[ 62.605917] audit: type=1400 audit(1737968257.915:6): avc: denied { checkpoint_restore } for pid=218 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:4740' (ECDSA) to the list of known hosts. 2025/01/27 08:57:44 fuzzer started 2025/01/27 08:57:44 dialing manager at localhost:40883 syzkaller login: [ 69.321609] cgroup: Unknown subsys name 'net' [ 69.384195] cgroup: Unknown subsys name 'cpuset' [ 69.400945] cgroup: Unknown subsys name 'rlimit' [ 73.860996] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/27 08:58:01 syscalls: 2217 2025/01/27 08:58:01 code coverage: enabled 2025/01/27 08:58:01 comparison tracing: enabled 2025/01/27 08:58:01 extra coverage: enabled 2025/01/27 08:58:01 setuid sandbox: enabled 2025/01/27 08:58:01 namespace sandbox: enabled 2025/01/27 08:58:01 Android sandbox: enabled 2025/01/27 08:58:01 fault injection: enabled 2025/01/27 08:58:01 leak checking: enabled 2025/01/27 08:58:01 net packet injection: enabled 2025/01/27 08:58:01 net device setup: enabled 2025/01/27 08:58:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/27 08:58:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/27 08:58:01 USB emulation: enabled 2025/01/27 08:58:01 hci packet injection: enabled 2025/01/27 08:58:01 wifi device emulation: enabled 2025/01/27 08:58:01 802.15.4 emulation: enabled 2025/01/27 08:58:01 fetching corpus: 50, signal 8752/10147 (executing program) 2025/01/27 08:58:01 fetching corpus: 100, signal 10191/12797 (executing program) 2025/01/27 08:58:01 fetching corpus: 112, signal 10897/14671 (executing program) 2025/01/27 08:58:01 fetching corpus: 112, signal 10897/15933 (executing program) 2025/01/27 08:58:01 fetching corpus: 112, signal 10897/17202 (executing program) 2025/01/27 08:58:01 fetching corpus: 112, signal 10897/18487 (executing program) 2025/01/27 08:58:01 fetching corpus: 112, signal 10897/19756 (executing program) 2025/01/27 08:58:01 fetching corpus: 112, signal 10897/21007 (executing program) 2025/01/27 08:58:01 fetching corpus: 112, signal 10897/22255 (executing program) 2025/01/27 08:58:01 fetching corpus: 112, signal 10897/23484 (executing program) 2025/01/27 08:58:02 fetching corpus: 112, signal 10897/24698 (executing program) 2025/01/27 08:58:02 fetching corpus: 112, signal 10897/25944 (executing program) 2025/01/27 08:58:02 fetching corpus: 112, signal 10897/27172 (executing program) 2025/01/27 08:58:02 fetching corpus: 112, signal 10897/28461 (executing program) 2025/01/27 08:58:02 fetching corpus: 112, signal 10897/29208 (executing program) 2025/01/27 08:58:02 fetching corpus: 112, signal 10897/29208 (executing program) 2025/01/27 08:58:05 starting 8 fuzzer processes 08:58:05 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = epoll_create(0x9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000100)={0x0, "9000db0ab938196e4f565dec5fc639d5"}) inotify_add_watch(r1, &(0x7f0000001100)='./file0/file0\x00', 0x1000000) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000001140)=0x0) kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000001180)={r4, 0xffffffffffffffff, 0x200}) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000011c0)=""/15) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xa8, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x814) truncate(&(0x7f00000013c0)='./file0\x00', 0xd37) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0x8c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc0000000}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40040}, 0x40002) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000015c0), &(0x7f0000001600)=0xc) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000001640)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000001680)=0x4) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f00000016c0)=0x3) 08:58:05 executing program 1: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.opaque\x00', &(0x7f00000001c0)=""/100, 0x64) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x38000]}, 0x8) mknodat(r2, &(0x7f0000000280)='./file0/file0\x00', 0xc000, 0x9) mount$cgroup(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x800040, &(0x7f0000000340)={[{@xattr}], [{@obj_user={'obj_user', 0x3d, '-'}}, {@appraise_type}]}) r3 = getpgid(0x0) getgroups(0x4, &(0x7f0000000440)=[r1, r1, 0xee00, r1]) r5 = accept4$bt_l2cap(r2, &(0x7f0000000480)={0x1f, 0x0, @none}, &(0x7f00000004c0)=0xe, 0x800) clock_gettime(0x0, &(0x7f0000000fc0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000f00)=[{{&(0x7f0000000500)=@alg, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/12, 0xc}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f0000000700)=""/85, 0x55}], 0x4, &(0x7f00000007c0)=""/89, 0x59}, 0x200}, {{&(0x7f0000000840)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, &(0x7f0000000980)=""/37, 0x25}, 0x1}, {{&(0x7f00000009c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000a40)=""/128, 0x80}, {&(0x7f0000000ac0)=""/59, 0x3b}, {&(0x7f0000000b00)=""/254, 0xfe}, {&(0x7f0000000c00)=""/159, 0x9f}, {&(0x7f0000000cc0)=""/38, 0x26}, {&(0x7f0000000d00)=""/237, 0xed}, {&(0x7f0000000e00)=""/58, 0x3a}], 0x7, &(0x7f0000000ec0)=""/6, 0x6}, 0x6}], 0x3, 0x40000040, &(0x7f0000001000)={r6, r7+10000000}) sendmsg$unix(r2, &(0x7f00000010c0)={&(0x7f0000000380)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r3, r0, r4}}}, @rights={{0x28, 0x1, 0x1, [r2, r5, r2, r2, r8, r2]}}], 0x48, 0x4}, 0x4004800) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000001100), &(0x7f0000001140)=@ng={0x4, 0x2, "f29355fb1796fbb254b3c20bd16a659945fd"}, 0x14, 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001180)=0x0) ioprio_set$pid(0x2, r9, 0x2000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000011c0)={'syz_tun\x00', {0x2, 0x0, @remote}}) r10 = signalfd4(r5, &(0x7f0000001200)={[0x9]}, 0x8, 0x0) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) ppoll(&(0x7f0000001240)=[{r10, 0x431}, {r8, 0x1000}, {r2, 0x8401}], 0x3, &(0x7f00000012c0)={r11, r12+60000000}, &(0x7f0000001300)={[0x4]}, 0x8) statfs(&(0x7f0000001340)='./file0/file0\x00', &(0x7f0000001380)=""/77) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0/file0\x00', &(0x7f0000001440)={0x2000, 0xa2, 0x9}, 0x18) 08:58:05 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x2}, @release={0x40046306, 0x1}, @increfs={0x40046304, 0x3}], 0x57, 0x0, &(0x7f0000000080)="434408453885600ba35076df2bec66138ee6c86e70249178d9dd1cf8fa92afaff585196e8b344fe59fa0c308a68bdbc7237ce6882faf5c8cafc232afd32e282acd846a3fcca650ddd5f054fad7a12de766fa18bcabb30f"}) r1 = dup2(r0, r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000180)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r3 = openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000200)={0x0, @aes128, 0x0, @desc3}) mount$cgroup2(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x802, &(0x7f00000002c0)={[{@memory_recursiveprot}, {}, {}, {@subsystem='hugetlb'}, {@memory_localevents}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x58, 0x36, 0x39, 0x64, 0x33, 0x38, 0x36], 0x2d, [0x39, 0x34, 0x62, 0x37], 0x2d, [0x0, 0x32, 0x33, 0x62], 0x2d, [0x64, 0x30, 0x39, 0x54], 0x2d, [0x31, 0x3d, 0x34, 0xd, 0x38, 0x31, 0x34, 0x61]}}}, {@euid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '.'}}]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000003c0)="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") bind$bt_l2cap(r4, &(0x7f00000004c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x1}, 0xe) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000500)) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000540)={0x2, 0xffffffff, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r6 = dup2(r5, r5) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x7, 0x1, 0xff, 0x1, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x8, @perf_config_ext={0x8, 0x1f}, 0x200, 0x4, 0x9b, 0x4, 0x7, 0x4, 0x8, 0x0, 0x2, 0x0, 0x1}, r4, 0x0, r6, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x1, 0x4, &(0x7f00000009c0)=[{&(0x7f0000000700), 0x0, 0x3}, {&(0x7f0000000740)="b7bdaa9dbc3345d32e7f72c2f9eaf4c7d57f05c1c654660a03f5825cfc549b4f1bc1ecb2da725d56b7afb12f12544dad8390146e2fae16fd8a59513d427dbc06a288cb734e78694aae8fe80afc07d9a075e23b720ee0cebdd4bcefd9ed678e8c2fd2b925d7d3038f30e77ba771f43291b9e0435b7284465793f612971f233b1b4185806572246166b57c", 0x8a, 0x6}, {&(0x7f0000000800)="b2a4220eca503db57429a65656fa93d01820b0f36a861e2fd427d0756631c7f31cd926617db1eaa1a9c6146282f24aca375ed94f5f198b65269da5ebe232d147e6908125a8529950507ec6ea2cfde6714fbcade73532fcb040d9117e9dc92c3aa1b4c9b5f25bdfb2423a72f7b1226487db01c1edaaab871a43fa9b4211de485f06e8a93f9f1ff3f77cc913a81917780201e80c0dfd98762ad0ee44f3163e7ca88728a3347de787ef6a7200378eb303e7eeca83c594f7d5609ba267cbf799a656e5a8ffc21db106d8d78f9b76dcae2c71f6080277b1bd8409da3a98b6312a150588ab680e199b3dd3", 0xe8, 0x6}, {&(0x7f0000000900)="ebef3c54af9751faf5be0487efb92682a7fe9de45d1f4837c07cf2832604fcf05fc1b49428ca49a4f66249d6cf4498512b02c041782e3a9e27814555a61fd64744f2a21c4dc200fc62ed1fbdd07bcdac2368254420ed5dd1dd18dc3696d56b69b3b19eb8935aeb36a194a8c53fa28dc2f0e2e8d1996fb7c2f5c0e466ec1ec5f09e8258537a414cf8e52c885777501927d125e1993ad04fcc2aaaf256e0e43a2476187081", 0xa4, 0x3}], 0x40020, &(0x7f0000000a40)={[{@uid={'uid', 0x3d, 0xee01}}, {@nojoliet}, {@check_relaxed}, {@block}, {@nojoliet}, {@hide}, {@check_relaxed}, {@map_acorn}, {@gid={'gid', 0x3d, 0xee00}}], [{@seclabel}, {@obj_type={'obj_type', 0x3d, 'memory_recursiveprot'}}, {@uid_lt={'uid<', 0xee01}}, {@euid_lt={'euid<', 0xee00}}, {@uid_gt}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, ',!'}}, {@hash}, {@subj_user={'subj_user', 0x3d, '/proc/asound/seq/clients\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'smackfsdef'}}]}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000bc0)={r2, 0xff, 0xbe, 0x7ea}) 08:58:05 executing program 3: recvmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000002900)=[{&(0x7f0000000480)=""/2, 0x2}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)=""/69, 0x45}, {&(0x7f0000000640)=""/145, 0x91}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/224, 0xe0}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x8, &(0x7f0000002980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x40}, 0x0) getresuid(&(0x7f0000002a40)=0x0, &(0x7f0000002a80), &(0x7f0000002ac0)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000002b00)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002b80)=""/100, 0x64}, {&(0x7f0000002c00)=""/87, 0x57}, {&(0x7f0000002c80)=""/14, 0xe}, {&(0x7f0000002cc0)=""/139, 0x8b}, {&(0x7f0000002d80)=""/197, 0xc5}], 0x5, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x123) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200, 0x5, &(0x7f0000000380)=[{&(0x7f0000000080)="e3011cb16e158138d9bb8135ca76d34cb4613d6c415fd1da4272ba61ca98deff9a612d8e0af2b9451aca3c23e91952e825c0b29d175edf9abd31e04f1c836e946b181238773908fddcfd5a4e1a", 0x4d, 0xe3}, {&(0x7f0000000100)="3802b55f39092d76c19f58e04cfaadbec8b0072c55a8153a0673936ba81944175df54188c0687118aa97477d2d4ee64f65e2778449f0d8b7e092d10bd454755181339a8463d30efa08dfb9b03fe65e3cc0b6fc9fd273930c22a4c5238d6fb8a6e989e08733250e33e9de31b8b531dc65851936dbfeed69db798366a8a19475b03269fa432b58d55f7ff924f677a19e6727b415cfdb1352c8d5fdc8869e1d0f63f2660d12027b6faf01a644b2b9c369ac18749146db5616a4cbf921c814f7da01c43867f72b5815b12409186b41618005e72f337c7016d6b4db", 0xd9, 0x8}, {&(0x7f0000000200)="c7496cfa329e8ff4ff752b4cc4933e4763783ffd6af19664b610c7ef91eef2490cae7c0b69f8b7fbd1faacb659b430784e1af7ea30447b790cff2646cb907963ccb4e458dc7075", 0x47, 0x6}, {&(0x7f0000000280)="a1c3deaacdf3437e632376c08921214c2f04f0ec86536356ed8a0b89b550a2c4ce65a68196fcfc782cd28e125debbbbfdf438a713a45b2a69985071e5344c66033f345bc1a3c519d2cea259d406315a622c2c9fc1165eba3ab931ba84b6ca341ce086eaba9594c2becc7470ef535daef01ac76f4a58e78a9309dfe651071035a01ff0866623e5f696e81e75587a3af8d77abdcc1538a8ed0fe4d598727f97c744b", 0xa1, 0x7fffffff}, {&(0x7f0000000340)="ef6e77173f13f760dc456c07011b69e9f272a63f9dcbd2aa88a04823d1a3facd0f982caad6067e2aea0a653da1ec9b70b19911e3a0ff", 0x36, 0x9}], 0x223c00, &(0x7f0000002f80)={[{@unhide}, {@map_off}, {@mode={'mode', 0x3d, 0x9}}, {@map_acorn}, {@uid={'uid', 0x3d, r0}}, {@sbsector}, {@uid={'uid', 0x3d, r1}}, {@map_normal}, {@gid={'gid', 0x3d, r2}}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x35, 0x61, 0x37, 0x64, 0x36, 0x32, 0x33], 0x2d, [0x32, 0x61, 0x39, 0x36], 0x2d, [0x31, 0x30, 0x64, 0x66], 0x2d, [0x62, 0x62, 0x31, 0x38], 0x2d, [0x54, 0x34, 0x61, 0x3e, 0x66, 0x36, 0x34, 0x64]}}}, {@euid_eq}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@hash}, {@subj_type={'subj_type', 0x3d, '(-,\\:&*.'}}, {@euid_lt={'euid<', 0xee00}}, {@subj_user={'subj_user', 0x3d, '\xe4'}}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000030c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x5) recvmsg$unix(0xffffffffffffffff, &(0x7f0000005940)={&(0x7f0000003100), 0x6e, &(0x7f00000057c0)=[{&(0x7f0000003180)=""/180, 0xb4}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/186, 0xba}, {&(0x7f0000004300)=""/18, 0x12}, {&(0x7f0000004340)=""/142, 0x8e}, {&(0x7f0000004400)=""/241, 0xf1}, {&(0x7f0000004500)=""/248, 0xf8}, {&(0x7f0000004600)=""/160, 0xa0}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/213, 0xd5}], 0xa, &(0x7f0000005880)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x40000000) r8 = creat(&(0x7f0000005a00)='./file0/file0\x00', 0x30) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000005a40)={{0x1, 0x1, 0x18, r5, {0xf7}}, './file0\x00'}) recvmsg$unix(r3, &(0x7f0000005f40)={&(0x7f0000005a80)=@abs, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000005b00)=""/241, 0xf1}, {&(0x7f0000005c00)=""/162, 0xa2}, {&(0x7f0000005cc0)=""/2, 0x2}, {&(0x7f0000005d00)=""/145, 0x91}], 0x4, &(0x7f0000005e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x128}, 0x20) mount$9p_fd(0x0, &(0x7f0000005980)='./file0\x00', &(0x7f00000059c0), 0x0, &(0x7f0000005f80)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_uid}, {@mmap}, {@access_user}], [{@seclabel}, {@uid_gt={'uid>', r11}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_lt={'fowner<', r7}}, {@smackfsroot={'smackfsroot', 0x3d, 'subj_type'}}]}}) r12 = creat(&(0x7f0000006080)='./file0\x00', 0x44) ioctl$BTRFS_IOC_RESIZE(r12, 0x50009403, &(0x7f00000060c0)={{r8}, {@void, @actul_num={@val=0x2b, 0x1, 0x54}}}) r13 = signalfd(r10, &(0x7f0000006100)={[0x5]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r13, 0xc0189373, &(0x7f0000006140)={{0x1, 0x1, 0x18, r6, {0xcf5}}, './file0/file0\x00'}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000061c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000006200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000006300)={&(0x7f0000006180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000062c0)={&(0x7f0000006240)={0x64, r15, 0x700, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x3, 0x23}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4008005) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r6, 0xf505, 0x0) fcntl$F_GET_RW_HINT(r14, 0x40b, &(0x7f0000006340)) fcntl$setstatus(r9, 0x4, 0x2000) [ 90.653890] audit: type=1400 audit(1737968285.967:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:58:06 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200440, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "19d05ecaf54be6fc2e3dbb0b985fba969e"}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x54b5a2eaf991f815) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000280)) r2 = syz_io_uring_complete(0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000002c0)={'hsr0\x00'}) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f2, 0x20, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008001) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xff}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xd7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000844) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2d, 0x7, 0x1f, 0x3, 0x14, @private2, @mcast2, 0x10, 0x80, 0x1, 0x80}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = accept$inet(r2, &(0x7f0000000740)={0x2, 0x0, @private}, &(0x7f0000000780)=0x10) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000007c0)=""/83, &(0x7f0000000840)=0x53) recvmsg$unix(r0, &(0x7f0000001ac0)={&(0x7f0000000880), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/139, 0x8b}], 0x2, &(0x7f0000001a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) ioctl$SG_SCSI_RESET(r9, 0x2284, 0x0) r10 = socket$netlink(0x10, 0x3, 0x15) r11 = syz_mount_image$nfs(&(0x7f0000001c40), &(0x7f0000001c80)='./file0\x00', 0x3, 0x1, &(0x7f0000001d40)=[{&(0x7f0000001cc0)="dcdd1401cc7e4694f88fa9890fb5088dc57b73f13132ce53c90c8a541341c48fa6adb532e07d422b84944b0130281babd6d04fc1e5b6de89e0568d8673f1f8568d23172dcf9a048a1ef7a5e1ab20937912ba4b0720b1807c7612068500fc090d26ff", 0x62, 0x3ff}], 0x800, &(0x7f0000001d80)={[{'!'}, {'syz0\x00'}], [{@subj_type={'subj_type', 0x3d, '!(!:)'}}]}) r12 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001dc0), 0x701004, 0x0) ppoll(&(0x7f0000001e40)=[{r10, 0x100}, {r11, 0x406}, {r7, 0x605}, {r12, 0x12}, {0xffffffffffffffff, 0x104a}, {r9, 0x400}, {r6, 0x6}, {r8, 0x4005}], 0x8, &(0x7f0000001e80)={0x77359400}, &(0x7f0000001ec0)={[0xfffffffffffffbfe]}, 0x8) 08:58:06 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000010) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2b}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3b}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x68}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044980}, 0x20000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000880) r7 = open_tree(r1, &(0x7f0000000640)='./file0\x00', 0x1) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000680)={'mangle\x00', 0x0, [0x1, 0x0, 0x40000000, 0x8, 0x2]}, &(0x7f0000000700)=0x54) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fsync(r8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r7, {r7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0/file0\x00'}) connect(r9, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x3, 0x1, 0x3, 0x4}}, 0x80) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f00000008c0)="a22710029e13b4a0db51152e5f55e2f7a8a9dab8541858c2c75e83901e51dd94cab028caa23ddf271c02d52144d50da0830fb37f889bccd1ecb0016e5f9c0f7885fd864f1832c855a23de5fd65c56db177f1741f4e5b9a820fcff1e9166d986b9c53799dcc2083a4308b08b5fd55", 0x6e}], 0x1, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private=0xa010102}}}], 0x38}, 0x4041) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0xfa7ea6bb76946435}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000855}, 0x58040) 08:58:06 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x62}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x4000801) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x11c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x6a}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe9, 0xbe, "08c11985746770229115eba9335e5d6fd1581491c91e53ed09754603d11cfcbd2ce5c70f012281b60d4027709edf8c27fc4696d8097caf661b3efa3940b6ff4cc892a0a637400fdff1bf034880d9570e6f971a59adc6b0b06a1f98668ae545622a5acbaac6fcd6cff2ed0bcd86708a5e2e2cdd40ab949dec65ce727f0287a42b204f04a534dc92c351757bbe9f79219ad9770b0e3f445809219faae62a409cb86914da2d241f8a87c7b92b6b9367c304d0248d805c20cdea448a9e8e0a857b6fd320c4e0e93a9519693124233132eea9b9197853dbdaa5c58316d6d3ed1cab0c50a428953e"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8000}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20006810}, 0x48880) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x24}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0xc4) r3 = syz_open_dev$vcsu(&(0x7f0000000500), 0x5, 0x501a02) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8810) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x35}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x150, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @loopback, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa631}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x729}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x877, @remote, 0x2}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x84, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x62}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff38}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x4}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1fa}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xb7}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x228100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x78, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:dhcpd_initrc_exec_t:s0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x44008100}, 0x40845) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8881}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9e, 0x6f}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12ee}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7dc}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c090}, 0x810) 08:58:06 executing program 7: sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x40048010) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x80000000]}, 0x8, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x34}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x3b}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x40000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040001}, 0x1400) setsockopt$inet_opts(r1, 0x0, 0xf, &(0x7f0000000700)="a0eef01fba26e74a23b3e371d08267af0fd1ab1f7ae52627b366c259d81aec61d8d5f399dd9936f4a61a2afb2d9fa0c31eeab2d2bfe3445ce65c99a8cc3d2aba1d0399056f1af84a468cc8c0f2b40a08a3d316c3e90b58904a27fae766b14f3606fe48bc2f5c4f1cf3fcf4ac375d239f10fb468009ceefdb96c3450c6b618b1aa7f42687634f39469a88a9cba23056a4c51cd528acf0e4d182576bd57578d591006a9568b20f1d5633be23161d61d44e677d47c5d6fb2882e4bbd18086f8fecdda2d645671aee4b8c0cf66e3f3e7821d8730ac37e6ccd72be84080331c153fe48098126cd14791af10", 0xe9) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000980)={&(0x7f0000000800), 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb5f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20014800) r5 = memfd_secret(0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x70, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24044850}, 0x4044040) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xe0, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b, 0x19}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0xe}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r6 = signalfd4(r1, &(0x7f0000000e00)={[0x81]}, 0x8, 0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, r7, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2d}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40091}, 0x48011) [ 92.260537] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.262602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.269512] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.272495] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.274443] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.276953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.278911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.282490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.284591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.284853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.286247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.291925] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.295665] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.295913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.299613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.305792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.306805] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.307711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.318938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.320940] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.324827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.327424] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.332302] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.335177] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.338622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.352204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.359528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.361153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.363713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.367697] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.375635] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.377672] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.382028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.383441] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.389803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.403885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.407988] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.410084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.412793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.419599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.429753] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.431742] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.460752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.478765] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.480502] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.497043] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.500971] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.516114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.401768] Bluetooth: hci2: command tx timeout [ 94.401795] Bluetooth: hci1: command tx timeout [ 94.402608] Bluetooth: hci7: command tx timeout [ 94.465620] Bluetooth: hci3: command tx timeout [ 94.465670] Bluetooth: hci0: command tx timeout [ 94.529567] Bluetooth: hci5: command tx timeout [ 94.530116] Bluetooth: hci4: command tx timeout [ 94.593423] Bluetooth: hci6: command tx timeout [ 96.449475] Bluetooth: hci7: command tx timeout [ 96.450504] Bluetooth: hci1: command tx timeout [ 96.450966] Bluetooth: hci2: command tx timeout [ 96.514568] Bluetooth: hci3: command tx timeout [ 96.514615] Bluetooth: hci0: command tx timeout [ 96.577406] Bluetooth: hci4: command tx timeout [ 96.578773] Bluetooth: hci5: command tx timeout [ 96.641650] Bluetooth: hci6: command tx timeout [ 98.499422] Bluetooth: hci2: command tx timeout [ 98.499490] Bluetooth: hci7: command tx timeout [ 98.500304] Bluetooth: hci1: command tx timeout [ 98.561410] Bluetooth: hci3: command tx timeout [ 98.564379] Bluetooth: hci0: command tx timeout [ 98.626796] Bluetooth: hci5: command tx timeout [ 98.627812] Bluetooth: hci4: command tx timeout [ 98.690417] Bluetooth: hci6: command tx timeout [ 100.545540] Bluetooth: hci7: command tx timeout [ 100.546811] Bluetooth: hci2: command tx timeout [ 100.547932] Bluetooth: hci1: command tx timeout [ 100.610645] Bluetooth: hci0: command tx timeout [ 100.611679] Bluetooth: hci3: command tx timeout [ 100.673453] Bluetooth: hci4: command tx timeout [ 100.674666] Bluetooth: hci5: command tx timeout [ 100.737522] Bluetooth: hci6: command tx timeout [ 151.912715] syz-executor.6 (282) used greatest stack depth: 24016 bytes left [ 154.195018] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.203026] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.208237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.214947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.217868] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.219892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.445144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.450665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.456635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.469489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.477368] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.480550] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.482666] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.489006] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.490614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.492737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.495655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.507992] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.511474] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.515197] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.521526] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.529474] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.539832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.544678] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.548634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.550529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.575460] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.575499] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.581217] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.582631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.587051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.589078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.589467] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.591758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.597589] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.602002] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.617698] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.637050] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.644840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.652520] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.656703] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.671768] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.673782] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.680603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.695815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.737440] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.754992] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.762431] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.290532] Bluetooth: hci0: command tx timeout [ 156.609909] Bluetooth: hci1: command tx timeout [ 156.610000] Bluetooth: hci2: command tx timeout [ 156.673501] Bluetooth: hci3: command tx timeout [ 156.673893] Bluetooth: hci4: command tx timeout [ 156.865721] Bluetooth: hci7: command tx timeout [ 156.866494] Bluetooth: hci5: command tx timeout [ 156.867502] Bluetooth: hci6: command tx timeout [ 158.338390] Bluetooth: hci0: command tx timeout [ 158.658399] Bluetooth: hci1: command tx timeout [ 158.659236] Bluetooth: hci2: command tx timeout [ 158.721475] Bluetooth: hci4: command tx timeout [ 158.722430] Bluetooth: hci3: command tx timeout [ 158.915339] Bluetooth: hci6: command tx timeout [ 158.916155] Bluetooth: hci7: command tx timeout [ 158.916974] Bluetooth: hci5: command tx timeout [ 160.385670] Bluetooth: hci0: command tx timeout [ 160.706033] Bluetooth: hci2: command tx timeout [ 160.707386] Bluetooth: hci1: command tx timeout [ 160.769442] Bluetooth: hci3: command tx timeout [ 160.770569] Bluetooth: hci4: command tx timeout [ 160.961621] Bluetooth: hci7: command tx timeout [ 160.962134] Bluetooth: hci6: command tx timeout [ 160.963335] Bluetooth: hci5: command tx timeout [ 162.433385] Bluetooth: hci0: command tx timeout [ 162.755388] Bluetooth: hci1: command tx timeout [ 162.756032] Bluetooth: hci2: command tx timeout [ 162.819401] Bluetooth: hci3: command tx timeout [ 162.819605] Bluetooth: hci4: command tx timeout [ 163.010553] Bluetooth: hci7: command tx timeout [ 163.011210] Bluetooth: hci5: command tx timeout [ 163.011899] Bluetooth: hci6: command tx timeout [ 217.044782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.047547] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.048811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.053755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.060750] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.066087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.107966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.115058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.117113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.130488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.136157] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.139110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.242874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.252613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.256062] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.277795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.299761] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.304183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.322161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.339432] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.342708] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.353804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.373646] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.379581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.390144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.406913] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.430815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.435505] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.442596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.445759] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.450563] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.460454] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.461791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.463387] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.469702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.474499] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.484121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.503141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.504565] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.510574] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.522789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.540726] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.545885] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.548608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.575625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.582833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.617679] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.658680] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.138434] Bluetooth: hci0: command tx timeout [ 219.203528] Bluetooth: hci1: command tx timeout [ 219.393941] Bluetooth: hci2: command tx timeout [ 219.458850] Bluetooth: hci3: command tx timeout [ 219.586462] Bluetooth: hci5: command tx timeout [ 219.649797] Bluetooth: hci4: command tx timeout [ 219.713399] Bluetooth: hci6: command tx timeout [ 219.714474] Bluetooth: hci7: command tx timeout [ 221.185484] Bluetooth: hci0: command tx timeout [ 221.249361] Bluetooth: hci1: command tx timeout [ 221.443445] Bluetooth: hci2: command tx timeout [ 221.506349] Bluetooth: hci3: command tx timeout [ 221.633440] Bluetooth: hci5: command tx timeout [ 221.697352] Bluetooth: hci4: command tx timeout [ 221.761864] Bluetooth: hci7: command tx timeout [ 221.762380] Bluetooth: hci6: command tx timeout [ 223.234314] Bluetooth: hci0: command tx timeout [ 223.297432] Bluetooth: hci1: command tx timeout [ 223.489387] Bluetooth: hci2: command tx timeout [ 223.553346] Bluetooth: hci3: command tx timeout [ 223.681307] Bluetooth: hci5: command tx timeout [ 223.747301] Bluetooth: hci4: command tx timeout [ 223.809318] Bluetooth: hci6: command tx timeout [ 223.809785] Bluetooth: hci7: command tx timeout [ 225.281357] Bluetooth: hci0: command tx timeout [ 225.345428] Bluetooth: hci1: command tx timeout [ 225.538316] Bluetooth: hci2: command tx timeout [ 225.601312] Bluetooth: hci3: command tx timeout [ 225.729315] Bluetooth: hci5: command tx timeout [ 225.793366] Bluetooth: hci4: command tx timeout [ 225.858287] Bluetooth: hci7: command tx timeout [ 225.858307] Bluetooth: hci6: command tx timeout [ 279.059397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.063187] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.065903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.073534] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.078635] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.081842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.200642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.205108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.207531] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.215925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.218876] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.221203] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.255352] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.269809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.273827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.300793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.320004] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.334198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.378116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.419669] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.421696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.430645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.431492] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.436479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.441870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.452542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.454802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.461474] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.464142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.466879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.470512] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.471761] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.472922] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.475845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.477480] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.478668] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.479673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.488178] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.490989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.493087] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.511810] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.517646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.539783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.541069] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.545735] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.554408] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.557678] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.559779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.154307] Bluetooth: hci0: command tx timeout [ 281.282353] Bluetooth: hci1: command tx timeout [ 281.409304] Bluetooth: hci2: command tx timeout [ 281.537441] Bluetooth: hci5: command tx timeout [ 281.537509] Bluetooth: hci4: command tx timeout [ 281.538195] Bluetooth: hci3: command tx timeout [ 281.601392] Bluetooth: hci7: command tx timeout [ 281.601561] Bluetooth: hci6: command tx timeout [ 283.202294] Bluetooth: hci0: command tx timeout [ 283.331258] Bluetooth: hci1: command tx timeout [ 283.457397] Bluetooth: hci2: command tx timeout [ 283.585321] Bluetooth: hci3: command tx timeout [ 283.586036] Bluetooth: hci4: command tx timeout [ 283.586732] Bluetooth: hci5: command tx timeout [ 283.649462] Bluetooth: hci7: command tx timeout [ 283.649635] Bluetooth: hci6: command tx timeout [ 285.249290] Bluetooth: hci0: command tx timeout [ 285.377823] Bluetooth: hci1: command tx timeout [ 285.505362] Bluetooth: hci2: command tx timeout [ 285.634277] Bluetooth: hci5: command tx timeout [ 285.634305] Bluetooth: hci4: command tx timeout [ 285.634755] Bluetooth: hci3: command tx timeout [ 285.698327] Bluetooth: hci7: command tx timeout [ 285.698816] Bluetooth: hci6: command tx timeout [ 287.297285] Bluetooth: hci0: command tx timeout [ 287.426374] Bluetooth: hci1: command tx timeout [ 287.554416] Bluetooth: hci2: command tx timeout [ 287.681368] Bluetooth: hci4: command tx timeout [ 287.681862] Bluetooth: hci5: command tx timeout [ 287.682869] Bluetooth: hci3: command tx timeout [ 287.745319] Bluetooth: hci7: command tx timeout [ 287.746335] Bluetooth: hci6: command tx timeout [ 341.328794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.334337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.337101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.344742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.347941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.350745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.418904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.426875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.433642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.442354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.447359] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.449658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.482777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.503378] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.510639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.539813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.568587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.577758] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.581265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.588823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.591678] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.597788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.602544] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.605590] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.607716] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.611654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.645870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.669787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.679631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.686853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.688918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.713149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.719542] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.728580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.782134] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.787422] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.794576] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.802594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.806664] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.822490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.825683] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.831319] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.836110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.844053] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.853862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.886678] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.907448] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.909422] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.425570] Bluetooth: hci0: command tx timeout [ 343.489303] Bluetooth: hci1: command tx timeout [ 343.681532] Bluetooth: hci2: command tx timeout [ 343.809428] Bluetooth: hci4: command tx timeout [ 343.809569] Bluetooth: hci3: command tx timeout [ 344.001365] Bluetooth: hci5: command tx timeout [ 344.002247] Bluetooth: hci7: command tx timeout [ 344.002802] Bluetooth: hci6: command tx timeout [ 345.473290] Bluetooth: hci0: command tx timeout [ 345.537290] Bluetooth: hci1: command tx timeout [ 345.730530] Bluetooth: hci2: command tx timeout [ 345.857363] Bluetooth: hci4: command tx timeout [ 345.857876] Bluetooth: hci3: command tx timeout [ 346.049344] Bluetooth: hci7: command tx timeout [ 346.049390] Bluetooth: hci5: command tx timeout [ 346.050400] Bluetooth: hci6: command tx timeout [ 347.522478] Bluetooth: hci0: command tx timeout [ 347.585320] Bluetooth: hci1: command tx timeout [ 347.778299] Bluetooth: hci2: command tx timeout [ 347.908342] Bluetooth: hci3: command tx timeout [ 347.908834] Bluetooth: hci4: command tx timeout [ 348.097415] Bluetooth: hci6: command tx timeout [ 348.097472] Bluetooth: hci5: command tx timeout [ 348.098124] Bluetooth: hci7: command tx timeout [ 349.569287] Bluetooth: hci0: command tx timeout [ 349.634479] Bluetooth: hci1: command tx timeout [ 349.825391] Bluetooth: hci2: command tx timeout [ 349.953277] Bluetooth: hci3: command tx timeout [ 349.954303] Bluetooth: hci4: command tx timeout [ 350.146290] Bluetooth: hci5: command tx timeout [ 350.146799] Bluetooth: hci6: command tx timeout [ 350.146825] Bluetooth: hci7: command tx timeout [ 397.191603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.192436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.494450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.495315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.708741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.709481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 VM DIAGNOSIS: 09:03:13 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88806ce09a78 RCX=0000000000000001 RDX=1ffff1100d9c1351 RSI=ffff8880363bfc08 RDI=ffff88806ce09a88 RBP=ffff8880363bfc08 RSP=ffff88806ce099d0 R8 =ffffffff8683e92c R9 =ffff88806ce09ab8 R10=000000000003ab7c R11=0000000000021f4a R12=0000000000000008 R13=ffff8880363b8000 R14=ffff8880363bfc10 R15=ffff88806ce09a78 RIP=ffffffff81348ce8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0b5fba3540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0b5fd8e620 CR3=0000000038fc6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ff00ff00ff00ff00ff00ffffff00 XMM01=010001000100010001000100010100ff XMM02=61305f315f315f4c53534e45504f0030 XMM03=000000000000000000000000004f0030 XMM04=504f0061305f315f315f4c53534e4550 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=fffffbfff0fe15e4 RBX=fffffbfff0fe15e5 RCX=ffffffff814f3e3e RDX=fffffbfff0fe15e5 RSI=0000000000000008 RDI=ffffffff87f0af20 RBP=fffffbfff0fe15e4 RSP=ffff88803d3a68f8 R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=ffffffff87f0af27 R11=0000000000000000 R12=ffff88801ab50000 R13=0000000000000000 R14=ffffffff86405170 R15=0000000000000000 RIP=ffffffff81abc711 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558441b400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f682f37a008 CR3=000000003d23c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000