Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:43471' (ECDSA) to the list of known hosts. 2025/01/29 03:13:05 fuzzer started 2025/01/29 03:13:05 dialing manager at localhost:40187 syzkaller login: [ 68.620947] cgroup: Unknown subsys name 'net' [ 68.727213] cgroup: Unknown subsys name 'cpuset' [ 68.767243] cgroup: Unknown subsys name 'rlimit' 2025/01/29 03:13:20 syscalls: 2217 2025/01/29 03:13:20 code coverage: enabled 2025/01/29 03:13:20 comparison tracing: enabled 2025/01/29 03:13:20 extra coverage: enabled 2025/01/29 03:13:20 setuid sandbox: enabled 2025/01/29 03:13:20 namespace sandbox: enabled 2025/01/29 03:13:20 Android sandbox: enabled 2025/01/29 03:13:20 fault injection: enabled 2025/01/29 03:13:20 leak checking: enabled 2025/01/29 03:13:20 net packet injection: enabled 2025/01/29 03:13:20 net device setup: enabled 2025/01/29 03:13:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 03:13:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 03:13:20 USB emulation: enabled 2025/01/29 03:13:20 hci packet injection: enabled 2025/01/29 03:13:20 wifi device emulation: enabled 2025/01/29 03:13:20 802.15.4 emulation: enabled 2025/01/29 03:13:21 fetching corpus: 50, signal 18174/19718 (executing program) 2025/01/29 03:13:21 fetching corpus: 100, signal 22462/25299 (executing program) 2025/01/29 03:13:21 fetching corpus: 150, signal 27097/30990 (executing program) 2025/01/29 03:13:21 fetching corpus: 200, signal 30394/35247 (executing program) 2025/01/29 03:13:21 fetching corpus: 250, signal 35861/41210 (executing program) 2025/01/29 03:13:21 fetching corpus: 300, signal 36756/43033 (executing program) 2025/01/29 03:13:21 fetching corpus: 350, signal 38552/45537 (executing program) 2025/01/29 03:13:22 fetching corpus: 400, signal 40642/48184 (executing program) 2025/01/29 03:13:22 fetching corpus: 450, signal 41333/49647 (executing program) 2025/01/29 03:13:22 fetching corpus: 500, signal 42785/51635 (executing program) 2025/01/29 03:13:22 fetching corpus: 550, signal 43540/53101 (executing program) 2025/01/29 03:13:22 fetching corpus: 600, signal 44459/54630 (executing program) 2025/01/29 03:13:22 fetching corpus: 650, signal 45599/56275 (executing program) 2025/01/29 03:13:22 fetching corpus: 700, signal 46681/57784 (executing program) 2025/01/29 03:13:23 fetching corpus: 750, signal 47211/58902 (executing program) 2025/01/29 03:13:23 fetching corpus: 800, signal 49315/60865 (executing program) 2025/01/29 03:13:23 fetching corpus: 850, signal 49856/61913 (executing program) 2025/01/29 03:13:23 fetching corpus: 900, signal 50877/63146 (executing program) 2025/01/29 03:13:23 fetching corpus: 950, signal 51344/64072 (executing program) 2025/01/29 03:13:23 fetching corpus: 1000, signal 51894/64994 (executing program) 2025/01/29 03:13:23 fetching corpus: 1050, signal 53795/66537 (executing program) 2025/01/29 03:13:23 fetching corpus: 1100, signal 54651/67568 (executing program) 2025/01/29 03:13:24 fetching corpus: 1150, signal 56550/68939 (executing program) 2025/01/29 03:13:24 fetching corpus: 1200, signal 57047/69680 (executing program) 2025/01/29 03:13:24 fetching corpus: 1250, signal 57598/70410 (executing program) 2025/01/29 03:13:24 fetching corpus: 1300, signal 58430/71157 (executing program) 2025/01/29 03:13:24 fetching corpus: 1350, signal 58847/71760 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/72232 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/72684 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/73145 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/73607 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/74095 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/74567 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/75054 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/75521 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/76008 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/76488 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/76929 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/77217 (executing program) 2025/01/29 03:13:24 fetching corpus: 1355, signal 58877/77217 (executing program) 2025/01/29 03:13:28 starting 8 fuzzer processes 03:13:28 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x488002, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x3ff, 0x1, 0x2, 0x0, 0x0, [{{}, 0xff}, {{}, 0x80000001}]}) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r6 = open_tree(r5, &(0x7f0000000340)='./file0\x00', 0x8000) r7 = accept(r3, 0x0, &(0x7f0000000380)) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x7d}}, './file0\x00'}) r12 = signalfd(r0, &(0x7f0000000580)={[0x400]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="819c8feb5b7164ed82216c93486870c8", 0x10}], 0x1, &(0x7f00000005c0)=[@rights={{0x20, 0x1, 0x1, [r5, r4, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, r2}}}, @rights={{0x2c, 0x1, 0x1, [r4, r10, r4, r4, r11, 0xffffffffffffffff, r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}], 0xd0, 0x20048894}, 0x10) r13 = socket$inet6(0xa, 0x0, 0x8) sendmsg(r13, &(0x7f0000000cc0)={&(0x7f0000000700)=@ax25={{0x3, @bcast, 0x6}, [@bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000780)="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", 0xfc}, {&(0x7f0000000880)="08381d230f205b82553006720df6b860974e70afdd20549c329f8967000fff9defc262777719c1b2dbd0d1ce7be69d99527a78b7b41a4ffb21a893917818979680b4eb479e5b1bd1816aaef6b100dfcf01b7ab96d36fef952526838de13b59b27c9455da35a594318fc30dc0da362e5993d6b205e7eeac7951b1e97c83dd751fc84d432a90405f0b359d", 0x8a}], 0x2, &(0x7f0000000980)=[{0xd8, 0x113, 0x1, "b4f37627c4e8342b9dbd4ba09a1be722d7072713df52bddf773b5fea3941565f3a5f609b8650520364319714daf0247501b6772e4382afbf1e8bebb76b918e0ac8b3eb5b90d3b37f08fe5c30313caa4bcd0a528ecf97aac0d30011eaeec50125712ee4ff38a1f75d71def74b1cc829f2224d68a2f51bbdf2b500696bd7cfa340a854b153fc672a11b48b2aa3d696c5b2aa3efd8907595c61dc39f5e2012c8338839137309ee51f5b9dc9660544e1462f416b7363e891101267677f7201189ca9324099b4a568c5"}, {0xb8, 0x100, 0x75c, "0c50ef9b9604c2a5c04e5f725120593c9f441f63a03fbbc78073a3e85f0366d9db3d19f58e975af8c104d8247348ef329ca41ee55681f5926c21ff63b3c0f13bddf30cbff6d94d2d1427f610a293a07fb0a77749dbb46ad03cc1ed49a60d47ff0b22acc2e0db2f0f115d3891fdc07169ae70d45ab25722a11f4364f485048c5a9434712c79f966ee7b46344f9b1299cdd999c267bd377bba1caab6eb5b41e7bab47b0e6e"}, {0xf0, 0x10a, 0x80000001, "89a6afeeddc072c0d95b9d9a442c55ed7eb192ec28265f75e84f983fd60323e365325ecd665d2b111ae905213b5e9b1b9f85a28121731fff62470bc19b2125e52ad64ef14fb02178bc4308a6801f89d17606a2ac6dc684c3ae0a523716e6666a1e8508a4b6e5ffe34e54e0d88be9b6daf08a8bbdbfbc113c312e6955e93ed2679087d3ec657d2c7f1f4591b95fcdfa6cc6f27e548aebb284567ae2d99ae11a84128ff8f3aea3539fdefda379ed17b269cdf3d2078a3abfa06ea723250c91a4813930a2c00ca8902285392220c5285e2eb54e0aef41d52f29c83323b7"}, {0x88, 0x112, 0x7, "cb65ee73b38b323832324aee399b1b6073a66be69ffc658a4791a8bd76503da1c638bad8eb99298d7d12672b3544050056ff689f57ee4e978e5ae8883937337502dab04f27f7587f787abdde20df2e149b840b5c7225611c74b0b64373ecadd5b110ceade5b6025b5f75464a6102e2fbc3c65808ce30a6"}], 0x308}, 0x1) getsockopt$inet6_int(r13, 0x29, 0x16, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$EXT4_IOC_SWAP_BOOT(r13, 0x6611) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0), 0x14, &(0x7f0000000e40)={&(0x7f0000000e00)='+', 0x1}, 0x1, 0x0, 0x0, 0x4900}, 0x24040040) 03:13:28 executing program 2: getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r0 = open(&(0x7f0000000080)='./file0\x00', 0x400201, 0x104) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_io_uring_setup(0x6969, &(0x7f0000000300)={0x0, 0x2cba, 0x2, 0x2, 0x1ab, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x3, 0x100000000, 0x0, 0x1000, 0x6, 0x1}, 0x542) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0xff, 0x80000001, 0x100000001, 0x1ff, 0x7f], 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) readv(r1, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/51, 0x33}, {&(0x7f00000016c0)=""/245, 0xf5}, {&(0x7f00000017c0)=""/94, 0x5e}, {&(0x7f0000001840)=""/91, 0x5b}, {&(0x7f00000018c0)=""/184, 0xb8}], 0x7) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0xe, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001b00)={r1, 0x5, 0x876, 0x9}) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000001b40)) recvmmsg$unix(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001b80)=""/197, 0xc5}, {&(0x7f0000001c80)=""/226, 0xe2}], 0x2, &(0x7f0000001dc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x58}}], 0x1, 0x2040, &(0x7f0000001e80)={0x77359400}) fchown(r3, r5, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001ec0), r4) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0x94, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1c, 0xa8, @random="da29589775fa1b4aa6eaeb43b411760ccb45ccbbe94f44bf"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x22, 0xa8, @random="3376037830e48d14e2a93449f82ef6ba9e29bb922394ce60791aa29619a8"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x94}, 0x1, 0x0, 0x0, 0x41}, 0x11) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000002080)=""/59, &(0x7f00000020c0)=0x3b) openat$dir(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x101040, 0x20) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc084}, 0x8000) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000002240)={@empty, @empty, @private=0xa010100}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000002280)=0xffffffffffffffff, 0x4) 03:13:28 executing program 1: ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000000c0)={@private0, r1}, 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x3, 'veth0_macvtap\x00', {0x800}, 0x9}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000180)={'veth1_virt_wifi\x00', {0x2, 0x0, @empty}}) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x1e0e}, 0x8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x2, 0x2}) r5 = accept$inet6(r2, 0x0, &(0x7f0000000240)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @local}, &(0x7f00000002c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000440)={0x11, @local, 0x4e23, 0x4, 'fo\x00', 0xf9dabeb84d032860, 0x8, 0x64}, 0x2c) fallocate(r2, 0x40, 0x6, 0xffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x81, 0x2260, 0x11, @mcast2, @private1, 0x1, 0x40, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x0, 0x0, 0x34, @remote, @mcast1, 0x1, 0x7, 0x4, 0x7f}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1a0, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x81}, 0x8000) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000008c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10, {0x2, 0x4e22, @broadcast}, 'veth0_to_hsr\x00'}) 03:13:28 executing program 3: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x44084) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2004020}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x6a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc2b, 0x2d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000090) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4807}, 0x20000150) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, 0x2, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xeb}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0x14, 0x0, @random="b0083cf9a873d67a1acc2018d20045fd"}, {0x18, 0x0, @random="dbcf1b65b0f6588aafb66dbd4f6da570acd80be7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xe84}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x1f}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x20040044) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x1, 0x9, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4004000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x410c7ba5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x90) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r3) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, r6, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x480d4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x98, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r7 = syz_io_uring_complete(0x0) sendmsg$AUDIT_USER(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, 0x3ed, 0x200, 0x70bd25, 0x25dfdbff, "2c24dd6f7805c1aa724da9b6bcf24180db35273d3a18509af8d2734aa7e4", [""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x81) [ 90.630481] audit: type=1400 audit(1738120408.204:7): avc: denied { execmem } for pid=277 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:13:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004855}, 0x4044010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x130, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crypt_device_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd4}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0xc1}, 0x5, 0x9c, 0x6, 0x7f, 0x1d, 'syz0\x00', "976f75a60691fd116c5e9626145d05e1c01dfe38346ee60eee65e812f1a18997", "f5225dfc213ab4fe6c31a8790c59e9c2dbc2144bec556f5556c25a87d7481aab", [{0x1, 0xe58, {0x3, 0xe1ea}}, {0x29, 0x1, {0x1, 0x6e53}}, {0x4, 0x6, {0x2, 0x8}}, {0x2, 0x6, {0x3, 0x100}}, {0x4, 0xfcc, {0x3, 0x1}}, {0x40, 0xff, {0x44306b78400a5a43, 0xf8}}, {0x8001, 0x3f, {0x0, 0x200}}, {0x3, 0x3f, {0x0, 0x8}}, {0x4, 0x1, {0x1, 0x1}}, {0x8, 0xa7e, {0x3, 0xffffffff}}, {0x3f, 0xffff, {0x1, 0x7}}, {0x78, 0x8, {0x0, 0x7}}, {0x1, 0xc5ee, {0x3}}, {0x81, 0x0, {0x0, 0x7}}, {0x8001, 0x7ff, {0x1, 0x1}}, {0x20, 0x8, {0x2, 0xcb}}, {0x9aaa, 0xd8, {0x0, 0x6}}, {0x5, 0x7ff, {0x0, 0xffffff00}}, {0x1, 0x2, {0x1, 0x3f}}, {0x2, 0x7f, {0x2, 0xf0}}, {0x3, 0x0, {0x0, 0x7}}, {0xe7dc, 0x2, {0x1, 0x9}}, {0x3, 0x7fff, {0x1, 0x9}}, {0x3, 0x7, {0x1, 0x8001}}, {0x8, 0x7ff, {0x1, 0xfff}}, {0x8fba, 0xd650, {0x7, 0x5}}, {0x5, 0x1f, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0x10000}}, {0xfab4, 0x9, {0x3, 0x6}}, {0x2, 0x2, {0x2, 0x4507}}, {0x5, 0x1, {0x3, 0xfffffff7}}, {0x40, 0x0, {0x0, 0x3}}, {0x0, 0x5, {0x1, 0x4}}, {0x0, 0x9, {0x1, 0x9}}, {0x101, 0x1f, {0x0, 0x1}}, {0x898d, 0x3a, {0x3, 0x57f}}, {0x0, 0x7, {0x0, 0xffff}}, {0x2, 0x6, {0x0, 0x10001}}, {0x1, 0x6, {0x3, 0x81}}, {0x1, 0x0, {0x2, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40804}, 0x20044011) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2240001}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004090}, 0xc0) r5 = pidfd_getfd(r4, r4, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xfc, 0x14, 0x2, 0x70bd28, 0x25dfdbff, {0x27, 0x81}, [@INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "2ab1f5406188dbe511048be9ff4b6efcad9b84e1e932783e6d0974fd33ae2d07f5a341f7d9ce79157d5421af6d98979db768c1c5705aed51581b0d77001fd9af4e99ac67c2e4b698e47dc75fcd9d394ac2f7b4857604d159389691f5b9c34749ce3b9239157ce96039a4eb9542d29705089d5aa858c2cbfd3886cc6e7d61400cb684b8e9adf2748acc88614abe1001d2a2da0a71898a03e68e15d935fbdc9780ebfa4e46ec2aa7cfdbe9022833937d872e63025627bffaa87078c64823d104072ec9f79c488b4935f86a5be9b5954a8c3dd9ac366bb643b00de7394f3ca165aa2e3ca67a"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20004004}, 0x40005) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0x20080, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040081}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000c80)={r4, 0x7e, 0x8, 0x1}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000cc0)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000d40)=[r7, r7, 0xffffffffffffffff, r8, r8, r7, 0xffffffffffffffff, r8], 0x8) 03:13:28 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@private=0xa010100, @in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x4e22, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0xa0, 0x3c, r0, r1}, {0x9, 0x7, 0x72ed00, 0x81, 0x3ff, 0xfffffffffffffff9, 0x0, 0x100000001}, {0x2, 0x5, 0x8001, 0x8}, 0x101, 0x6e6bb4, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x4d5, 0xff}, 0x2, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x81, 0x5}}, 0xe8) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', &(0x7f00000004c0)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\',-+*\x00', &(0x7f00000003c0)='&\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='$+\x00', &(0x7f0000000480)='\x00'], &(0x7f0000000600)=[&(0x7f0000000500)='\x00', &(0x7f0000000540)='%,\'%()-\x00', &(0x7f0000000580)='{(-:,!{)]+}}/!{+:&\x00', &(0x7f00000005c0)='\x00'], 0x400) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r0, 0x4, 0x7f, 0x80, 0x7f, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x40, 0x1, 0x6}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6_vti0\x00', r2, 0x29, 0x3f, 0x1, 0x3f, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7, 0x10, 0x7ff, 0xfffffffb}}) r5 = syz_open_procfs(0x0, &(0x7f0000000800)='uid_map\x00') execveat(r5, &(0x7f0000000840)='./file0\x00', &(0x7f0000000a40)=[&(0x7f0000000880)='ip6gre0\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='[/)@#)\x00', &(0x7f0000000940)='[!#.\x00', &(0x7f0000000980)='\'\x00', &(0x7f00000009c0)='{(-:,!{)]+}}/!{+:&\x00', &(0x7f0000000a00)='ip6_vti0\x00'], &(0x7f0000000a80), 0x100) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'sit0\x00', r2, 0x4, 0x1, 0x2, 0x2, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0x6, 0x6}}) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000bc0)={0x0, @qipcrtr={0x2a, 0xffffffff, 0x2}, @in={0x2, 0x4e21, @private=0xa010101}, @vsock={0x28, 0x0, 0xffffffff}, 0x7f, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000b80)='wlan1\x00', 0x8001, 0x8, 0x9}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000c40)) ioctl$CDROM_MEDIA_CHANGED(r5, 0x5325, 0x5) sendto(r3, &(0x7f0000000c80)="a619ca71576d1b140fd6e6c7a103ee2f26cf972d803bc5ce9b82092a4fffdbd22ad49ad5ccaff6b32b145fc9daefc5783ccc95548fd64d8c269d9c3674d24b098d7ded60264e9bc983b5d50d8b9f2b31b05ac2de81ed6687de37bdaed15abd6e69982c80fad2041917527b006e", 0x6d, 0x8000, &(0x7f0000000d00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000e40)={'ip6tnl0\x00', &(0x7f0000000dc0)={'ip6gre0\x00', r2, 0x4, 0x0, 0x7, 0x0, 0x95edf8b61702f644, @remote, @dev={0xfe, 0x80, '\x00', 0xb}, 0x40, 0x7, 0x7, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001540)={'ip6gre0\x00', &(0x7f00000014c0)={'ip6_vti0\x00', r6, 0x4, 0x3, 0xfd, 0x5, 0x12, @mcast2, @local, 0x7800, 0x7, 0x4, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001580)={'syztnl2\x00', r0, 0x29, 0x4, 0x7, 0x1, 0x30, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x700, 0x3, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001a40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001640)={0x3a8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff800000}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) 03:13:28 executing program 6: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x1ff, 0x2}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080)=0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0xbae, 0x1, 0x4}, 0x1, 0x100000001, 0x7}) r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, &(0x7f00000001c0)=0x80, 0xc0c00) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x20, 0x5}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x84}}, 0x40c1) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000400)={0x2, 0xffffffff, 0x1}) r3 = accept4$inet6(r2, &(0x7f0000000440), &(0x7f0000000480)=0x1c, 0x80000) fsetxattr(r3, &(0x7f00000004c0)=@random={'trusted.', 'netdevsim\x00'}, &(0x7f0000000500)='\x00', 0x1, 0x3) r4 = accept4$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14, 0x800) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@broadcast, @in6=@ipv4={""/10, ""/2, @loopback}}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xe8) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000700)=0x1) ioctl$FICLONE(r2, 0x40049409, r4) recvmsg$unix(r0, &(0x7f0000000bc0)={&(0x7f0000000740), 0x6e, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/27, 0x1b}, {&(0x7f0000000800)=""/68, 0x44}, {&(0x7f0000000880)=""/136, 0x88}, {&(0x7f0000000940)=""/109, 0x6d}, {&(0x7f00000009c0)=""/48, 0x30}, {&(0x7f0000000a00)=""/205, 0xcd}], 0x6, &(0x7f0000000b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40018101) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r7 = dup(r6) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000c40)={0x0, 0x1, 0x9, 0x1, 0x200}) 03:13:28 executing program 7: getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x3f, 0x8a0a1000, 0xfffffff7, 0x8, 0x6]}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @vsock={0x28, 0x0, 0x2711}, @llc={0x1a, 0x4, 0x9, 0x9, 0x9, 0x9, @remote}, 0x56, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)='wg1\x00', 0x6, 0x8, 0x81}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x2001, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0x913, {{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x88) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x0, 0x401, 0xdc9, 0xfff, 0x7, 0xff}, {0x40, 0x1, 0x8, 0x5, 0x8, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) recvfrom$inet(r1, &(0x7f0000000540)=""/22, 0x16, 0x1, &(0x7f0000000580)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000005c0)={'veth1_to_bond\x00', {0x2, 0x0, @broadcast}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6a, 0x3e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000740), &(0x7f0000000780)=@ng={0x4, 0xd, "73805e"}, 0x5, 0x0) r4 = creat(&(0x7f00000007c0)='./file1\x00', 0x108) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000800)={{0x2, 0x4e22, @multicast1}, {0x306, @broadcast}, 0x40, {0x2, 0x4e21, @multicast1}, 'batadv0\x00'}) r5 = accept4$unix(r3, &(0x7f0000000880), &(0x7f0000000900)=0x6e, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000940)={'vlan1\x00'}) lsetxattr$trusted_overlay_upper(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0), &(0x7f0000000a00)={0x0, 0xfb, 0xf0, 0x1, 0x1f, "68eb9712034a31dceb20167f59f42703", "3b292d88ba28bba00a9e99ded32a0e0f39e951e93ba13cdd4522d13f6ab19c98299f43337e37a38c2d0838621b7b7d87c54cbc2094cd86bc129ce51d980354fc19f151fab0a1c9961c66669b27d0b7527b06e57046662a76290ed26f1cfdcae5275c81e59ce0999b235bdcae5dcb3821348487d9225d1659e18816ea9b244d66e6a79593c622b87f285fd0348c89f0d6a0ea90abbddf0b5c3016ef843db9f4e4c5fa7484049d9aee1089f695b3006d44af1987b6cb421a3cc7d115a22b910cdfcbf81cec04d0eb85a1126867542747308d5d1ca66e086ad24a50db"}, 0xf0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x81}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x480d3}, 0x4040000) [ 92.152233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.155777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.159664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.163267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.164915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.167082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.172845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.175334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.179114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.184212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.190850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.192641] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.195299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.199662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.205640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.216144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.219316] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.221663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.226693] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.229172] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.234069] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.237319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.242781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.246296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.248761] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.252793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.255938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.257698] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.258739] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.262397] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.264795] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.265037] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.273565] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.275380] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.277217] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.280604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.289959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.295814] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.298919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.300400] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.302351] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.306369] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.309264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.316959] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.328893] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.331162] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.344821] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.363802] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.281911] Bluetooth: hci2: command tx timeout [ 94.345582] Bluetooth: hci4: command tx timeout [ 94.346885] Bluetooth: hci1: command tx timeout [ 94.346899] Bluetooth: hci0: command tx timeout [ 94.408628] Bluetooth: hci3: command tx timeout [ 94.409858] Bluetooth: hci7: command tx timeout [ 94.411059] Bluetooth: hci6: command tx timeout [ 94.411218] Bluetooth: hci5: command tx timeout [ 96.328583] Bluetooth: hci2: command tx timeout [ 96.392831] Bluetooth: hci0: command tx timeout [ 96.392889] Bluetooth: hci1: command tx timeout [ 96.394258] Bluetooth: hci4: command tx timeout [ 96.456610] Bluetooth: hci7: command tx timeout [ 96.456751] Bluetooth: hci6: command tx timeout [ 96.457411] Bluetooth: hci3: command tx timeout [ 96.458286] Bluetooth: hci5: command tx timeout [ 98.377864] Bluetooth: hci2: command tx timeout [ 98.440667] Bluetooth: hci1: command tx timeout [ 98.441965] Bluetooth: hci0: command tx timeout [ 98.443022] Bluetooth: hci4: command tx timeout [ 98.504717] Bluetooth: hci3: command tx timeout [ 98.505744] Bluetooth: hci6: command tx timeout [ 98.506778] Bluetooth: hci5: command tx timeout [ 98.507815] Bluetooth: hci7: command tx timeout [ 100.424593] Bluetooth: hci2: command tx timeout [ 100.488604] Bluetooth: hci0: command tx timeout [ 100.488635] Bluetooth: hci4: command tx timeout [ 100.489029] Bluetooth: hci1: command tx timeout [ 100.552560] Bluetooth: hci6: command tx timeout [ 100.552673] Bluetooth: hci7: command tx timeout [ 100.553011] Bluetooth: hci5: command tx timeout [ 100.553398] Bluetooth: hci3: command tx timeout [ 154.612336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.615406] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.618962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.624638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.634151] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.637079] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.704304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.710513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.714273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.722943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.730987] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.732938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.789799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.794300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.796717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.803650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.809741] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.814124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.901884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.922645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.933128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.962089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.970259] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.973609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.065384] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.093649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.096539] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.102716] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.123699] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.125735] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.129125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.136049] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.136066] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.143892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.162930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.172660] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.173328] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.174529] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.181391] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.182087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.210390] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.215218] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.220841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.268682] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.286900] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.319718] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.323842] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.328143] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.680719] Bluetooth: hci0: command tx timeout [ 156.810492] Bluetooth: hci1: command tx timeout [ 156.873887] Bluetooth: hci2: command tx timeout [ 157.065402] Bluetooth: hci3: command tx timeout [ 157.256541] Bluetooth: hci5: command tx timeout [ 157.257310] Bluetooth: hci6: command tx timeout [ 157.257919] Bluetooth: hci4: command tx timeout [ 157.449653] Bluetooth: hci7: command tx timeout [ 158.731515] Bluetooth: hci0: command tx timeout [ 158.858590] Bluetooth: hci1: command tx timeout [ 158.921485] Bluetooth: hci2: command tx timeout [ 159.112708] Bluetooth: hci3: command tx timeout [ 159.306546] Bluetooth: hci4: command tx timeout [ 159.306695] Bluetooth: hci6: command tx timeout [ 159.306994] Bluetooth: hci5: command tx timeout [ 159.496603] Bluetooth: hci7: command tx timeout [ 160.776533] Bluetooth: hci0: command tx timeout [ 160.904662] Bluetooth: hci1: command tx timeout [ 160.968675] Bluetooth: hci2: command tx timeout [ 161.160514] Bluetooth: hci3: command tx timeout [ 161.352588] Bluetooth: hci6: command tx timeout [ 161.353094] Bluetooth: hci4: command tx timeout [ 161.353699] Bluetooth: hci5: command tx timeout [ 161.544904] Bluetooth: hci7: command tx timeout [ 162.826537] Bluetooth: hci0: command tx timeout [ 162.953257] Bluetooth: hci1: command tx timeout [ 163.017560] Bluetooth: hci2: command tx timeout [ 163.208683] Bluetooth: hci3: command tx timeout [ 163.400536] Bluetooth: hci4: command tx timeout [ 163.401526] Bluetooth: hci5: command tx timeout [ 163.401539] Bluetooth: hci6: command tx timeout [ 163.592570] Bluetooth: hci7: command tx timeout [ 215.442509] syz-executor.0 (3536) used greatest stack depth: 23264 bytes left [ 217.748222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.751842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.757128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.763365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.767900] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.773169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.831182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.835340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.839770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.843752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.845820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.852671] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.855943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.859143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.861119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.871552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.874290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.881039] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.884762] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.886757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.890882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.898615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.906605] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.914919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.093371] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.101128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.103854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.119030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.124174] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.127142] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.129699] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.148196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.153967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.199926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.220655] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.236625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.242355] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.244662] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.248846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.270859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.287525] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.300816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.301136] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.315888] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.323738] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.402560] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.422545] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.441343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.848593] Bluetooth: hci0: command tx timeout [ 219.913470] Bluetooth: hci2: command tx timeout [ 219.976788] Bluetooth: hci1: command tx timeout [ 220.168580] Bluetooth: hci5: command tx timeout [ 220.234536] Bluetooth: hci3: command tx timeout [ 220.296921] Bluetooth: hci4: command tx timeout [ 220.553602] Bluetooth: hci7: command tx timeout [ 220.555280] Bluetooth: hci6: command tx timeout [ 221.896639] Bluetooth: hci0: command tx timeout [ 221.963430] Bluetooth: hci2: command tx timeout [ 222.025508] Bluetooth: hci1: command tx timeout [ 222.217075] Bluetooth: hci5: command tx timeout [ 222.280781] Bluetooth: hci3: command tx timeout [ 222.345536] Bluetooth: hci4: command tx timeout [ 222.600567] Bluetooth: hci6: command tx timeout [ 222.601104] Bluetooth: hci7: command tx timeout [ 223.944534] Bluetooth: hci0: command tx timeout [ 224.008531] Bluetooth: hci2: command tx timeout [ 224.073112] Bluetooth: hci1: command tx timeout [ 224.264868] Bluetooth: hci5: command tx timeout [ 224.330458] Bluetooth: hci3: command tx timeout [ 224.392774] Bluetooth: hci4: command tx timeout [ 224.648919] Bluetooth: hci7: command tx timeout [ 224.649995] Bluetooth: hci6: command tx timeout [ 225.993549] Bluetooth: hci0: command tx timeout [ 226.056712] Bluetooth: hci2: command tx timeout [ 226.121449] Bluetooth: hci1: command tx timeout [ 226.312794] Bluetooth: hci5: command tx timeout [ 226.378153] Bluetooth: hci3: command tx timeout [ 226.441242] Bluetooth: hci4: command tx timeout [ 226.696523] Bluetooth: hci6: command tx timeout [ 226.696981] Bluetooth: hci7: command tx timeout [ 279.907313] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.914962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.916095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.925818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.930006] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.938666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.976904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.979681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.980805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.984912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.986557] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.989557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.118835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.121795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.122727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.124777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.127301] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.128351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.144849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.162214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.182126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.213987] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.241445] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.251775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.267859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.269626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.273196] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.278644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.282126] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.285808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.287523] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.288142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.291881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.297906] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.304710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.307756] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.330160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.333199] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.334284] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.341242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.344856] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.348272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.359758] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.370993] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.372264] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.373312] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.390237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.391188] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.992580] Bluetooth: hci0: command tx timeout [ 282.056581] Bluetooth: hci1: command tx timeout [ 282.184794] Bluetooth: hci2: command tx timeout [ 282.440705] Bluetooth: hci6: command tx timeout [ 282.440748] Bluetooth: hci3: command tx timeout [ 282.441493] Bluetooth: hci5: command tx timeout [ 282.506462] Bluetooth: hci4: command tx timeout [ 282.568556] Bluetooth: hci7: command tx timeout [ 284.042443] Bluetooth: hci0: command tx timeout [ 284.104682] Bluetooth: hci1: command tx timeout [ 284.233475] Bluetooth: hci2: command tx timeout [ 284.488566] Bluetooth: hci6: command tx timeout [ 284.489340] Bluetooth: hci5: command tx timeout [ 284.489536] Bluetooth: hci3: command tx timeout [ 284.552495] Bluetooth: hci4: command tx timeout [ 284.616479] Bluetooth: hci7: command tx timeout [ 286.090635] Bluetooth: hci0: command tx timeout [ 286.153531] Bluetooth: hci1: command tx timeout [ 286.280521] Bluetooth: hci2: command tx timeout [ 286.536668] Bluetooth: hci3: command tx timeout [ 286.537225] Bluetooth: hci5: command tx timeout [ 286.537848] Bluetooth: hci6: command tx timeout [ 286.600532] Bluetooth: hci4: command tx timeout [ 286.666006] Bluetooth: hci7: command tx timeout [ 288.136546] Bluetooth: hci0: command tx timeout [ 288.200493] Bluetooth: hci1: command tx timeout [ 288.328598] Bluetooth: hci2: command tx timeout [ 288.584578] Bluetooth: hci3: command tx timeout [ 288.585037] Bluetooth: hci6: command tx timeout [ 288.585580] Bluetooth: hci5: command tx timeout [ 288.648754] Bluetooth: hci4: command tx timeout [ 288.713440] Bluetooth: hci7: command tx timeout [ 342.682560] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.686148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.692005] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.697839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.701207] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.707828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.940459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.953761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.956538] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.972323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.977327] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.979773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.000006] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.005036] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.007589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.014531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.033820] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.036087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.087739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.090976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.102946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.119079] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.119866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.124614] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.126559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.127681] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.129119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.130968] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.134703] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.139561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.143587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.146633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.151110] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.152804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.152829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.155840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.165746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.169623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.172761] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.174699] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.191930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.207859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.209008] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.211323] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.212526] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.215190] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.216857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.219912] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.777426] Bluetooth: hci0: command tx timeout [ 345.033596] Bluetooth: hci1: command tx timeout [ 345.097470] Bluetooth: hci2: command tx timeout [ 345.161523] Bluetooth: hci3: command tx timeout [ 345.288519] Bluetooth: hci4: command tx timeout [ 345.289332] Bluetooth: hci5: command tx timeout [ 345.290846] Bluetooth: hci7: command tx timeout [ 345.354461] Bluetooth: hci6: command tx timeout [ 346.824710] Bluetooth: hci0: command tx timeout [ 347.080612] Bluetooth: hci1: command tx timeout [ 347.146409] Bluetooth: hci2: command tx timeout [ 347.209273] Bluetooth: hci3: command tx timeout [ 347.336481] Bluetooth: hci5: command tx timeout [ 347.336600] Bluetooth: hci7: command tx timeout [ 347.336937] Bluetooth: hci4: command tx timeout [ 347.401646] Bluetooth: hci6: command tx timeout [ 348.873455] Bluetooth: hci0: command tx timeout [ 349.128492] Bluetooth: hci1: command tx timeout [ 349.192443] Bluetooth: hci2: command tx timeout [ 349.256437] Bluetooth: hci3: command tx timeout [ 349.384468] Bluetooth: hci7: command tx timeout [ 349.384634] Bluetooth: hci5: command tx timeout [ 349.385472] Bluetooth: hci4: command tx timeout [ 349.449424] Bluetooth: hci6: command tx timeout [ 350.920933] Bluetooth: hci0: command tx timeout [ 351.178030] Bluetooth: hci1: command tx timeout [ 351.241437] Bluetooth: hci2: command tx timeout [ 351.304635] Bluetooth: hci3: command tx timeout [ 351.432487] Bluetooth: hci4: command tx timeout [ 351.432941] Bluetooth: hci5: command tx timeout [ 351.433712] Bluetooth: hci7: command tx timeout [ 351.497754] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:18:34 Registers: info registers vcpu 0 RAX=00000000fa85ccd0 RBX=ffffffff87f0c470 RCX=0000000060381ddb RDX=00000000f14ed62c RSI=000000006ee947af RDI=ffffffff87f0c4b0 RBP=ffff888015825db8 RSP=ffff888029f27528 R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=ffffffff87f0af27 R11=0000000000000000 R12=ffff888015825340 R13=0000000000000000 R14=ffffffff86405270 R15=0000000000000000 RIP=ffffffff814fe159 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa5b723f270 CR3=00000000163a2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffffffff0b5a334 RCX=ffffffff815094f3 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff85ad19e0 RBP=ffffea0000bc3108 RSP=ffff888039bd7db0 R8 =0000000000000000 R9 =fffffbfff0b5a33c R10=ffffffff85ad19e3 R11=0000000005a8b067 R12=ffffea0000ec4a08 R13=1ffffffff0afd840 R14=ffffea0000ec4a00 R15=0000000000000000 RIP=ffffffff8171a404 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc4ea97b028 CR3=000000002a0e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000