Warning: Permanently added '[localhost]:21510' (ECDSA) to the list of known hosts. 2025/04/23 01:19:49 fuzzer started 2025/04/23 01:19:49 dialing manager at localhost:42253 syzkaller login: [ 86.209255] cgroup: Unknown subsys name 'net' [ 86.347204] cgroup: Unknown subsys name 'cpuset' [ 86.402467] cgroup: Unknown subsys name 'rlimit' 2025/04/23 01:20:06 syscalls: 2214 2025/04/23 01:20:06 code coverage: enabled 2025/04/23 01:20:06 comparison tracing: enabled 2025/04/23 01:20:06 extra coverage: enabled 2025/04/23 01:20:06 setuid sandbox: enabled 2025/04/23 01:20:06 namespace sandbox: enabled 2025/04/23 01:20:06 Android sandbox: enabled 2025/04/23 01:20:06 fault injection: enabled 2025/04/23 01:20:06 leak checking: enabled 2025/04/23 01:20:06 net packet injection: enabled 2025/04/23 01:20:06 net device setup: enabled 2025/04/23 01:20:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/23 01:20:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/23 01:20:06 USB emulation: enabled 2025/04/23 01:20:06 hci packet injection: enabled 2025/04/23 01:20:06 wifi device emulation: enabled 2025/04/23 01:20:06 802.15.4 emulation: enabled 2025/04/23 01:20:06 fetching corpus: 0, signal 0/0 (executing program) 2025/04/23 01:20:08 starting 8 fuzzer processes 01:20:08 executing program 0: r0 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=',\x00', 0x0) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/119, 0x77) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x90}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000}, 0x909638a5f7c15333) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000380), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/187, 0xbb}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f00000005c0)=""/199, 0xc7}], 0x4, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x1, 0x140, &(0x7f0000000880)={r4, r5+60000000}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x83}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc000) keyctl$describe(0x6, r0, &(0x7f0000000b40)=""/125, 0x7d) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000bc0), 0x20000, 0x0) ioctl$RTC_PLL_SET(r7, 0x40207012, &(0x7f0000000c00)={0x3, 0x1, 0x7ff, 0x1f, 0x84, 0x1ff, 0xdaf}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, r9, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xfffffffffffffffe}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x58}}, 0x11) keyctl$get_keyring_id(0x0, 0x0, 0x0) 01:20:08 executing program 1: lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) clone3(&(0x7f0000001240)={0xa0008500, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, {0x11}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/77, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f00000012c0)={0x7}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001500)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xd4, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8001}, 0x200400c4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2b}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffff, 0x22}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x51) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000001940)={0x5, 0xd8, &(0x7f0000001840)="38940df6936a8c5cb8942ae0da8ad7434fb3b07c31e6b5ac639a8b1a239e8940f89c86adf30430e5ab41ce3aeca2f1e53bdcb843310ad34283a5eaee6d2cb21c14ee0ebed9e5eee2d5fd07c1133f9b96f5877c24a41abf54b92a21a3fb96b80384d8ab78de481999d6ce9f49b7763594ff5d9e676ba8b92167c32216e2cb9db64d2dd73300821ea1d043940c48aa6764cb6eaac011035e2edc1b4cc55559cc3e738a27af9e5e2d77bb76f7e86d20aa7c5103a4912c78aa39f7b8978dbc924d4c849f3d3ad824c58302a4be9c7dc37fde42e9e6f40d95f509"}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x68, 0x3, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x80000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x7, 0x52b9}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x653}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x690}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x100}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3f}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40000e0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004050) sched_setparam(r1, &(0x7f0000001c00)=0x7) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000001c40), &(0x7f0000001c80)=0x40) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001cc0), 0x400, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001d00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001f00)={{r5}, r6, 0x8, @unused=[0x20, 0x9, 0x3ff, 0x203a], @subvolid=0x100000000}) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x50, r0, 0x8000000) syz_io_uring_complete(r7) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000003300)={0x3, 0x1, 0x3, 0x1e, 0x88, &(0x7f0000002f00)}) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000003340)={0x33, @empty, 0x4e21, 0x2, 'rr\x00', 0x4, 0x9, 0x7b}, 0x2c) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000003380)) 01:20:08 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x10001}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xcfd}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1f}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x421}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40004}, 0x20004010) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x8040}, 0x40810) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r4, 0x24, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000044}, 0x8015) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x84, r1, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x1, 0x4}, {0x1f, 0x4}, {0x4, 0x3}, {0x1, 0x4}, {0x80, 0x5}, {0x83}, {0x8, 0x1}, {0x7f, 0x6}, {0x5, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x11, 0x2}, {0x80}, {0x1f, 0x7}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x4}], "7e87e7d5ff55a137"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x6}, {0x3f}, {0x4, 0x7}, {0x4, 0x4}, {0x12, 0x5}, {0x42, 0x2}, {0x0, 0x5}, {0x2, 0x5}, {0xc9, 0x6}, {0x5, 0x2}, {0x80, 0x2}, {0x7f, 0x2}, {0x5, 0x5}, {0xff, 0x2}, {0x20, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x30, 0x2}, {0x80, 0x3}, {}], "702c6937332e8386"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x2040004) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40840) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000900)={'wg2\x00', 0x8e}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r7, 0x1010, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000b00)={0x200, 0xace0, 0x91bf, 0x9, 0x5}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x94, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffff55}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x99}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000884}, 0x4871) 01:20:08 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000040)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000080)={0x4, "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"}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000002c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000340)={0x7, 0x5, 0x80000000, 0x80, 0xd, "813f66836c035bf49b537b7f3c2e9f2d8dbed1"}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000380)) r2 = accept$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000400)=0x10) setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000440), 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@empty, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000580)=0xe8) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000005c0)={0x2, 0x4, 0x7fff, 0x9, 0x7, 0x8}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000600)={'filter\x00', 0x0, 0x0, 0x0, [0x2b0, 0x100000000, 0xe6, 0x7d787beb, 0x44ae, 0x8001]}, &(0x7f0000000680)=0x78) r3 = dup2(r0, r2) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000800)={&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000700)=""/200, 0xc8}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000840)={0x40, 0x7, 0x2, 0xff, 0x7, 0x8}) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000880)) name_to_handle_at(r0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x3, 0x0, 0x28, 0x8}, {0x8, 0x4, 0x5, 0x4}}}, &(0x7f0000000940), 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000980)={{r3}, {@val, @actul_num={@void, 0x10001, 0x74}}}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000a00)={0x0, 0x80000000}) [ 104.934624] audit: type=1400 audit(1745371208.897:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:20:08 executing program 4: shmctl$SHM_UNLOCK(0x0, 0xc) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x4000) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000140)) finit_module(r0, &(0x7f0000000180)='/dev/vcsa#\x00', 0x1) r1 = memfd_secret(0x0) getpeername(r1, &(0x7f00000001c0)=@phonet, &(0x7f0000000240)=0x80) setregid(0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000280)={0xc1, {{0x2, 0x4e22, @private=0xa010100}}}, 0x88) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) r2 = socket$inet6(0xa, 0x5, 0xfffffff8) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0xfb, 0x59, 0x0, 0x40, "4c8349c783749eaec8709f6a05eba918", "a3afbcb27d48fcfdb6b39d8bf6f12ebc7c92da45ae55a0b52f2f962d13c008c6ef6ad4ec12ee9b78f42ae15e8df1ac6e6fa3c31be28b50d2ffb07e668e37f30ab15ab793"}, 0x59, 0x2) time(&(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0xc, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) 01:20:08 executing program 5: sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x43a, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c044) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x1, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0xfffe}, [@CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000800) recvmmsg$unix(r0, &(0x7f0000000540)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000400)=""/49, 0x31}], 0x3, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x1, 0x12120, &(0x7f0000000580)={0x0, 0x3938700}) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x84, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf800}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x80) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r10, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x445fd2cb4c4e361c}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r11, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040080) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa37}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ID={0x14, 0x3, "201d61a794f8852d171fafc794a4de7f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004005}, 0x2004c884) fcntl$setflags(r7, 0x2, 0x1) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r12, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000041) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x29, 0x3, 0xf1, 0x7f, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x40, 0x20, 0x7826cf00, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x1, 0x3, 0x9, @remote, @empty, 0x8000, 0x700, 0x5, 0x1f}}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000e80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r14}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x9a82292e7e3a5fc4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x34}}, 0x10) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000fc0)=0x0) r16 = syz_open_dev$tty20(0xc, 0x4, 0x1) kcmp(r5, r15, 0x1, r2, r16) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001180)={'ip6_vti0\x00', &(0x7f0000001100)={'syztnl0\x00', 0x0, 0x2b, 0xb7, 0x93, 0x81, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x8000, 0x8, 0x2, 0x7}}) 01:20:09 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x40, 0x422202) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20104001}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x3, 0x3, 0x304, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x9fa}}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x20}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r1 = memfd_secret(0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffff00, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x18}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f00000004c0)={0x9, {0x22, 0x101, 0x9, 0xfff, 0x8}}) r5 = openat(r1, &(0x7f0000000500)='./file0\x00', 0x111001, 0x8) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f00000007c0)=0xe8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x2c4, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "c555462092897741aaf63145427455ab4b680217328d70ec42"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x178, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x53, 0x5, "c73f8d034cbd8ab65bd91ebacfe0de2d48233aed92231501621b37cb99a966d1e9d77e25aebfcfe926b8d9b8003d1aec48aca11c8215671ff1588bbf0d47a021ebed5cb1884d33b480476b76480549"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6a, 0x4, "597be1d27a433aed34fabddf8ff99549c2cf7ff912611a5887ce82bc98a4f092a8deae0876dce3247cbdfa2b32effe764085f145f2c9ecbc4a4270523663a63378a221295d1abe646f01c0ed1c4a0bd5d155349c9ad3f1136ca85b01faca0f67fdbd3c2ae244"}, @ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "bdca147b377d63a3739bf223d534124f629f98152897d09a8b59ad6ec221c1438431c32c1a143e12aee1624a2d589cbcf939f894bdd2f958a2a569a3c312ce38403c264ada228f215a"}, @ETHTOOL_A_BITSET_VALUE={0x5e, 0x4, "7a4721fceb25bd828876cd94a618460d1d1cf29807323e96b8b27ca538653b5ed3d54145b6f4595e85a392b262160443ad1b1dc7db8a8e948ed12564551701bada9cfc2e2603bec96dc48c65e806100ae4399890b8bd2f01f594"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3b, 0x4, "789e1f6b65f767be027166512e659abd7835f54f6c7c7ec28b4cf1a8f66ec1423885a42174fdada46d5dac8efb2c21876a1d20b9522c92"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x40008c0}, 0x20004004) r8 = openat2(r3, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x2400, 0x3, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'syztnl0\x00', r9, 0x4, 0x1, 0x0, 0x1, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x40, 0x0, 0x1ff}}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r10, 0x29, 0xcd, &(0x7f0000000d00)={{0xa, 0x4e22, 0x4, @empty, 0x1}, {0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x8, [0x0, 0x3a5ad11a, 0x7, 0x8001, 0x9, 0x1f, 0x4, 0x1]}, 0x5c) splice(r8, &(0x7f0000000d80)=0x8bba, r10, &(0x7f0000000dc0), 0x6, 0xc) 01:20:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='team0\x00') r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_tables_targets\x00') getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="fc904301f228"}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4015}, 0xc880) getsockname$netlink(r2, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000340)='rose0\x00') recvmsg$unix(r2, &(0x7f0000001500)={&(0x7f0000000380), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000001480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001580)={0x228, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x100, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x40005}, 0x44815) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x38, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001980)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000001a80)=0xe8) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000001b80)={&(0x7f0000001940), 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4) pipe(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc880) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000001d00)={'mangle\x00', 0x0, [0x4, 0x7f, 0xfff, 0x1000, 0x7]}, &(0x7f0000001d80)=0x54) bind(r3, &(0x7f0000001dc0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x4}}, 0x80) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x2000010) [ 106.441326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.447773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.450907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.460533] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.466439] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.574838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.585119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.598352] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.618939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.632618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.643502] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.645680] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.654380] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.656921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.661828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.671335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.679821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.681787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.697667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.705118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.718202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.722196] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.753825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.759025] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.765948] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.779802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.786828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.787300] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.789965] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.795838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.801417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.813579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.816760] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.820529] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.841060] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.848624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.853976] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.876688] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.882845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.924056] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 108.519463] Bluetooth: hci0: command tx timeout [ 108.711073] Bluetooth: hci1: command tx timeout [ 108.774705] Bluetooth: hci2: command tx timeout [ 108.840601] Bluetooth: hci3: command tx timeout [ 108.902395] Bluetooth: hci6: command tx timeout [ 108.902454] Bluetooth: hci4: command tx timeout [ 108.903736] Bluetooth: hci5: command tx timeout [ 108.966400] Bluetooth: hci7: command tx timeout [ 110.566635] Bluetooth: hci0: command tx timeout [ 110.758514] Bluetooth: hci1: command tx timeout [ 110.822368] Bluetooth: hci2: command tx timeout [ 110.886632] Bluetooth: hci3: command tx timeout [ 110.950577] Bluetooth: hci5: command tx timeout [ 110.951410] Bluetooth: hci6: command tx timeout [ 110.951463] Bluetooth: hci4: command tx timeout [ 111.015346] Bluetooth: hci7: command tx timeout [ 112.615474] Bluetooth: hci0: command tx timeout [ 112.807366] Bluetooth: hci1: command tx timeout [ 112.870383] Bluetooth: hci2: command tx timeout [ 112.934491] Bluetooth: hci3: command tx timeout [ 112.998742] Bluetooth: hci4: command tx timeout [ 112.999993] Bluetooth: hci5: command tx timeout [ 113.000026] Bluetooth: hci6: command tx timeout [ 113.064922] Bluetooth: hci7: command tx timeout [ 114.662406] Bluetooth: hci0: command tx timeout [ 114.854413] Bluetooth: hci1: command tx timeout [ 114.918402] Bluetooth: hci2: command tx timeout [ 114.982509] Bluetooth: hci3: command tx timeout [ 115.047374] Bluetooth: hci5: command tx timeout [ 115.047429] Bluetooth: hci4: command tx timeout [ 115.047811] Bluetooth: hci6: command tx timeout [ 115.112186] Bluetooth: hci7: command tx timeout [ 168.841151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.846617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.848152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.863664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.866930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.949734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.955970] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.963065] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.965383] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.971787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.973721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.980834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.982695] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.992552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.007391] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.044155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.047722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.068942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.079483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.085598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.090726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.100860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.113030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.137545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.143607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.309509] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 169.309608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.316953] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 169.324040] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 169.325517] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 169.347067] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 169.360972] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 169.364143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.366847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.377041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.381096] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 169.381550] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 169.412092] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 169.422429] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.427817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.918671] Bluetooth: hci0: command tx timeout [ 171.047368] Bluetooth: hci1: command tx timeout [ 171.111308] Bluetooth: hci2: command tx timeout [ 171.175876] Bluetooth: hci3: command tx timeout [ 171.303511] Bluetooth: hci4: command tx timeout [ 171.494399] Bluetooth: hci6: command tx timeout [ 171.558424] Bluetooth: hci7: command tx timeout [ 171.622391] Bluetooth: hci5: command tx timeout [ 172.967522] Bluetooth: hci0: command tx timeout [ 173.095318] Bluetooth: hci1: command tx timeout [ 173.158512] Bluetooth: hci2: command tx timeout [ 173.222341] Bluetooth: hci3: command tx timeout [ 173.350356] Bluetooth: hci4: command tx timeout [ 173.542580] Bluetooth: hci6: command tx timeout [ 173.607336] Bluetooth: hci7: command tx timeout [ 173.670844] Bluetooth: hci5: command tx timeout [ 175.014403] Bluetooth: hci0: command tx timeout [ 175.142378] Bluetooth: hci1: command tx timeout [ 175.206838] Bluetooth: hci2: command tx timeout [ 175.270552] Bluetooth: hci3: command tx timeout [ 175.398644] Bluetooth: hci4: command tx timeout [ 175.591331] Bluetooth: hci6: command tx timeout [ 175.654570] Bluetooth: hci7: command tx timeout [ 175.718358] Bluetooth: hci5: command tx timeout [ 177.063172] Bluetooth: hci0: command tx timeout [ 177.191905] Bluetooth: hci1: command tx timeout [ 177.254639] Bluetooth: hci2: command tx timeout [ 177.318558] Bluetooth: hci3: command tx timeout [ 177.446647] Bluetooth: hci4: command tx timeout [ 177.638555] Bluetooth: hci6: command tx timeout [ 177.702528] Bluetooth: hci7: command tx timeout [ 177.766352] Bluetooth: hci5: command tx timeout [ 229.138209] syz-executor.2 (2752) used greatest stack depth: 24400 bytes left [ 231.111205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.114067] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.118338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.121883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.129121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.134037] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.139656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.146969] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.160968] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.179559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.197141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.205736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.209765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.219036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.225528] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.386576] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.393530] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.397560] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.437750] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.438869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.442707] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.443702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.447113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.467860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.483726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.488515] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.492855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.504183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.507077] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.513657] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.525930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 231.531143] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 231.535644] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 231.539161] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 231.541304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.543795] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 231.545303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.546024] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.552684] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.578813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 233.190572] Bluetooth: hci1: command tx timeout [ 233.255312] Bluetooth: hci0: command tx timeout [ 233.255346] Bluetooth: hci2: command tx timeout [ 233.510366] Bluetooth: hci5: command tx timeout [ 233.638399] Bluetooth: hci7: command tx timeout [ 233.638426] Bluetooth: hci4: command tx timeout [ 233.702384] Bluetooth: hci3: command tx timeout [ 233.704998] Bluetooth: hci6: command tx timeout [ 235.238331] Bluetooth: hci1: command tx timeout [ 235.302503] Bluetooth: hci0: command tx timeout [ 235.304145] Bluetooth: hci2: command tx timeout [ 235.559304] Bluetooth: hci5: command tx timeout [ 235.686587] Bluetooth: hci7: command tx timeout [ 235.689310] Bluetooth: hci4: command tx timeout [ 235.750367] Bluetooth: hci6: command tx timeout [ 235.750818] Bluetooth: hci3: command tx timeout [ 237.286336] Bluetooth: hci1: command tx timeout [ 237.350587] Bluetooth: hci2: command tx timeout [ 237.351046] Bluetooth: hci0: command tx timeout [ 237.606344] Bluetooth: hci5: command tx timeout [ 237.734344] Bluetooth: hci4: command tx timeout [ 237.734537] Bluetooth: hci7: command tx timeout [ 237.800357] Bluetooth: hci3: command tx timeout [ 237.800428] Bluetooth: hci6: command tx timeout [ 239.334561] Bluetooth: hci1: command tx timeout [ 239.399087] Bluetooth: hci2: command tx timeout [ 239.399681] Bluetooth: hci0: command tx timeout [ 239.655334] Bluetooth: hci5: command tx timeout [ 239.782336] Bluetooth: hci4: command tx timeout [ 239.782372] Bluetooth: hci7: command tx timeout [ 239.846378] Bluetooth: hci6: command tx timeout [ 239.846394] Bluetooth: hci3: command tx timeout [ 293.648172] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.651193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.665757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.665981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.670069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.676888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.686933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.696192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.699458] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.702594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.704138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.710712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.713233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.722007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.725247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.883456] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.888519] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.895805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.901506] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.916196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.925513] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.934836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.941123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.970378] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.974720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 293.991552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.019870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.053095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.062232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.093156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.121226] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.123571] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.142069] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.150800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.157353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.169661] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.176147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.182979] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.197188] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.214068] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.784349] Bluetooth: hci2: command tx timeout [ 295.785157] Bluetooth: hci1: command tx timeout [ 295.785928] Bluetooth: hci0: command tx timeout [ 296.038373] Bluetooth: hci4: command tx timeout [ 296.102562] Bluetooth: hci3: command tx timeout [ 296.294396] Bluetooth: hci5: command tx timeout [ 296.294414] Bluetooth: hci7: command tx timeout [ 296.358713] Bluetooth: hci6: command tx timeout [ 297.830660] Bluetooth: hci1: command tx timeout [ 297.831134] Bluetooth: hci0: command tx timeout [ 297.831624] Bluetooth: hci2: command tx timeout [ 298.087352] Bluetooth: hci4: command tx timeout [ 298.150516] Bluetooth: hci3: command tx timeout [ 298.342860] Bluetooth: hci5: command tx timeout [ 298.343630] Bluetooth: hci7: command tx timeout [ 298.407405] Bluetooth: hci6: command tx timeout [ 299.878564] Bluetooth: hci0: command tx timeout [ 299.879037] Bluetooth: hci2: command tx timeout [ 299.880182] Bluetooth: hci1: command tx timeout [ 300.135486] Bluetooth: hci4: command tx timeout [ 300.198553] Bluetooth: hci3: command tx timeout [ 300.390345] Bluetooth: hci5: command tx timeout [ 300.390360] Bluetooth: hci7: command tx timeout [ 300.454652] Bluetooth: hci6: command tx timeout [ 301.926515] Bluetooth: hci1: command tx timeout [ 301.926548] Bluetooth: hci0: command tx timeout [ 301.927472] Bluetooth: hci2: command tx timeout [ 302.182474] Bluetooth: hci4: command tx timeout [ 302.246390] Bluetooth: hci3: command tx timeout [ 302.440910] Bluetooth: hci5: command tx timeout [ 302.442038] Bluetooth: hci7: command tx timeout [ 302.502736] Bluetooth: hci6: command tx timeout [ 356.290919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.294239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.300817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.312802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.321625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.555356] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.558037] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.570352] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.581797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.593740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.679583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.690944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.695772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.705894] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.724327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.817101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.825690] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.856811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.865855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.867959] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.873358] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.874937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.877186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.879526] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.888896] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.891510] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.896005] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 356.911657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.917898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.946860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 356.956075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.975041] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 356.978197] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 357.007950] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.020164] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 357.038825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.041607] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 357.055155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.071843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 357.102509] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 358.374691] Bluetooth: hci0: command tx timeout [ 358.630352] Bluetooth: hci1: command tx timeout [ 358.822366] Bluetooth: hci2: command tx timeout [ 358.951589] Bluetooth: hci4: command tx timeout [ 359.014607] Bluetooth: hci5: command tx timeout [ 359.078577] Bluetooth: hci3: command tx timeout [ 359.142395] Bluetooth: hci6: command tx timeout [ 359.209502] Bluetooth: hci7: command tx timeout [ 360.423215] Bluetooth: hci0: command tx timeout [ 360.679323] Bluetooth: hci1: command tx timeout [ 360.873609] Bluetooth: hci2: command tx timeout [ 360.999394] Bluetooth: hci4: command tx timeout [ 361.065404] Bluetooth: hci5: command tx timeout [ 361.127345] Bluetooth: hci3: command tx timeout [ 361.191345] Bluetooth: hci6: command tx timeout [ 361.255893] Bluetooth: hci7: command tx timeout [ 362.470525] Bluetooth: hci0: command tx timeout [ 362.726934] Bluetooth: hci1: command tx timeout [ 362.918875] Bluetooth: hci2: command tx timeout [ 363.047672] Bluetooth: hci4: command tx timeout [ 363.111471] Bluetooth: hci5: command tx timeout [ 363.174818] Bluetooth: hci3: command tx timeout [ 363.238377] Bluetooth: hci6: command tx timeout [ 363.303461] Bluetooth: hci7: command tx timeout [ 364.519312] Bluetooth: hci0: command tx timeout [ 364.774798] Bluetooth: hci1: command tx timeout [ 364.966906] Bluetooth: hci2: command tx timeout [ 365.096293] Bluetooth: hci4: command tx timeout [ 365.159622] Bluetooth: hci5: command tx timeout [ 365.222435] Bluetooth: hci3: command tx timeout [ 365.286375] Bluetooth: hci6: command tx timeout [ 365.351362] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:25:18 Registers: info registers vcpu 0 RAX=00000000ffffffff RBX=0000000000000000 RCX=4b952e4da9267483 RDX=00000000915d54c6 RSI=000000005e406224 RDI=00000000ef9db6ea RBP=ffffffff85c1ba80 RSP=ffff888038ddf8a0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000011838 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff81518783 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5be5d92540 00000000 00000000 GS =0000 ffff8880e564d000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f50ce55d000 CR3=0000000030214000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87a2cbc8 RBX=ffff8880096eb780 RCX=0000000000000200 RDX=873d0e13b074236a RSI=ffff8880096ec200 RDI=ffff8880096ec1d8 RBP=0000000000000000 RSP=ffff888009707748 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000008626 R12=ffff8880096ec200 R13=0000000000000000 R14=0000000000000001 R15=ffff8880096ec1d8 RIP=ffffffff81516e84 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574d000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f99d48c8008 CR3=000000002b0f4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000