x7f00000003c0), 0x9, 0x200000) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) pkey_free(0xffffffffffffffff) r4 = pkey_alloc(0x0, 0x2) pkey_free(r4) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c081}, 0x24000080) timer_gettime(0x0, &(0x7f0000000500)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x312, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) 20:20:57 executing program 6: r0 = getuid() keyctl$get_persistent(0x16, r0, 0xfffffffffffffffc) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x10, 0x2, @thr={0x0, &(0x7f0000000000)="32f97831ad0658f768cd7cb0348cf096b83f0429ea2c681703483553fe7c9a4a0769c01b3f11dfd8e57736abfb01bc354f709807a707ceaa4587a90e3ae8d95a19e9788d96bfdea4ee4db84cee71a6ce5e4f1d6a5176c098ead0f14ce9cd70de7852057988f2fe35d2350d946af72c993bf3d17091b4b3adc9d2093f90273b0a2a3cca601a6f1ed82fce5ea2268981674175f9fdde09e477d3aa55984c1f98320f6e9063009282a0c194de01f6ffde0c1d"}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000180)) r2 = request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='[{\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r0, r2) timer_create(0x7, &(0x7f0000000380)={0x0, 0x2, 0x1, @thr={&(0x7f0000000280)="148dab02e14921356aff44a1207a78d2f3bbc39e64463c8a4b65a4dc31007c5212751c143266264d4d54088434568c4cdd0e2a2879bf74d706734953b6b5044b65570404801c041d1f8939b6c6854a5881acdb026ee4008bd92bf59708f8987ea424fbb7640108b233126c99d34d7bfc55fef99a956282667648e5b82185d52d7705e910c54325114030", &(0x7f0000000340)="99d649a6716d41ff375503cda394fa93b8705cf5695543a0"}}, &(0x7f00000003c0)) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x3e9, 0x4, 0x70bd2a, 0x25dfdbfb, {0x24, 0x0, 0x0, 0x0, 0x3, 0x2, 0x9, 0x7}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x19024}, 0x4840) timer_getoverrun(r1) r3 = request_key(&(0x7f0000000500)='.dead\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)='trusted\x00', r2) keyctl$get_persistent(0x16, r0, r3) r4 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$search(0xa, r3, &(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x3}, r4) r5 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, r2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x85000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000780)={0x9, 0x48, 0x1, 'queue1\x00', 0x9}) fork() ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000840)) r7 = add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$search(0xa, r7, &(0x7f0000000900)='ceph\x00', &(0x7f0000000940)={'syz', 0x3}, r5) [ 86.526322] audit: type=1400 audit(1730233257.183:7): avc: denied { execmem } for pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:20:57 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='!,\x7f-\\\x00', 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x3}, r1) getgid() r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x400, 0x70bd29, 0x25dfdbfd, {0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x14020804) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000300)=r2, 0x1) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000340)=0x6) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x101000) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r1) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000001580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1008080}, 0xc, &(0x7f0000001540)={&(0x7f0000000500)={0x1010, 0x453, 0x100, 0x70bd26, 0x25dfdbfd, "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", ["", "", "", "", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4000}, 0x48c5) r6 = request_key(&(0x7f00000015c0)='id_resolver\x00', &(0x7f0000001600)={'syz', 0x0}, &(0x7f0000001640)='\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r6, 0x1) r7 = add_key$keyring(&(0x7f0000001700), &(0x7f0000001740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f0000001680)='trusted\x00', &(0x7f00000016c0)={'syz', 0x3}, r7) r8 = getgid() setfsgid(r8) getgid() [ 87.883324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.884882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.887395] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.890925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.893482] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.895528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.947656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.960006] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.965578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.966972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.968383] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.969747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.972829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.973935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.982280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.983978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.986797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.989846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.991244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.992019] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.997847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.999027] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.004217] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.005445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.034442] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.039634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.045769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.047420] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.048601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.049877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.053543] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.056339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.057146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.058544] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.059354] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.061059] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.062558] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.065456] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.066982] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.068354] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.070340] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.080039] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.089765] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.091319] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.092682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.099866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.102240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.104543] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.976822] Bluetooth: hci0: command tx timeout [ 90.040324] Bluetooth: hci3: command tx timeout [ 90.040373] Bluetooth: hci1: command tx timeout [ 90.104199] Bluetooth: hci7: command tx timeout [ 90.104547] Bluetooth: hci2: command tx timeout [ 90.168641] Bluetooth: hci5: command tx timeout [ 90.168668] Bluetooth: hci6: command tx timeout [ 90.169501] Bluetooth: hci4: command tx timeout [ 92.025246] Bluetooth: hci0: command tx timeout [ 92.089356] Bluetooth: hci3: command tx timeout [ 92.089846] Bluetooth: hci1: command tx timeout [ 92.152271] Bluetooth: hci7: command tx timeout [ 92.152292] Bluetooth: hci2: command tx timeout [ 92.216216] Bluetooth: hci4: command tx timeout [ 92.216253] Bluetooth: hci6: command tx timeout [ 92.217434] Bluetooth: hci5: command tx timeout [ 94.073180] Bluetooth: hci0: command tx timeout [ 94.136281] Bluetooth: hci1: command tx timeout [ 94.137270] Bluetooth: hci3: command tx timeout [ 94.200192] Bluetooth: hci7: command tx timeout [ 94.201424] Bluetooth: hci2: command tx timeout [ 94.264199] Bluetooth: hci6: command tx timeout [ 94.265924] Bluetooth: hci4: command tx timeout [ 94.266137] Bluetooth: hci5: command tx timeout [ 96.120480] Bluetooth: hci0: command tx timeout [ 96.184207] Bluetooth: hci1: command tx timeout [ 96.185196] Bluetooth: hci3: command tx timeout [ 96.248220] Bluetooth: hci7: command tx timeout [ 96.249718] Bluetooth: hci2: command tx timeout [ 96.312211] Bluetooth: hci4: command tx timeout [ 96.313545] Bluetooth: hci5: command tx timeout [ 96.315002] Bluetooth: hci6: command tx timeout [ 148.123673] syz-executor.7 (284) used greatest stack depth: 23616 bytes left [ 150.705047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.707533] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.710461] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.720815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.742788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.744009] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.757177] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.758210] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.764793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.770240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.783191] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.783905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.792561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.801451] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.802942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.804195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.825982] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.827382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.982626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.986525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.992311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.996750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.000846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.057261] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.111022] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.119630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.121716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.123537] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.129164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.131630] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.133593] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.133909] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.136032] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.136957] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.153334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.161554] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.162314] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.174241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.198334] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.200628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.204142] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.211287] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.220626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.221624] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.222726] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.226695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.269904] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.279497] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.824378] Bluetooth: hci0: command tx timeout [ 152.888299] Bluetooth: hci2: command tx timeout [ 152.889002] Bluetooth: hci1: command tx timeout [ 153.145185] Bluetooth: hci5: command tx timeout [ 153.146227] Bluetooth: hci3: command tx timeout [ 153.336195] Bluetooth: hci7: command tx timeout [ 153.336882] Bluetooth: hci4: command tx timeout [ 153.400247] Bluetooth: hci6: command tx timeout [ 154.872684] Bluetooth: hci0: command tx timeout [ 154.936555] Bluetooth: hci2: command tx timeout [ 154.938006] Bluetooth: hci1: command tx timeout [ 155.192416] Bluetooth: hci5: command tx timeout [ 155.192986] Bluetooth: hci3: command tx timeout [ 155.388244] Bluetooth: hci4: command tx timeout [ 155.388866] Bluetooth: hci7: command tx timeout [ 155.451119] Bluetooth: hci6: command tx timeout [ 156.921291] Bluetooth: hci0: command tx timeout [ 156.984310] Bluetooth: hci1: command tx timeout [ 156.985831] Bluetooth: hci2: command tx timeout [ 157.240202] Bluetooth: hci3: command tx timeout [ 157.241629] Bluetooth: hci5: command tx timeout [ 157.433183] Bluetooth: hci7: command tx timeout [ 157.434705] Bluetooth: hci4: command tx timeout [ 157.497132] Bluetooth: hci6: command tx timeout [ 158.970123] Bluetooth: hci0: command tx timeout [ 159.033172] Bluetooth: hci1: command tx timeout [ 159.033709] Bluetooth: hci2: command tx timeout [ 159.288346] Bluetooth: hci3: command tx timeout [ 159.288895] Bluetooth: hci5: command tx timeout [ 159.482126] Bluetooth: hci7: command tx timeout [ 159.482673] Bluetooth: hci4: command tx timeout [ 159.544417] Bluetooth: hci6: command tx timeout [ 212.748147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.750797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.762595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.781182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.806608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.807772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.810173] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.813521] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.814720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.831735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.835598] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.836723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.936924] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.938758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.939891] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.942519] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.944333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.945623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.036003] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.038085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.039409] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.041690] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.043655] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.045457] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.046576] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.047775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.060627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.062367] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.064334] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.067032] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.071442] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.073947] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.104499] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.113837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.115716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.117387] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.117424] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.119600] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.124295] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.130471] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.132436] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.135750] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.137333] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.150013] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.152367] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.173653] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.175267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.176294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.843153] Bluetooth: hci0: command tx timeout [ 214.904292] Bluetooth: hci1: command tx timeout [ 215.033533] Bluetooth: hci2: command tx timeout [ 215.096171] Bluetooth: hci3: command tx timeout [ 215.097167] Bluetooth: hci6: command tx timeout [ 215.281002] Bluetooth: hci4: command tx timeout [ 215.284522] Bluetooth: hci7: command tx timeout [ 215.294116] Bluetooth: hci5: command tx timeout [ 216.888186] Bluetooth: hci0: command tx timeout [ 216.952173] Bluetooth: hci1: command tx timeout [ 217.080233] Bluetooth: hci2: command tx timeout [ 217.144253] Bluetooth: hci6: command tx timeout [ 217.145995] Bluetooth: hci3: command tx timeout [ 217.336199] Bluetooth: hci5: command tx timeout [ 217.336747] Bluetooth: hci4: command tx timeout [ 217.337559] Bluetooth: hci7: command tx timeout [ 218.938104] Bluetooth: hci0: command tx timeout [ 219.000166] Bluetooth: hci1: command tx timeout [ 219.128178] Bluetooth: hci2: command tx timeout [ 219.193127] Bluetooth: hci6: command tx timeout [ 219.193145] Bluetooth: hci3: command tx timeout [ 219.384379] Bluetooth: hci7: command tx timeout [ 219.384513] Bluetooth: hci4: command tx timeout [ 219.386352] Bluetooth: hci5: command tx timeout [ 220.986177] Bluetooth: hci0: command tx timeout [ 221.048281] Bluetooth: hci1: command tx timeout [ 221.179096] Bluetooth: hci2: command tx timeout [ 221.240206] Bluetooth: hci6: command tx timeout [ 221.240227] Bluetooth: hci3: command tx timeout [ 221.432155] Bluetooth: hci5: command tx timeout [ 221.432210] Bluetooth: hci7: command tx timeout [ 221.432697] Bluetooth: hci4: command tx timeout [ 274.979173] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.980646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.983181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.989505] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.999344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.002957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.079746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.081740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.082943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.086467] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.091540] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.097383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.145701] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.150579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.157264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.171251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.178276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.181185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.272345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.284495] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.285877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.289508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.291987] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.296889] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.302369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.311782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.317807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.328539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.337785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.339255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.345224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.352370] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.370131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.386910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.421642] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.423495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.424393] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.426996] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.428617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.430310] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.433578] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.437327] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.441554] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.453020] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.460432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.481683] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.512291] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.518295] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.049208] Bluetooth: hci0: command tx timeout [ 277.176130] Bluetooth: hci1: command tx timeout [ 277.241126] Bluetooth: hci2: command tx timeout [ 277.368219] Bluetooth: hci3: command tx timeout [ 277.434194] Bluetooth: hci4: command tx timeout [ 277.496255] Bluetooth: hci7: command tx timeout [ 277.497361] Bluetooth: hci5: command tx timeout [ 277.625252] Bluetooth: hci6: command tx timeout [ 279.098083] Bluetooth: hci0: command tx timeout [ 279.224123] Bluetooth: hci1: command tx timeout [ 279.290185] Bluetooth: hci2: command tx timeout [ 279.417141] Bluetooth: hci3: command tx timeout [ 279.483185] Bluetooth: hci4: command tx timeout [ 279.545424] Bluetooth: hci5: command tx timeout [ 279.545907] Bluetooth: hci7: command tx timeout [ 279.672135] Bluetooth: hci6: command tx timeout [ 281.144134] Bluetooth: hci0: command tx timeout [ 281.272141] Bluetooth: hci1: command tx timeout [ 281.337104] Bluetooth: hci2: command tx timeout [ 281.464103] Bluetooth: hci3: command tx timeout [ 281.529317] Bluetooth: hci4: command tx timeout [ 281.593218] Bluetooth: hci7: command tx timeout [ 281.594796] Bluetooth: hci5: command tx timeout [ 281.720112] Bluetooth: hci6: command tx timeout [ 283.195107] Bluetooth: hci0: command tx timeout [ 283.320102] Bluetooth: hci1: command tx timeout [ 283.384201] Bluetooth: hci2: command tx timeout [ 283.512133] Bluetooth: hci3: command tx timeout [ 283.577241] Bluetooth: hci4: command tx timeout [ 283.640145] Bluetooth: hci5: command tx timeout [ 283.640633] Bluetooth: hci7: command tx timeout [ 283.769297] Bluetooth: hci6: command tx timeout [ 337.330546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.332728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.333819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.342317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.343994] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.345374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.345592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.349254] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.352270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.354901] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.362656] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.363851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.626391] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.627922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.630482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.631799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.633442] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.637420] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.644446] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.645578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.648379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.650577] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.653385] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.654297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.660533] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.662282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.668497] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.670811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.676123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.683447] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.684638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.688082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.691275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.695270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.696350] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.700334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.703751] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.704588] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.711258] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.716911] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.727555] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.743283] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.757146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.779957] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.783712] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.788568] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.790404] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.796153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.403529] Bluetooth: hci0: command tx timeout [ 339.463914] Bluetooth: hci1: command tx timeout [ 339.769112] Bluetooth: hci4: command tx timeout [ 339.770104] Bluetooth: hci3: command tx timeout [ 339.770678] Bluetooth: hci2: command tx timeout [ 339.771309] Bluetooth: hci5: command tx timeout [ 339.832254] Bluetooth: hci6: command tx timeout [ 339.832263] Bluetooth: hci7: command tx timeout [ 341.432201] Bluetooth: hci0: command tx timeout [ 341.496489] Bluetooth: hci1: command tx timeout [ 341.816130] Bluetooth: hci2: command tx timeout [ 341.816284] Bluetooth: hci5: command tx timeout [ 341.816689] Bluetooth: hci3: command tx timeout [ 341.817924] Bluetooth: hci4: command tx timeout [ 341.880165] Bluetooth: hci6: command tx timeout [ 341.880706] Bluetooth: hci7: command tx timeout [ 343.482177] Bluetooth: hci0: command tx timeout [ 343.544116] Bluetooth: hci1: command tx timeout [ 343.864119] Bluetooth: hci4: command tx timeout [ 343.864657] Bluetooth: hci3: command tx timeout [ 343.865439] Bluetooth: hci5: command tx timeout [ 343.865888] Bluetooth: hci2: command tx timeout [ 343.928239] Bluetooth: hci6: command tx timeout [ 343.928296] Bluetooth: hci7: command tx timeout [ 345.528535] Bluetooth: hci0: command tx timeout [ 345.592206] Bluetooth: hci1: command tx timeout [ 345.912124] Bluetooth: hci5: command tx timeout [ 345.912185] Bluetooth: hci2: command tx timeout [ 345.912643] Bluetooth: hci3: command tx timeout [ 345.913134] Bluetooth: hci4: command tx timeout [ 345.976081] Bluetooth: hci6: command tx timeout [ 345.979189] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:26:07 Registers: info registers vcpu 0 RAX=5b267972340f1780 RBX=ffffffff878930a0 RCX=ffffffff812ef5ee RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff878930b8 RBP=ffff8880260ad280 RSP=ffff8880325c7470 R8 =0000000000000000 R9 =fffffbfff0fda9d6 R10=ffffffff87ed4eb7 R11=0000000000000001 R12=ffff8880260adce8 R13=5b267972340f1780 R14=ffffffff863f34b4 R15=0000000000000000 RIP=ffffffff812fc0ac RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f208a0c8540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558e190f24c8 CR3=0000000035054000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88806cf09a38 RCX=0000000000000001 RDX=1ffff1100d9e1352 RSI=ffff888030487d58 RDI=ffffffff81937c38 RBP=ffff88806cf09a90 RSP=ffff88806cf09a10 R8 =0000000000000001 R9 =ffff88806cf09a78 R10=000000000003c001 R11=00000000000223e5 R12=ffff88806cf09b00 R13=0000000000000000 R14=ffff888015e35280 R15=ffff8880161c9e00 RIP=ffffffff848470c0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1abe87a540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1abea154a1 CR3=00000000315b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000