Warning: Permanently added '[localhost]:53895' (ECDSA) to the list of known hosts. 2025/01/13 23:12:39 fuzzer started 2025/01/13 23:12:39 dialing manager at localhost:35571 syzkaller login: [ 69.989929] cgroup: Unknown subsys name 'net' [ 70.090876] cgroup: Unknown subsys name 'cpuset' [ 70.126532] cgroup: Unknown subsys name 'rlimit' [ 77.505378] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 89.154925] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/13 23:13:00 syscalls: 200 2025/01/13 23:13:00 code coverage: enabled 2025/01/13 23:13:00 comparison tracing: enabled 2025/01/13 23:13:00 extra coverage: enabled 2025/01/13 23:13:00 setuid sandbox: enabled 2025/01/13 23:13:00 namespace sandbox: enabled 2025/01/13 23:13:00 Android sandbox: enabled 2025/01/13 23:13:00 fault injection: enabled 2025/01/13 23:13:00 leak checking: enabled 2025/01/13 23:13:00 net packet injection: enabled 2025/01/13 23:13:00 net device setup: enabled 2025/01/13 23:13:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/13 23:13:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/13 23:13:00 USB emulation: enabled 2025/01/13 23:13:00 hci packet injection: enabled 2025/01/13 23:13:00 wifi device emulation: enabled 2025/01/13 23:13:00 802.15.4 emulation: enabled 2025/01/13 23:13:00 fetching corpus: 0, signal 0/0 (executing program) 2025/01/13 23:13:02 starting 8 fuzzer processes 23:13:02 executing program 0: write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x40, 0x3, 0x8}}}, 0x18) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x800}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000004}, 0x20040044) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x13, 0x2, {0x4, 0x4, 0x7e51}}, 0x14) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLOCK(r0, &(0x7f0000000240)={0x8, 0x35, 0x2}, 0x8) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7f) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xed}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008980}, 0x20000000) socketpair(0x11, 0x1, 0x81, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$AUDIT_USER(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x104, 0x3ed, 0x10, 0x70bd2d, 0x25dfdbff, "c60ec3aef3ba35660a5789bc415dd25972b8f4f1b1a628a6410f9af9fb8a57ff4d33809ac37d79192ec842e0f9d5ac27025f776d94ce32a6f296c8e556e21bc6ec628bb15277a715692bc8b3ca723b949cb771a9dff7c35854c74e6a7f7a4d239d58b5895466dfc00d1199e9797f2619d14b88917b616e5bf286492f30d7ab04f70c46193095005840cd4a8c984736c6866bdce45c1e34a9b06c071d04bc051f42641bca8086c6161430eb9dac846ceef0b3f596b30f76cbe5fd1dde9e1fd35fa4ad4a906008488239692332204c1c92a94bba01f3297d4d88dca0d9c150cebb593d323dddd334dfbe5e1eda14e6b80bc3", [""]}, 0x104}}, 0x20040080) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x400, 0x70bd27, 0x8, {}, ["", "", "", ""]}, 0x1c}}, 0x40000) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x3e9, 0x8, 0x70bd2d, 0x25dfdbfc, {0x6, 0x0, 0x3, 0x0, 0x2, 0x2, 0x10001, 0x7ff, 0x0, 0x76}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4008004) pipe2$9p(&(0x7f0000000840), 0x84800) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder-control\x00', 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r5 = syz_open_dev$vcsu(&(0x7f00000009c0), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000a00)={0xaa95, 0x400}) 23:13:02 executing program 1: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000000)={0xbb1, 0x3ff}) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10001}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xd5bc8e0aad471f25) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x83}, 0x40000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f00000005c0)={0x5, 0x8e4, 0x0, 0x7f, 0x100, 0x5, 0x100000000}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r4) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0xf01, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1d}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000740), 0x4) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 23:13:02 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x88}, 0x4000000) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x3f9, 0x400, 0x70bd27, 0x25dfdbfc, {0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x25080020}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r1, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x45}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x200, 0x70bd27, 0x5bb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x240080c5) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r3, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socketpair(0x5, 0x4, 0x534f2be0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000700)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000740), r7) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x844) 23:13:02 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x228240, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x10281) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000080)=0x401) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = fsmount(r1, 0x1, 0xec4a48b2965bbcb5) ioctl$RTC_WIE_ON(r2, 0x700f) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$RTC_WIE_ON(r4, 0x700f) write$P9_RLCREATE(r3, &(0x7f0000000200)={0x18, 0xf, 0x1, {{0x1, 0x3, 0x1}, 0x6bb4}}, 0x18) r5 = syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x400482) ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f0000000280)={0x40, 0x7, 0xd63, 0xff, 0x8, 0x4, 0x3}) r6 = fsmount(r1, 0x1, 0x70) getsockopt$inet_tcp_buf(r6, 0x6, 0x11, &(0x7f00000002c0)=""/11, &(0x7f0000000300)=0xb) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000340)=0x9, 0x4) r7 = fsopen(&(0x7f0000000380)='aio\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='./file0/file0\x00', r6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) write$P9_RLERRORu(r8, &(0x7f0000000480)={0xd, 0x7, 0x2, {{}, 0x4}}, 0xd) [ 91.719677] audit: type=1400 audit(1736809982.594:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:13:02 executing program 7: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000100)={0x4a, 0x7d, 0x2, {{0x0, 0x35, 0x9, 0x6875, {0x0, 0x4, 0x5}, 0x10000, 0xffff3087, 0x4, 0x8c, 0x0, '', 0x1, '[', 0x1, '%'}, 0x0, '', 0xee00, 0xee01, r0}}, 0x4a) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0xf, 0x1, {{0x0, 0x1}, 0x2}}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RLCREATE(r1, &(0x7f0000000200)={0x18, 0xf, 0x1, {{0x0, 0x3, 0x6}, 0x200f}}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RMKNOD(r2, &(0x7f0000000280)={0x14, 0x13, 0x1, {0x1, 0x3, 0x2}}, 0x14) write$P9_RREADDIR(r2, &(0x7f00000002c0)={0x12b, 0x29, 0x1, {0x1f, [{{0x8, 0x2}, 0x1f, 0x4, 0x7, './file0'}, {{0x2, 0x1, 0x5}, 0x0, 0x6, 0x7, './file0'}, {{0x4, 0x0, 0x6}, 0x3, 0x34, 0x7, './file0'}, {{0x0, 0x2, 0x7}, 0x3, 0x9, 0x10, './file0/../file0'}, {{0x80, 0x2, 0x1}, 0x400, 0x88, 0x7, './file0'}, {{0x2, 0x4}, 0x2, 0x40, 0x7, './file0'}, {{0x4, 0x3, 0x3}, 0x4635, 0x60, 0x7, './file0'}, {{0x4, 0x3, 0x7}, 0x0, 0x80, 0x7, './file0'}, {{0x20, 0x2, 0x6}, 0x0, 0x4, 0x7, './file0'}]}}, 0x12b) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000400)="02f0792043dae510b6e712cdf47247ed", 0x10) write$P9_RLCREATE(r1, &(0x7f0000000440)={0x18, 0xf, 0x1, {{0x40, 0x2}, 0x6}}, 0x18) r3 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLCREATE(r3, &(0x7f0000000480)={0x18, 0xf, 0x2, {{0x0, 0x0, 0x6}, 0x10}}, 0x18) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r4, &(0x7f0000000500)={0x1f, 0x37, 0x2, {0x0, 0x2, 0xcbce, 0xffffffffffffffff, 0x1, '%'}}, 0x1f) write$P9_RMKNOD(r4, &(0x7f0000000540)={0x14, 0x13, 0x2, {0x20, 0x1, 0x7}}, 0x14) write$P9_RRENAMEAT(r3, &(0x7f0000000580)={0x7, 0x4b, 0x1}, 0x7) write$P9_RLERRORu(r1, &(0x7f00000005c0)={0x14, 0x7, 0x2, {{0x7, ')]\\{**@'}, 0xfb}}, 0x14) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000600)) write$rfkill(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x9, 0x3, 0x1}, 0x8) 23:13:02 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x101a82, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, '.\x00'}) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x4) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x101000) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000100)) r3 = syz_open_dev$vcsu(&(0x7f0000000140), 0x6d93, 0x82) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000180)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000240)={0x7f, 0xe4d6, 0x400, 0x3, 0x3}) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x3fa, 0x20, 0x70bd2d, 0x25dfdbfb, {0x1, 0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x10000000) mknod$loop(&(0x7f0000000380)='./file0\x00', 0x800, 0x1) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000400)=0x7f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) write$P9_RLCREATE(r6, &(0x7f0000000480)={0x18, 0xf, 0x1, {{0x0, 0x0, 0x6}, 0x3ff}}, 0x18) 23:13:02 executing program 5: sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2041000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x5, @bearer=@l2={'ib', 0x3a, 'team0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x801) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x2c}}, 0x80) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20041841) r2 = socket(0x9, 0x4, 0x4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x6, 0x9, 0x40, 0x20d}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4091}, 0x8000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3f}, @IEEE802154_ATTR_REASON={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c1}, 0x40001) sendmsg$AUDIT_USER(r2, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd8, 0x3ed, 0x100, 0x70bd26, 0x25dfdbfd, "3227cd8681b39e0fb77cc53b3ace92b5f95348baa10fd57996eebe11d038255e68a46fcf9b53c2a6f909d7441d89b39635cd6b4c072c940043eaff9ea7882ffaf3c2ac3e0d91de566414de90742e522e44a975f7cf45ceb346f21ed91a0f73f808db8853cf24dab4e5a87f48e4fdd465ffb6b40f1117c8a15b7a53c4a7244922d9ff6739adf5bf97655eac67da2f7093b92322bbd2b9c32b6c157c8bd9e8ee62fb73133bfd93c8106260a35fb85e6de3b346c60ad68e46b070675c05e2e55fe4fbf388d711f5", ["", ""]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r4, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x41) r5 = syz_open_dev$vcsu(&(0x7f0000000b40), 0x9, 0x200080) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1b, 0x1, @udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0xa0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4000015) socketpair(0xb, 0x1, 0x9, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x101, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1f}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x40044) 23:13:02 executing program 6: r0 = fork() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x400, 0x70bd2c, 0x25dfdbfb, {0x8, 0x1, 0x1, r0, 0x8, 0x9, 0x0, 0x8, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = fsmount(0xffffffffffffffff, 0x0, 0x9) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000100)='%/-#\x00', &(0x7f0000000140)='./file0\x00', r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfa}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x30008041) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r3 = socket(0xb, 0x80000, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x438, 0x3f4, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x1, 0x29, [0xbb, 0x1ff, 0x6, 0x7, 0x6, 0x1, 0x9, 0x0, 0xc5d, 0x1d, 0x2, 0x401, 0x5, 0x5, 0x1, 0x8, 0xffffff7b, 0x8, 0x6, 0x4e, 0x20, 0x0, 0x6, 0xfffffff7, 0x5, 0x7, 0x100, 0x97e, 0x3, 0x100, 0x0, 0x5, 0x644, 0x0, 0x9, 0x7ff, 0x5, 0x5, 0x0, 0x9, 0x800, 0x8, 0x6, 0x10000, 0x5, 0x8, 0x9, 0x80, 0x8c1, 0x6, 0x2, 0x6, 0x1, 0xff, 0xf17b, 0x3, 0x3, 0x7fff, 0x4, 0x4, 0xb1, 0x0, 0x8, 0x80000001], [0x80000000, 0x0, 0x59a, 0x6, 0x3fff800, 0x400, 0x1, 0x2, 0x5, 0x2, 0xa1f5, 0x7ff, 0x5, 0x1ff, 0x6, 0x67b1, 0x7ff, 0x0, 0x8, 0xfffffff7, 0x8, 0xffffffff, 0x9, 0x5, 0x6, 0x8, 0x4, 0x4, 0x7f, 0xb, 0x6a, 0x100, 0x89, 0x1f, 0x0, 0x5, 0x1, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x7, 0xfffffe01, 0x5, 0x8, 0x7e8f, 0x7fffffff, 0x6101, 0x1000, 0x1, 0x5, 0x1000, 0x4, 0x2, 0x101, 0xfffffffa, 0x40, 0x744, 0x7f, 0xbf5], [0x8001, 0x3, 0x5, 0x10001, 0x7, 0x5, 0x6, 0xb361, 0x8, 0x9, 0x6, 0x9, 0x2, 0x101, 0xd3, 0xa27f, 0x926, 0x1, 0x9, 0x3, 0x8000, 0x9, 0xf2, 0x26, 0xfff, 0x5, 0x2, 0x1ff, 0x8, 0x8, 0xb7, 0xf3d, 0x7fff, 0x1d46, 0x7, 0xd8fb, 0x4, 0x40000000, 0x80, 0x9, 0x401, 0xb73, 0x6, 0x9, 0xdd0, 0x8b, 0x20, 0x800, 0x80000000, 0x4, 0x2, 0x5, 0xffffffff, 0x0, 0x0, 0x7fffffff, 0x7fff, 0xfffffffd, 0x5, 0xfffffff9, 0x3ff, 0x8001, 0x1, 0xffffff00], [0x7ff, 0x5f, 0x7, 0x652, 0x8, 0x0, 0x7c000, 0x4, 0x3, 0x5, 0x6, 0x401, 0x5, 0xfffffff7, 0x4775, 0xfff, 0xeda, 0x1f, 0x8, 0x400, 0x1b71, 0x20, 0x4, 0x761, 0x5, 0x0, 0x5, 0x2f3, 0x3, 0xffffffff, 0x8, 0x8, 0x8001, 0x6, 0xfff, 0xd4d, 0x4, 0x7f, 0x9, 0x20, 0x0, 0x10000, 0x1ff, 0x785f, 0xd706, 0x7, 0x1, 0x5, 0x0, 0x4, 0x0, 0x56f, 0xfffffff7, 0x8, 0x1000, 0x0, 0x10001, 0x4066, 0x6, 0xfffffffb, 0x5, 0x8, 0x100, 0x1], 0x16, ['(\x00', '(\x00', '&\x00', '%/-#\x00', 'wpan1\x00', '%/-#\x00']}}, 0x438}, 0x1, 0x0, 0x0, 0xc004}, 0x20001) fork() ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000840)) ioctl$RTC_PIE_ON(r4, 0x7005) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) write$char_usb(r5, &(0x7f0000000880)="02dbf7db2a06dc00fcff96aa25fb2a8cec406ce703e2ce0b86a88d428d3ffa548acc018b9f4ba8ac8e76c549d1d4e68a3bcc8eec60624dee0e6bae9fca57b4d511a4ea9f3ade4ef6fb78122f11978110610b7c9111382ec70583913da3e4c3c7222c74b269fd767f24d6d5832780a6a903f9663b15d806846406b2f956bd7e364e21176089659216b2e5475162a524c7e7932c6e96ab7ec0098ba61798818833f9102156f46b1383202140078ed71e7806d03321637df46e1fb4070c62ac3744d3938b8cc49c", 0xc6) pipe2$9p(&(0x7f0000000980), 0x800) bind(r4, &(0x7f00000009c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}}}, 0x80) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000a40)=""/8) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b00)={0x434, 0x3f3, 0x100, 0x70bd2c, 0x25dfdbfe, {0x2, 0x1, 0xc, [0x4, 0x3c, 0x7ff, 0x800, 0x3, 0xd9100000, 0xffffffff, 0x8, 0x5, 0x8, 0x1, 0xb9d, 0x3, 0x8c, 0xdb, 0x80000001, 0x6, 0x18, 0x7, 0x9, 0x0, 0x7, 0x3, 0x8000, 0x2, 0x2, 0x3, 0x6, 0x209, 0x4, 0xfff, 0x17, 0x8, 0x7f, 0x180000, 0xae6, 0x8, 0x1, 0x0, 0xfffffffd, 0x3, 0x80000001, 0x5, 0x7f, 0x377, 0x1e, 0xd0, 0x6, 0x9, 0xfff, 0x8, 0x1, 0x7, 0x5, 0xfffffff9, 0x1000000, 0x3, 0x2, 0x4, 0x7, 0x100, 0x0, 0x8000, 0x2], [0x2, 0x2, 0x8, 0x7, 0x8, 0x9, 0x700d, 0x3ff, 0x6, 0x3, 0x7f, 0x9, 0x7fffffff, 0x3, 0x800, 0x401, 0x9, 0x1000, 0xffffffff, 0x80000000, 0x5, 0x1, 0x2, 0x8, 0x81, 0x20, 0x800, 0x6, 0x28b7, 0x6, 0x80000001, 0x30f, 0x7f, 0x3f, 0x8, 0x10000, 0x10000, 0x8, 0x4, 0xdb4, 0xd5c5, 0x7, 0x400, 0x3, 0x9, 0x0, 0x8af, 0xfffffcea, 0x2bb5, 0x7fff, 0x5, 0x5df95176, 0x6, 0xff, 0x7f3f, 0x476000, 0xffffff25, 0x3, 0x80000000, 0x3ff, 0x5, 0x6e15, 0x3, 0x1], [0x0, 0x5, 0x1f, 0x0, 0x400, 0x1, 0x7fff, 0x80000000, 0xffff, 0x1f, 0x2, 0x4, 0x1ff, 0xb1c5, 0x3, 0x7f, 0x3, 0x30, 0x80000001, 0x4, 0x6, 0x5, 0xf638, 0xdc, 0x4, 0x2, 0x7, 0x9, 0x5, 0xb9d4, 0x8d, 0x8, 0x8, 0x4, 0x9, 0x7, 0x8001, 0x7, 0x7, 0x3, 0xfffffe01, 0x83a6, 0x0, 0x101, 0x80000001, 0x1, 0x2, 0x2, 0x3, 0x4, 0x8000, 0x9, 0x0, 0x4fd, 0x9, 0x20, 0x80, 0x2, 0x0, 0x4, 0x80, 0x7, 0x8001, 0x1], [0x9, 0x0, 0xa3, 0x6068805a, 0x5ca77c64, 0xe5, 0xbd6e, 0x2, 0x2, 0x9, 0x10000, 0xa8, 0xff, 0x8, 0xbd, 0x101, 0x6, 0x5, 0x6, 0x1, 0x4, 0x6, 0x80000001, 0x1d, 0xe, 0x831d, 0x400, 0xd21, 0x5, 0x3, 0xfffffffc, 0x10001, 0x1f, 0x7fff, 0xd5a, 0xdc3, 0x9, 0x0, 0x2, 0xfffffff9, 0x8, 0x400, 0x4, 0x81a, 0x7f, 0x88, 0x400, 0x3f, 0xde, 0x9, 0xd9f4, 0x8, 0x9, 0x6, 0x7f, 0x3, 0x2, 0x6, 0x0, 0x8, 0x100, 0x6, 0x2, 0x3], 0x13, ['-;\x00', ',^\x00', '(-\x00', '@:(\'{}^\x00', '&\x00']}, ["", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x20000014}, 0x8c4) [ 93.308220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.316613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.319018] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.324622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.326978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.331567] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.335709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.339712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.342285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.345757] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.348423] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.350358] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.426830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.433737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.444658] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.456809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.464932] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.470994] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.520574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.523372] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.526491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.528777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.540884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.544996] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.547246] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.551949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.556367] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.559934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.564851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.567859] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.570276] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.573104] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.577508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.582492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.595401] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.598097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.598799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.611954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.616603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.627318] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.656446] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.684724] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.684752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.691715] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.695812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.696031] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.705473] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.706453] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.388595] Bluetooth: hci1: command tx timeout [ 95.388936] Bluetooth: hci0: command tx timeout [ 95.515293] Bluetooth: hci2: command tx timeout [ 95.645512] Bluetooth: hci3: command tx timeout [ 95.645688] Bluetooth: hci6: command tx timeout [ 95.707278] Bluetooth: hci4: command tx timeout [ 95.772202] Bluetooth: hci5: command tx timeout [ 95.835213] Bluetooth: hci7: command tx timeout [ 97.436364] Bluetooth: hci0: command tx timeout [ 97.436619] Bluetooth: hci1: command tx timeout [ 97.563383] Bluetooth: hci2: command tx timeout [ 97.691833] Bluetooth: hci6: command tx timeout [ 97.692051] Bluetooth: hci3: command tx timeout [ 97.755767] Bluetooth: hci4: command tx timeout [ 97.821423] Bluetooth: hci5: command tx timeout [ 97.884275] Bluetooth: hci7: command tx timeout [ 99.485784] Bluetooth: hci0: command tx timeout [ 99.485888] Bluetooth: hci1: command tx timeout [ 99.611230] Bluetooth: hci2: command tx timeout [ 99.741840] Bluetooth: hci6: command tx timeout [ 99.741945] Bluetooth: hci3: command tx timeout [ 99.805238] Bluetooth: hci4: command tx timeout [ 99.868239] Bluetooth: hci5: command tx timeout [ 99.932197] Bluetooth: hci7: command tx timeout [ 101.531283] Bluetooth: hci0: command tx timeout [ 101.531426] Bluetooth: hci1: command tx timeout [ 101.662215] Bluetooth: hci2: command tx timeout [ 101.788239] Bluetooth: hci6: command tx timeout [ 101.788353] Bluetooth: hci3: command tx timeout [ 101.852267] Bluetooth: hci4: command tx timeout [ 101.916228] Bluetooth: hci5: command tx timeout [ 101.980297] Bluetooth: hci7: command tx timeout [ 155.690055] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.694598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.698682] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.710792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.714778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.717777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.822102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.825990] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.830507] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.838432] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.842766] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.845721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.881274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.884444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.895372] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.904984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.908806] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.910752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.957897] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.961578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.970308] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.974692] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.982110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.984762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.027482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.035686] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.040576] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.049524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.054484] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.055808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.060694] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.061519] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.063052] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.068344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.068912] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.075412] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.075730] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.079356] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.086480] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.097543] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.118348] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.118653] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.118920] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.119484] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.131343] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.133256] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.140269] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.144390] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.787360] Bluetooth: hci0: command tx timeout [ 157.915448] Bluetooth: hci1: command tx timeout [ 157.981287] Bluetooth: hci2: command tx timeout [ 158.043758] Bluetooth: hci3: command tx timeout [ 158.171425] Bluetooth: hci6: command tx timeout [ 158.171541] Bluetooth: hci4: command tx timeout [ 158.236393] Bluetooth: hci5: command tx timeout [ 158.236834] Bluetooth: hci7: command tx timeout [ 159.835318] Bluetooth: hci0: command tx timeout [ 159.963275] Bluetooth: hci1: command tx timeout [ 160.027375] Bluetooth: hci2: command tx timeout [ 160.091333] Bluetooth: hci3: command tx timeout [ 160.219234] Bluetooth: hci6: command tx timeout [ 160.219261] Bluetooth: hci4: command tx timeout [ 160.284213] Bluetooth: hci7: command tx timeout [ 160.284244] Bluetooth: hci5: command tx timeout [ 161.883252] Bluetooth: hci0: command tx timeout [ 162.011483] Bluetooth: hci1: command tx timeout [ 162.075230] Bluetooth: hci2: command tx timeout [ 162.139290] Bluetooth: hci3: command tx timeout [ 162.268384] Bluetooth: hci6: command tx timeout [ 162.268557] Bluetooth: hci4: command tx timeout [ 162.331216] Bluetooth: hci5: command tx timeout [ 162.331332] Bluetooth: hci7: command tx timeout [ 163.931216] Bluetooth: hci0: command tx timeout [ 164.059386] Bluetooth: hci1: command tx timeout [ 164.123315] Bluetooth: hci2: command tx timeout [ 164.188237] Bluetooth: hci3: command tx timeout [ 164.317213] Bluetooth: hci4: command tx timeout [ 164.317250] Bluetooth: hci6: command tx timeout [ 164.379227] Bluetooth: hci7: command tx timeout [ 164.379329] Bluetooth: hci5: command tx timeout [ 218.029555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.040265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.045923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.057932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.063370] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.074772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.094947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.099421] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.109981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.121153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.126994] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.128442] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.170502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.177402] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.182754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.184330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.188260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.196733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.198162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.203602] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.204804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.207334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.209455] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.210319] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.276955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.296506] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.297324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.316385] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.321421] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.328246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.372856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.374625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.377273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.385359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.397221] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.419375] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.429245] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.434559] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.435021] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.436990] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.445575] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.450908] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.452325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.453215] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.454392] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.509028] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.510985] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.512752] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.123263] Bluetooth: hci0: command tx timeout [ 220.187543] Bluetooth: hci1: command tx timeout [ 220.251464] Bluetooth: hci2: command tx timeout [ 220.252042] Bluetooth: hci3: command tx timeout [ 220.379499] Bluetooth: hci4: command tx timeout [ 220.507288] Bluetooth: hci5: command tx timeout [ 220.572202] Bluetooth: hci7: command tx timeout [ 220.635220] Bluetooth: hci6: command tx timeout [ 222.171326] Bluetooth: hci0: command tx timeout [ 222.235634] Bluetooth: hci1: command tx timeout [ 222.300199] Bluetooth: hci2: command tx timeout [ 222.300516] Bluetooth: hci3: command tx timeout [ 222.428487] Bluetooth: hci4: command tx timeout [ 222.555468] Bluetooth: hci5: command tx timeout [ 222.619306] Bluetooth: hci7: command tx timeout [ 222.683373] Bluetooth: hci6: command tx timeout [ 224.220252] Bluetooth: hci0: command tx timeout [ 224.284199] Bluetooth: hci1: command tx timeout [ 224.348216] Bluetooth: hci3: command tx timeout [ 224.348313] Bluetooth: hci2: command tx timeout [ 224.476688] Bluetooth: hci4: command tx timeout [ 224.604338] Bluetooth: hci5: command tx timeout [ 224.667286] Bluetooth: hci7: command tx timeout [ 224.731250] Bluetooth: hci6: command tx timeout [ 226.312150] Bluetooth: hci0: command tx timeout [ 226.439203] Bluetooth: hci1: command tx timeout [ 226.440019] Bluetooth: hci3: command tx timeout [ 226.443132] Bluetooth: hci2: command tx timeout [ 226.523197] Bluetooth: hci4: command tx timeout [ 226.651469] Bluetooth: hci5: command tx timeout [ 226.715292] Bluetooth: hci7: command tx timeout [ 226.780233] Bluetooth: hci6: command tx timeout [ 278.342243] syz-executor.5 (6622) used greatest stack depth: 23488 bytes left [ 280.114745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.118540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.123515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.128943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.134261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.136957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.300498] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.305713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.308423] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.313849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.320581] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.323676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.562404] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.571460] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.574282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.585316] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.585989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.591360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.595651] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.600273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.607634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.652560] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.662645] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.664541] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.696569] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.703964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.706455] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.712685] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.718550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.726585] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.729600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.759745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.762614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.774019] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.779909] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.786405] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.805240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.828630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.833947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.835636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.844882] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.864680] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.866777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.873742] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.875782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.875812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.902338] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.915948] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.203184] Bluetooth: hci0: command tx timeout [ 282.397471] Bluetooth: hci1: command tx timeout [ 282.651191] Bluetooth: hci2: command tx timeout [ 282.779451] Bluetooth: hci3: command tx timeout [ 282.843203] Bluetooth: hci4: command tx timeout [ 282.907285] Bluetooth: hci6: command tx timeout [ 282.907933] Bluetooth: hci5: command tx timeout [ 282.971275] Bluetooth: hci7: command tx timeout [ 284.251243] Bluetooth: hci0: command tx timeout [ 284.443311] Bluetooth: hci1: command tx timeout [ 284.699184] Bluetooth: hci2: command tx timeout [ 284.827226] Bluetooth: hci3: command tx timeout [ 284.891344] Bluetooth: hci4: command tx timeout [ 284.955263] Bluetooth: hci6: command tx timeout [ 284.955367] Bluetooth: hci5: command tx timeout [ 285.019256] Bluetooth: hci7: command tx timeout [ 286.299175] Bluetooth: hci0: command tx timeout [ 286.491170] Bluetooth: hci1: command tx timeout [ 286.747193] Bluetooth: hci2: command tx timeout [ 286.875186] Bluetooth: hci3: command tx timeout [ 286.940159] Bluetooth: hci4: command tx timeout [ 287.003199] Bluetooth: hci5: command tx timeout [ 287.003278] Bluetooth: hci6: command tx timeout [ 287.068390] Bluetooth: hci7: command tx timeout [ 288.347161] Bluetooth: hci0: command tx timeout [ 288.539238] Bluetooth: hci1: command tx timeout [ 288.795510] Bluetooth: hci2: command tx timeout [ 288.923174] Bluetooth: hci3: command tx timeout [ 288.988144] Bluetooth: hci4: command tx timeout [ 289.051170] Bluetooth: hci5: command tx timeout [ 289.051722] Bluetooth: hci6: command tx timeout [ 289.116365] Bluetooth: hci7: command tx timeout [ 342.704525] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.709435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.714421] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.722336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.725549] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.728025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.085452] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.091933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.094548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.101440] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.108203] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.111012] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.213445] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.222235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.225713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.229002] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.241546] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.247350] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.253796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.258836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.261397] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.267329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.287632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.290879] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.293293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.295540] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.310477] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.317618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.336250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.342621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.379998] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.449818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.469509] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.498052] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.499808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.504505] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.506649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.511003] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.532965] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.546583] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.553840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.559388] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.588359] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.594430] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.618674] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.622294] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.628787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.637198] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.795249] Bluetooth: hci0: command tx timeout [ 345.179498] Bluetooth: hci1: command tx timeout [ 345.307233] Bluetooth: hci3: command tx timeout [ 345.435294] Bluetooth: hci2: command tx timeout [ 345.435398] Bluetooth: hci4: command tx timeout [ 345.628254] Bluetooth: hci5: command tx timeout [ 345.691234] Bluetooth: hci6: command tx timeout [ 345.821183] Bluetooth: hci7: command tx timeout [ 346.843182] Bluetooth: hci0: command tx timeout [ 347.229257] Bluetooth: hci1: command tx timeout [ 347.355174] Bluetooth: hci3: command tx timeout [ 347.483360] Bluetooth: hci4: command tx timeout [ 347.484162] Bluetooth: hci2: command tx timeout [ 347.677115] Bluetooth: hci5: command tx timeout [ 347.739288] Bluetooth: hci6: command tx timeout [ 347.867735] Bluetooth: hci7: command tx timeout [ 348.891201] Bluetooth: hci0: command tx timeout [ 349.275296] Bluetooth: hci1: command tx timeout [ 349.403239] Bluetooth: hci3: command tx timeout [ 349.531231] Bluetooth: hci2: command tx timeout [ 349.531336] Bluetooth: hci4: command tx timeout [ 349.723279] Bluetooth: hci5: command tx timeout [ 349.787189] Bluetooth: hci6: command tx timeout [ 349.915153] Bluetooth: hci7: command tx timeout [ 350.939187] Bluetooth: hci0: command tx timeout [ 351.323163] Bluetooth: hci1: command tx timeout [ 351.451901] Bluetooth: hci3: command tx timeout [ 351.579337] Bluetooth: hci4: command tx timeout [ 351.580185] Bluetooth: hci2: command tx timeout [ 351.772192] Bluetooth: hci5: command tx timeout [ 351.835229] Bluetooth: hci6: command tx timeout [ 351.963216] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:18:08 Registers: info registers vcpu 0 RAX=ffff888016fdb140 RBX=0000000000000051 RCX=ffff88802d22fdf0 RDX=00007f8d6f5c0000 RSI=ffff888016543bd0 RDI=ffff888026543a80 RBP=00007f8d6f57e000 RSP=ffff88802d22fb78 R8 =0000000000000000 R9 =fffff94000367498 R10=000000000cb4f007 R11=0000000000000000 R12=000000000cb4f007 R13=ffff888016543bd0 R14=ffffea0001b3a4c0 R15=ffff88802d22fd90 RIP=ffffffff819e2e94 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8d6f390540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d6f5c0000 CR3=000000002bd6e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=1ffff1100d9e1395 RCX=ffffffff8150274e RDX=1ffffffff0c80086 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000007 RSP=ffff88806cf09c98 R8 =0000000000000001 R9 =ffff888015b1dd88 R10=ffffffff863ff697 R11=00000000fa83b2da R12=ffff88806cf3b998 R13=ffffffff81472200 R14=ffff888015b1d340 R15=ffff888015b1d340 RIP=ffffffff81502880 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa5139494a1 CR3=000000002692c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000