Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:23177' (ECDSA) to the list of known hosts. 2025/01/20 06:24:24 fuzzer started 2025/01/20 06:24:25 dialing manager at localhost:44245 syzkaller login: [ 62.564050] cgroup: Unknown subsys name 'net' [ 62.825872] cgroup: Unknown subsys name 'cpuset' [ 62.849647] cgroup: Unknown subsys name 'rlimit' [ 67.947892] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 78.551024] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/20 06:24:42 syscalls: 220 2025/01/20 06:24:42 code coverage: enabled 2025/01/20 06:24:42 comparison tracing: enabled 2025/01/20 06:24:42 extra coverage: enabled 2025/01/20 06:24:42 setuid sandbox: enabled 2025/01/20 06:24:42 namespace sandbox: enabled 2025/01/20 06:24:42 Android sandbox: enabled 2025/01/20 06:24:42 fault injection: enabled 2025/01/20 06:24:42 leak checking: enabled 2025/01/20 06:24:42 net packet injection: enabled 2025/01/20 06:24:42 net device setup: enabled 2025/01/20 06:24:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/20 06:24:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/20 06:24:42 USB emulation: enabled 2025/01/20 06:24:42 hci packet injection: enabled 2025/01/20 06:24:42 wifi device emulation: enabled 2025/01/20 06:24:42 802.15.4 emulation: enabled 2025/01/20 06:24:42 fetching corpus: 0, signal 0/0 (executing program) 2025/01/20 06:24:44 starting 8 fuzzer processes 06:24:44 executing program 0: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)=0x10000) r0 = epoll_create(0x100) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$unix(0x1, 0x3789a8a01d4a65bc, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) epoll_create(0x2) socket$inet6(0xa, 0x5, 0x6) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000500)={{0x5, 0x4}, 'port1\x00', 0x1, 0x80000, 0xfffffffa, 0x44b, 0x6, 0x401, 0x0, 0x0, 0x0, 0x3}) r3 = memfd_secret(0x80000) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f00000005c0)) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000640)={0x40, 0x7fffffff, 0x152870f8, 0xffff8000, 0x800, 0x2}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000700)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000007c0)={{0x7, 0x9e}, {0x40, 0x1}, 0x5, 0x5, 0x3}) recvmsg$unix(r1, &(0x7f0000000b40)={&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/168, 0xa8}, {&(0x7f0000000980)=""/142, 0x8e}, {&(0x7f0000000a40)=""/4, 0x4}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x40002140) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000b80)={{0x1, 0xf9}, {0xff, 0x1}, 0xd7, 0x6, 0x1c}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c00)={{0x8, 0x1f}, 'port1\x00', 0x14, 0x802, 0x20000, 0x5, 0x9, 0xffff, 0x4c5d, 0x0, 0x1, 0x6}) connect$unix(r6, &(0x7f0000000cc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 06:24:44 executing program 1: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x800) recvmsg$unix(r0, &(0x7f0000001500)={&(0x7f0000000180), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/151, 0x97}, {&(0x7f00000013c0)=""/176, 0xb0}], 0x6}, 0x10060) r1 = memfd_secret(0x80000) mount_setattr(0xffffffffffffffff, &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000001580)={0x8, 0x70, 0x0, {r1}}, 0x20) recvmsg$unix(r1, &(0x7f0000001cc0)={&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/1, 0x1}, {&(0x7f0000001940)=""/190, 0xbe}, {&(0x7f0000001a00)=""/251, 0xfb}, {&(0x7f0000001b00)=""/58, 0x3a}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/78, 0x4e}], 0x6, &(0x7f0000001c80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40000040) r6 = accept4(r1, &(0x7f0000001d00)=@vsock, &(0x7f0000001d80)=0x80, 0x800) r7 = socket(0x8, 0x1, 0x1ff) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001e80)={&(0x7f00000015c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001640)="c8de827f2fc1a8cde31e20da3accf8193f47480b5853771f2bd6643559bd1c2bc9c1462a864a0aa89adfc0c7261d6f5e602e6d65dcdfc50508b768f6f7132e658eff2c0205cb0a07e575e8e83d22f668a8cf77762a8582449578aa51a5a212c7a71a8e6f954712d5d3024e16b6625f7d3e18d9b5419b6475744705c52e387088192064598f5c396f7bfb6b197222069cacb4e9f4ddb22e85678b97b40deb8b848a8c1551f111835432c4ac76d1ab31c366b949410d3549ef964383e893e3d45c499c6c34a460d4c3f1ab4416bb1243827d8bf5a9cf6388cac2", 0xd9}, {&(0x7f0000001740)="3638d70e3c2f964a4c64510904f6380d996d7ea188923a6215f2de421e3ec0e9ccad3d0b074459f819864535e22048eda6525c763b2c031b147c3b67f5c0ea3c34877dcaf9e4962cfe94a2d84a", 0x4d}, {&(0x7f00000017c0)="41f4142992c19f6b9193c8af3c668be650806db0dfa8e8a09fab297cd803c00a6e2639ca8a30a3e0580b6c7243f484b824b73d76c28222826416e2cb8de9783462100aec26e0cc8209d8081e083f928c46a0f3bbab34c2ffae0ddb99f9ea068fdbc9d58e66b8734ca619cf80f810f0fa901a22bd26d0aad15d49", 0x7a}], 0x3, &(0x7f0000001e00)=[@rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r0, r4, r6, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r7, 0xffffffffffffffff, r8]}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x68, 0x854}, 0x200408c4) quotactl(0x7ff, &(0x7f0000001ec0)='./file1\x00', r2, &(0x7f0000001f00)="fdc907b8aab5fe54ea18999edf7313e45162e0fea2092e638e93bb7817b020b5f5e1f92d1c8782cb8c9d47d456e08d436bf24ec8b9280d2edaf65858cbc48064d2061ed4c50f186e40cb46e94e09b7322c44ee38632e69ced8635bfbfef7228bf6735aac232c4673e4380aaa5b880ea297819c590e13ebee861c5457b04faa3f8886b70996fc992b8edda1a1ae9962fd14e1a16b1c45882ccd25d2f327f2689aac5a3e") recvmmsg(r7, &(0x7f00000058c0)=[{{&(0x7f0000001fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002040)=""/124, 0x7c}, {&(0x7f00000020c0)=""/151, 0x97}], 0x2}, 0x9}, {{&(0x7f00000021c0)=@alg, 0x80, &(0x7f0000002700)=[{&(0x7f0000002240)=""/253, 0xfd}, {&(0x7f0000002340)=""/11, 0xb}, {&(0x7f0000002380)=""/2, 0x2}, {&(0x7f00000023c0)=""/70, 0x46}, {&(0x7f0000002440)=""/123, 0x7b}, {&(0x7f00000024c0)=""/140, 0x8c}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/107, 0x6b}], 0x8, &(0x7f0000002780)=""/119, 0x77}, 0x5}, {{&(0x7f0000002800)=@isdn, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002880)=""/103, 0x67}, {&(0x7f0000002900)=""/122, 0x7a}, {&(0x7f0000002980)=""/71, 0x47}, {&(0x7f0000002a00)=""/202, 0xca}, {&(0x7f0000002b00)=""/56, 0x38}], 0x5, &(0x7f0000002bc0)=""/180, 0xb4}, 0x3}, {{&(0x7f0000002c80)=@pppoe, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d00)=""/149, 0x95}, {&(0x7f0000002dc0)=""/10, 0xa}], 0x2, &(0x7f0000002e40)=""/57, 0x39}, 0xfff}, {{&(0x7f0000002e80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002f00)=""/36, 0x24}, {&(0x7f0000002f40)=""/184, 0xb8}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/132, 0x84}, {&(0x7f00000040c0)}, {&(0x7f0000004100)=""/30, 0x1e}, {&(0x7f0000004140)=""/253, 0xfd}, {&(0x7f0000004240)}], 0x8, &(0x7f0000004300)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000005300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005400)=[{&(0x7f0000005380)=""/98, 0x62}], 0x1, &(0x7f0000005440)=""/137, 0x89}, 0x7}, {{&(0x7f0000005500)=@ax25={{0x3, @rose}, [@default, @null, @bcast, @remote, @default, @bcast, @bcast, @netrom]}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005580)=""/56, 0x38}, {&(0x7f00000055c0)=""/134, 0x86}, {&(0x7f0000005680)=""/1, 0x1}, {&(0x7f00000056c0)=""/119, 0x77}, {&(0x7f0000005740)=""/231, 0xe7}], 0x5}, 0xc19b}], 0x7, 0x20, 0x0) syz_io_uring_setup(0x3bc7, &(0x7f0000005a80)={0x0, 0xdf9, 0x10, 0x1, 0x23b, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000005b00), &(0x7f0000005b40)) r11 = accept4$unix(r9, &(0x7f0000005b80), &(0x7f0000005c00)=0x6e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000005c40)={'batadv_slave_1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000005d80)=[{0x1, 0x4e, 0x80, 0x56, @tick=0x3ff, {0xc0, 0x5}, {0x72}, @result={0x2, 0x34e}}, {0x81, 0x0, 0x5e, 0x7, @tick=0x2, {0x7f, 0xa8}, {0x4, 0x8}, @control={0x20, 0x9, 0xfffffff9}}, {0x4, 0x3f, 0x4, 0x8, @tick=0x4, {0xe0, 0x80}, {0x3}, @addr={0x0, 0x2}}, {0x47, 0x1, 0x2, 0xe4, @time={0x4, 0x80000000}, {0x3, 0x80}, {0x40, 0x7}, @quote={{0xfb}, 0x9}}, {0x8, 0xfb, 0xff, 0x1, @tick=0x4, {0x2, 0x40}, {0x4, 0x80}, @ext={0xab, &(0x7f0000005c80)="ae196ccaef7c70e74fedec2f28735a69133270ef89cc5358601ceb685399ec10f58a8c25da6bf106ec59553e625f0d2bec0755f27c2ce42e687c812123813a0f8967386e3da3af237bad7d1ed7e52c0e79b7dfdc3b6e80690102575580510b889475eab458f5f507804d5653a8e8307ed656494bd5992ee795b4f9e4708f5e242a384f99f39c79c96d9d5d14efe1d354c492d13eae0d4957fdcbee694080d76621f81609f34cbadeb8e057"}}, {0x5, 0x6, 0x1, 0x4, @time={0x5000000, 0x9}, {0xf9, 0x20}, {0x3}, @addr={0xff, 0x37}}, {0x26, 0x48, 0x2, 0x1, @tick=0x101, {0x2, 0x2}, {0x4, 0x1}, @quote={{0x1f, 0x8}, 0x9, &(0x7f0000005d40)={0x9, 0x9, 0x5, 0x8, @time={0x1, 0x2}, {0x7f, 0x1}, {0x79, 0x80}, @quote={{0x40, 0x1f}, 0x6}}}}], 0xc4) mount$9p_fd(0x0, &(0x7f0000005e80)='./file1\x00', &(0x7f0000005ec0), 0x2000000, &(0x7f0000005f00)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@privport}], [{@subj_user}, {@audit}]}}) openat$dir(0xffffffffffffff9c, &(0x7f0000005f80)='./file1\x00', 0x20240, 0x144) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000005fc0)={0x4, 0x101, 0x8, {0x46cd, 0x401}, 0x40}) 06:24:44 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000003680)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000003480)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/192, 0xc0}, {&(0x7f0000001140)=""/60, 0x3c}, {&(0x7f0000001180)=""/126, 0x7e}, {&(0x7f0000001200)=""/139, 0x8b}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/135, 0x87}, {&(0x7f0000002380)=""/206, 0xce}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x9, &(0x7f0000003540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}, 0x40000023) futimesat(r2, &(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)={{}, {0x77359400}}) r7 = accept(0xffffffffffffffff, 0x0, &(0x7f0000003740)) accept4(r7, &(0x7f0000003780)=@sco, &(0x7f0000003800)=0x80, 0x80000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000003900)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x10100001}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x20008000) getsockname$unix(r3, &(0x7f0000003940)=@abs, &(0x7f00000039c0)=0x6e) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000003a00)={{0x1, 0x1, 0x18, r7, {r4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000003a40)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) r10 = memfd_secret(0x0) ioctl$BLKGETSIZE64(r10, 0x80081272, &(0x7f0000003a80)) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000003ac0)={0x1, 0xffffffff, 0x1}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000003bc0)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x20, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) openat$autofs(0xffffffffffffff9c, &(0x7f0000003c00), 0x40280, 0x0) r11 = memfd_secret(0x0) syz_genetlink_get_family_id$team(&(0x7f0000003c40), r11) r12 = memfd_secret(0x80000) ioctl$BLKRESETZONE(r12, 0x40101283, &(0x7f0000003e40)={0x0, 0x7f}) memfd_secret(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r12, &(0x7f0000003f40)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x2c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x346}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000880) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r9, 0x89f6, &(0x7f0000004000)={'syztnl2\x00', &(0x7f0000003f80)={'sit0\x00', 0x0, 0x4, 0x1a, 0x7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x1, 0x100, 0x23fc0}}) [ 81.521555] audit: type=1400 audit(1737354284.574:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:24:44 executing program 3: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0xfff) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000080)=0x6f) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x1d) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000100)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000140)=0x9) r0 = memfd_secret(0x80000) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000180)={0x5, 0x101}) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x4000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000200)) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000240)) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000280)) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000002c0)) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000300), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000380)={0x80000001, 0x8, 0x1}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000003c0)={0x3, 'macvlan1\x00', {0x6}, 0x100}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) 06:24:44 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000006}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x4c}}, 0x24000000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}}, 0x0) llistxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/225, 0xe1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8188000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1b4, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfb}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x180, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2a4b706417cdcb2aeba172caa2470b881fd14f696dc7633f41a56c367b2b0b80"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x20}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "42dd17cc32f28ad865651b2e8dc27106"}, @NL802154_KEY_ATTR_ID={0x90, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3407ddf410254405436b556f16ac8228"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c001}, 0x4841) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}]}, 0x44}}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0}, &(0x7f0000000b00)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4044000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000004200)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000041c0)={&(0x7f0000004140)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004280), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000042c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000004440)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004400)={&(0x7f0000004300)={0xd4, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8b0}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40020}, 0x40) 06:24:44 executing program 5: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x4, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x732bba01}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x5, 0x4, 0x3, @loopback, @empty, 0x700, 0x8000, 0x8, 0x7fff}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x80, 0x4009, 0x8, 0x3, {{0x8, 0x4, 0x2, 0x36, 0x20, 0x65, 0x0, 0xfc, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, {[@lsrr={0x83, 0xb, 0xff, [@dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xcc, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) utimensat(r0, &(0x7f0000000540)='./file1\x00', &(0x7f0000000580)={{0x77359400}}, 0x100) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'sit0\x00', r3, 0x0, 0xc1, 0x9, 0xbc44, 0x1a, @private1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x80, 0x7840, 0x2, 0x45}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000680)={0x8, 0x3, 0x3ff, {0x0, 0x9}, 0x6fc, 0x81}) quotactl(0xffffffff80000001, &(0x7f0000000700)='./file1\x00', 0xee00, &(0x7f0000000740)="855c297c9b085f31976a591c163ce604a0451f84284c2e3453470d38c0ca1da0c987a5e9e811021a0ac5088bd28d228c9b85b612a1155b3251fa10fc699978b5de517fe97a09c92cd734cd3035ff4ab143515d17b7e99e6902deaebbd008393fafa094709bfe3bc86ffe01a408af15e6aa545cb18dfefeadcb55ecbf26de00ee32f36d201dad1545c0edffe2b37a06734867779d7383156d296a0f5632c59f3f7eea425eb1f9320256803f1ee18f5b353be6a6420cb248579f719cdba35a1d603e310f5a935db4c9193a8ac4195eda124122b7c004") sendto(r5, &(0x7f0000000840)="5b0c0f67712278f017fd5549be426ebe1f33359f0047ba9872e3954d59dcd93092fd898c37a8df12f260846968e95cb1388543497895c84c9c6dd50ce2339d3949a132da137a13917908c1f1f79eb804644f005d7ae10602d11e36d0a2417b19bfc9c4ceb92af2e0f5884e6a05573b364b57f01e81808423d09802e637a6ea2957074996aef8e09c0b15b43646f0e5c869d1115b9c2dc9958bb4511ab97eea63f3ab384f4b3384bbb48ec56cadd7aa07f2682dce0b235fb0f8612221f916933e7327a7c20e159780ed7973e760828410ded52cbfe42f410598858c8b91f3143efcc51c24afb79a70754aef10", 0xec, 0x805, &(0x7f0000000940)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) recvmsg$unix(r0, &(0x7f0000000d00)={&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/59, 0x3b}, {&(0x7f0000000a80)=""/211, 0xd3}, {&(0x7f0000000b80)=""/62, 0x3e}], 0x3, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x2042) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000dc0)={'sit0\x00', &(0x7f0000000d40)={'sit0\x00', r6, 0x29, 0xf8, 0x5, 0xffffffff, 0x20, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xaebe0bb3c7534e33, 0x8, 0x9, 0x2}}) socketpair$unix(0x1, 0x50c95daedb0d9cd7, 0x0, &(0x7f00000020c0)={0xffffffffffffffff}) getpeername$unix(r8, &(0x7f0000002100), &(0x7f0000002180)=0x6e) mknodat$null(r7, &(0x7f00000021c0)='./file0\x00', 0x2, 0x103) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)={0xffffffffffffffff}) getsockname$unix(r9, &(0x7f00000025c0)=@abs, &(0x7f0000002640)=0x6e) accept4$unix(r0, &(0x7f0000002680), &(0x7f0000002700)=0x6e, 0x80000) 06:24:44 executing program 6: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6b, 0x40, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x700, 0x20, 0x10000, 0x2}}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f00000003c0)=0x80, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x2c, 0x96, 0x0, 0x5, @private1, @mcast2, 0x8, 0x7800, 0xde, 0xc}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', r2, 0x4, 0x0, 0x7f, 0x6f, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x7800, 0x9, 0x8}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x100, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x64, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf53f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.)[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xa1}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x4001850) r4 = accept4(r1, 0x0, &(0x7f0000000740), 0x80000) r5 = accept(r1, &(0x7f0000000780)=@un=@abs, &(0x7f0000000800)=0x80) r6 = socket(0xf, 0x800, 0x9) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'sit0\x00', r2, 0x2f, 0x4, 0x9, 0x8, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x10, 0x7, 0x81, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'syztnl1\x00', r7, 0x2f, 0x1f, 0x0, 0x3, 0x1c, @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x8000, 0x80, 0xbdb5, 0xd7b8}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl1\x00', r8, 0x2f, 0x1, 0x40, 0xfffffffa, 0x52, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, 0x8000, 0x7, 0x3f5b, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000d40)={'ip6tnl0\x00', &(0x7f0000000cc0)={'ip6gre0\x00', r2, 0x2f, 0xfb, 0x0, 0x1, 0x4, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x71, 0x0, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000e00)={'ip6gre0\x00', &(0x7f0000000d80)={'sit0\x00', r3, 0x2f, 0x6, 0xaa, 0x6, 0x2a, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x1, 0x1, 0x7, 0x10000}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f00)={'tunl0\x00', r2, 0x700, 0x10, 0x2, 0x2, {{0x37, 0x4, 0x3, 0x0, 0xdc, 0x66, 0x0, 0xf6, 0x29, 0x0, @multicast2, @remote, {[@rr={0x7, 0xb, 0x5, [@private=0xa010101, @loopback]}, @cipso={0x86, 0x1a, 0xe49f9bafc47cee43, [{0x0, 0x5, "5f228d"}, {0x7, 0xf, "de3c8e730375203ecba776ad71"}]}, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x3, [{@private=0xa010100, 0x2}, {@empty, 0x7}]}, @ssrr={0x89, 0xb, 0xfd, [@loopback, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x90, 0x3, 0x3, [{@remote, 0x7}, {@rand_addr=0x64010100, 0x4}, {@multicast1, 0x4822}, {@multicast2, 0x3f}, {@loopback, 0x27500000}, {@loopback, 0x4}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x67, [@local, @dev={0xac, 0x14, 0x14, 0x1d}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @broadcast, @local, @loopback, @empty]}, @ssrr={0x89, 0x23, 0x86, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @multicast1, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000010c0)={'syztnl1\x00', &(0x7f0000001040)={'syztnl0\x00', r3, 0x29, 0x4, 0x3, 0x0, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x20, 0x700, 0x8, 0x7fffffff}}) getpeername$packet(r1, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001140)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000001380)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000001180)={0x1b8, r9, 0xa, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24000080}, 0x4801) getpeername$unix(r4, &(0x7f00000013c0)=@abs, &(0x7f0000001440)=0x6e) 06:24:44 executing program 7: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x10000000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000000)={0x0, 0x0, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000080)={0xb9, 0x5, 0x4}) r0 = io_uring_setup(0x2e2d, &(0x7f00000000c0)={0x0, 0x9b7f, 0x2, 0x1, 0x2f4}) r1 = syz_io_uring_setup(0x53b9, &(0x7f0000000140)={0x0, 0x81fe, 0x20, 0x80, 0x1e5, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0xea60}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000002c0)={0x81, 0x4, 0x1, 'queue0\x00', 0x8}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@access_uid={'access', 0x3d, 0xee00}}, {@version_L}, {@noextend}, {@uname={'uname', 0x3d, 'queue0\x00'}}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@fscache}], [{@obj_type}, {@fowner_lt}]}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000500)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/16, 0x10}, {&(0x7f00000015c0)=""/213, 0xd5}, {&(0x7f00000016c0)=""/157, 0x9d}, {&(0x7f0000001780)=""/4, 0x4}, {&(0x7f00000017c0)=""/204, 0xcc}, {&(0x7f00000018c0)=""/243, 0xf3}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/81, 0x51}], 0x9}, 0x2100) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000002b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_uring_setup(0x4abd, &(0x7f0000002d80)={0x0, 0x7dbd, 0x2, 0x0, 0xdf}) mount$9p_rdma(&(0x7f0000002e00), &(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80), 0x8000c0, &(0x7f0000002ec0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0xd5}}, {@timeout={'timeout', 0x3d, 0x97}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}) r2 = memfd_secret(0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x110, 0xffffffffffffffff, 0x8000000) r3 = memfd_secret(0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000002f40)={0x230, @tick=0x7, 0x20, {0x5, 0x2}, 0x8, 0x0, 0xae}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000002f80)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) futimesat(0xffffffffffffffff, &(0x7f0000002fc0)='./file0\x00', &(0x7f0000003040)) [ 82.894141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.898958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.901249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.909394] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.918489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.921933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.967242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.969386] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.973291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.975007] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.978788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.981949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.983462] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.984590] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.985947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.987766] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.990319] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.992030] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.994301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.994511] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.994907] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.000340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.001757] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.005817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.077819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.080356] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.086869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.095415] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.097161] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.098253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.149053] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.158596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.177412] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.182159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.186219] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.187213] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.244133] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.245248] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.246407] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.250980] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.253008] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.254333] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.282022] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.283639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.286562] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.287922] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.292011] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.297071] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.986655] Bluetooth: hci0: command tx timeout [ 85.048934] Bluetooth: hci2: command tx timeout [ 85.049447] Bluetooth: hci1: command tx timeout [ 85.114821] Bluetooth: hci3: command tx timeout [ 85.179267] Bluetooth: hci4: command tx timeout [ 85.305324] Bluetooth: hci5: command tx timeout [ 85.369952] Bluetooth: hci7: command tx timeout [ 85.433915] Bluetooth: hci6: command tx timeout [ 87.033857] Bluetooth: hci0: command tx timeout [ 87.097828] Bluetooth: hci2: command tx timeout [ 87.097924] Bluetooth: hci1: command tx timeout [ 87.161815] Bluetooth: hci3: command tx timeout [ 87.227724] Bluetooth: hci4: command tx timeout [ 87.353747] Bluetooth: hci5: command tx timeout [ 87.418044] Bluetooth: hci7: command tx timeout [ 87.481860] Bluetooth: hci6: command tx timeout [ 89.080835] Bluetooth: hci0: command tx timeout [ 89.145051] Bluetooth: hci2: command tx timeout [ 89.145238] Bluetooth: hci1: command tx timeout [ 89.209078] Bluetooth: hci3: command tx timeout [ 89.273432] Bluetooth: hci4: command tx timeout [ 89.400960] Bluetooth: hci5: command tx timeout [ 89.465348] Bluetooth: hci7: command tx timeout [ 89.528882] Bluetooth: hci6: command tx timeout [ 91.128873] Bluetooth: hci0: command tx timeout [ 91.192791] Bluetooth: hci2: command tx timeout [ 91.192887] Bluetooth: hci1: command tx timeout [ 91.256802] Bluetooth: hci3: command tx timeout [ 91.320822] Bluetooth: hci4: command tx timeout [ 91.448800] Bluetooth: hci5: command tx timeout [ 91.513784] Bluetooth: hci7: command tx timeout [ 91.577741] Bluetooth: hci6: command tx timeout [ 145.142252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.147584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.151814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.160957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.172230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.172319] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.184774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.185335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.188291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.201125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.207572] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.211184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.234515] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.241539] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.246718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.247351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.254575] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.254860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.256249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.257573] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.266832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.275953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.279089] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.282232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.283165] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.289502] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.293294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.295377] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.298315] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.300909] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.312126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.316233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.316922] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.327548] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.333117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.335212] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.337338] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.338631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.344150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.345543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.346990] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.349733] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.352282] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.378791] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.380129] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.382579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.384364] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.392904] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.257958] Bluetooth: hci0: command tx timeout [ 147.321834] Bluetooth: hci1: command tx timeout [ 147.384819] Bluetooth: hci4: command tx timeout [ 147.394488] Bluetooth: hci2: command tx timeout [ 147.450825] Bluetooth: hci3: command tx timeout [ 147.512819] Bluetooth: hci7: command tx timeout [ 147.513082] Bluetooth: hci5: command tx timeout [ 147.513397] Bluetooth: hci6: command tx timeout [ 149.304756] Bluetooth: hci0: command tx timeout [ 149.368865] Bluetooth: hci1: command tx timeout [ 149.434706] Bluetooth: hci2: command tx timeout [ 149.434799] Bluetooth: hci4: command tx timeout [ 149.497054] Bluetooth: hci3: command tx timeout [ 149.560789] Bluetooth: hci6: command tx timeout [ 149.560893] Bluetooth: hci5: command tx timeout [ 149.560974] Bluetooth: hci7: command tx timeout [ 151.352749] Bluetooth: hci0: command tx timeout [ 151.416753] Bluetooth: hci1: command tx timeout [ 151.481137] Bluetooth: hci4: command tx timeout [ 151.481310] Bluetooth: hci2: command tx timeout [ 151.545697] Bluetooth: hci3: command tx timeout [ 151.608837] Bluetooth: hci7: command tx timeout [ 151.608961] Bluetooth: hci5: command tx timeout [ 151.609027] Bluetooth: hci6: command tx timeout [ 153.402043] Bluetooth: hci0: command tx timeout [ 153.464889] Bluetooth: hci1: command tx timeout [ 153.528810] Bluetooth: hci2: command tx timeout [ 153.528944] Bluetooth: hci4: command tx timeout [ 153.593256] Bluetooth: hci3: command tx timeout [ 153.657723] Bluetooth: hci6: command tx timeout [ 153.657833] Bluetooth: hci5: command tx timeout [ 153.657896] Bluetooth: hci7: command tx timeout [ 205.609394] syz-executor.0 (3478) used greatest stack depth: 24344 bytes left [ 207.500416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.503137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.507208] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.511988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.513484] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.514501] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.686117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.691261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.693218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.700316] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.705185] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.707226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.828246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.834319] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.835959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.847099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.849899] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.855069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.939390] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.945611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.949921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.955125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.961978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.963753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.970926] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.978010] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.992961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.998999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.025342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.029476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.092764] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.098538] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.102827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.130146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.132377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.134037] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.136257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.143921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.144147] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.149889] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.151142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.155222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.318396] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.344015] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.395857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.415257] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.421892] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.422904] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.592746] Bluetooth: hci0: command tx timeout [ 209.785759] Bluetooth: hci1: command tx timeout [ 209.912762] Bluetooth: hci2: command tx timeout [ 210.040760] Bluetooth: hci3: command tx timeout [ 210.104766] Bluetooth: hci4: command tx timeout [ 210.168809] Bluetooth: hci6: command tx timeout [ 210.233766] Bluetooth: hci5: command tx timeout [ 210.489872] Bluetooth: hci7: command tx timeout [ 211.641863] Bluetooth: hci0: command tx timeout [ 211.833731] Bluetooth: hci1: command tx timeout [ 211.961864] Bluetooth: hci2: command tx timeout [ 212.088916] Bluetooth: hci3: command tx timeout [ 212.152732] Bluetooth: hci4: command tx timeout [ 212.216822] Bluetooth: hci6: command tx timeout [ 212.283740] Bluetooth: hci5: command tx timeout [ 212.537703] Bluetooth: hci7: command tx timeout [ 213.688883] Bluetooth: hci0: command tx timeout [ 213.881977] Bluetooth: hci1: command tx timeout [ 214.009717] Bluetooth: hci2: command tx timeout [ 214.138181] Bluetooth: hci3: command tx timeout [ 214.200750] Bluetooth: hci4: command tx timeout [ 214.264727] Bluetooth: hci6: command tx timeout [ 214.328739] Bluetooth: hci5: command tx timeout [ 214.584713] Bluetooth: hci7: command tx timeout [ 215.736792] Bluetooth: hci0: command tx timeout [ 215.928757] Bluetooth: hci1: command tx timeout [ 216.056863] Bluetooth: hci2: command tx timeout [ 216.185708] Bluetooth: hci3: command tx timeout [ 216.248816] Bluetooth: hci4: command tx timeout [ 216.313031] Bluetooth: hci6: command tx timeout [ 216.376771] Bluetooth: hci5: command tx timeout [ 216.632727] Bluetooth: hci7: command tx timeout [ 269.706471] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.708058] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.708795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.710827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.711959] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.712471] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.844208] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.845124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.845694] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.847200] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.847963] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.848521] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.965859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.972239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.975483] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.996185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.002974] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.013118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.042847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.060153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.094881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.119124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.119379] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.138762] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.141718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.142430] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.142892] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.144428] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.145158] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.145615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.157221] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.157477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.176796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.206354] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.208257] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.209556] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.217936] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.220178] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.220579] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.229495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.232981] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.243044] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.243449] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.252100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.252250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.271960] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.313479] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.318994] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.737718] Bluetooth: hci0: command tx timeout [ 271.929876] Bluetooth: hci1: command tx timeout [ 272.121244] Bluetooth: hci2: command tx timeout [ 272.184774] Bluetooth: hci5: command tx timeout [ 272.249892] Bluetooth: hci7: command tx timeout [ 272.312761] Bluetooth: hci4: command tx timeout [ 272.313123] Bluetooth: hci3: command tx timeout [ 272.377752] Bluetooth: hci6: command tx timeout [ 273.785120] Bluetooth: hci0: command tx timeout [ 273.977945] Bluetooth: hci1: command tx timeout [ 274.169974] Bluetooth: hci2: command tx timeout [ 274.234735] Bluetooth: hci5: command tx timeout [ 274.296902] Bluetooth: hci7: command tx timeout [ 274.362043] Bluetooth: hci3: command tx timeout [ 274.362480] Bluetooth: hci4: command tx timeout [ 274.425786] Bluetooth: hci6: command tx timeout [ 275.834433] Bluetooth: hci0: command tx timeout [ 276.025718] Bluetooth: hci1: command tx timeout [ 276.217687] Bluetooth: hci2: command tx timeout [ 276.280919] Bluetooth: hci5: command tx timeout [ 276.344695] Bluetooth: hci7: command tx timeout [ 276.408706] Bluetooth: hci4: command tx timeout [ 276.408787] Bluetooth: hci3: command tx timeout [ 276.474731] Bluetooth: hci6: command tx timeout [ 277.880749] Bluetooth: hci0: command tx timeout [ 278.073024] Bluetooth: hci1: command tx timeout [ 278.264997] Bluetooth: hci2: command tx timeout [ 278.330094] Bluetooth: hci5: command tx timeout [ 278.392856] Bluetooth: hci7: command tx timeout [ 278.457004] Bluetooth: hci3: command tx timeout [ 278.457285] Bluetooth: hci4: command tx timeout [ 278.520726] Bluetooth: hci6: command tx timeout [ 332.298589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.301452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.307138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.316598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.323301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.326281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.442795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.446085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.448878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.459199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.465546] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.468191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.553108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.558086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.563260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.583115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.590073] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.592159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.626118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.636428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.639280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.641992] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.647876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.650992] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.666772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.762938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.773490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.778537] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.794968] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.812009] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.814684] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.835850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.839945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.844074] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.847917] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.851368] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.874888] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.878732] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.882992] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.892509] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.893248] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.893641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.909417] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.929055] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.929482] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.933783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.964178] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 332.972896] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 334.393817] Bluetooth: hci0: command tx timeout [ 334.520922] Bluetooth: hci1: command tx timeout [ 334.712732] Bluetooth: hci4: command tx timeout [ 334.712795] Bluetooth: hci2: command tx timeout [ 334.904871] Bluetooth: hci3: command tx timeout [ 334.969719] Bluetooth: hci6: command tx timeout [ 334.970149] Bluetooth: hci5: command tx timeout [ 335.033879] Bluetooth: hci7: command tx timeout [ 336.441281] Bluetooth: hci0: command tx timeout [ 336.570684] Bluetooth: hci1: command tx timeout [ 336.761117] Bluetooth: hci4: command tx timeout [ 336.761336] Bluetooth: hci2: command tx timeout [ 336.952729] Bluetooth: hci3: command tx timeout [ 337.016837] Bluetooth: hci5: command tx timeout [ 337.016908] Bluetooth: hci6: command tx timeout [ 337.080755] Bluetooth: hci7: command tx timeout [ 338.488919] Bluetooth: hci0: command tx timeout [ 338.616749] Bluetooth: hci1: command tx timeout [ 338.808787] Bluetooth: hci2: command tx timeout [ 338.809410] Bluetooth: hci4: command tx timeout [ 339.002794] Bluetooth: hci3: command tx timeout [ 339.064799] Bluetooth: hci5: command tx timeout [ 339.065916] Bluetooth: hci6: command tx timeout [ 339.129516] Bluetooth: hci7: command tx timeout [ 340.536777] Bluetooth: hci0: command tx timeout [ 340.665684] Bluetooth: hci1: command tx timeout [ 340.856750] Bluetooth: hci4: command tx timeout [ 340.857353] Bluetooth: hci2: command tx timeout [ 341.048734] Bluetooth: hci3: command tx timeout [ 341.113840] Bluetooth: hci5: command tx timeout [ 341.114001] Bluetooth: hci6: command tx timeout [ 341.176830] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 06:29:54 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800dcbe380 RCX=ffffffff81b1344f RDX=ffff888016b25340 RSI=ffffffff81b1345a RDI=ffff88800c128600 RBP=ffff88800c128600 RSP=ffff888029f5fa88 R8 =0000000000000001 R9 =ffffed10018250c0 R10=ffff88800c128607 R11=0000000000000001 R12=0000000000008000 R13=ffff88800c128600 R14=ffff88800dcbe3f8 R15=ffff888029f5fde0 RIP=ffffffff81b1345e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2798805540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f27989a04a1 CR3=00000000230c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880339d8001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff8880339d7f01 RSI=ffff8880339d7f28 RDI=ffff8880339d7108 RBP=ffff8880339d7150 RSP=ffff8880339d7070 R8 =ffffffff867856fa R9 =ffff8880339d7138 R10=000000000003ab4d R11=000000000000376d R12=ffff8880339d7158 R13=ffff8880339d0000 R14=ffff8880339d7f30 R15=ffff8880339d70f8 RIP=ffffffff81348d51 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9123120000 CR3=0000000030572000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000