syzkaller login: [ 68.218480] sshd (238) used greatest stack depth: 24072 bytes left Warning: Permanently added '[localhost]:58719' (ECDSA) to the list of known hosts. 2025/01/23 23:47:22 fuzzer started 2025/01/23 23:47:22 dialing manager at localhost:45511 [ 69.954674] cgroup: Unknown subsys name 'net' [ 70.009686] cgroup: Unknown subsys name 'cpuset' [ 70.026439] cgroup: Unknown subsys name 'rlimit' [ 74.847837] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 23:47:40 syscalls: 2217 2025/01/23 23:47:40 code coverage: enabled 2025/01/23 23:47:40 comparison tracing: enabled 2025/01/23 23:47:40 extra coverage: enabled 2025/01/23 23:47:40 setuid sandbox: enabled 2025/01/23 23:47:40 namespace sandbox: enabled 2025/01/23 23:47:40 Android sandbox: enabled 2025/01/23 23:47:40 fault injection: enabled 2025/01/23 23:47:40 leak checking: enabled 2025/01/23 23:47:40 net packet injection: enabled 2025/01/23 23:47:40 net device setup: enabled 2025/01/23 23:47:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 23:47:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 23:47:40 USB emulation: enabled 2025/01/23 23:47:40 hci packet injection: enabled 2025/01/23 23:47:40 wifi device emulation: enabled 2025/01/23 23:47:40 802.15.4 emulation: enabled 2025/01/23 23:47:40 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/23 23:47:40 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/23 23:47:40 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/23 23:47:40 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/23 23:47:40 fetching corpus: 0, signal 0/8321 (executing program) 2025/01/23 23:47:40 fetching corpus: 0, signal 0/8321 (executing program) 2025/01/23 23:47:42 starting 8 fuzzer processes 23:47:42 executing program 2: setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) lchown(&(0x7f00000000c0)='./file0\x00', r1, 0xee00) utime(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)={0x80da, 0x3f3}) bind(0xffffffffffffffff, &(0x7f00000002c0)=@in={0x2, 0x4e24, @multicast2}, 0x80) chroot(&(0x7f0000000340)='./file0/file0\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x410500, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) linkat(r3, &(0x7f0000000480)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0/file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)={'U+', 0x1d}, 0x16, 0x0) r5 = fspick(r3, &(0x7f00000005c0)='./file0/file0\x00', 0x0) read(r5, &(0x7f0000000600)=""/233, 0xe9) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'sit0\x00', r0, 0x29, 0x0, 0x1f, 0x9, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x10, 0x7800, 0x20, 0x800}}) sendmsg$802154_raw(r3, &(0x7f0000000940)={&(0x7f00000007c0)={0x24, @long={0x3, 0xfffc}}, 0x14, &(0x7f0000000900)={&(0x7f0000000800)="ef3899bb79a00cf217d1867178cc5ad38e27737b37b5ac65bb59f2c46b730e47aa4750720944586f8c5102ebb2c8faab9cf7c3e372a79ba3d61538d119893fd8aabeb9044604cef816bf0b971655188b46a5531eb7305d0f9804842c000768553c2855825c2c8d5fdb7e00509cea951aee02fbf448de17d949463281b633180daf39a65d4a70966e451321e040e83986a7124bc81b0c361c3d6358e10d0fa53fd5ea52100ee8538b7d49f7266f977375a4f691f300ff6b670b252dd6f5f200a90fffb0fe240cfa195afb83250f47a718ded24f", 0xd3}, 0x1, 0x0, 0x0, 0x400c040}, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000980)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000009c0)=""/75) lsetxattr(&(0x7f0000000a40)='./file0/file0\x00', &(0x7f0000000a80)=@random={'osx.', '{\\:&\xdf\x00'}, &(0x7f0000000ac0)='y\x00', 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000b00)={'wg0\x00'}) 23:47:42 executing program 1: ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x3}, 0x3}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000090}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT={0x8}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x14, 0x17, [0x10000, 0x6, 0x4, 0xa5e]}, @CTA_TUPLE_ORIG={0xa0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfa9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x401}]}]}, 0x114}}, 0x40) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff72c2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x759a}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4044000) preadv2(r0, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/120, 0x78}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/242, 0xf2}], 0x5, 0x0, 0x5, 0x2) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) getsockname$unix(r0, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000d00)={0x200, 0x3ff, 0x2, 0x0, 0x0, [{{}, 0x775bcc3e}, {{r0}}]}) mq_timedsend(r0, &(0x7f0000000d80)="104cf8d6ac3520945f89dfa7a689dc0226b3d8269ae6244390741473b65c1baea640616bbef87bfbc5296b40fa3d580ba67f11671a1a516510116e8ee3d299dd55bc9086a96f092e4fe8d99b494156663bcd6fde4c84b38de6a383cd4733ed33d30302c6c5b8a6edf7605aa1d707199a70", 0x71, 0x9, &(0x7f0000000e00)={0x0, 0x3938700}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r3 = signalfd4(r0, &(0x7f0000000e40)={[0x6]}, 0x8, 0x800) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000e80)=""/187) dup3(r1, r1, 0x80000) pipe2(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getdents64(r4, &(0x7f0000000f80)=""/39, 0x27) 23:47:42 executing program 0: sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x16c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8bc, @mcast2, 0x3b813843}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @mcast1, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xed6f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x66b7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x4000800) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x50}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x760, 0x9, 0x5]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4085) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3d}]}, 0x1c}}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x20000000) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x3f}}}}, [@NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@ssid={0x0, 0x6, @default_ibss_ssid}, @erp={0x2a, 0x1, {0x0, 0x1}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8800) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7}, @void, @val={0xc, 0x99, {0x100, 0x7e}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x40000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x80, 0x0) write$binfmt_aout(r3, &(0x7f0000000bc0)={{0x107, 0xd6, 0x9, 0x1ff, 0x149, 0xda, 0xe7, 0x1c}, "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"}, 0x11e) r4 = syz_open_dev$vcsu(&(0x7f0000000d00), 0x7ad, 0x2020c0) ioctl$RTC_WIE_ON(r4, 0x700f) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x58, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x3}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4) recvmmsg$unix(r4, &(0x7f0000003740)=[{{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000f00)=""/109, 0x6d}], 0x1, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001040), 0x6e, &(0x7f0000003240)=[{&(0x7f00000010c0)}, {&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/225, 0xe1}], 0x5, &(0x7f00000032c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003300), 0x6e, &(0x7f00000036c0)=[{&(0x7f0000003380)=""/224, 0xe0}, {&(0x7f0000003480)=""/144, 0x90}, {&(0x7f0000003540)=""/185, 0xb9}, {&(0x7f0000003600)=""/27, 0x1b}, {&(0x7f0000003640)=""/64, 0x40}, {&(0x7f0000003680)=""/21, 0x15}], 0x6}}], 0x3, 0x0, &(0x7f0000003800)) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000003840), 0x2, 0x0) kcmp(0x0, r5, 0x1, r6, r3) 23:47:42 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x72}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0xc0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x14}]}, 0x38}, 0x1, 0x0, 0x0, 0x20002804}, 0x24000814) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x55}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000640)=0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x95}, 0x20004850) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x181280, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x18, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000e00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000940)={0x44c, 0x3f3, 0x10, 0x70bd29, 0x25dfdbfe, {0xb95210beb971c7a9, 0x0, 0x22, [0x0, 0x2, 0x1, 0x10001, 0xb2a, 0x0, 0x0, 0x9f, 0x1000, 0x6, 0x20, 0x80, 0x9, 0x793, 0x3, 0x9d80, 0x13, 0x10001, 0x57, 0x200, 0x7fff, 0xfffffffe, 0x7, 0x8, 0xffffffff, 0x5, 0xffff, 0x1f, 0x100, 0x800, 0x6, 0x0, 0x1, 0x9, 0x13b, 0x3, 0xfffffffb, 0x80, 0x2aa, 0x2, 0xe005, 0x2, 0x80, 0x1, 0x904, 0xfffffff8, 0x4, 0x1, 0x6, 0x1, 0x1, 0x9, 0x8, 0x800, 0x8, 0x2400, 0x5, 0x961, 0xd5e, 0x1, 0x8, 0x2, 0x81, 0x5], [0x9, 0x553, 0x3, 0xcf, 0x408, 0x7fffffff, 0x1eed217d, 0x3, 0x7, 0xe875, 0xffffffff, 0xfffffff8, 0x6, 0xfff, 0xffffffbc, 0x1, 0x8, 0x1f, 0xf4, 0x200, 0x7ff, 0xff, 0x7, 0x81, 0x1000, 0x2, 0x800, 0x20, 0xffffffff, 0x0, 0x3, 0x3, 0xffff, 0x5, 0x1f, 0x7ff, 0x0, 0xfffffff7, 0x1, 0x328, 0x100, 0x4, 0xfff, 0x6, 0x594cfc25, 0x10000, 0x7, 0x9, 0x7, 0xffffffff, 0xe7, 0x3, 0x4172, 0x4, 0x40, 0x80000000, 0xffffffff, 0x8, 0x800, 0x1, 0x4, 0x2, 0x7bb, 0x7f], [0x2, 0x2, 0x4, 0x7, 0x0, 0x7fff, 0x61, 0x101, 0x1, 0x5, 0x8000, 0x30488989, 0x5, 0xa9, 0x7, 0x3, 0x80, 0x34b, 0x6, 0x0, 0x0, 0x8, 0x4, 0x8, 0x8000, 0x7, 0x5, 0x0, 0xd83b, 0x5, 0x3f, 0x800, 0x2, 0x2, 0x0, 0xfffffff8, 0x6, 0x5, 0x3, 0xfffffffd, 0x7a78, 0x1f, 0x80000000, 0x1, 0x2, 0xbda, 0xf0, 0x2, 0x8, 0x2, 0x0, 0x100, 0x3, 0x9, 0x3f, 0x4, 0x5, 0xdf, 0x7f, 0x8000, 0x8838, 0x7, 0xfffffff7, 0x62d5], [0x0, 0x5, 0x400, 0xfffffffa, 0xfffffff9, 0xfff, 0x8000, 0x0, 0x5, 0x3, 0x7, 0x2, 0x8, 0x7, 0x800, 0x7fff, 0x1, 0x100, 0xde, 0x9, 0x5, 0xffffffff, 0x7fffffff, 0x6a, 0x18000000, 0x8, 0x6, 0x1, 0x53dc, 0x83, 0x3, 0x7fff, 0x1, 0xfffffffc, 0x7fff, 0x2, 0x10001, 0x27cb, 0x8001, 0xea, 0x3, 0x800, 0x1, 0x1000, 0x401, 0x6, 0xd3c, 0x801, 0x6, 0xa07e, 0x6, 0x6, 0x8, 0x8d6, 0x1f, 0x10000, 0x3, 0x0, 0x80, 0xff73, 0x9, 0x1, 0x10001, 0xc77], 0x29, ['/dev/null\x00', '\x00', '^\x00', '%g)\x00', 'nl80211\x00', '-$u\x00', 'vlan1\x00', 'vlan1\x00']}, [""]}, 0x44c}, 0x1, 0x0, 0x0, 0x51}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xb4, r7, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:null_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000050}, 0x8) prctl$PR_CAPBSET_DROP(0x18, 0x26) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000001000)={r4}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3640}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0xc04) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000001180)={0x100000000, 0x7f, 0x4, 0x1}) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8854}, 0x0) [ 88.989257] audit: type=1400 audit(1737676062.102:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:47:42 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={@desc={0x1, 0x0, @auto="74e995311deffad1"}}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x24e}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{r2, r3/1000+60000}}, 0x0) r4 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0xb0, 0x4, &(0x7f0000000480)=[{&(0x7f0000000240)="7808e0e63dec18f7383a8d886b168ee338f2f78b9d42cafc8f9a22cef8d27124d0f4a92fcec5a733efd9e2474c1f117c2998abf86ef43aa4e220c49678ba2c25e002993cb9e2ce2ca06a3ed3258ba90051c0f1c1eb04e5f8c0bc9ed5e2aaa094f17bded389d132321e247c88012aeb8153bafdb3aa6746fa12b4", 0x7a, 0x10000}, {&(0x7f00000002c0)="db9ec8b7ee08854ef930ee481b50ef1596ec80ef953102f39f35a48687647495d66546fb803d196854f28828d0399cd7ed3a5f93822fee7eca78f74ec941fcd6311a38b209025e9ce2673178e89f07c8b9870885", 0x54, 0x6694}, {&(0x7f0000000340)="f0572aa11d5173aba7596a2c474ce80af376de56", 0x14, 0x80000001}, {&(0x7f0000000380)="d41258f8a8fcebe946455404f2a5fd030503447e85ddf55c1ce889fd96125b3d7ebb50689b92b388e00f0014bee276db678c714c18d68ae2712113094c2e78a56b1e9979f18d81dc296c2aeac669c33b794b7bb02f50414ca315aa94e328e569de0889cd32f5c0f5bfc4cbc3e5bdfb19e88c227427bdfb2f2e3953a943003df5e0a3d6f7850d46c19e7310c5b9aa914d0970144c75f1dec6c5f760f6c88b47aa937ebec0eecc0083f4ecd01cc7a15000526b5c48b22d9a1af0e5c797a7cfca8b628b659b66df44fe5cc0e0e2dd31f9", 0xcf, 0x8af}], 0x4, &(0x7f0000000500)={[{@nodots}, {@fat=@codepage={'codepage', 0x3d, '437'}}, {@fat=@errors_remount}, {@fat=@showexec}, {@dots}, {@dots}], [{@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@pcr={'pcr', 0x3d, 0x3f}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}) faccessat(r4, &(0x7f00000005c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) r6 = open_tree(r4, &(0x7f0000000640)='./file1\x00', 0x1) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000680)={0xffff, 0x3, 0x1, 0x3}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8040) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x3}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) setsockopt$inet_tcp_buf(r6, 0x6, 0xb, &(0x7f00000008c0)="cc1d137322950d71a7f7ae283e88c041f800b13fe37884210edc39465b373684f2399ba71efca0cc856da47c329296ab5c294f28cdced550321167c96e097cd8b8f2405de7567057cfa9fd1001ae5002a9bc39a147a5642012c41a5c01bd13508522a2766ce870bd0f756f63fa8b2a71144271eccdb48e058dbea650d6c79aeeb5150e278c90c4b220d65dae5ea66b3113c639f2", 0x94) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000980)=""/156, &(0x7f0000000a40)=0x9c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000a80)={0x1}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000ac0)=@ceph_nfs_confh={0x10, 0x2, {0x10001, 0x6}}, 0x200000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x180, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1f}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8a}, {0x6, 0x16, 0xd1c0}, {0x5, 0x12, 0x1}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4001}, 0x10) 23:47:42 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2a0, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x228, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x44840}, 0x800) r2 = semget(0x2, 0x1, 0x5a) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f00000003c0)=""/229) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff}, 0x1000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000500)=0x4) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000540)={0x3, 0xd6be}) r4 = open(&(0x7f0000000580)='./file0\x00', 0x80, 0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) recvmsg$unix(r0, &(0x7f0000000b80)={&(0x7f0000000700), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/38, 0x26}, {&(0x7f00000007c0)=""/212, 0xd4}, {&(0x7f00000008c0)=""/255, 0xff}, {&(0x7f00000009c0)=""/245, 0xf5}], 0x4, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000cc0)=0xe8) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000d00)=0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000d40)={{0x0, r10, r5, r11, 0xee01, 0x11, 0x6}, 0x80000000, 0x885, 0x0, 0x0, 0x0, 0x0, 0x80}) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000dc0)) pread64(r1, &(0x7f0000000e00)=""/4096, 0x1000, 0x1f) r12 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001e00), 0x4c4301, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r7) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x48, r13, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r6, 0x40047211, &(0x7f0000001fc0)) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x70, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x269}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008041}, 0x20040040) 23:47:42 executing program 6: ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x7ff]}, 0x8) ioctl$TIOCCONS(r0, 0x541d) ioctl$KDDISABIO(r0, 0x4b37) fcntl$setpipe(r0, 0x407, 0x8) socketpair(0x1799b89fa53e581a, 0x80000, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f00000000c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001500), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x50}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x6014) r5 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$setownex(r5, 0xf, &(0x7f0000001600)={0x2}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001640)={'\x00', 0x401, 0xff, 0x2a678108, 0x400, 0x2}) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000016c0)={0x8, [0x4, 0xff], 0xd0}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r1) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001880)={0x1c4, r6, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10000, @private1, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x122}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2beb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x207}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40000000}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000885}, 0x4c001) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000001b40)) 23:47:42 executing program 7: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7, 0x3f, 0xfb, 0x6, 0x2, 0x6, 0x4, 0x2b6, 0x38, 0x32c, 0x80, 0x3, 0x20, 0x2, 0x0, 0x2, 0x4}, [{0x2, 0x1ff, 0x2, 0x80000000, 0x5, 0x5, 0x4, 0xf54}], "662efc2479c698c8836eb490e0078cefe4db3e57b2b3770fff5de4eefda9fdf4899bfec7fe94c13cd458cc2fc2098b6b67b393e22d8f26e7c36c9a00eaaa4c57cb86331f5d07a193f54afa913bc40feb673e0dba5e882ac83b834a3dc078b7cf932a7c5e7ea49c002f3b619212ae5215d9b253bc7e6fb0ada906de35c1db57752164acb96bfb8801910e3290c80c6f65232255b10a752db4d2f7", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5f2) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r0, &(0x7f0000000640)=0x7, 0xffffffffffffffff, 0x0, 0x100000000000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x2080, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000006c0)={'icmp\x00'}, &(0x7f0000000700)=0x1e) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x7) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$FICLONE(r3, 0x40049409, r2) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000780)={0x9, 0x7fffffff}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x80, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000800)=@ccm_128={{}, "4dea1f29d5320fb1", "ebc4ae10b2936167a3d9a2077dbac46d", "cd934007", "6551c3e38c39c1b8"}, 0x28) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000840)={{r0}, 0xffffffff, 0x1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x3934e08a965e47a8}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r3) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000a40)={0xffffffc1, 0x9, 0x7, 0x81, 0x91}) getsockname$inet6(r3, &(0x7f0000000a80)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000ac0)=0x1c) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000b40)={0x5f2, 0x84c7}) [ 90.449995] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.455435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.459285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.469211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.474303] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.478280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.533957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.538073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.541116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.546197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.551880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.557000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.558434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.563448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.570181] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.572257] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.575924] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.580916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.590815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.592060] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.597810] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.602220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.604034] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.607990] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.620805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.624128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.626518] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.630861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.670259] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.672848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.678747] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.680146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.680242] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.684122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.696380] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.699184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.701398] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.707783] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.709034] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.710940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.713339] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.719368] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.723827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.729356] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.734800] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.749969] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.752045] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.772933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.530219] Bluetooth: hci0: command tx timeout [ 92.658279] Bluetooth: hci3: command tx timeout [ 92.722666] Bluetooth: hci2: command tx timeout [ 92.722683] Bluetooth: hci1: command tx timeout [ 92.785753] Bluetooth: hci5: command tx timeout [ 92.785821] Bluetooth: hci4: command tx timeout [ 92.849836] Bluetooth: hci6: command tx timeout [ 92.850916] Bluetooth: hci7: command tx timeout [ 94.577761] Bluetooth: hci0: command tx timeout [ 94.707644] Bluetooth: hci3: command tx timeout [ 94.770264] Bluetooth: hci1: command tx timeout [ 94.770827] Bluetooth: hci2: command tx timeout [ 94.833718] Bluetooth: hci5: command tx timeout [ 94.834725] Bluetooth: hci4: command tx timeout [ 94.897700] Bluetooth: hci7: command tx timeout [ 94.898840] Bluetooth: hci6: command tx timeout [ 96.628716] Bluetooth: hci0: command tx timeout [ 96.754740] Bluetooth: hci3: command tx timeout [ 96.819113] Bluetooth: hci2: command tx timeout [ 96.819141] Bluetooth: hci1: command tx timeout [ 96.883791] Bluetooth: hci4: command tx timeout [ 96.884126] Bluetooth: hci5: command tx timeout [ 96.945782] Bluetooth: hci6: command tx timeout [ 96.945841] Bluetooth: hci7: command tx timeout [ 98.674724] Bluetooth: hci0: command tx timeout [ 98.801619] Bluetooth: hci3: command tx timeout [ 98.865739] Bluetooth: hci1: command tx timeout [ 98.866246] Bluetooth: hci2: command tx timeout [ 98.929767] Bluetooth: hci4: command tx timeout [ 98.929838] Bluetooth: hci5: command tx timeout [ 98.993724] Bluetooth: hci6: command tx timeout [ 98.996053] Bluetooth: hci7: command tx timeout [ 152.573496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.579089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.584129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.599355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.601927] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.603343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.646812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.650491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.652779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.653694] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.655899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.656945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.670046] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.672015] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.673196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.678435] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.683667] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.684858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.706896] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.719965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.724706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.729963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.732425] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.742991] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.778435] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.779445] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.794227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.795896] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.801231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.802699] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.803715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.809077] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.825860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.828354] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.832037] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.836290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.842153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.842243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.845198] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.846724] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.852835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.858768] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.862053] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.863877] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.866134] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.891863] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.914972] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.918029] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.675679] Bluetooth: hci0: command tx timeout [ 154.737705] Bluetooth: hci1: command tx timeout [ 154.802656] Bluetooth: hci3: command tx timeout [ 154.803390] Bluetooth: hci2: command tx timeout [ 154.930653] Bluetooth: hci4: command tx timeout [ 154.930691] Bluetooth: hci6: command tx timeout [ 154.931847] Bluetooth: hci5: command tx timeout [ 154.994658] Bluetooth: hci7: command tx timeout [ 156.721642] Bluetooth: hci0: command tx timeout [ 156.785669] Bluetooth: hci1: command tx timeout [ 156.850117] Bluetooth: hci2: command tx timeout [ 156.850723] Bluetooth: hci3: command tx timeout [ 156.977669] Bluetooth: hci5: command tx timeout [ 156.978307] Bluetooth: hci6: command tx timeout [ 156.978663] Bluetooth: hci4: command tx timeout [ 157.042152] Bluetooth: hci7: command tx timeout [ 158.771004] Bluetooth: hci0: command tx timeout [ 158.835125] Bluetooth: hci1: command tx timeout [ 158.898766] Bluetooth: hci2: command tx timeout [ 158.899083] Bluetooth: hci3: command tx timeout [ 159.027504] Bluetooth: hci4: command tx timeout [ 159.027593] Bluetooth: hci5: command tx timeout [ 159.027657] Bluetooth: hci6: command tx timeout [ 159.090004] Bluetooth: hci7: command tx timeout [ 160.817617] Bluetooth: hci0: command tx timeout [ 160.883695] Bluetooth: hci1: command tx timeout [ 160.945611] Bluetooth: hci2: command tx timeout [ 160.946643] Bluetooth: hci3: command tx timeout [ 161.073691] Bluetooth: hci6: command tx timeout [ 161.074230] Bluetooth: hci5: command tx timeout [ 161.075042] Bluetooth: hci4: command tx timeout [ 161.138795] Bluetooth: hci7: command tx timeout [ 212.974046] syz-executor.1 (3660) used greatest stack depth: 23728 bytes left [ 215.031997] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.036568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.038429] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.039929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.042668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.044138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.050750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.052951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.054952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.057012] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.059356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.061722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.099214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.104170] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.110824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.116798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.122769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.125121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.236549] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.240888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.241926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.243741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.262928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.265097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.266807] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.267860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.275800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.303151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.339760] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.349730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.368170] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.381745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.409965] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.443765] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.468596] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.481294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.491867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.508625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.510192] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.521855] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.530919] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.535971] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.548210] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.565862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.571866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.609939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.627948] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.641293] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.137648] Bluetooth: hci2: command tx timeout [ 217.137774] Bluetooth: hci1: command tx timeout [ 217.138438] Bluetooth: hci0: command tx timeout [ 217.521750] Bluetooth: hci5: command tx timeout [ 217.522655] Bluetooth: hci4: command tx timeout [ 217.523152] Bluetooth: hci3: command tx timeout [ 217.714664] Bluetooth: hci6: command tx timeout [ 217.715366] Bluetooth: hci7: command tx timeout [ 219.185653] Bluetooth: hci0: command tx timeout [ 219.186231] Bluetooth: hci1: command tx timeout [ 219.186787] Bluetooth: hci2: command tx timeout [ 219.569657] Bluetooth: hci3: command tx timeout [ 219.570205] Bluetooth: hci5: command tx timeout [ 219.571072] Bluetooth: hci4: command tx timeout [ 219.762707] Bluetooth: hci7: command tx timeout [ 219.762774] Bluetooth: hci6: command tx timeout [ 221.235600] Bluetooth: hci2: command tx timeout [ 221.236097] Bluetooth: hci1: command tx timeout [ 221.236723] Bluetooth: hci0: command tx timeout [ 221.619608] Bluetooth: hci4: command tx timeout [ 221.620115] Bluetooth: hci5: command tx timeout [ 221.621566] Bluetooth: hci3: command tx timeout [ 221.810591] Bluetooth: hci7: command tx timeout [ 221.810612] Bluetooth: hci6: command tx timeout [ 223.282591] Bluetooth: hci0: command tx timeout [ 223.282629] Bluetooth: hci1: command tx timeout [ 223.283049] Bluetooth: hci2: command tx timeout [ 223.665621] Bluetooth: hci5: command tx timeout [ 223.666969] Bluetooth: hci3: command tx timeout [ 223.667419] Bluetooth: hci4: command tx timeout [ 223.857724] Bluetooth: hci6: command tx timeout [ 223.858217] Bluetooth: hci7: command tx timeout [ 277.321322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.326957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.333901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.342720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.350324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.354752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.567465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.571164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.575160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.579416] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.584890] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.603087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.642345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.652334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.655924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.660465] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.663224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.668614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.768888] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.776970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.781896] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.788941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.796155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.799959] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.802986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.806050] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.807694] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.817102] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.841578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.846472] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.853015] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.854163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.860606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.874898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.875629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.889863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.891201] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.893954] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.896137] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.906771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.908894] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.910469] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.941409] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.946067] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.947564] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.951377] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.963954] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.965413] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.409633] Bluetooth: hci0: command tx timeout [ 279.666579] Bluetooth: hci1: command tx timeout [ 279.729614] Bluetooth: hci2: command tx timeout [ 279.857591] Bluetooth: hci3: command tx timeout [ 279.921745] Bluetooth: hci4: command tx timeout [ 279.986593] Bluetooth: hci6: command tx timeout [ 279.987434] Bluetooth: hci5: command tx timeout [ 280.049592] Bluetooth: hci7: command tx timeout [ 281.457588] Bluetooth: hci0: command tx timeout [ 281.713795] Bluetooth: hci1: command tx timeout [ 281.777597] Bluetooth: hci2: command tx timeout [ 281.905577] Bluetooth: hci3: command tx timeout [ 281.969561] Bluetooth: hci4: command tx timeout [ 282.033631] Bluetooth: hci6: command tx timeout [ 282.034085] Bluetooth: hci5: command tx timeout [ 282.097711] Bluetooth: hci7: command tx timeout [ 283.505588] Bluetooth: hci0: command tx timeout [ 283.761641] Bluetooth: hci1: command tx timeout [ 283.825720] Bluetooth: hci2: command tx timeout [ 283.955538] Bluetooth: hci3: command tx timeout [ 284.017578] Bluetooth: hci4: command tx timeout [ 284.081707] Bluetooth: hci6: command tx timeout [ 284.082278] Bluetooth: hci5: command tx timeout [ 284.146595] Bluetooth: hci7: command tx timeout [ 285.553716] Bluetooth: hci0: command tx timeout [ 285.809670] Bluetooth: hci1: command tx timeout [ 285.873622] Bluetooth: hci2: command tx timeout [ 286.001571] Bluetooth: hci3: command tx timeout [ 286.065739] Bluetooth: hci4: command tx timeout [ 286.129652] Bluetooth: hci6: command tx timeout [ 286.130267] Bluetooth: hci5: command tx timeout [ 286.194687] Bluetooth: hci7: command tx timeout [ 340.485944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.491980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.495734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.506330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.514959] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.517623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.958346] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.961264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.963524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.964847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.965400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.967773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.973679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.977289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.984026] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.986082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.998727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.000975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.008760] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.012768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.017957] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.037998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.057367] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.067648] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.069049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.070699] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.081853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.085451] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.098080] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.100322] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.101960] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.124906] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.128409] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.168599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.172458] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.180180] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.185935] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.195955] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.196362] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.218864] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.221378] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.223387] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.226613] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.228752] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.230932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.258832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.269001] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.277913] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.578627] Bluetooth: hci0: command tx timeout [ 343.025602] Bluetooth: hci3: command tx timeout [ 343.153704] Bluetooth: hci1: command tx timeout [ 343.154602] Bluetooth: hci2: command tx timeout [ 343.217588] Bluetooth: hci4: command tx timeout [ 343.345723] Bluetooth: hci7: command tx timeout [ 343.345817] Bluetooth: hci6: command tx timeout [ 343.410798] Bluetooth: hci5: command tx timeout [ 344.625591] Bluetooth: hci0: command tx timeout [ 345.074605] Bluetooth: hci3: command tx timeout [ 345.201599] Bluetooth: hci2: command tx timeout [ 345.202947] Bluetooth: hci1: command tx timeout [ 345.266515] Bluetooth: hci4: command tx timeout [ 345.393696] Bluetooth: hci7: command tx timeout [ 345.394195] Bluetooth: hci6: command tx timeout [ 345.457556] Bluetooth: hci5: command tx timeout [ 346.673570] Bluetooth: hci0: command tx timeout [ 347.121953] Bluetooth: hci3: command tx timeout [ 347.249603] Bluetooth: hci1: command tx timeout [ 347.250104] Bluetooth: hci2: command tx timeout [ 347.313560] Bluetooth: hci4: command tx timeout [ 347.441593] Bluetooth: hci6: command tx timeout [ 347.442560] Bluetooth: hci7: command tx timeout [ 347.505940] Bluetooth: hci5: command tx timeout [ 348.721746] Bluetooth: hci0: command tx timeout [ 349.171520] Bluetooth: hci3: command tx timeout [ 349.297648] Bluetooth: hci2: command tx timeout [ 349.298782] Bluetooth: hci1: command tx timeout [ 349.361598] Bluetooth: hci4: command tx timeout [ 349.490528] Bluetooth: hci7: command tx timeout [ 349.490567] Bluetooth: hci6: command tx timeout [ 349.553575] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 23:52:51 Registers: info registers vcpu 0 RAX=00007f9c48eabee8 RBX=00007f9c48f2d430 RCX=000000000000000e RDX=00007f9c48eb7f80 RSI=00007f9c48eac4d8 RDI=00007f9c48ea9d94 RBP=00007ffea32c0820 RSP=00007ffea32c07b0 R8 =00007f9c49386a20 R9 =00007f9c48ea9fcc R10=00007f9c48f398f0 R11=0000000000000000 R12=00007ffea32c0810 R13=00007f9c493bd060 R14=00000000000948f0 R15=00007f9c48ea9ffc RIP=00007f9c48fdc3c2 RFL=00000212 [----A--] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9c48e7c540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9c48fdc270 CR3=00000000350fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880353ef9c0 RCX=0000000000000001 RDX=1ffff11006a7de3a RSI=ffff8880353ef990 RDI=ffff8880353ef1d0 RBP=0000000000000012 RSP=ffff8880353ef158 R8 =0000000000000001 R9 =ffff8880353ef208 R10=000000000003ab7c R11=0000000000022050 R12=ffff8880353ef228 R13=ffff8880353ef210 R14=ffff8880353ef990 R15=ffff8880353ef1c8 RIP=ffffffff8134a503 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe6d8acfd0 CR3=00000000283d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000