Warning: Permanently added '[localhost]:47046' (ECDSA) to the list of known hosts. 2025/04/22 14:45:45 fuzzer started 2025/04/22 14:45:45 dialing manager at localhost:42967 syzkaller login: [ 133.330524] cgroup: Unknown subsys name 'net' [ 133.465182] cgroup: Unknown subsys name 'cpuset' [ 133.497052] cgroup: Unknown subsys name 'rlimit' 2025/04/22 14:46:04 syscalls: 2217 2025/04/22 14:46:04 code coverage: enabled 2025/04/22 14:46:04 comparison tracing: enabled 2025/04/22 14:46:04 extra coverage: enabled 2025/04/22 14:46:04 setuid sandbox: enabled 2025/04/22 14:46:04 namespace sandbox: enabled 2025/04/22 14:46:04 Android sandbox: enabled 2025/04/22 14:46:04 fault injection: enabled 2025/04/22 14:46:04 leak checking: enabled 2025/04/22 14:46:04 net packet injection: enabled 2025/04/22 14:46:04 net device setup: enabled 2025/04/22 14:46:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/22 14:46:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/22 14:46:04 USB emulation: enabled 2025/04/22 14:46:04 hci packet injection: enabled 2025/04/22 14:46:04 wifi device emulation: enabled 2025/04/22 14:46:04 802.15.4 emulation: enabled 2025/04/22 14:46:04 fetching corpus: 0, signal 0/0 (executing program) 2025/04/22 14:46:06 starting 8 fuzzer processes 14:46:07 executing program 0: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, 0xffffffffffffffff], 0x3) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) syz_80211_join_ibss(&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000100)=@random="315e6d745b07f2505f53b3f835b25097bbe1", 0x12, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) keyctl$chown(0x4, 0x0, r1, 0xffffffffffffffff) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.log\x00', 0x42, 0x5) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000300)=0x30) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7f}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004852}, 0x4000004) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000440), &(0x7f0000000480)=0x10) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000004c0)=0x10000) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0xd, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x800, &(0x7f0000000640)={0x85, 0x7461681b06131119, 0x180000, {r2}}, 0x20) accept$packet(r2, &(0x7f0000000680), &(0x7f00000006c0)=0x14) getdents64(r2, &(0x7f0000000700)=""/223, 0xdf) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x408040, 0x0) r4 = open_tree(r3, &(0x7f0000000840)='./file0\x00', 0x801) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000880)={0x0, 0x0, 0x1f, 0x8, 0x8, "76de9332fe75c4002b0579999003fc1e86addd"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xe0000000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x80000001}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9fd}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x100}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20008000) 14:46:07 executing program 1: write(0xffffffffffffffff, &(0x7f0000000000)="f3d17137d886fb24380da595e2a9aa51369791158c435dc830490b59ab80bb9952601ecaa4b7599d0b2d0ac84c5a12c69dd223469f76c2d5d58f08b743a9fd84c4c0fd413ee144d6502a2a25833fab12a22e826488cd5851685e880b78e8b2410d7d3ff1642cd4d4fb66168798ca36c5e1083e7517e5f39f4602d9cb4d850ea3fdadd1ab96fb4201c27290a82f568df8d8d5094ea431", 0x96) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'osx.', '{$(@{'}, &(0x7f0000000100)=""/34, 0x22) r0 = memfd_secret(0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4d}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x81}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000280)={0x1, 0x5, @status={[0x1080000000000000, 0x8, 0x6, 0xfff, 0x1, 0x200]}, [0x7ff, 0x0, 0x100000000, 0x5, 0x101, 0x9, 0x1, 0x3, 0x8, 0x53, 0x6, 0x200000000000000, 0x0, 0x80, 0x1, 0xb544, 0x7, 0xfffffffffffffe80, 0x5, 0x62b30217, 0x800, 0xff, 0x2, 0x3ff, 0x77f, 0x90, 0x100, 0x1f, 0xef53, 0x0, 0x8, 0x964a, 0x1, 0x0, 0x5, 0x40, 0x200, 0x0, 0x9, 0x6, 0x80000000, 0x800, 0x80000000, 0x2, 0x462, 0x0, 0xfffffffffffffff9, 0x1f, 0x8, 0x7fffffff, 0xfff, 0x3, 0xfff, 0x100000001, 0x2, 0x8, 0x2, 0x1000, 0x23d, 0x5, 0x5, 0x83, 0x1d, 0x7]}) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000e80)={0x0, @can={0x1d, 0x0}, @nl=@unspec, @l2tp={0x2, 0x0, @remote, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x36, &(0x7f0000000e40)='veth1_to_hsr\x00', 0x4c, 0x8001, 0x101}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003500)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000035c0)={'sit0\x00', &(0x7f0000003540)={'syztnl0\x00', 0x0, 0x2f, 0xc7, 0xff, 0x1f, 0x40, @local, @private2, 0x40, 0x1, 0x1, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003600)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000037c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003780)={&(0x7f0000003640)={0x104, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x24044000) r6 = openat$incfs(r0, &(0x7f0000003800)='.log\x00', 0x82, 0x84) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003840), 0x2900, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003880), 0x20080, 0x0) fsetxattr$security_selinux(r8, &(0x7f00000038c0), &(0x7f0000003900)='system_u:object_r:xserver_misc_device_t:s0\x00', 0x2b, 0x0) ioctl$FIONCLEX(r6, 0x5450) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x10, 0x3e8, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) 14:46:07 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x303200, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @broadcast}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x20, 0x7800, 0x5, 0x7fff, {{0x2b, 0x4, 0x3, 0x1e, 0xac, 0x68, 0x0, 0x2c, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101, @local, @private=0xa010100, @loopback]}, @cipso={0x86, 0x4d, 0x2, [{0x1, 0x6, "425596d0"}, {0x0, 0x11, "a095ac64c426d228d2cd5b33257c1c"}, {0x2, 0x11, "6bc655cf0df709bd000ccfa4d39826"}, {0x5, 0x9, "8405dbeb6d11e6"}, {0x6, 0x6, "ee7b3567"}, {0x0, 0x10, "184d06f9e624d93eecc39ee185ef"}]}, @end, @lsrr={0x83, 0xf, 0xed, [@loopback, @dev={0xac, 0x14, 0x14, 0x15}, @empty]}, @generic={0x82, 0x12, "de58698a347e12bd134df0e335a17a7e"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x22c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcc5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x5, 0x1, 0x7fffffff}, {0x81, 0x54, 0x9, 0x7}, {0x1, 0x8, 0x0, 0x5}, {0xffe1, 0x3, 0x2, 0xf0}]}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x22c}}, 0x4000) r3 = socket$inet6(0xa, 0x800, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in=@broadcast, @in6=@private2, 0x4e23, 0x7fff, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0x5c, 0x0, 0xee01}, {0xf474, 0x3, 0x47, 0x4, 0x8, 0x9, 0x2, 0xfa33}, {0x80, 0xfff, 0x0, 0x8}, 0xfffff842, 0x6e6bbb, 0x2, 0x1, 0x1}, {{@in=@private=0xa010100, 0x4d2, 0xff}, 0xa, @in=@multicast2, 0x34ff, 0x3, 0x3, 0x0, 0xfff, 0x2, 0x6}}, 0xe8) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000780)=@get={0x1, &(0x7f0000000700)=""/111, 0xda7d}) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f00000007c0), &(0x7f0000000800)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000840)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008011}, 0x50) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040090) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) getpeername(0xffffffffffffffff, &(0x7f0000000ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000b40)=0x80) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000000b80)={'caif0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1c}, @void, @val={0xc, 0x99, {0x8d, 0xe}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4010) 14:46:07 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x20, 0x480200) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x2, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x40800) r2 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10000000, 0x1, &(0x7f0000000280)=[{&(0x7f0000000200)="9bb8897840edbb544499485896969f95a9432854fd7343fa775ec39049aedc34c0f1270de5f1916d581b1ca7bcd42aa11346456ff80f51dd4b82944da468ab71722351249dda67b877e1b2099d9dd2f2af25", 0x52, 0x5}], 0x2000001, &(0x7f00000002c0)={[{@nojoliet}, {@overriderock}, {@nocompress}, {@nojoliet}, {@unhide}], [{@appraise}, {@obj_type={'obj_type', 0x3d, '/dev/vcsa#\x00'}}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000380)={0x8, 0x20, '\x00', 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}) fcntl$setflags(r0, 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) lremovexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.origin\x00') sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x3a}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x1, 0x0, 0x0, {0x2, 0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x92, 0x1}}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10000000}, 0x50) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/locks\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r4 = signalfd4(r3, &(0x7f00000007c0)={[0x3]}, 0x8, 0x800) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x205ca040}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x140, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4d}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x200448d8) r5 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000a00)={0x0, r2, 0x8000, 0x4, 0x3, 0xb0}) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000a40)={'veth1_to_bridge\x00'}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000a80)) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x84, 0x2, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x3) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000c80)={0x5, &(0x7f0000000c40)=[{}, {}, {}, {}, {}]}) 14:46:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xffffffff}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'team_slave_0\x00'}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xea}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x48041) socketpair(0x28, 0x6, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x9, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x40080) r4 = syz_open_dev$vcsu(&(0x7f0000000500), 0x100000001, 0x2000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x178, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc2, 0x3, "48bacf953d6ac0afa39f9f571935d460d8f36372102159836e6804a33600424266726758ec0c9eb145854f77476c928491d7d27126b819e2c76750406a9d49d5e0f3a3c84bb2ca53730f76bcee6d70d96d94a08e199796d45d4557fa5b6faf9a11115bed89619eb113dd06edd78fbb019db07db2ea0e829235b40201782583998f24ad1b2c40df99c54c15ce4c859f5c56d5944cebdcf71e74ca009948335bb1c33f0b7d5427eac33828979401fc876ef9f21003826020fadd5f3652f375"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "11bd4fa606b4b92fe39d84ed6fcd6f9f9330b6990a6456449c015c5ae0"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7c0c}]}, @TIPC_NLA_PUBL={0x4}]}, 0x178}, 0x1, 0x0, 0x0, 0x24004046}, 0x880) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000780)={'caif0\x00', 0x2}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r5 = openat2(r2, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x179a80, 0x54, 0x9}, 0x18) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r6, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x39}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x4004000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000001e40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000b80)={0x1268, r8, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TESTDATA={0xa6, 0x45, "0abe0c82e599cc800ae57828d94321ab44f5b4ee10ffe0dd73d9d57916874e8b603e04ad4c869d4394a6023e4f40edad57292915b997f6950740e622a4f6ebcafe686e62bbe4b11999c96d9aa133b42a3e99b9007e8c6b9b93de503568837a2f649df2d32c3cefcf685992dbae5fbdf7ca95323417688ffc34f0db70f4ff45dc75d54a21f493eb3b4520497a1b54768795462b539a619ef0f84258b6d617576ec841"}, @NL80211_ATTR_TESTDATA={0xf3, 0x45, "17c0b8c3ac7ab91c801e960c9b69e49b132b8f31d06a648ff87f60b6cca6ede7b806c1bcc5fa1fbca2fa672a6a5a2154d97fab72a49afa282398ae0f002fa1f654f5a2a71c602c20f5a22079485a8933c8d6f87566c3a733b0733fb4fcfccc90d9c4e16c4bbfa4764a9a0bdea91546a8723fd98ec3738aa25bc974df9bffbad706e7dc7a4fde60d5d31a190018ca708102ec829b357a11a2e4f4cd5019d64b85edc41da17cea142176e29df4523501bf0307a2130ccfc5c0d0ab17832c5afdcb4b895b486046c78cf33250b3235a02484b074c7cf3c76afa44e830555facd687b0fce40e1cb3815823eeccf7ab7798"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "358f8ddf74cada5effa18acc293aa69d2315323c89b0d9a8b5a5a1520fd193923478dfaf210548028e397e32e71e331ccc4dc696dceb3a545ce5f2b269bf8620a934e62ca2e8b89d64acf1ef8e3a3957de7e2a3fd292d81a80a79c973162a2d135b769b4e9641d9bac25fb06d0da7e98f934baecb8df34082d83b60f3f1a1b779c6dd46dffc80af656956bcbd007513535e04149c367d5d0ae3eb437cda4b3ff184801a7ce9e477093be17542db438a2c0447270b42746d6614bfb6fb531956de78c1fdf8364828e1eb60ca47b2f7b562d7a09b6859a27830d3771a5200372cfafd228cbf7df9c39c09d97ef4e459cbde175c2246dfee9ec5641ddc7971e8805087e7fc1915188db5c91327d1af4f4b8f160ce2699744967c99a35681d5fa32918537acf2e5ddd1597850efbe5ea80f24f2b4274e1551cb1928b6e6f0e57123361a8c39be1fedfce3f982b12fce4dbdb9630c92d58f6831a3c55a43448441151ae4d466c2b327fc91b6fbf5d4ff40e1d8a5238884af600877f4738279602aae9fc882d394d6eacdbf6143cbdd0fcdf15975810ced42a326418ab6eea7742acec305d04d9f8d3680472a593a9da75c0142c383ea3c748e6a1f9c786ed4ca31bfb49f4f5e5b0682342a2f224bf50227d54115dd7b9eb620d98d5c7284b7e0af2efe0cfd5d32a6435263de43e58829b52502f84a642e4f8f767a9429f8372e97b16cf8359b6f2be17bf38db2fa2e4389a72192af4615e86a3bddd1c94391f2d00c37db131793d1ca1a36495e5bfc465bfeaf1a546ac20e1813718e0d0154762de485d4a6f2ba436b5c987193b6a531c74c6b4bacbb167d8a95667f34584658020116a24103ef7325583bcc621cd6feee13467e089d01c05db356fbdc2cf2ee28742956901598d93f98fc1fe7a1f45c91e7637c21f092488c209c1e8c7a57c571c894a7e85b2b78dc79710099bfc25b0998b6b5a9dd76cd0ede8ac0e3cc40c7c46f6cb96ed2708e5e492c6f5cd57c8cb3b142f04e1adc5e57151c6590164da6b9a1ac2e6cad682f558642d4093f953d03f27cf2219993aff35e365f21c0bfc369a6b99312c75e02c688a25c196cd38aa8c3c5b41f40ede3894790a334ae4d37aa682ff380977c5e014c174e9c10f699b842d3d8768b61365a0afdbd53b06c237356fbc19703d8bbc1b41d5b0d01f5ae420bfbd1f6edc2a8e220b0b65e0d289dc227d44337b5d02f0b405e799715f795a381271384aa9b341991f1ef12f3e2d1218f988e1b0b72ef91b73ba7db8a8b9afd5d76dd8dee2aeaa448b1a2f6e887758fc7f1ffa5d0007035601a1ecfbc38a5832b3ba14abdda93ba704edb43ee341360248d8b2c6c80aeb9a09586c6c8bb91a99d048041e371e086d63daff1d635972b5379d5d3d2e1b72c067650216d260ba813172d2b59f00b559700f9c2b0a3b00bd6f85d3fc116da304a788f89cf681bd4ac7a4d7d4f4bdc7ce6152acaee37053a6d6305027a477027b366b2ff39b0651cfb7dfd6f2f5d9d379e9889c353f195b8a65fd135a921b488cde93192ebda1158865f3635c55358324c58374344208d5faef4317d5619b414e5ae63a07c50b234f3ba73994d9e3a6ad91217bd3918c791db6c3a2b288c655e5feb404b1f3a4ecfc099ece8dd098af3133548b92000b97f73321dd0383196474cca4559ac2a5eb1eb039eaacc5d8b15abef5e7716144aa699dd7ca52a30ffebe63ca0e82add2226b69296183e3cee52109c71a3b9b6e405d2f3a495daccb17972e62541e622c77e9ecf9bc6661b6de7b81502ca893297d43ccb0f8856c2cc84c6a7aab9950bad58b28ca22ab68e25a8bb0b6c5bda873c7b4165e91ffdddaa15a95571f0376aeab67d6da12fded89e853418f6d94ce07a16b919daaad74eb3238a72a1b95890f59835a8716ac9592502bf1d0b0252bf33c80219620d83c819d0e49861a426cec951156313725b3992fbb598e311edb3fb1a64e74b1b15abaf767217be28b3c2c10a75b3d2c59c5ee6704c0d4f00a732ad95bb9230f0b198db3f106e424aaede42b57b45290ba2d113b6f7f318528239ec76963e4b448afb58cb642576646eabb7dbcdbd6227406e5a91ddd55fa4dafc0ea1cf34ad919b1dde959dc867fc2f54a4417ca07192c0c5710a2b25ed0dd95bb28f708e657bc6e650de01d6e4bf032eb5c31fde05bd52fa8d4cd3a1eb98eda87bc1e64db90ebb5547c64e41d225176c30d98fc1a7dc91ee64705349474825de963e304331740195f4a50b844a63ff58889d2de645349ae2944a347435626d189ccc9092e8428193896f8b4ea6da7a6e83e0424f96b1496034fff60f535fdb3bf936b42a658dc9cb51566278882cc252c0f68852566a78b2e33e1f0beb122a598b776a46e98be740d7a4598da03aeac89b23f4f1d7f64419cb179757b1867b3c3df1a9bcb28f1556f609655b9384a3347ed03109d798e2b55631ed8be2bf7d363d833807d88ab3b5bcaa8d2e106edf19cbdf4bbc1d8aab1610e1dad671980ce8c417739a80b9c4670cbdc4708f9928281dad930f3931d951fbfcbd504dfac34dd55fa09c833ffe52d67379848a16760fdf22647c55f74b99a75852bfe58bec0b7203cd246772994357e766889b2d7afd5d250ddc19979f7f7dbcca0e5ec396873cb5582d6eabf767776af1ef3dca6e1a715f5932bd9ec0a74c447af7aa7151a6d9d5462b6f948ef385de4577ff9acab5f27694654a44565840957f6941d50d4c698a1062fd2db92bd66da0c0c543b31ff1b11fdba1a2d51c5396c1648ff2ea2e80ad4d570f5bce6dfabfbff8fbd845448d5354bd2f0dc8b852ab92586d8148ae4ed3b77c24ed34823bd859abb496724e40a3371acd64e99a25f8b7cc3eb7a18cbf87717cbcdf23865521501d2120764f9e4f6c9ca6238ae81df4a0ecc301d3149ea3ebde53b42d322d602233b4bc967b29a30d12b3d39e48e4b448d929651284a1ae57121df1151a3f3510cabc14d0804ceeb43ec738481a4d830d438664892d8ccda36347d07de05d7f83aebd51e24c5a4c935deab19684a44b0ced881b62d9ec579d124178e4086d9a865d2cb1ed92806996edf7f172f363e9278cb0257950f422c9c5e95bea4b0d4c19b9cd312d85d99770559798105d761ae1e623225c5fec8253f82e33466e8bdee5683f0a617e0ed2ece41858cc035df0bf1348c7144e7b417dca4af8d92a1eb5142a753fe40994d7361de69d9027b04ad434cddefffdb5aaea10a6b4b5b14e8f8657f719803ca0a489497300e8eeadec7901a39c5ca44147fc1f2bbb8a80e183503471764651e4cfadb367366973640aec04e331f2c40e61aad59d67895ae361e25937f88eee53fd6a749cb907260c0a1b9262b8fda4a7b08934e88b9f54d811f38cecbe9c96db1fdceca5213279ed1adfd19980afc79bfad9268dd9047cf82dcf96f3fe2b320c40c3f3098d129b60b05a6be908bd5f964d9e0e609134dadaca61c2ba3b12c685f1fed35d78cb67f7c75a788d53c86a4b21c4df019f0f87c867fa1fa0813cddaf45b51196eeda92a306c68fe990b14b4344fe5c88a74c51e1a368bebe037d06c50fb6c80e914129bf8e2e65ff827c4d93a54a334bafb97685610ba98870fee1bec5869bc37bd109580fe4165ae14800d9fe0b88a5416ee39e5de564e9e8d0e9f7a5f52b2ce473dd3c73dbcdc5ba149525ac4bc290abb8955bcdb690ab65703377357c784a8701bf43ab3e1110d9753e65c56a1743b03f6c575c274cb2d9089be4045d2f687373bd4978fec69ebfc33b3ab6fe3090c2535fda0f4e949e300bc96a990d9cfa1c21f93130f6e90c1682ccd05352e1e41ea741d0818b0680c9890a4e4a8c5536a8bb826dd81df83733689f94296546b3db6928d78b6607ca7fa022a6ee7fbf90a813a3d2d545822b136b19354c58068a7af7383d2953e341c72331a4ea32f64e0b9ab03b093028d4276471298ec59013f8ec4e65d947eba72d1845e5040ae1db5bfd2f8167472ecbd4c0db7402cda4cf19ea5cd83d681310bc5f46e3c6d223d16144cce45d612e2bfe374c3b75604013f60e829250ae50fda9b3a97c6bba326030c378e02002746f9b6325de5156232cf038403eda03353a911625e2ff0eed183caeed58c05dcad91f7d59d3e02388eaf3045540a9bd603ce501b80ae87a55670a45c75ab60431c681040a2b057eab047367056b139a3ee18af4d6ba3ad7ff9afb44a35bec23edcf8e6e20cac78f74d0d5fd83a451650aa6c3da33bf61060a77e6554633b76d0f986a374c1d8004fd88a5151bd1927c49805645675a094f5193ad0667f887953cebff26b97f32e8939782d6657a9cdbfa53f6edea7328522318ef50e405c041c54f6f875367a9d30c80dae3c5878b86e7bff8b270113914549399bc8d63aebd51a3c1f7a29bd2136acb2dc336604d0c1f31a8f4fc4be24d7ed1551fce10b0b69dd379f7575eb69ef5d219a748d9fbc98ae56e8d11fb64fd299f0e09804012e05e1672a1f023fe77b43e87204d3b4e3537a3ba0974ffd90b506d5ed040d92c67732a417a375456bb1af12f9f91850156bfa746b47b4fa78dc9220632bab09934ab1866b96aac24521bafda679bff7328d6b6c81a523517e6f7f84483470c9327f3ba7a0f14faad91a6dccb362f55824bfb3f943391e52b2cff19aaae464cd88b7850032325cabceb33703aeed6e9738e25f675096503fb881f4c4315344d9885032dbc967213e87f060e7208386f7bc80c44ff823e41d75973a4948eb69acd0db20b2b11e7bc693faedf9ad1e9a6b791ff28d6f3ac8cced8616665ddfe4fa075d046962a2e8b11826167bda3859768ac5dcafbbfdc5b59a87a51df3928b0212a955fa639f124b909bc43795ae1bdb836011a75c985c6f6225915834404aaac6c5135eaf634fa50191f467be16291777d652cedfaf6a30e891b4bc4a88fc18785c64b0a7c92dca5caaac96a566194b3de6f4c2e9cac59bb117a585eb7c05c5d3e01f63411fe325890c1eafca9c3f0ba0354e8cc220a0d650308a1229290e569c4127c339e6ea763d6217280b00959e7077cf344d9ed6092ac763eb4de3ac31d614da464a5c42c936068e549c6b995a2933bc707f045e329f2e6ec53c83befcc8b50767c3bafce46d4e228c9b0505917068e0840827be10bcac34bd5f2da614bf48dfe4f9072df65626ff44ccb589b1b9ac9d72470ad46dd349b40b8a1b945d92debcd524f27863e6629453594c0b43718da9e12165b2a490dad55f006ce807b19e9c312286567da50ed86d8b9b441a6cbae0a2ae7422737deea74663a0223581550ef143559ad32045b24f30d827b9b026b24d81c67f7c9cf69b8c2faa6847511f4e1fe2eb0aad16f4ff178abf30e8194e1bbffa901c74db90e20bb4d72e0683d2da662f37650b880042840c417a23c196b6930bede06252cf837a54b70a29e921fd3bcaf8601c2be5c50a650ddadfbe41815cec6eadc138b68bd7890d34ccda65db5c62ceaf374c0dfb222731dbe3bc7caf4ba0e20daeb45fe9cc7000d38e48f66812b765d28cc4f4afe3abcec5dff61fb02f7a4946e5784beb3098108f1101ec8866da68485c5e3331d58e111351de572db5f80810eefa21acdd3fc3f9db1e91405aff9d2c459e7ed3837e9bd86227a32b0c6cea524304bc74354d6f954c787024424596263a99946a817fbd16acfb5d04caee080b355bc563a6e2bcda3a62062116ec94111018612e313a4b86eba763c7aab73e5b6cd2a74c3358d46af7ae2caccb224a361d05d0"}, @NL80211_ATTR_TESTDATA={0xaa, 0x45, "ddd5a0ba1599684d9d3cbc8d0c085af28026465d5c38b73d0dff6629e16d02470fdde4e6068f931233d16ab1866bd3aebfdea5c27bd09337cd56655573c819d50128f19d7d02a5ff68d61f244b36877724e43fe8318b584a11cb87f5cc069e4305182ab6b08e6ffc5427e0fdc757ff9bf4d166fa8bbc127dec079f889b316ab845be5c076a389be88acdf86d594d0edb07e6bef170f5ed7d3c1dad47e345546a44ff164882be"}]}, 0x1268}, 0x1, 0x0, 0x0, 0x80}, 0x4010) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000001e80), &(0x7f0000001ec0)=@v3={0x3000000, [{0x8000, 0x7}, {0x7, 0x1fb}], 0xee00}, 0x18, 0x3) [ 154.114128] audit: type=1400 audit(1745333167.111:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:46:07 executing program 5: fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/55) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000200)=""/103, 0x67}], 0x3, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x22) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000500)={0x1, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, r9, {0x8}}, './file0\x00'}) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000580)=@gcm_256={{0x303}, "f7b4b7ae7c11a0ba", "8c6577a7cf083d14d766de8d9064532f9969c6710d16055f9afc30652ad9688a", "706e1747", "63e935fcbd9a1a59"}, 0x38) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x1) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f00000005c0)=0x1) r11 = dup3(r4, r7, 0x0) fcntl$getflags(r11, 0x40a) r12 = syz_open_dev$hidraw(&(0x7f0000000600), 0x781d, 0x8000) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000640)={0x0, 0x1, 0x2, 0x9}) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet6(r2, &(0x7f0000000680)="f4fc43e552443c13f7d7b71a584fe2935f26e3a1023203d2d04d", 0x1a, 0xd0, &(0x7f00000006c0)={0xa, 0x4e24, 0x101, @local, 0x40}, 0x1c) getsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) r13 = signalfd(r5, &(0x7f0000000780)={[0xffffffffffff0001]}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@local, @in6=@private1, 0x4e21, 0x5, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, r6}, {0x80000001, 0x1, 0x0, 0x5, 0x400, 0x7c8c, 0x401, 0x790000000}, {0xfffffffffffffff8, 0x100000001, 0x5, 0x5d356fad}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@private2, 0x4d6, 0x6c}, 0xa, @in=@local, 0x3505, 0x3, 0x2, 0x6, 0x0, 0x8, 0x5}}, 0xe8) 14:46:07 executing program 7: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/125, 0x7d, 0x121, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x5, 0x4, "f8"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x11, 0x4, "b4c29a1185482ed59427796233"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c6aa0dae42b23a41ed038fc40e"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "158c788fcdad587b96de25eecc"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2aea7ac4b97e83ffe216ce83d7"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0bdb74c837014438dca68650cc"}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc000}, 0x20040010) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008084}, 0x8800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x92a0}}, './file0\x00'}) mknodat$loop(r1, &(0x7f0000000580)='./file0\x00', 0x2000, 0x0) r2 = openat(r1, &(0x7f00000005c0)='./file0\x00', 0x200880, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000600), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40440d4}, 0x4000040) write$P9_RREADLINK(r1, &(0x7f0000000780)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r4 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000007c0)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000a40)={{{@in6, @in6=@private0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000b40)=0xe8) r5 = creat(&(0x7f0000000b80)='./file0\x00', 0x0) connect$bt_l2cap(r5, &(0x7f0000000bc0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5de7}, 0xe) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}]}, 0x28}}, 0x20000000) 14:46:07 executing program 6: r0 = syz_open_pts(0xffffffffffffffff, 0x40) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10140, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x1f) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000080)) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000100)={0x80, 0x1, 0x81, 0x81, 0xf6, 0x6}) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0xffd8, 0x0) r4 = openat2(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x8000, 0x18e, 0xd}, 0x18) splice(r3, &(0x7f0000000180)=0x8, r4, &(0x7f0000000240)=0x45a687a7, 0x5, 0x8) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) r5 = dup3(r3, r4, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000280), r5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xc}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xe}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000440)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) [ 155.648893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.651067] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.654434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.659118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.661764] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.663278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.726744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.730069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.740649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.746114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.756248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.757419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.765313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.767504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.770401] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.776229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.782729] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.785768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.787634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.791068] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.792675] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.795490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.795946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.797151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.798702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.801360] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.808671] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.813570] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.818297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.824281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.826630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.831502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.837601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.839667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.852371] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.854173] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.858371] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.860010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.875790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.876767] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.880049] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.882080] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.885712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.893076] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.894746] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.909360] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.923057] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.927311] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.732501] Bluetooth: hci0: command tx timeout [ 157.859793] Bluetooth: hci2: command tx timeout [ 157.923047] Bluetooth: hci3: command tx timeout [ 157.987078] Bluetooth: hci1: command tx timeout [ 157.988189] Bluetooth: hci6: command tx timeout [ 157.988510] Bluetooth: hci5: command tx timeout [ 158.052136] Bluetooth: hci7: command tx timeout [ 158.052154] Bluetooth: hci4: command tx timeout [ 159.780661] Bluetooth: hci0: command tx timeout [ 159.908184] Bluetooth: hci2: command tx timeout [ 159.973106] Bluetooth: hci3: command tx timeout [ 160.035165] Bluetooth: hci5: command tx timeout [ 160.035891] Bluetooth: hci1: command tx timeout [ 160.036380] Bluetooth: hci6: command tx timeout [ 160.100051] Bluetooth: hci7: command tx timeout [ 160.100774] Bluetooth: hci4: command tx timeout [ 161.827408] Bluetooth: hci0: command tx timeout [ 161.955124] Bluetooth: hci2: command tx timeout [ 162.018961] Bluetooth: hci3: command tx timeout [ 162.085020] Bluetooth: hci6: command tx timeout [ 162.085352] Bluetooth: hci1: command tx timeout [ 162.085547] Bluetooth: hci5: command tx timeout [ 162.148339] Bluetooth: hci4: command tx timeout [ 162.149951] Bluetooth: hci7: command tx timeout [ 163.876056] Bluetooth: hci0: command tx timeout [ 164.004229] Bluetooth: hci2: command tx timeout [ 164.067094] Bluetooth: hci3: command tx timeout [ 164.131149] Bluetooth: hci1: command tx timeout [ 164.131247] Bluetooth: hci6: command tx timeout [ 164.132481] Bluetooth: hci5: command tx timeout [ 164.195127] Bluetooth: hci4: command tx timeout [ 164.196698] Bluetooth: hci7: command tx timeout [ 216.266540] syz-executor.6 (297) used greatest stack depth: 24288 bytes left [ 219.170751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.183318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.185443] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.188515] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.190511] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.200054] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.203440] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.206264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.208428] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.216243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.236642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.239274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.241284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.253455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.256712] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.284309] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.306254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.310571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.414430] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.416559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.418256] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.446603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.449605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.450634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.451767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.456855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.458229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.470580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.475164] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.481283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.485329] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.490070] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.508012] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.510631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.515382] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.534328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.558607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.579779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.587950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.599229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.616300] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.623968] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.724860] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.733767] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.738501] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.762284] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.769288] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.773029] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.346960] Bluetooth: hci1: command tx timeout [ 221.411004] Bluetooth: hci3: command tx timeout [ 221.474944] Bluetooth: hci0: command tx timeout [ 221.603586] Bluetooth: hci6: command tx timeout [ 221.603777] Bluetooth: hci2: command tx timeout [ 221.731027] Bluetooth: hci4: command tx timeout [ 221.732159] Bluetooth: hci5: command tx timeout [ 221.859312] Bluetooth: hci7: command tx timeout [ 223.395922] Bluetooth: hci1: command tx timeout [ 223.460207] Bluetooth: hci3: command tx timeout [ 223.523246] Bluetooth: hci0: command tx timeout [ 223.651071] Bluetooth: hci2: command tx timeout [ 223.652310] Bluetooth: hci6: command tx timeout [ 223.779340] Bluetooth: hci5: command tx timeout [ 223.779935] Bluetooth: hci4: command tx timeout [ 223.906934] Bluetooth: hci7: command tx timeout [ 225.443954] Bluetooth: hci1: command tx timeout [ 225.506950] Bluetooth: hci3: command tx timeout [ 225.570942] Bluetooth: hci0: command tx timeout [ 225.701154] Bluetooth: hci6: command tx timeout [ 225.701448] Bluetooth: hci2: command tx timeout [ 225.827549] Bluetooth: hci5: command tx timeout [ 225.827672] Bluetooth: hci4: command tx timeout [ 225.957558] Bluetooth: hci7: command tx timeout [ 227.493362] Bluetooth: hci1: command tx timeout [ 227.554975] Bluetooth: hci3: command tx timeout [ 227.619952] Bluetooth: hci0: command tx timeout [ 227.747886] Bluetooth: hci2: command tx timeout [ 227.747979] Bluetooth: hci6: command tx timeout [ 227.875184] Bluetooth: hci4: command tx timeout [ 227.875988] Bluetooth: hci5: command tx timeout [ 228.002945] Bluetooth: hci7: command tx timeout [ 279.422782] syz-executor.6 (2076) used greatest stack depth: 23896 bytes left [ 281.614533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.625076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.631102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.654597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.670594] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.678603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.712679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.726777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.733010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.745367] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.753242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.755193] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.921626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.925830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.929340] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.936186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.939637] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.942525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.944876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.945051] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.949647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.961002] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.963377] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.965497] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.999498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.001382] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.002999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.007558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.010634] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.012489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.375758] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.380308] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.382012] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.406998] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.424319] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.429706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.624411] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.625191] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.637396] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.644588] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.662682] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.684885] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.694194] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.719466] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.729205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.758155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.775552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.785139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.747122] Bluetooth: hci0: command tx timeout [ 283.811416] Bluetooth: hci1: command tx timeout [ 284.003948] Bluetooth: hci3: command tx timeout [ 284.004899] Bluetooth: hci2: command tx timeout [ 284.198501] Bluetooth: hci4: command tx timeout [ 284.579024] Bluetooth: hci6: command tx timeout [ 284.770986] Bluetooth: hci7: command tx timeout [ 284.900397] Bluetooth: hci5: command tx timeout [ 285.796101] Bluetooth: hci0: command tx timeout [ 285.858954] Bluetooth: hci1: command tx timeout [ 286.051948] Bluetooth: hci3: command tx timeout [ 286.052482] Bluetooth: hci2: command tx timeout [ 286.246562] Bluetooth: hci4: command tx timeout [ 286.628550] Bluetooth: hci6: command tx timeout [ 286.819398] Bluetooth: hci7: command tx timeout [ 286.947030] Bluetooth: hci5: command tx timeout [ 287.843956] Bluetooth: hci0: command tx timeout [ 287.907214] Bluetooth: hci1: command tx timeout [ 288.100139] Bluetooth: hci2: command tx timeout [ 288.100714] Bluetooth: hci3: command tx timeout [ 288.292634] Bluetooth: hci4: command tx timeout [ 288.675939] Bluetooth: hci6: command tx timeout [ 288.867492] Bluetooth: hci7: command tx timeout [ 288.995341] Bluetooth: hci5: command tx timeout [ 289.892114] Bluetooth: hci0: command tx timeout [ 289.955931] Bluetooth: hci1: command tx timeout [ 290.146965] Bluetooth: hci3: command tx timeout [ 290.147527] Bluetooth: hci2: command tx timeout [ 290.340361] Bluetooth: hci4: command tx timeout [ 290.723929] Bluetooth: hci6: command tx timeout [ 290.914946] Bluetooth: hci7: command tx timeout [ 291.043353] Bluetooth: hci5: command tx timeout [ 344.314639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.319723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.326110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.333256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.336994] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.341107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.431331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.436680] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.438527] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.451714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.457576] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.459723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.512532] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.516701] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.525195] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.532603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.538234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.540190] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.856405] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.859787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.862003] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.866926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.873164] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.902121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.903991] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.906555] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.908329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.909913] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.913996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.938696] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.942160] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.948747] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.950983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.963557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.976289] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.979084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.013257] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.034374] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.039261] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.051275] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.082307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.106752] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.108323] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.112700] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.113554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.137258] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.141399] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.144190] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.403361] Bluetooth: hci0: command tx timeout [ 346.531203] Bluetooth: hci1: command tx timeout [ 346.595847] Bluetooth: hci2: command tx timeout [ 347.044563] Bluetooth: hci3: command tx timeout [ 347.046056] Bluetooth: hci4: command tx timeout [ 347.106918] Bluetooth: hci6: command tx timeout [ 347.236282] Bluetooth: hci5: command tx timeout [ 347.299924] Bluetooth: hci7: command tx timeout [ 348.451903] Bluetooth: hci0: command tx timeout [ 348.581624] Bluetooth: hci1: command tx timeout [ 348.643879] Bluetooth: hci2: command tx timeout [ 349.092444] Bluetooth: hci4: command tx timeout [ 349.093791] Bluetooth: hci3: command tx timeout [ 349.155338] Bluetooth: hci6: command tx timeout [ 349.283695] Bluetooth: hci5: command tx timeout [ 349.347918] Bluetooth: hci7: command tx timeout [ 350.501100] Bluetooth: hci0: command tx timeout [ 350.628167] Bluetooth: hci1: command tx timeout [ 350.693261] Bluetooth: hci2: command tx timeout [ 351.139938] Bluetooth: hci3: command tx timeout [ 351.140449] Bluetooth: hci4: command tx timeout [ 351.204856] Bluetooth: hci6: command tx timeout [ 351.331021] Bluetooth: hci5: command tx timeout [ 351.395419] Bluetooth: hci7: command tx timeout [ 352.547910] Bluetooth: hci0: command tx timeout [ 352.674928] Bluetooth: hci1: command tx timeout [ 352.740627] Bluetooth: hci2: command tx timeout [ 353.186918] Bluetooth: hci3: command tx timeout [ 353.187447] Bluetooth: hci4: command tx timeout [ 353.252855] Bluetooth: hci6: command tx timeout [ 353.380475] Bluetooth: hci5: command tx timeout [ 353.443852] Bluetooth: hci7: command tx timeout [ 406.915850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.919597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.923773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.936692] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.943534] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 406.951277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.174197] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 407.177197] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 407.178754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 407.189058] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 407.193391] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 407.199218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.429748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.436184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.442776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.469403] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.483346] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.487608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.518400] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.521993] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.525099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.560376] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.562709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.565269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.571054] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.571320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.591630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.599098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 407.600688] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 407.615774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.616511] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 407.618487] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.630170] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 407.637602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 407.642015] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 407.643180] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 407.649228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.653425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 407.660096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 407.701379] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 407.725623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 407.734570] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 407.738246] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 407.744498] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 407.748970] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 407.803760] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 407.810403] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 407.812240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 408.994933] Bluetooth: hci0: command tx timeout [ 409.251904] Bluetooth: hci1: command tx timeout [ 409.636538] Bluetooth: hci2: command tx timeout [ 409.701918] Bluetooth: hci5: command tx timeout [ 409.702556] Bluetooth: hci3: command tx timeout [ 409.955239] Bluetooth: hci6: command tx timeout [ 409.956120] Bluetooth: hci4: command tx timeout [ 410.018962] Bluetooth: hci7: command tx timeout [ 411.045188] Bluetooth: hci0: command tx timeout [ 411.298960] Bluetooth: hci1: command tx timeout [ 411.685192] Bluetooth: hci2: command tx timeout [ 411.748544] Bluetooth: hci3: command tx timeout [ 411.749530] Bluetooth: hci5: command tx timeout [ 412.003505] Bluetooth: hci6: command tx timeout [ 412.004310] Bluetooth: hci4: command tx timeout [ 412.066875] Bluetooth: hci7: command tx timeout [ 413.092565] Bluetooth: hci0: command tx timeout [ 413.350295] Bluetooth: hci1: command tx timeout [ 413.731996] Bluetooth: hci2: command tx timeout [ 413.796035] Bluetooth: hci5: command tx timeout [ 413.796514] Bluetooth: hci3: command tx timeout [ 414.051981] Bluetooth: hci6: command tx timeout [ 414.052495] Bluetooth: hci4: command tx timeout [ 414.114930] Bluetooth: hci7: command tx timeout [ 415.139214] Bluetooth: hci0: command tx timeout [ 415.395059] Bluetooth: hci1: command tx timeout [ 415.778883] Bluetooth: hci2: command tx timeout [ 415.842952] Bluetooth: hci3: command tx timeout [ 415.843482] Bluetooth: hci5: command tx timeout [ 416.100258] Bluetooth: hci4: command tx timeout [ 416.100750] Bluetooth: hci6: command tx timeout [ 416.164834] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 14:51:14 Registers: info registers vcpu 0 RAX=000000000022b7c2 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=000000000000009a RDI=ffffffff84c73bc8 RBP=ffff88806ce09550 RSP=ffff88806ce094d0 R8 =0000000000000002 R9 =00000000000000e5 R10=0000000000000000 R11=00000000f5257d14 R12=ffff8880095e9c40 R13=ffffffff86404e00 R14=0000000000000000 R15=00000000000007b5 RIP=ffffffff814bedb1 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa0520295d0 CR3=0000000027088000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffed1004d9de9a RCX=0000000000000000 RDX=1ffff11005bf6148 RSI=ffffffff85c19780 RDI=ffff88802dfb0a40 RBP=ffffffffffffffff RSP=ffff888026cef4c0 R8 =0000000000000001 R9 =ffff88802dfb0a48 R10=ffffffff864040d7 R11=0000000000025418 R12=0000000000000000 R13=ffffffff8134ab02 R14=0000000000000001 R15=ffff88802dfb0000 RIP=ffffffff81506ed8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3a8d60c540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3a8d7a74a1 CR3=0000000026e62000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000