syzkaller login: [ 69.032577] systemd-udevd (114) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:19437' (ECDSA) to the list of known hosts. 2025/01/24 10:56:40 fuzzer started 2025/01/24 10:56:41 dialing manager at localhost:45511 [ 77.695042] cgroup: Unknown subsys name 'net' [ 77.862478] cgroup: Unknown subsys name 'cpuset' [ 77.910485] cgroup: Unknown subsys name 'rlimit' [ 83.212136] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 10:56:58 syscalls: 2217 2025/01/24 10:56:58 code coverage: enabled 2025/01/24 10:56:58 comparison tracing: enabled 2025/01/24 10:56:58 extra coverage: enabled 2025/01/24 10:56:58 setuid sandbox: enabled 2025/01/24 10:56:58 namespace sandbox: enabled 2025/01/24 10:56:58 Android sandbox: enabled 2025/01/24 10:56:58 fault injection: enabled 2025/01/24 10:56:58 leak checking: enabled 2025/01/24 10:56:58 net packet injection: enabled 2025/01/24 10:56:58 net device setup: enabled 2025/01/24 10:56:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 10:56:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 10:56:58 USB emulation: enabled 2025/01/24 10:56:58 hci packet injection: enabled 2025/01/24 10:56:58 wifi device emulation: enabled 2025/01/24 10:56:58 802.15.4 emulation: enabled 2025/01/24 10:56:58 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/24 10:56:58 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/24 10:56:58 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/24 10:56:58 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/24 10:56:58 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 10:56:58 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 10:57:01 starting 8 fuzzer processes 10:57:01 executing program 0: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x1) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x8, 0xa40) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x6, 0x5, 0x1, 0x100, 0x1, [{0x8, 0x0, 0x9, '\x00', 0x10c}]}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x6) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5a618c23}}, './file0\x00'}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x24c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4d96fc15}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3b6e4748}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x962}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2046}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29a14b83}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8000}, 0x805) sendmsg(r1, &(0x7f0000000b80)={&(0x7f0000000540)=@generic={0xa, "6ac11d9849d66a467fd10ac765e96564764e8c0f53f851f7c2fcf21b6b933fca0914a8da90d53a82de0d4bd4567b0a6fee4234a690ab0cf02f9313a386e458af3409c6ee44993933e1d4ac00111d353a94b784c051f7dfcde185583c58cfac4572a7f9b5d8137719e9d80c993712a3119e4c7398a3031b72e52c7d91acaf"}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000005c0)="9f41f7be1c0b2a059232f86beeb6ed342fe2519b48196eb43c8331c3cff23dc7146715abb380c4470c0ab7395210acf9493e32741b7ecd82b7f320390c21566d8641bb39cd13669816897fdfd077ade0baa4dc76de1198a7f4fb4552807b50619d8121c08cf1f45c433563a854cbe00ee448f78af129ef52dd101d12a0c11fc6a43fbec64a818e63cef5651c68e8b690594954b252", 0x95}, {&(0x7f0000000680)='N', 0x1}, {&(0x7f00000006c0)="75a2c25892726024be207f819a43b8a2f3b3eec2f619db8119fb2cfa43b5f9cb564fbc6fc108671cae4049854bcccb3384ba1cce80cfc2039d366af6327bd42679f72e6dc8921f7c868beee7f058a92407dbb2f8e7536fffa0fb8618509f4e7de3d4c86aa8089a2533bc00880dd2efec38083d82147a5dcc7dcb5fba9e43fe9ad5be872d0e7851514ed47445f0eb707112dc3d1d87200fc1d9c7", 0x9a}, {&(0x7f0000000780)="7f2e6027409755ca8bb824f1e64419b4753aa9673b826e96b55f5576645bd8a7acc761ab55e80eda58a4afc7202805dd20", 0x31}, {&(0x7f00000007c0)="3b345fd0b5dab3fd0f9da1845ee9821b99f9edcfd05656edb27b19304307ce0375bf48c4164ae8002c8df584533e0e5b9eb20e6bc787de51ea3f58b1020c979d3db128441cb25f1391db3455f539ddd2d0e71eced4285dffa0ba0f80b483be071228d1d1e6a94ac4dc611b6521696f9d45d7b517573a09826e41315c1ce0399dc7833dc0c0e4173e827d09538398742e1b848d88bc8df1dead475b6fcca9bd6c26096efb53148a55c7d0a30ef12a9e2041ce2bc7aeb490ad527860ccbb78382f8d43487e06581e33d42cb09dbf98b5e4bad5f2f59b9728aab1d35324442240fe73b32ff9cda62a091d63d6c5641389cfcfd022b08e737c61a069ee0aa017", 0xfe}, {&(0x7f00000008c0)="8a18f12cf3edc835d465890fe3894b3c0248c7e6618d34c257a9ab3b983b93c792432b024471d4bb34330d507d13ef5ae3468a805018fb67c5a47e04320f86087e6cb3473d66f0e9923353f7548c12ee9f4eaa66dd3e5007ee1f6ab99e8ea8b2dfcb66c55e1a87eef398209ec7248026d8cc1090adf3cc53402f10cb3ed25754d530fe6c098d52396f90d2e9b655db5f2016af20e5a337be", 0x98}, {&(0x7f0000000980)="0b268c271cde7ba7633ea6ed0aa88a106898ff0d2996ca76626fc3cb9e4c1b6fda24af593c0f4ffb8ab151c71748abdba0e2f1305dfa0cdb9e82dea921bb1d0947e49f9196b2bd45659a372431", 0x4d}, {&(0x7f0000000a00)="72c20614c6de5b3893f3dae709a671a8b5514c910d52e59c0e5af148c15a0731083bed759fc69991427e42c13d7bc451f981f66588598a68d6a73a55edaf8828da9cbf7b2a1d5dcee426355819d4e9a847fae54e72c97afbe9d5c67c573f6c504665de656f1759c558f7058618ee6f530c5053c7474d6f04841adb4deea9727e543bb927a19faf9cbc1c4ccc020823db276cca993f6f9de35b78ad1f5a49c4834fd999710a6241f7854b5a7891912192df8154938d8865326180f83413f3590e87e9f85d0e3bac4fcfc13d47a81a293f9427a01235fa67b11fac34a02cbab23dd949c2f530f227a6359333bf0949a4c7bcda", 0xf2}], 0x8}, 0x20008080) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0), 0x28000, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000c00)=[r6, r0], 0x2) r7 = syz_open_dev$vcsu(&(0x7f0000000d00), 0x10000, 0x200100) io_cancel(0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x98, r3, &(0x7f0000000c40)="e961b216eeed1884e9af65b03b7b4f2600ff52ec2840d3cd4b1b9b332f59162a740e2f53bcef9a4ebbd0c9b41f957a086f653666e546490d67fd7d76ef870886b945c03b5b7d787e37969c8fca8f145566124e9da49854ae168fce81bae4cbb1e02ef00701351573593b5c247d85f91d33737415e4ffc8c8b65e60a2f077158835ec3b440ac4e418e76b934232dc32cb109fd1ff22335e12ac1591ab3cdaa1", 0x9f, 0x40, 0x0, 0x1, r7}, &(0x7f0000000d80)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000dc0)={0x6, 0x1, 0xa55, 0x7, 0x3}) r8 = signalfd4(r4, &(0x7f0000000e00)={[0x401]}, 0x8, 0x80800) ioctl$SCSI_IOCTL_DOORLOCK(r8, 0x5380) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r9, 0xffffffffffffffff, 0x2) 10:57:01 executing program 1: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000400)={0x1c9, 0x1a}) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xff) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000440)={0xf0, 0x9a5}) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) poll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x444}, {r1, 0xb040}, {r0, 0x610}], 0x3, 0x6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000500)={0x0, @aes128, 0x0, @desc3}) bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e23, 0x8000, @private2, 0xdc64}, 0x1c) waitid$P_PIDFD(0x3, r1, &(0x7f0000000580), 0x2, &(0x7f0000000600)) r2 = creat(&(0x7f00000006c0)='./file0\x00', 0x30) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x7, 0xc4, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000b00)={r3, 0x2, 0x10001}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0/file0\x00', 0x8001, 0x11) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000fc0)={0x2, 0x7f, 0x44, &(0x7f0000000f40)=""/68}) r5 = syz_open_dev$hiddev(&(0x7f0000001000), 0x0, 0x200) r6 = getpgid(0xffffffffffffffff) fcntl$setown(r5, 0x8, r6) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000001040), &(0x7f0000001080)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001500)={'erspan0\x00', &(0x7f00000014c0)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x3e, 0x5b9, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x68, 0x0, 0x1, 0x2f, 0x0, @empty, @private=0xa010100, {[@noop, @lsrr={0x83, 0x7, 0x2e, [@empty]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001640)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x98, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7580}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000804) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f00000016c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) 10:57:01 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x6}, 0xf) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000000c0)={{r0}, 0x0, 0x0, @unused=[0x401, 0x5, 0xc1, 0x9], @devid}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000010c0)={0x18, 0xd, 0x1, {{0x0, 0x1, 0x1}, 0x6}}, 0x18) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000001100)) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x4004870, r2, 0x8000000) r4 = syz_io_uring_complete(r3) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000001240)) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000012c0)={{r1}, 0x8, &(0x7f0000001280)=[0x0, 0x0, 0x800, 0x61c, 0x6, 0x4, 0x100000000, 0x3], 0x7, 0x2, [0xde, 0xa55, 0x3d8, 0x8]}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001380), 0xa81, 0x0) splice(r2, &(0x7f0000001340), r5, &(0x7f00000013c0), 0x100000001, 0xc) r6 = pidfd_getfd(r2, r4, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f0000001400)={0x8, 0x2, 0x100, 0x0, 0xf, "2c08e2fdf0b915d8"}) r7 = accept$inet(r5, &(0x7f0000001440)={0x2, 0x0, @loopback}, &(0x7f0000001480)=0x10) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000014c0), 0x4) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x64, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040094}, 0x40000) 10:57:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x9, 0x100, 0x81, 0x400, 0x4, 0x40000}) r1 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8000, 0x6, &(0x7f0000001440)=[{&(0x7f0000000100)="5d51e9d9aa6a8ea80210c9269f989315e1b39ead598899ce4a39a06a7b3078c370d54041c43486cb6ea4594a5b6f0f2c0c9ee2636d9b93dd03193923a4e5a30db678fe3acd2006e7811f28d0a6ec35a18fc195c94bdfba13cab53ac2b8b0e271b337d542dfdcb5e0779a5ba5efb132432cc6f4bb8bdc0110365841d939fabf16f7caade05f5733688d4f83cabd1a0c2151e3d923ffdf8a7addfa6efc86adfff24a32225ce486ba999ee2a52a918404f8eab3fbe09fb3517c0e5cb74228b892b56149a8735503c0c65d7ac2fa24ec2a6501573dd8", 0xd4, 0x9}, {&(0x7f0000000200)="9c9937a96d1181d03e9069d5d61998477d7a5bcbde70064458b4ed00699a881c77f3c7876c6d0bbc8f41c9431377986d49872610012d37", 0x37, 0x4}, {&(0x7f0000000240)="af2fe93654822a882e5db0f8f4502865ec999030181c30cd5182b0fa7a6a3ff0a31c35a888307bb0e4a5dbcaa8ee003acbc3020c530275a06cee63ea9e570abc9f69775727e70d160224646ca391d958378ed652b09beb281aaca3819154a08f86640abb258668d00d4e6a0a4b85f6ea3cbeb9086330d51aae2204c55165f446435c84c73b7ab7c8b417df6282f7449da62fc66a467e431b36292162e6537ccdbdf9f3660082b7e5bbd19df1f0692d50465ee5ed4074a6803a7db7511986880288e7ae", 0xc3}, {&(0x7f0000000340)="3845cf6b24c156de1d55f56859725514f99c3a099d19ac627c26ece6e5134fd4d4df36fd93c3a0ce1d82e84310b49a42db42fde406", 0x35, 0xffff}, {&(0x7f0000000380)="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", 0x1000, 0x1f}, {&(0x7f0000001380)="41368d351a799c6ac16ed076ece5ea78ff9ba57110c8f8045bbfa637ce760ef860b8c3d83427300bcc4e50d4bf99c6679f7ecaf1e08c0d85beed463c4e275ae6c950288747eb1c3d1a46d0582d16fae404923f58a2ea719dc8e27f3248cd75b2c66320e2318ee4301ac49c60ffda32af4eccf07646a037ae08223803a04a741ecb5576b3226ccce6d8", 0x89, 0x1ff}], 0x2, &(0x7f0000001500)={[{'\x00'}], [{@pcr={'pcr', 0x3d, 0x10}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '}['}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001580), 0x40, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000015c0)) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000001600)=0x2) ioctl$CDROM_TIMED_MEDIA_CHANGE(r2, 0x5396, &(0x7f0000001640)={0xf15}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000001680)={0x3, [0x0, 0x0, 0x0]}) ioctl$CDROMPAUSE(r2, 0x5301) r3 = creat(&(0x7f00000016c0)='./file0\x00', 0x40) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) getsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000001700)=""/247, &(0x7f0000001800)=0xf7) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000001840)={0x10000, 0xfffffffa, 0x40, 0x3, 0x2}) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000001880)="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") ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001980)='/sys/module/pcmcia', 0x2040, 0xd) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r3, {0xf9}}, './file0\x00'}) r6 = syz_mount_image$msdos(&(0x7f0000001a00), &(0x7f0000001a40)='./file0\x00', 0x100000000, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000001a80)="443ebcbf8ab42454", 0x8, 0xff}], 0x2098000, &(0x7f0000001b00)={[{@fat=@dos1xfloppy}], [{@uid_gt={'uid>', 0xee00}}]}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000001b40)={r3, 0x6, 0x72, 0x3450}) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000001b80)={0x3, 0x4}) 10:57:01 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x20, 0x2, 0x5, {0xffff8e21, 0x7}, 0x20, 0x3}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x0, 0x10, 0x1}, @ax25={0x3, @null, 0x5}, 0x20, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)='veth1_virt_wifi\x00', 0x2, 0x9, 0x101}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r0, 0x4, 0x82, 0x2, 0x0, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x60, 0x1, 0xe8d6, 0x5}}) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, &(0x7f00000002c0)=0x10) getsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@broadcast, @in6=@private2, 0x4e20, 0x2, 0x4e23, 0x400, 0xa, 0x0, 0x0, 0x2c, r1}, {0x1, 0x8, 0x8, 0x5, 0x200, 0x7f, 0x40, 0x3}, {0xffffffffffffffc1, 0xff, 0xffff, 0x6}, 0x28, 0x6e6bb1, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d6, 0xff}, 0x4, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdc, 0xa, 0x2, 0xc9, 0x800, 0x9, 0x2}}, 0xe8) clock_gettime(0x0, &(0x7f0000001b40)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001980)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000680)=""/149, 0x95}], 0x4}, 0x400}, {{&(0x7f0000000780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000800)}, 0xffffff80}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/114, 0x72}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/17, 0x11}, {&(0x7f0000000a00)=""/150, 0x96}, {&(0x7f0000000ac0)=""/146, 0x92}, {&(0x7f0000000b80)=""/3, 0x3}, {&(0x7f0000000bc0)=""/41, 0x29}, {&(0x7f0000000c00)=""/75, 0x4b}, {&(0x7f0000000c80)=""/231, 0xe7}], 0x9, &(0x7f0000000e40)=""/61, 0x3d}, 0xda}, {{&(0x7f0000000e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f00)=""/155, 0x9b}, {&(0x7f0000000fc0)=""/65, 0x41}, {&(0x7f0000001040)=""/235, 0xeb}, {&(0x7f0000001140)=""/25, 0x19}], 0x4, &(0x7f00000011c0)=""/29, 0x1d}, 0x2}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001200)=""/243, 0xf3}], 0x1, &(0x7f0000001340)=""/161, 0xa1}, 0xf1}, {{&(0x7f0000001400)=@isdn, 0x80, &(0x7f0000001780)=[{&(0x7f0000001480)=""/214, 0xd6}, {&(0x7f0000001580)=""/177, 0xb1}, {&(0x7f0000001640)=""/165, 0xa5}, {&(0x7f0000001700)=""/16, 0x10}, {&(0x7f0000001740)=""/13, 0xd}], 0x5}, 0x20}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001800)=""/146, 0x92}, {&(0x7f00000018c0)=""/29, 0x1d}], 0x2, &(0x7f0000001940)=""/22, 0x16}, 0x1}], 0x7, 0x80000001, &(0x7f0000001b80)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, 0x0, 0x204, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000001cc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000001d40), &(0x7f0000001d80)={[0x6]}, 0x8) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001dc0)={0x2, 0xfffffffb, 0x3, 0x1000, 0x3f, 0x2}) ioctl$FIOCLEX(r2, 0x5451) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001e80)={'syztnl0\x00', &(0x7f0000001e00)={'syztnl1\x00', r6, 0x29, 0x7f, 0x1f, 0x80000000, 0x68, @private2, @mcast1, 0x1, 0x20, 0x0, 0x1ff}}) r8 = signalfd(r7, &(0x7f0000001ec0), 0x8) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x810, r8, 0x80628000) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000001f00)=0x9, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001f40)={0x3, 'syz_tun\x00', {0x4}, 0x7acc}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r9, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) 10:57:01 executing program 4: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x18}, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "adc1cfbd10820756", "67a94dfaba0e55fc8600878216e231f7d35496978a2aa92b06cdea38fbbffe47", "e74b897f", "10989968857e6fb5"}, 0x38) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000280)={{}, 0x3, &(0x7f0000000240)=[0x4, 0x0, 0x4], 0x5, 0x2, [0x3ff, 0x5bd4, 0x2]}) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup3(r0, r0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000300)={'sit0\x00', {0x2, 0x0, @multicast2}}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x23c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASK={0x90, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}]}, @CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r2 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000640)='B\x00', 0x0, r3) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'netdevsim0\x00', {0x3}, 0x43}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc044) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x4000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000980)={'vlan0\x00', {0x2, 0x0, @private}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x13c, r5, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4c5477ef5ce203d2e046143215"}, @NL80211_ATTR_KEY={0x84, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0xf, 0x4, "d821f3f63b402d4a4ece78"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x399}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "eba38f7461"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24048000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x81) [ 97.552533] audit: type=1400 audit(1737716221.695:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:57:01 executing program 7: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1ec, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe83}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5e96}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfc6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x60b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xac}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000002c0)={0x5, 0xffffff7f, 0x40, 0x7}) r0 = inotify_init1(0x80000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000300)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff7, 0x53}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x9, 0x9, 0x29, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x8000, 0x10, 0x6, 0x4}}) r4 = open_tree(r3, &(0x7f00000005c0)='./file0\x00', 0x8000) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000600)={0x9, 0x0, 0xfffff0aa, 0x401, 0x26, "896be71b5759ff855319abd12383b5612f7480", 0x4, 0x101}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_print_times', 0x0, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0x200}}, './file0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000700)={0x1, 0x7, 0x6, &(0x7f00000006c0)=""/6}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000740)={0x1000, 0x6, 0x1, 0x4, 0x1, [{0x8, 0xb36b, 0xab}]}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f00000007c0)) r8 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, r8) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r1, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}]}, 0x2c}}, 0x1) 10:57:01 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x22480, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xfc5}}, './file0\x00'}) r2 = dup(r0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000000c0)={0x2ec4}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x1000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, @can, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8a}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='gre0\x00', 0x9, 0x8, 0x81}) r4 = syz_io_uring_complete(0x0) write$nbd(r4, &(0x7f0000000240)={0x67446698, 0x1, 0x2, 0x4, 0x2, "3d6fc97b1052177f7abefd65ec47e550a6e0031a62eb601b5721f7adac6c4d7c348f885300f224d65820bcd23d6228d05a30e8b9169ab15ad7b0f7be53a2b5284257550e7ce712af65f85ec82653d6e2583ecd1530a9db401f35b637df34eed60f08bbeb452490a37e015e9f6d0f654ccf21f96184aef3345baece68e45659c5a4f9a82d0aafa5a3f323ce3453fb451740f1dbaee6e176003316848c5f85d0f5bf6f5e959902c9b9257852afcba72b75e144ef222023eeb2ae9f6688a6de2cc6d14d381189c9817fa7fd6b8071f4c3b88e32b51b"}, 0xe4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r5, &(0x7f0000000340)=@random={'btrfs.', 'gre0\x00'}, &(0x7f0000000380)=""/4096, 0x1000) r6 = syz_open_dev$vcsu(&(0x7f0000001380), 0x0, 0x2286c0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000013c0)={0x8001, 0x6}) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000001400)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001440)='timers\x00') sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x40040) r8 = accept4$inet6(r7, 0x0, &(0x7f0000001580), 0x80800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000015c0)={'wg0\x00'}) modify_ldt$write2(0x11, &(0x7f0000001600)={0x1, 0x20000800, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) [ 98.972477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.974161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.975358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.977726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.979390] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.980867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.050271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.062952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.067499] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.069032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.074015] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.074024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.075338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.078803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.080072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.081530] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.082813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.084042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.084490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.088909] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.089934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.101792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.108705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.114580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.115758] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.118740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.118880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.124105] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 99.128337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.130893] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.131611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.135343] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 99.136926] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 99.138097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.138851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 99.141040] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 99.141977] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 99.143122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 99.154753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.155585] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 99.157062] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 99.160561] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 99.163401] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 99.167744] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 99.169150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.180784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.181518] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 99.183411] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.017451] Bluetooth: hci0: command tx timeout [ 101.146116] Bluetooth: hci1: command tx timeout [ 101.146133] Bluetooth: hci3: command tx timeout [ 101.207746] Bluetooth: hci2: command tx timeout [ 101.207780] Bluetooth: hci7: command tx timeout [ 101.208490] Bluetooth: hci4: command tx timeout [ 101.270740] Bluetooth: hci5: command tx timeout [ 101.271393] Bluetooth: hci6: command tx timeout [ 103.064731] Bluetooth: hci0: command tx timeout [ 103.191749] Bluetooth: hci3: command tx timeout [ 103.191777] Bluetooth: hci1: command tx timeout [ 103.269723] Bluetooth: hci7: command tx timeout [ 103.269866] Bluetooth: hci2: command tx timeout [ 103.270250] Bluetooth: hci4: command tx timeout [ 103.322798] Bluetooth: hci6: command tx timeout [ 103.323289] Bluetooth: hci5: command tx timeout [ 105.112118] Bluetooth: hci0: command tx timeout [ 105.239218] Bluetooth: hci3: command tx timeout [ 105.240296] Bluetooth: hci1: command tx timeout [ 105.305808] Bluetooth: hci4: command tx timeout [ 105.306324] Bluetooth: hci2: command tx timeout [ 105.307699] Bluetooth: hci7: command tx timeout [ 105.369170] Bluetooth: hci5: command tx timeout [ 105.369697] Bluetooth: hci6: command tx timeout [ 107.160152] Bluetooth: hci0: command tx timeout [ 107.288147] Bluetooth: hci3: command tx timeout [ 107.288818] Bluetooth: hci1: command tx timeout [ 107.352195] Bluetooth: hci7: command tx timeout [ 107.352730] Bluetooth: hci2: command tx timeout [ 107.353183] Bluetooth: hci4: command tx timeout [ 107.414818] Bluetooth: hci5: command tx timeout [ 107.415103] Bluetooth: hci6: command tx timeout [ 159.487012] syz-executor.1 (281) used greatest stack depth: 24080 bytes left [ 162.155596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.158276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.161060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.166581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.169366] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.174220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.176400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.178351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 162.179829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.199332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.206386] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.208286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.212004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.230597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.232063] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.237826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.241284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.243841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.296194] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.298862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.299994] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.308942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.358834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.360792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.487449] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.492046] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.498502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.500869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.532753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.554967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.559065] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 162.606077] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 162.625926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.626782] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 162.632941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 162.686897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 162.700197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.706189] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 162.711990] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 162.729269] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 162.732352] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 162.734877] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 162.735868] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 162.746641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.748864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.753112] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 162.779355] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 162.785910] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 164.311821] Bluetooth: hci1: command tx timeout [ 164.312589] Bluetooth: hci0: command tx timeout [ 164.312896] Bluetooth: hci2: command tx timeout [ 164.822718] Bluetooth: hci5: command tx timeout [ 164.823753] Bluetooth: hci3: command tx timeout [ 164.823760] Bluetooth: hci7: command tx timeout [ 164.823900] Bluetooth: hci4: command tx timeout [ 164.888717] Bluetooth: hci6: command tx timeout [ 166.367684] Bluetooth: hci2: command tx timeout [ 166.368234] Bluetooth: hci1: command tx timeout [ 166.368952] Bluetooth: hci0: command tx timeout [ 166.870778] Bluetooth: hci4: command tx timeout [ 166.871310] Bluetooth: hci5: command tx timeout [ 166.874141] Bluetooth: hci3: command tx timeout [ 166.874671] Bluetooth: hci7: command tx timeout [ 166.934780] Bluetooth: hci6: command tx timeout [ 168.406844] Bluetooth: hci1: command tx timeout [ 168.406877] Bluetooth: hci0: command tx timeout [ 168.407926] Bluetooth: hci2: command tx timeout [ 168.918802] Bluetooth: hci7: command tx timeout [ 168.918865] Bluetooth: hci3: command tx timeout [ 168.919311] Bluetooth: hci5: command tx timeout [ 168.919793] Bluetooth: hci4: command tx timeout [ 168.982766] Bluetooth: hci6: command tx timeout [ 170.458822] Bluetooth: hci2: command tx timeout [ 170.459356] Bluetooth: hci0: command tx timeout [ 170.460715] Bluetooth: hci1: command tx timeout [ 170.973102] Bluetooth: hci4: command tx timeout [ 170.973138] Bluetooth: hci5: command tx timeout [ 170.973188] Bluetooth: hci3: command tx timeout [ 170.973688] Bluetooth: hci7: command tx timeout [ 171.040823] Bluetooth: hci6: command tx timeout [ 173.042610] hrtimer: interrupt took 4352343 ns [ 224.706777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.712511] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.713902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.716269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.717832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.718907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.768191] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.770089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.785004] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.791395] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.801768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 224.807016] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.815157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.827033] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.834318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.841255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.843950] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.845940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.021160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.076341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.078130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.079518] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.081814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.082950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.084393] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.091466] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.093125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.096096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.098501] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.099510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.155176] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 225.224496] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 225.236658] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 225.237636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 225.244578] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.257744] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.266205] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.271902] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 225.275774] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 225.275965] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.282495] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.284237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.308400] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.309942] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 225.310952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 225.330734] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 225.336566] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 225.438082] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 226.775965] Bluetooth: hci0: command tx timeout [ 226.844566] Bluetooth: hci2: command tx timeout [ 226.966839] Bluetooth: hci1: command tx timeout [ 227.246719] Bluetooth: hci3: command tx timeout [ 227.292651] Bluetooth: hci4: command tx timeout [ 227.478723] Bluetooth: hci6: command tx timeout [ 227.618668] Bluetooth: hci7: command tx timeout [ 227.737190] Bluetooth: hci5: command tx timeout [ 228.823795] Bluetooth: hci0: command tx timeout [ 228.888846] Bluetooth: hci2: command tx timeout [ 229.015709] Bluetooth: hci1: command tx timeout [ 229.272848] Bluetooth: hci3: command tx timeout [ 229.356658] Bluetooth: hci4: command tx timeout [ 229.526827] Bluetooth: hci6: command tx timeout [ 229.656221] Bluetooth: hci7: command tx timeout [ 229.789473] Bluetooth: hci5: command tx timeout [ 230.870759] Bluetooth: hci0: command tx timeout [ 230.935661] Bluetooth: hci2: command tx timeout [ 231.067685] Bluetooth: hci1: command tx timeout [ 231.318749] Bluetooth: hci3: command tx timeout [ 231.382771] Bluetooth: hci4: command tx timeout [ 231.574983] Bluetooth: hci6: command tx timeout [ 231.722650] Bluetooth: hci7: command tx timeout [ 231.830891] Bluetooth: hci5: command tx timeout [ 232.928655] Bluetooth: hci0: command tx timeout [ 232.982670] Bluetooth: hci2: command tx timeout [ 233.130691] Bluetooth: hci1: command tx timeout [ 233.393670] Bluetooth: hci3: command tx timeout [ 233.471643] Bluetooth: hci4: command tx timeout [ 233.626633] Bluetooth: hci6: command tx timeout [ 233.750834] Bluetooth: hci7: command tx timeout [ 233.878721] Bluetooth: hci5: command tx timeout [ 287.155426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.167305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.176762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.203918] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.205196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.207049] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.212858] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 287.214070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.218925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.240720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.253233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 287.254730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.394798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.399516] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.401324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.410689] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.420973] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.424729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.525219] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.536034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.540814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.551688] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.563193] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 287.572100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.607350] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.608814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 287.647726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.648499] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 287.649503] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.656918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.663018] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 287.685919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.690428] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 287.692416] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 287.693299] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.694864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.696087] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.758198] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.761799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.766531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.768211] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.769551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.036743] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 288.047130] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 288.049723] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 288.059262] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 288.063073] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 288.091273] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 289.238773] Bluetooth: hci0: command tx timeout [ 289.303201] Bluetooth: hci1: command tx timeout [ 289.495337] Bluetooth: hci2: command tx timeout [ 289.622852] Bluetooth: hci3: command tx timeout [ 289.815070] Bluetooth: hci6: command tx timeout [ 289.815786] Bluetooth: hci5: command tx timeout [ 289.942701] Bluetooth: hci4: command tx timeout [ 290.198870] Bluetooth: hci7: command tx timeout [ 291.303468] Bluetooth: hci0: command tx timeout [ 291.352277] Bluetooth: hci1: command tx timeout [ 291.543911] Bluetooth: hci2: command tx timeout [ 291.670673] Bluetooth: hci3: command tx timeout [ 291.864054] Bluetooth: hci6: command tx timeout [ 291.864892] Bluetooth: hci5: command tx timeout [ 291.991424] Bluetooth: hci4: command tx timeout [ 292.248649] Bluetooth: hci7: command tx timeout [ 293.335675] Bluetooth: hci0: command tx timeout [ 293.400612] Bluetooth: hci1: command tx timeout [ 293.590805] Bluetooth: hci2: command tx timeout [ 293.720754] Bluetooth: hci3: command tx timeout [ 293.910822] Bluetooth: hci6: command tx timeout [ 293.911386] Bluetooth: hci5: command tx timeout [ 294.038653] Bluetooth: hci4: command tx timeout [ 294.294740] Bluetooth: hci7: command tx timeout [ 295.382732] Bluetooth: hci0: command tx timeout [ 295.447151] Bluetooth: hci1: command tx timeout [ 295.638769] Bluetooth: hci2: command tx timeout [ 295.766686] Bluetooth: hci3: command tx timeout [ 295.958682] Bluetooth: hci5: command tx timeout [ 295.959224] Bluetooth: hci6: command tx timeout [ 296.086786] Bluetooth: hci4: command tx timeout [ 296.342828] Bluetooth: hci7: command tx timeout [ 349.931596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.934651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.937096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.941230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.947274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 349.954894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.991265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.994810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.999812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.009766] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.013762] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 350.014912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.188208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.190774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.193199] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.198106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.199955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 350.202540] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.248999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 350.250205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.253214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 350.254430] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 350.257121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.259807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 350.263231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 350.264919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.267262] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.269041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.270715] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 350.271852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.284072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.292156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.312384] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.324662] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 350.326632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 350.328893] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 350.331891] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 350.334598] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 350.335653] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.384530] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.399218] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 350.400919] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 350.405882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.421082] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 350.450429] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 350.464804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 350.469505] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 350.478065] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.026705] Bluetooth: hci0: command tx timeout [ 352.087302] Bluetooth: hci1: command tx timeout [ 352.218086] Bluetooth: hci2: command tx timeout [ 352.342691] Bluetooth: hci3: command tx timeout [ 352.407783] Bluetooth: hci4: command tx timeout [ 352.408923] Bluetooth: hci6: command tx timeout [ 352.537630] Bluetooth: hci5: command tx timeout [ 352.599782] Bluetooth: hci7: command tx timeout [ 354.071710] Bluetooth: hci0: command tx timeout [ 354.134700] Bluetooth: hci1: command tx timeout [ 354.263922] Bluetooth: hci2: command tx timeout [ 354.391708] Bluetooth: hci3: command tx timeout [ 354.455757] Bluetooth: hci6: command tx timeout [ 354.456289] Bluetooth: hci4: command tx timeout [ 354.583658] Bluetooth: hci5: command tx timeout [ 354.647813] Bluetooth: hci7: command tx timeout [ 356.174240] Bluetooth: hci0: command tx timeout [ 356.183624] Bluetooth: hci1: command tx timeout [ 356.311743] Bluetooth: hci2: command tx timeout [ 356.440630] Bluetooth: hci3: command tx timeout [ 356.503821] Bluetooth: hci6: command tx timeout [ 356.504332] Bluetooth: hci4: command tx timeout [ 356.631821] Bluetooth: hci5: command tx timeout [ 356.695732] Bluetooth: hci7: command tx timeout [ 358.231790] Bluetooth: hci1: command tx timeout [ 358.232336] Bluetooth: hci0: command tx timeout [ 358.358803] Bluetooth: hci2: command tx timeout [ 358.486824] Bluetooth: hci3: command tx timeout [ 358.554704] Bluetooth: hci4: command tx timeout [ 358.555214] Bluetooth: hci6: command tx timeout [ 358.679428] Bluetooth: hci5: command tx timeout [ 358.743656] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:02:10 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff85c18d00 RDI=ffff8880275ed73c RBP=ffffea0001b3b1f4 RSP=ffff888029987b10 R8 =0000000000000001 R9 =ffff8880275edd88 R10=ffffffff864043d7 R11=0000000000000000 R12=0000000000000001 R13=0000000000000012 R14=0000000000000000 R15=ffff888029987d98 RIP=ffffffff818a3995 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f675b2c5540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f675b32bb90 CR3=000000002c4fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000339 RCX=ffffffff814f3e3e RDX=fffffbfff0fe15f1 RSI=0000000000000008 RDI=ffffffff87f0af80 RBP=ffff8880276fb780 RSP=ffff888026367cb8 R8 =0000000000000000 R9 =fffffbfff0fe15f0 R10=ffffffff87f0af87 R11=0000000000000000 R12=0000000000000003 R13=0000000000000008 R14=ffff8880276fc1d0 R15=0000000000000000 RIP=ffffffff814f3e46 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4fcb6a8540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4fcb8308f0 CR3=00000000366de000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000