Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:43866' (ECDSA) to the list of known hosts. 2025/01/27 03:28:46 fuzzer started 2025/01/27 03:28:47 dialing manager at localhost:40883 syzkaller login: [ 70.828371] cgroup: Unknown subsys name 'net' [ 70.936665] cgroup: Unknown subsys name 'cpuset' [ 70.968023] cgroup: Unknown subsys name 'rlimit' [ 76.767313] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/27 03:29:05 syscalls: 2217 2025/01/27 03:29:05 code coverage: enabled 2025/01/27 03:29:05 comparison tracing: enabled 2025/01/27 03:29:05 extra coverage: enabled 2025/01/27 03:29:05 setuid sandbox: enabled 2025/01/27 03:29:05 namespace sandbox: enabled 2025/01/27 03:29:05 Android sandbox: enabled 2025/01/27 03:29:05 fault injection: enabled 2025/01/27 03:29:05 leak checking: enabled 2025/01/27 03:29:05 net packet injection: enabled 2025/01/27 03:29:05 net device setup: enabled 2025/01/27 03:29:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/27 03:29:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/27 03:29:05 USB emulation: enabled 2025/01/27 03:29:05 hci packet injection: enabled 2025/01/27 03:29:05 wifi device emulation: enabled 2025/01/27 03:29:05 802.15.4 emulation: enabled 2025/01/27 03:29:05 fetching corpus: 50, signal 8560/9977 (executing program) 2025/01/27 03:29:06 fetching corpus: 100, signal 10830/13370 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/14698 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/15962 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/17200 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/18432 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/19646 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/20928 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/22173 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/23408 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/24668 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/25916 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/27184 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/28428 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/29208 (executing program) 2025/01/27 03:29:06 fetching corpus: 112, signal 10897/29208 (executing program) 2025/01/27 03:29:10 starting 8 fuzzer processes 03:29:10 executing program 0: prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) 03:29:10 executing program 2: ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{r2, r3/1000+60000}, {r4, r5/1000+60000}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/virtio', 0x400000, 0x14) futimesat(r6, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0xea60}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ppoll(&(0x7f0000000280)=[{r6, 0x2210}, {r7, 0x8008}], 0x2, &(0x7f00000002c0), &(0x7f0000000300)={[0x9]}, 0x8) r8 = fsopen(&(0x7f0000000340)='hostfs\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000580)={{r9, 0x0, 0x6, 0x1bbd, 0x200, 0x3, 0x843c, 0x0, 0x7, 0x1, 0x1f, 0x0, 0x2, 0x0, 0x10000}, 0x8, [0x0]}) mount$9p_virtio(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x20a0801, &(0x7f00000006c0)={'trans=virtio,', {[{@cache_fscache}, {@fscache}, {@uname={'uname', 0x3d, '^.'}}, {@cache_loose}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, ':/!'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'hostfs\x00'}}]}}) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000780)={0xf, 0x800, 0x3b, 0x20, 0x5, "f8a5ea88bac9e71405c9e3b91fbbc745a6a1d4", 0x400, 0x100}) flock(r1, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x180, 0x0) ppoll(&(0x7f0000000800)=[{r8, 0x8000}, {r10, 0x8200}], 0x2, &(0x7f0000000840), &(0x7f0000000880)={[0x1]}, 0x8) renameat2(r6, &(0x7f00000008c0)='./file0\x00', r0, &(0x7f0000000900)='./file0\x00', 0x6) lsetxattr$trusted_overlay_redirect(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x8, 0x3) 03:29:10 executing program 3: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="76499ebe6a41b89c312e4321e0c3981eee70b7a21361f05cd9c292035a9237cdf3ce7c2dfd5b3313a3e894d81e1d6f2ccd2c5c2693498725017c63d6947348b09a21ac8ff8c5124895eb20720e7a196ab3515d75b2120db554a79c990b6361b8c32bf2894f92385a35c9a9f9dc4b60c552672d818725c48146e3c8e87c9efd4d7cd0989cc680a1eb4b6937c5fc85177d8acdc57722384f7b89bf5f5659919f18319689e06f80c77f2c477e49e6cf5a7ea5acd92d5e76c3be6353f7575fff0f6f870d2719e461132ebe025b212ee65045a7baafe5608c51dcc67b1fca1f8bf48285f97a8736764db7caebd989", 0xec}, {&(0x7f0000000140)="915d2d3989e7c66031da5d312b13a1b79eb13a2bc6b7fe4a574da6ea91cb06809b3c901d97f03e7a51f1c4806e6c16bad6a59432949e911842788bbb3af041af", 0x40}, {&(0x7f0000000180)="a5fe7706f28352369ff0832c0276824dd0d02e86fa4c34db1c48f8072c0691e6b319c86847fc84a6ed78282e860f8cc23c34d8cec2f731c1699b9ce462a7b35b706f9d1d72f9dc", 0x47}, {&(0x7f0000000200)="fc05a3a10ccdc70d20a096469fcb315dd1cb6584b29f822f49f4777a0eb3c86da220348511504aaed63b8e36ef2505e14b78aeea0dd983f5067626d6d5e069e56144da9c083d87af874d2c37ca2198348f2ff5254733971e2351048ea6785b55003433eeb1cb92845679fb81585f503f8b52f337c47f78fb2b66e14f2073e1da3723a2712b3c641d8fbbba8a1d21312938df4e1606d81954c0a1bc248f8b4d86fe44dff26beba7c594c15ee369baf842af1a55e16a1ca4bb829e6b37f82f830906c0968326cb1c", 0xc7}, {&(0x7f0000000300)="de90c213906298d50f0b363c246f4f391ccb6d4103f93ca2f3a3502fa51e5a8005792ac7c8ce3bc04d758043655095c92b9bbac3c4c42dd3b1567630886ecbd13016e2717e6ee56b3270cd68f45b57a7c598c302a1c5d01a7c00a65f2e7af45c3c0c662e25d6e8bb8ae7d76fc5fcc1e4f0e3de8cbf1045ad3171150063d3883ed15c9f7ed94631c10a2d0335be0fd54bcf731b", 0x93}], 0x5, 0x9, 0x5) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000440)=0x1) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffe}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x74}]}, 0x60}}, 0x880) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000005c0)='ns/user\x00', &(0x7f0000000600)='./file0\x00', r1) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000006c0)=r1, 0x1) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000700)) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000740)) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000780)={0x3, 0x3, 0x5, 0x1, 0x4, 0x5}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000007c0)=0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) pread64(r3, &(0x7f0000000840)=""/95, 0x5f, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) syz_open_procfs$userns(r4, &(0x7f0000000940)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000b00)=0xe8) lsetxattr$system_posix_acl(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {0x1, 0x5}, [{0x2, 0x1, r5}, {0x2, 0x0, r7}], {}, [{0x8, 0x7, r6}], {0x10, 0x5}, {0x20, 0x2}}, 0x3c, 0x2) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000b80)={0x5, 0x3}) 03:29:10 executing program 1: semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000000000)=""/171) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0xee01, r0, 0x0, 0xee01, 0x40, 0x800}, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xdec4}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x430000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') rmdir(&(0x7f0000000300)='./file0\x00') semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000340)=""/73) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000003c0)={'veth0_to_bridge\x00', @multicast}) clock_gettime(0x0, &(0x7f0000001a40)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000019c0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000480)=""/140, 0x8c}], 0x1, &(0x7f0000000580)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/28, 0x1c}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/169, 0xa9}], 0x5}}], 0x2, 0x40002020, &(0x7f0000001a80)={r2, r3+60000000}) r4 = syz_open_dev$vcsn(&(0x7f0000001ac0), 0x100000000, 0x101002) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) semctl$GETVAL(0x0, 0x19eace3244888fc8, 0xc, &(0x7f0000001b00)=""/90) mkdir(&(0x7f0000001b80)='./file0\x00', 0x0) r5 = semget$private(0x0, 0x2, 0x2) semctl$GETPID(r5, 0x4, 0xb, &(0x7f0000001bc0)=""/68) semctl$SETVAL(r5, 0x4, 0x10, &(0x7f0000001c40)=0x71e) r6 = semget$private(0x0, 0x3036eea260046279, 0x784) semctl$SEM_INFO(r6, 0x4, 0x13, &(0x7f0000001c80)=""/232) 03:29:10 executing program 5: arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) 03:29:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x401}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xeecd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_DURATION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4040005) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40894}, 0x8c0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000044) r5 = creat(&(0x7f0000000800)='./file0\x00', 0x100) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r6, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xddb}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1152}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb01}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x8050) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r2) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r7, 0x520, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1aaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) 03:29:10 executing program 6: r0 = socket(0x29, 0x800, 0x10000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xa768b7ce3ae6a313) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x564}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040080}, 0x40040) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004800}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x410) sendmsg$inet(r0, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000600)="c2cc13583e2194f7376a2d8ec8f364bd18ff1da69721b1a5bbeedb552af5b834d2d1dacd7666967e60468dba3771845f455499d7a4ad4094c9bde9405dc024dc119c290734687943bfd196c37fd3fb919ddcd6d038bcf64a48fb8faafc882a5b6e4e4d38061494b8329cee700026a18071c81a4c70890378e4aa5d2293938b6b49016204f56693818b1f1e2efb8e0ca9ab122e6fc44ab8ed76d9e25694e07e686eb8d16f355d372bc2b91d5b363c696889f4c021e916702a5bd802503002fc68c967475fb4e9a2feb47c9536eef337431d8a1570b45235d209be163e661751cc4d9e0fae592283ae22578c0a2b2318276c2adf6cde705e2c65", 0xf9}, {&(0x7f0000000700)="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", 0xfd}, {&(0x7f0000000800)="2f1db951f91fa82c9d88d26d4b2ddb57c577ceab0331713981893bfd86492681f091796a639c09b18bc02c331b4784bfc2224bcce04f24b5024cddeed2ffcf5c7043038ebfc7b1074d8ef5ab138576d7e8416d48ed5d49ac42b235145d320e815030201967f3c862ae690a0573ccbd14fb5011b3ecfd62158d5d154bc861e84df393da7b743dc576bc9c17840bda0f8beabc", 0x92}, {&(0x7f00000008c0)}, {&(0x7f0000000900)="c7d9ab605dd2671be5fce29880f2c64e5e16a79af17205f487ca8860b7f2fcd1f28e42069870b1cd1151a570e30ff27f0019a72652626455805ca73f55d9d2de88063d6f860c627431b0d3190e7e8584444d774ba2f4b6332d983df10fd912a99e4909b0fd26", 0x66}, {&(0x7f0000000980)="61ff25e9c77be92d41ad7700e03784cf98864346ba4091430db32d464d7e0b59c2df97134a9026222487ef791b7f157528d597f5780cbd03c09335f13185ebd713ee986beffe7ed885fb00465f09fb80896b6fb99e3490", 0x57}], 0x6, &(0x7f0000000a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x104, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x95, [@rand_addr=0x64010102, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @cipso={0x86, 0x61, 0x1, [{0x2, 0xc, "6fdab5c63a518cd4f073"}, {0x2, 0x10, "cf82a38e423c98c208a47f9b612c"}, {0x7, 0x4, "22b7"}, {0x2, 0x5, "67c79a"}, {0x7, 0xa, "68e365f81825ddf3"}, {0x0, 0x8, "0e08c57418f3"}, {0x0, 0xc, "303a7ab8939dd8287422"}, {0x5, 0x6, "852bf074"}, {0x2, 0x12, "afae9658f6c0e062b300d821f8216b55"}]}, @timestamp_addr={0x44, 0x44, 0xce, 0x1, 0x9, [{@loopback}, {@empty, 0x2}, {@rand_addr=0x64010102, 0x80}, {@broadcast}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x7fffffff}, {@broadcast, 0x6}, {@multicast1, 0x8000}]}, @ssrr={0x89, 0x13, 0x29, [@loopback, @loopback, @rand_addr=0x64010100, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xfc, 0x3, 0xf, [{@broadcast, 0x7}, {@remote, 0x6}, {@rand_addr=0x6, 0x7ff}, {@local, 0xffff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x138}, 0x40890) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c00), 0x46400, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0x100, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x56}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1a}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcba}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40, 0x7f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000f40)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000001040)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000001140)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=@delpolicy={0x58, 0x14, 0x300, 0x70bd25, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x9}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0x233b, 0x4e22, 0x0, 0x1, 0x80, 0x40, 0x2c, 0x0, r5}, 0x6e6bb2, 0x1}, [@tfcpad={0x8, 0x16, 0x1ff}]}, 0x58}}, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001180)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000001280)=0xe8) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002980)={'wlan1\x00'}) sendmsg$inet(r0, &(0x7f0000002f80)={&(0x7f00000029c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x7}}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000002a00)="6986801396045f9643305426cf4b2213f9c8d3f759313ab3571c964a58651cc14e29b62071b1094e31785afce6ffc0538db2cdffa1a2e93b2b5a09b8dba4c70db38f6aec9c55ed8284176df55f89c3d20bee3e5ff412b254e9c1588562ec52281197fe52d8d4415c8982eac02e7ec4f010f83e931e95bbb0444d74", 0x7b}, {&(0x7f0000002a80)="85ac1386dafee38b7b7debdc276abc50fb9c4083d30c924819e679addf53a822671b9aad455e904f735e59000074af952d7c505bbb0611917fb483f356c35476c6ffefd1c27909e397a93aa511f0ccb22888f30759e8910e535746326ded2fd2177eb2aca85cac2d8e0714eaf07b519aedf138be3831e6d187bc0f4fa4ba9dc0f29c18270d5fda29c4f4983cefef280b6c78280713d9d4d799f0f5621061699ebc44eb008c33ef3c78108c6b677314854aa400f8cedef915a2771133bd64ecb4", 0xc0}, {&(0x7f0000002b40)="a9b11ee4779e31f89eb6dea0591e578efba4ba1d877914eb6038b54bd36f73e331a8f278889adbdb544e4541d1344ae12761d98e8c4e918e3ff8171e9bfb21294e431d0e69ec9324f782070e04948255141cafe2bb3d71315785a7126f6f48626249ecf82c99669c5ca70cd5bc65fd7f6a23c553bf4568fea58b931e88ff5906e0a6c2afe166aa72c1329af44260d0eca69770a1b6678559d26e26459c86a9cc1f1db699ed99b26d9d9198700f1366a1d770f4080bc3621ae138195a474ebd09ec00aa58e245413ad24943ff016e400b4129d38820b8a74a0369f61975357dc395a5dcfb6fe90164089b70b5f7f0fc107f55a270", 0xf4}, {&(0x7f0000002c40)="78a7cb468e4f1ffec75cf6bb4aaf34300d40cb979d26d3bdd07c6a9919fda6e5fd21f8f5a36ad487dd0f0e3bbf7c1ebc45408707016ee6693cb7290124b33bf2f7719fa6aa5e9382739848d28b98da8009e93cde17deef88d3f6", 0x5a}, {&(0x7f0000002cc0)="f8a517ed2eaf5eabd6124811bf01b904cf3ec2889f4de531d5417a36a1c13dfeab808327f4e10af928e477957ebcfc99951bcfeae966b911e2790f514474c5586b92abf7e7ee015b79ee7457c7a57afb1c335361813d2a764038c72d9f2bafffb3d4125f4df03abbd72bae14e73501437b691c621b56e7af87c49e18c5f3123cd897c93591959ebac5005d11cdba33b720caf34c5cf435a942fd28841d7e37ea4ec72f33d2f6cb43cd76a2a9b9db01d0fe6a544468231ce17c4157bd008edc8d", 0xc0}, {&(0x7f0000002d80)="7fb1fb69578fc3ece5dddc44c2ddf23f22ec1020010fe3fd8ef0e8e213596d131f56a1f0a5bdb3d269c9ea183e9cc3c85e5fe5b32cf403937a427741e72d10ebb3c74e", 0x43}, {&(0x7f0000002e00)="b3e3328514315c5e2a9eb5a40c50b7ca2da043b67a1f407de42923c05498b8a04925acde933ac599875cd8753a22db2d72c69ff6574b88e826aa0ee30184550c04a25e9562832e44feb6a37aeefd06f0fb448973768735398d64aae7294f99", 0x5f}], 0x7, &(0x7f0000002f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x70}, 0x2) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000003140)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003100)={&(0x7f0000003000)={0xe0, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc8000}, 0x8000) getsockopt$IP_SET_OP_GET_FNAME(r7, 0x1, 0x53, &(0x7f0000003180)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000031c0)=0x2c) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) [ 93.602643] audit: type=1400 audit(1737948550.164:7): avc: denied { execmem } for pid=281 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:29:10 executing program 7: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x3, 0x9, 0xcc75, 0x51, 0x0, 0x5}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000000c0)={0x8, 0x1, {0xffffffffffff4813, @struct={0x7ff, 0x8ec1}, 0x0, 0x2, 0x10000, 0xef, 0xcddd, 0x40, 0x40, @struct={0x9}, 0x80000001, 0x7eef, [0x8a9, 0x7, 0xffa, 0x4, 0x7, 0x6]}, {0x88, @struct={0x7, 0xcd}, 0x0, 0xe7, 0xffffffff, 0x19d, 0x86d, 0x1f, 0x408, @usage=0x100000001, 0x1, 0x5f, [0xfff, 0x2, 0x9, 0x3]}, {0xbb1, @struct={0x0, 0x2}, 0x0, 0x5, 0x3, 0x2, 0xfffffffffffeffff, 0x7, 0x410, @usage=0x2, 0xff, 0xeb6a, [0x217, 0x7e9, 0xfffffffffffffffd, 0x5, 0x4, 0x400]}, {0xf2d, 0x7, 0x7}}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000004c0)=0x953) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0/file0\x00'}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000540)=""/46) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) fsync(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x171600, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000005c0)={0x1f, 0xfffffffffffffff8, 0x1, 0xffffffff, 0x8, [{0xc78, 0x3, 0xffffffff, '\x00', 0x2280}, {0x3ff, 0x322, 0x9, '\x00', 0x1004}, {0xdb8, 0x5, 0xcd, '\x00', 0x1008}, {0x3, 0x3, 0x3, '\x00', 0x901}, {0x757, 0x5, 0x20, '\x00', 0x2e06}, {0x8, 0x4, 0x5}, {0x8001, 0x4, 0x200, '\x00', 0x8}, {0x7, 0x3f, 0x2, '\x00', 0x600}]}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000007c0)) r3 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f00000008c0)={0x2008}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000900), 0x200040, 0x0) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000940)={0x3ff, 0x0, 0x10001, 0x2, 0x7, 0xfffff329}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/module/8250_core', 0x80, 0xd) r6 = accept4$inet(r4, 0x0, &(0x7f0000003480), 0x100800) copy_file_range(r5, &(0x7f00000009c0)=0x8001, r6, &(0x7f00000034c0)=0x5, 0x1000, 0x0) [ 95.026647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.037609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.047061] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.056034] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.060271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.064217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.085125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.094379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.101149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.104155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.124271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.139249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.141060] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.147255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.148537] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.152183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.158292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.162413] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.164598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.167098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.182144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.184989] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.189434] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.191578] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.201084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.202282] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.203826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.205238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.208605] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.210085] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.212651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.214025] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.216261] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.218032] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.218681] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.230449] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.236676] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.247780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.265062] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.267151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.277112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.281062] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.287304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.315134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.317242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.318959] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.330947] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.349425] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.174960] Bluetooth: hci0: command tx timeout [ 97.300864] Bluetooth: hci1: command tx timeout [ 97.302138] Bluetooth: hci5: command tx timeout [ 97.302701] Bluetooth: hci7: command tx timeout [ 97.303760] Bluetooth: hci3: command tx timeout [ 97.365884] Bluetooth: hci2: command tx timeout [ 97.429819] Bluetooth: hci6: command tx timeout [ 97.430413] Bluetooth: hci4: command tx timeout [ 99.220796] Bluetooth: hci0: command tx timeout [ 99.348996] Bluetooth: hci7: command tx timeout [ 99.349504] Bluetooth: hci1: command tx timeout [ 99.350421] Bluetooth: hci3: command tx timeout [ 99.350923] Bluetooth: hci5: command tx timeout [ 99.412866] Bluetooth: hci2: command tx timeout [ 99.477827] Bluetooth: hci4: command tx timeout [ 99.478328] Bluetooth: hci6: command tx timeout [ 101.268907] Bluetooth: hci0: command tx timeout [ 101.396893] Bluetooth: hci3: command tx timeout [ 101.397400] Bluetooth: hci5: command tx timeout [ 101.397936] Bluetooth: hci1: command tx timeout [ 101.398354] Bluetooth: hci7: command tx timeout [ 101.460793] Bluetooth: hci2: command tx timeout [ 101.524854] Bluetooth: hci6: command tx timeout [ 101.525326] Bluetooth: hci4: command tx timeout [ 103.317766] Bluetooth: hci0: command tx timeout [ 103.444840] Bluetooth: hci3: command tx timeout [ 103.445308] Bluetooth: hci7: command tx timeout [ 103.446148] Bluetooth: hci1: command tx timeout [ 103.446565] Bluetooth: hci5: command tx timeout [ 103.509767] Bluetooth: hci2: command tx timeout [ 103.572854] Bluetooth: hci6: command tx timeout [ 103.572928] Bluetooth: hci4: command tx timeout [ 155.165972] syz-executor.4 (293) used greatest stack depth: 23696 bytes left [ 157.480595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.490579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.493232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.505200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.529315] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.536274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.578269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.588089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.592878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.598554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.601561] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.603437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.614624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.618645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.626051] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.634505] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.641548] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.645262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.682491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.689065] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.690958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.704514] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.712076] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.728626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.729038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.732486] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.738022] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.785901] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.796281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.801511] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.869953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.887395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.888670] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.901229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.907567] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.918030] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.919925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.921158] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.923173] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.928175] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.945288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.959448] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.965189] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.969541] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.992233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.000361] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 158.001192] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.005772] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.572831] Bluetooth: hci0: command tx timeout [ 159.700835] Bluetooth: hci2: command tx timeout [ 159.701678] Bluetooth: hci1: command tx timeout [ 159.764793] Bluetooth: hci3: command tx timeout [ 159.957811] Bluetooth: hci4: command tx timeout [ 160.021332] Bluetooth: hci5: command tx timeout [ 160.085262] Bluetooth: hci6: command tx timeout [ 160.148965] Bluetooth: hci7: command tx timeout [ 161.622521] Bluetooth: hci0: command tx timeout [ 161.749881] Bluetooth: hci1: command tx timeout [ 161.751077] Bluetooth: hci2: command tx timeout [ 161.812964] Bluetooth: hci3: command tx timeout [ 162.005034] Bluetooth: hci4: command tx timeout [ 162.069263] Bluetooth: hci5: command tx timeout [ 162.133043] Bluetooth: hci6: command tx timeout [ 162.197856] Bluetooth: hci7: command tx timeout [ 163.669125] Bluetooth: hci0: command tx timeout [ 163.798547] Bluetooth: hci1: command tx timeout [ 163.799205] Bluetooth: hci2: command tx timeout [ 163.860756] Bluetooth: hci3: command tx timeout [ 164.053781] Bluetooth: hci4: command tx timeout [ 164.116851] Bluetooth: hci5: command tx timeout [ 164.181973] Bluetooth: hci6: command tx timeout [ 164.246721] Bluetooth: hci7: command tx timeout [ 165.717822] Bluetooth: hci0: command tx timeout [ 165.846295] Bluetooth: hci2: command tx timeout [ 165.848265] Bluetooth: hci1: command tx timeout [ 165.909843] Bluetooth: hci3: command tx timeout [ 166.101923] Bluetooth: hci4: command tx timeout [ 166.165990] Bluetooth: hci5: command tx timeout [ 166.229855] Bluetooth: hci6: command tx timeout [ 166.293388] Bluetooth: hci7: command tx timeout [ 219.560026] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.563993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.565785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.572118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.575578] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.579480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.807114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.814272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.824071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.831406] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.835375] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.836446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.886152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.889303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.889902] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.892194] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.894473] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.895900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.901961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.909292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.911528] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.912664] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.914423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.921742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.949295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.962912] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.981113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.992572] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.997053] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.000335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.082988] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.087215] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.090159] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.094587] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.104152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.110905] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.110923] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.114634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.115366] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.165088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.177467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.180509] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.187882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.196166] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.198198] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.207506] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.210330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.213213] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.653751] Bluetooth: hci0: command tx timeout [ 221.910816] Bluetooth: hci1: command tx timeout [ 221.972833] Bluetooth: hci3: command tx timeout [ 221.972858] Bluetooth: hci2: command tx timeout [ 222.036904] Bluetooth: hci4: command tx timeout [ 222.292779] Bluetooth: hci6: command tx timeout [ 222.294245] Bluetooth: hci7: command tx timeout [ 222.356821] Bluetooth: hci5: command tx timeout [ 223.700853] Bluetooth: hci0: command tx timeout [ 223.956860] Bluetooth: hci1: command tx timeout [ 224.021612] Bluetooth: hci2: command tx timeout [ 224.021920] Bluetooth: hci3: command tx timeout [ 224.084897] Bluetooth: hci4: command tx timeout [ 224.340904] Bluetooth: hci7: command tx timeout [ 224.341002] Bluetooth: hci6: command tx timeout [ 224.404977] Bluetooth: hci5: command tx timeout [ 225.749101] Bluetooth: hci0: command tx timeout [ 226.005227] Bluetooth: hci1: command tx timeout [ 226.069335] Bluetooth: hci2: command tx timeout [ 226.070650] Bluetooth: hci3: command tx timeout [ 226.133973] Bluetooth: hci4: command tx timeout [ 226.388764] Bluetooth: hci6: command tx timeout [ 226.391734] Bluetooth: hci7: command tx timeout [ 226.452795] Bluetooth: hci5: command tx timeout [ 227.796888] Bluetooth: hci0: command tx timeout [ 228.052823] Bluetooth: hci1: command tx timeout [ 228.116814] Bluetooth: hci3: command tx timeout [ 228.117023] Bluetooth: hci2: command tx timeout [ 228.182739] Bluetooth: hci4: command tx timeout [ 228.438771] Bluetooth: hci7: command tx timeout [ 228.438798] Bluetooth: hci6: command tx timeout [ 228.501969] Bluetooth: hci5: command tx timeout [ 281.893055] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.896212] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.901928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.908575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.914811] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.917019] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.147128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.150751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.159611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.168482] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.173183] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.178051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.408832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.414093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.417180] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.426166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.435569] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.439425] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.552525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.558771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.565481] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.592021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.596127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.604031] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.620224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.638179] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.642863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.652772] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.697396] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.700629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.723343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.725063] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.725071] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.739560] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.743404] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.747063] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.748899] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.759370] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.764162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.775447] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.783134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.788862] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.824636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.826413] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.836351] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.845321] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.860608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.860646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 283.988935] Bluetooth: hci0: command tx timeout [ 284.244847] Bluetooth: hci1: command tx timeout [ 284.500790] Bluetooth: hci2: command tx timeout [ 284.693117] Bluetooth: hci3: command tx timeout [ 284.820912] Bluetooth: hci4: command tx timeout [ 284.948780] Bluetooth: hci7: command tx timeout [ 285.077859] Bluetooth: hci5: command tx timeout [ 285.078566] Bluetooth: hci6: command tx timeout [ 286.037413] Bluetooth: hci0: command tx timeout [ 286.292747] Bluetooth: hci1: command tx timeout [ 286.548843] Bluetooth: hci2: command tx timeout [ 286.741702] Bluetooth: hci3: command tx timeout [ 286.868937] Bluetooth: hci4: command tx timeout [ 286.996918] Bluetooth: hci7: command tx timeout [ 287.124771] Bluetooth: hci5: command tx timeout [ 287.125251] Bluetooth: hci6: command tx timeout [ 288.084759] Bluetooth: hci0: command tx timeout [ 288.340798] Bluetooth: hci1: command tx timeout [ 288.596803] Bluetooth: hci2: command tx timeout [ 288.788826] Bluetooth: hci3: command tx timeout [ 288.917155] Bluetooth: hci4: command tx timeout [ 289.047046] Bluetooth: hci7: command tx timeout [ 289.172989] Bluetooth: hci6: command tx timeout [ 289.173474] Bluetooth: hci5: command tx timeout [ 290.132744] Bluetooth: hci0: command tx timeout [ 290.388758] Bluetooth: hci1: command tx timeout [ 290.644796] Bluetooth: hci2: command tx timeout [ 290.836733] Bluetooth: hci3: command tx timeout [ 290.966730] Bluetooth: hci4: command tx timeout [ 291.092729] Bluetooth: hci7: command tx timeout [ 291.221538] Bluetooth: hci5: command tx timeout [ 291.222072] Bluetooth: hci6: command tx timeout [ 345.189444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.193590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.196186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.209148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.214049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.216634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.451293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.456195] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.459333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.466853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.472837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.479038] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.525581] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.530763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.544131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.552116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.559163] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.562463] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.714615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.724039] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.737080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.748204] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.767158] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.770456] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.791275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.801579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.803252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.839104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.854680] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.860508] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.874481] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.876093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.883762] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.889279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.893377] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.901184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.904131] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.911985] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.942158] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.945096] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.948434] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.957550] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.969323] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.976894] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.980414] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.024343] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 346.046111] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 346.065082] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 347.286155] Bluetooth: hci0: command tx timeout [ 347.541115] Bluetooth: hci1: command tx timeout [ 347.605993] Bluetooth: hci2: command tx timeout [ 347.862048] Bluetooth: hci3: command tx timeout [ 347.989292] Bluetooth: hci5: command tx timeout [ 347.989315] Bluetooth: hci4: command tx timeout [ 348.052977] Bluetooth: hci7: command tx timeout [ 348.117066] Bluetooth: hci6: command tx timeout [ 349.333775] Bluetooth: hci0: command tx timeout [ 349.589797] Bluetooth: hci1: command tx timeout [ 349.652784] Bluetooth: hci2: command tx timeout [ 349.910681] Bluetooth: hci3: command tx timeout [ 350.036834] Bluetooth: hci4: command tx timeout [ 350.038097] Bluetooth: hci5: command tx timeout [ 350.101777] Bluetooth: hci7: command tx timeout [ 350.165779] Bluetooth: hci6: command tx timeout [ 351.382006] Bluetooth: hci0: command tx timeout [ 351.638373] Bluetooth: hci1: command tx timeout [ 351.702704] Bluetooth: hci2: command tx timeout [ 351.958060] Bluetooth: hci3: command tx timeout [ 352.086130] Bluetooth: hci5: command tx timeout [ 352.087425] Bluetooth: hci4: command tx timeout [ 352.150252] Bluetooth: hci7: command tx timeout [ 352.213881] Bluetooth: hci6: command tx timeout [ 353.429797] Bluetooth: hci0: command tx timeout [ 353.685755] Bluetooth: hci1: command tx timeout [ 353.748792] Bluetooth: hci2: command tx timeout [ 354.005734] Bluetooth: hci3: command tx timeout [ 354.132864] Bluetooth: hci5: command tx timeout [ 354.132905] Bluetooth: hci4: command tx timeout [ 354.196771] Bluetooth: hci7: command tx timeout [ 354.260845] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:34:15 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c59908 RDI=ffff88802ebba638 RBP=ffffffff85c59908 RSP=ffff88802eb8fe08 R8 =00000000ffffffff R9 =fffffbfff0fe15e4 R10=0000000000000001 R11=0000000000000000 R12=ffff88802ebb9bc0 R13=ffff88802ebba610 R14=00000000ffffffff R15=ffff88802ebba638 RIP=ffffffff84a8ded0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbd1bb18540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbd1bc78270 CR3=000000003ac86000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88806cf09a40 RBX=ffff88806cf09ad8 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806cf09ab0 RBP=ffff88802ebbb780 RSP=ffff88806cf099f0 R8 =0000000000000001 R9 =0000000000000000 R10=ffff88806cf09a40 R11=0000000000000000 R12=0000000000000000 R13=ffff88806cf09a68 R14=ffff88802ebbb780 R15=ffff88806cf09a40 RIP=ffffffff8134b31e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f36491381f0 CR3=0000000019986000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000