Warning: Permanently added '[localhost]:49006' (ECDSA) to the list of known hosts. 2025/04/28 07:07:12 fuzzer started 2025/04/28 07:07:12 dialing manager at localhost:46629 syzkaller login: [ 102.187737] cgroup: Unknown subsys name 'net' [ 102.305391] cgroup: Unknown subsys name 'cpuset' [ 102.341516] cgroup: Unknown subsys name 'rlimit' 2025/04/28 07:07:37 syscalls: 2214 2025/04/28 07:07:37 code coverage: enabled 2025/04/28 07:07:37 comparison tracing: enabled 2025/04/28 07:07:37 extra coverage: enabled 2025/04/28 07:07:37 setuid sandbox: enabled 2025/04/28 07:07:37 namespace sandbox: enabled 2025/04/28 07:07:37 Android sandbox: enabled 2025/04/28 07:07:37 fault injection: enabled 2025/04/28 07:07:37 leak checking: enabled 2025/04/28 07:07:37 net packet injection: enabled 2025/04/28 07:07:37 net device setup: enabled 2025/04/28 07:07:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/28 07:07:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/28 07:07:37 USB emulation: enabled 2025/04/28 07:07:37 hci packet injection: enabled 2025/04/28 07:07:37 wifi device emulation: enabled 2025/04/28 07:07:37 802.15.4 emulation: enabled 2025/04/28 07:07:37 fetching corpus: 0, signal 0/0 (executing program) 2025/04/28 07:07:38 starting 8 fuzzer processes 07:07:38 executing program 0: getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000080)={0x3, 0x3, 0x5, 0x40, 0x3, 0x6}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) read$hiddev(r0, &(0x7f0000000100)=""/4096, 0x1000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001200)={&(0x7f0000001100), 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x14, 0x63}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="094f17cdc313"}, @NL80211_ATTR_SSID={0x8, 0x34, @random="66949165"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x15}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x60}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000001240), &(0x7f0000001280)=0x4) r1 = epoll_create(0x66000000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000012c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000001300)=0x2, 0x4) fsetxattr$security_ima(r1, &(0x7f0000001340), &(0x7f0000001380)=@sha1={0x1, "818e5fe049be754fddf4867fccccff6f7a5f4e53"}, 0x15, 0x3) syz_usb_connect$cdc_ncm(0x1, 0x7e, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x40, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3c561fc32b"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x401, 0x4, 0x2}, {0x6, 0x24, 0x1a, 0x6, 0x2}, [@acm={0x4, 0x24, 0x2, 0xc}, @dmm={0x7, 0x24, 0x14, 0x4, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x1ff, 0x55, 0x2, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x7ff, 0x4, 0x9, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x3d7, 0x0, 0x5, 0xcf}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x201, 0x6, 0x0, 0x81, 0x8}, 0x12, &(0x7f0000001480)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x3f, 0xd}]}, 0xa, [{0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x3070}}, {0x19, &(0x7f0000001540)=@string={0x19, 0x3, "c927bc610ace1fe454fcffecc9a1dee43540e092df0a64"}}, {0x6e, &(0x7f0000001580)=@string={0x6e, 0x3, "8bf8df8b3d89ee02ad85a8856337c7d531f11170c0592fe6c0de0d840a48d14e8269fed73ad96dfe1fd17b7bcc795e1608ef30c644f3f56e0b8a4fb9efeb29a194e1155b4e7743a367649d986c93384c253da0062e2c7fb73dce4825f232855efaf7a864a674840828aa1500"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x627}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x1ce2090b2193296b}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x180a}}]}) lsetxattr$trusted_overlay_opaque(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880), &(0x7f00000018c0), 0x2, 0x8b48785db1ab7e07) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000001900)={@multicast2, @local}, 0x8) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000001940)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000001a40)='./file0\x00', 0x0, 0x8) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000001a80)=0x2, &(0x7f0000001ac0)=0x4) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000001b00)=0x5) r3 = syz_open_pts(r0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000001b40)) 07:07:38 executing program 1: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) renameat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xdfa9}}, './file0/file0\x00'}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14, 0x800) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000280)) lstat(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r3, 0x7401c8562f23fd81, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x84) setxattr$security_capability(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600)=@v1={0x1000000, [{0xfffffe00, 0x5c}]}, 0xc, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000700)={r0, 0x38000000, 0x4, 0x36d8}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x84, r6, 0x130, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x59}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x853c}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x404}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x5, 0xf7, @device_a, 0x3ff, @device_a, 0x8, 0x0, @device_a, 0xffffffff}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/seq/timer\x00', 0x0, 0x0) write$cgroup_type(r9, &(0x7f0000000a80), 0x9) ioctl$TIOCSIG(r0, 0x40045436, 0x17) 07:07:38 executing program 2: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @local, 0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/hci\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9c}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x804) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl0\x00', r0, 0x2f, 0x5, 0x5, 0xffffff7f, 0x9, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x80000000, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', r0, 0x7800, 0x51, 0x7fffffff, 0x1, {{0x9, 0x4, 0x2, 0x3, 0x24, 0x65, 0x0, 0x80, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @remote, {[@timestamp_addr={0x44, 0xc, 0x47, 0x1, 0x7, [{@empty, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl1\x00', r0, 0x4, 0x1, 0x7, 0xffffffff, 0x6a, @remote, @local, 0x7800, 0x40, 0xfffffff1, 0xaee}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a40)={&(0x7f0000000440), 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x158, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x20008050) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xc4, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x9}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1240}, {0x8, 0x0, 0x101}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x81}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="9057a9f1924e"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1000}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x4}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048014) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000f80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c80)={0x28c, 0x12, 0x2, 0x70bd2d, 0x25dfdbfe, {0x6f, 0x1, 0x9, 0xff, {0x4e20, 0x4e21, [0x3f, 0x401, 0xf249, 0x80000001], [0xfffffff9, 0x400, 0x6, 0x7], r4, [0x80000001, 0x101]}, 0x9b9, 0x40}, [@INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "03e9aeaed7acee514e492c1607e5dca819ba0c4d62e48b67322ba3f001aa8064e87d81cf6033caef2874218ea01f68857e3ef161fe03e9490fe89154666dbbc6967a6ee02da9fd2d6bfecaa41f752eae6d5ff7a063cd12f6a08f1787ebc29af7e4997333d8853880f50d2c407340a1f38a3a4346479690224aa16c5acca024914e6ef10454f81736922580d5f1d54445fce7f5a1aa477ccf83a95404a3e0b3645289ccdbe2e4d6a45e9f0450c6333bdbc757e3e7911d47d6e77d2bf789b31539aa32be65838f82bebf51fa6174ca89ff5053635a660f9dff34391d598251"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "8a36f1fa55bf08d5cea6ac16c9bfaeb54bde23a7f358ef52daafe209e5d9f13c436926b2b081de"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "13d48159c28da7c28808bbb08de2d2759d34809620"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "69916a74696f4340f53c060fca104d75a731761277108d601f1c9e9698a45e094df573879d113f3b431db367da06f3da8a084b16fa988891166c340dac6f246c05c1aef49107574fad0be8c7e43f3236e04d0bf413a6b0f2e6bbe90c35e314aedd25ac073cb64d07d7bff234e0c1b3acc3898ec5e4c83be484aa1fed66dd2b9f5df4808f0c7a2891d9968be3090506fa7b5bb57806140e220c853fa86a20f77fd2a801a308937e45a45af99f18aa81661f8333c3"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "ae6ef6e9e4fca89a7df32fb990e9cb23d4f63750c68b1649180b091487e3177a223f818f85e7512b795ec6eb9e3bea2fe4321ec43e373acc64eb5137c24e4892b99d7fec26dab2ca1837659efe157a9cae53efcbe89186"}]}, 0x28c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24000001) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000000fc0)={'syztnl0\x00', r4, 0x4, 0x4, 0x6, 0x80, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x40}, 0x20, 0x10, 0x0, 0x80000001}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001080)={{0x1, 0x1, 0x18, r1, {0xaf98}}, './file0\x00'}) recvfrom$inet(r7, &(0x7f00000010c0)=""/247, 0xf7, 0x40000121, &(0x7f00000011c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000001200)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r7) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x54, r9, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffa, 0x21}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x599}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x54}}, 0x80) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0xf4, &(0x7f00000013c0)=""/244) [ 127.886398] audit: type=1400 audit(1745824058.598:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:07:38 executing program 4: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x8811) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400, 0x7}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x48}}, 0x10) syz_io_uring_setup(0x79bd, &(0x7f00000003c0)={0x0, 0x8afc, 0x0, 0x2, 0x36, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r3 = accept(r1, 0x0, &(0x7f00000004c0)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3b}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc0000000}, {0x6, 0x16, 0x5}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048000) r4 = openat2(r1, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x4c0601, 0x0, 0x6}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000740)={0x6, @multicast2, 0x4e22, 0x4, 'dh\x00', 0x28, 0x0, 0x13}, 0x2c) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x6c, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8001}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa36}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x85}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {0x3f, 0x800}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000980)={{0x1, 0x1, 0x18, r7, {0x8fd3}}, './file0\x00'}) r8 = syz_io_uring_complete(r2) pidfd_getfd(r8, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x30, r4, 0xe7f7a000) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) 07:07:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x384, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc34}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @empty, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe0}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "37e1b2823e2a0359c5b61b3289e4014248692f7beb989315"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "bc13d3d9c4f6882642ee8177be4f5bc27937e863987c496dd3462bd6fae171a41578a0"}}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc02}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x37}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc68}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r4, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6e}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf8, 0x4a}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f00000006c0)) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f0000000700)={0x7, 0x7, 0x1}, &(0x7f0000000740)=0x28) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r8, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xff, 0x49}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x44880) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000900)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r9, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x20000010) syz_genetlink_get_family_id$smc(&(0x7f0000000a80), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r8, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000980}, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r8, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdf0}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1164}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 07:07:38 executing program 6: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x7, 0x0, 0x5}) clone3(&(0x7f00000011c0)={0x201000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x6}, &(0x7f0000000100)=""/4096, 0x1000, &(0x7f0000001100)=""/83, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0xa}, 0x58) r1 = syz_open_dev$loop(&(0x7f0000001240), 0x7, 0x20000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) kcmp(r0, 0x0, 0x2, r1, r2) syz_mount_image$nfs4(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x4, 0x3, &(0x7f00000015c0)=[{&(0x7f0000001340)="da59b57adf381493f7fcbe7013e8b5921a23d2190d593350bc0fdddf7f068f4aa9f21a08f4850e8d8be53824a711d9564356a2d54c137430d231603854e6c96727c4bb471f93d22940a8873155d06abbf4d1059304a8838a7aa5f8b47f6e4cb3287b84c7581f8f88f3febf7e7aabf69e18c5e642518351cbfa2047efcbacadbba312d6dccdc9f92b54cbbd5749d37f8a6debdf4a3509d62f8c36e7610a8d5b411c90bd440030f9c53973422dee09be49dcb78b299a3beeb9ca05018ad6207725c6db1546c096d5ef4cfb5d78cac8d89f", 0xd0, 0xff}, {&(0x7f0000001440)="d6d9052bb861c5aebcfbd8d4d07a2d3a67128ab61c82d9c842918cb2eb37ebcb5728f466899fd700f5261ac5daf0ffa555e3d6b7e2719e928f7a4eebd8d0c56309a2e4a87e", 0x45, 0xfffffffffffffffc}, {&(0x7f00000014c0)="379753dfece4ed8cb68e3f0bedd4d2091bab6189ce736859136a6779831711c3b914233f35efd61dca4c049acc3a98e9625685fd37f52ce5effeffb6e9638121c36e3ceb87f9f1cebcd6172569378b6202b92c20d1fd921ee53955b24b24f8472803ea06ad1813918ee7139496cf9fa77bc84a3e7ea95d07ebd42f30bb1ef34bc0bba874c3c4f35ba04844edd0c721dc40ea7a7ffa11dda6e41abfa4fb53d705b27b81856d76a3589d98e7cb94bca69be5b24529146ffd26a43884a3346f44e7c3bdec1317d95b2957d0ae48c4bd42c668500bf1727d0d69aa2660d1ebe5d7f70708bc38", 0xe4}], 0x8000, &(0x7f0000001640)={[{'\xdf\'.'}, {'.'}, {'/dev/loop#\x00'}, {'{\xd4].+'}, {'/dev/loop#\x00'}, {'{'}, {'+{('}, {'[}['}], [{@audit}, {@appraise}]}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000001680), 0x282a00, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x1) write$P9_RSTATFS(r2, &(0x7f00000016c0)={0x43, 0x9, 0x2, {0x3, 0x9, 0x2, 0x7f, 0x5, 0x9708474, 0x7, 0x0, 0x987b}}, 0x43) fcntl$setflags(r2, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$security_evm(r5, &(0x7f0000001740), &(0x7f0000001780)=@v2={0x5, 0x1, 0xd, 0x6, 0xee, "3c8ca2c44d1f6087cbb386ddebfa8521c5b0d20ebdc2c3484dc45fafebcf6b8797b11bedf857dbc5dddcd4d3ddac5530e44148f96decae0dfd2b8d9dcfa2314fd3fa74c00720893e4f59a0704eaf0d1c7b7a85730cf9aa8fc9da6b9d55047949b7d806d2ffea567ad45c8034200800844471e062f52817ca3f9ecd26b9ab57dbf54dc5606affb893b60f5871b6060067d84651176dd8aed223d5dca31310995af1819b3b6a3b151fc92afc4f7809739fc4c856baa8c89cba69c6c2968f9845e18ae41226e89a1a11ee1625ee2d01408ae96a9155ba378f94a30e9aaf2ccadf94002dbbb249e188cab03727d5418d"}, 0xf7, 0x2) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000001c80)={0x2, 0x1, 0x1c, 0x1e, 0x4c, &(0x7f0000001880)="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"}) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000020c0)={0x2, 0x1, 0x11, 0xa, 0x24, &(0x7f0000001cc0)="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"}) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000002100)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000002180)={0x15, 0x65, 0xffff, 0x48, 0x8, '9P2000.L'}, 0x15) 07:07:38 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2a) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000040)={{0x80, 0x7}, {0x3, 0x6}, 0x0, 0x9, 0x3}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000002c0)={{r2, 0x0, 0x3, 0x401, 0x8b6f, 0x0, 0x4, 0x9, 0xc0f6, 0x2, 0x2, 0xb7b, 0x9, 0xe0, 0x7}, 0x8, [0x0]}) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000340)=@srh={0x2e, 0xe, 0x4, 0x7, 0x8, 0x20, 0x0, [@private1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, @local, @dev={0xfe, 0x80, '\x00', 0xc}, @private1]}, 0x78) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f00000003c0)=0x4) r6 = creat(&(0x7f0000000400)='./file0\x00', 0x190) sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8b84fff17d79"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9dd4a05ab17e"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f2c97791b1d4"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20010055}, 0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000580)=0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000005c0)) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) r7 = dup3(r0, r0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000640)={0x3bc, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x230, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1c, 0x3, "0d9933ce9d688eefbbdb8fc30189e130ee19f493bc247fa6"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "c7146579bbdeff9095a0c4650b546e18202de1814cabe3bf6e61"}}, @TIPC_NLA_NODE_ID={0x69, 0x3, "78507a699a47a551edef5fd110faab0807fac5fc7460061be89f5768ec15847e4d09b6a3485637465cc67cdb4e48f0bb406adac273c5acc5af8ded94cab8ad8ce147d8a1e3a63641e3200fd44467e3f780c2eb72f47a64c6db094aba6527ceb1cd714543cc"}, @TIPC_NLA_NODE_ID={0x66, 0x3, "655e55c8e9f231d093afbbfb22f9d2821ac9eb5ad8dc21a69b043c80b2565aef3b07a436665aea12bc9892b8626cfd60ef6a0ff306ba7a52453981654e4874c996af68cbc873f3b8856bbe3295b720a23effbaa58ee5620e139fe9400b3518266f46"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf2, 0x3, "894c31a0e89f4e5fa22d3de355a3e1ddf96c494b1815014a89716345a1100737a27c19eaae45d78bb03da2986e7ed7dba98456fb4836ccbe8863931a79f1f2164a16cf5687164959c71d205536f9c38a1fbaf20b5b87db013da96ab1aa51f001198433953def7e052748244744bd006cc383ee7d9aeaee6ab53e252c6913a6714537a42c18529ec94e7e15c0b1f5187de2d53e64194c2b4ed15cc5ccfcf629dbf403bf0fd3d82cb1ca9df47738304e2a5a3627bcb5d1698ef5c094b93ffe7baea93e3e33396d6c9b6d58d988979d76a55ccc88226a17cfa3182fdfd7c1dd9d6598907bcad81f5822805d0e0df79c"}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x242}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x130}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2869}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4e6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff8046}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe2a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5e}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x40080}, 0x4004040) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000ac0)={"b13bfeaedcf2038906b91cdf7c1ac6aa", 0x0, r4, {0x1, 0x9}, {0x9, 0x2422}, 0x5, [0x1ff, 0x4, 0xcb1, 0x7, 0x820, 0x81, 0x10, 0x7fff, 0x1f, 0x4, 0x5, 0x13e1465a, 0x0, 0x9, 0x0, 0x10001]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000bc0)={"c2271bbd73c9837ed62322853367f089", r9, r3, {0x1, 0xd5}, {0x65, 0x80}, 0x6, [0x5, 0xffffffffffffff24, 0x1f83, 0x8, 0xfa7, 0x1, 0x800, 0x3, 0x1f, 0x9, 0x1, 0x7, 0x0, 0x3, 0x2f9f, 0xb64]}) r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000cc0), 0x709000, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r10, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) 07:07:38 executing program 7: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000000)={0x12, {{0xa, 0x4e24, 0x7, @local, 0x8}}, {{0xa, 0x4e20, 0x0, @mcast2, 0x9}}}, 0x108) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, r2, r1, r1]}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000300)={@local, 0x53}) r4 = fsmount(r0, 0x0, 0x14) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000340)={0xfff, 0x6, 0x2537a5d3, 0x3ff, 0x7}, 0x14) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000380)=0x8) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000003c0), 0x4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x55, 0x7c, 0x40, @local, @remote, 0x40, 0x7, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r5, 0x2f, 0xfb, 0x40, 0x100, 0x20, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, 0x700, 0x8, 0xffff, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000640)=0x1) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000680)={0x0, 0x4c, "d028e9cbc4ce3a6f273fea85f615e1b1b2da78873e6ef5be9e6bbad46033a3caa6dfa743f8a749ea1f100fe0f24872cf5ebb874aa50e776ba8d937109f9bd65989b5d8f8a145d3415e85a855"}) io_uring_setup(0x6005, &(0x7f0000000700)={0x0, 0xa25c, 0x20, 0x0, 0x3e, 0x0, r4}) exit_group(0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000780)={0x2, 'rose0\x00', {0x9}, 0xfffb}) [ 129.300691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.303878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.307174] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.317511] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.325259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.426073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.431448] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.437363] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.446706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.451354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.491334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.502722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.519098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.521683] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.536737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.545623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.551343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.555509] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.564368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.587523] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.612387] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.616411] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.622651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.622797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.624390] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.631327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.640763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.643810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.651420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.653111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.659822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.666623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.672159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.675172] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.679351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.681437] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.686088] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.706585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.742953] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.774473] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.378049] Bluetooth: hci0: command tx timeout [ 131.568185] Bluetooth: hci1: command tx timeout [ 131.760707] Bluetooth: hci2: command tx timeout [ 131.761401] Bluetooth: hci3: command tx timeout [ 131.824185] Bluetooth: hci4: command tx timeout [ 131.824880] Bluetooth: hci5: command tx timeout [ 131.825526] Bluetooth: hci7: command tx timeout [ 131.889349] Bluetooth: hci6: command tx timeout [ 133.424021] Bluetooth: hci0: command tx timeout [ 133.617963] Bluetooth: hci1: command tx timeout [ 133.809056] Bluetooth: hci3: command tx timeout [ 133.809098] Bluetooth: hci2: command tx timeout [ 133.873592] Bluetooth: hci7: command tx timeout [ 133.873819] Bluetooth: hci5: command tx timeout [ 133.874215] Bluetooth: hci4: command tx timeout [ 133.936110] Bluetooth: hci6: command tx timeout [ 135.472046] Bluetooth: hci0: command tx timeout [ 135.666090] Bluetooth: hci1: command tx timeout [ 135.856360] Bluetooth: hci3: command tx timeout [ 135.857507] Bluetooth: hci2: command tx timeout [ 135.920433] Bluetooth: hci5: command tx timeout [ 135.921335] Bluetooth: hci7: command tx timeout [ 135.922660] Bluetooth: hci4: command tx timeout [ 135.984630] Bluetooth: hci6: command tx timeout [ 137.521407] Bluetooth: hci0: command tx timeout [ 137.712464] Bluetooth: hci1: command tx timeout [ 137.905495] Bluetooth: hci3: command tx timeout [ 137.906637] Bluetooth: hci2: command tx timeout [ 137.968085] Bluetooth: hci5: command tx timeout [ 137.969376] Bluetooth: hci4: command tx timeout [ 137.971086] Bluetooth: hci7: command tx timeout [ 138.032253] Bluetooth: hci6: command tx timeout [ 190.199979] syz-executor.4 (285) used greatest stack depth: 23800 bytes left [ 192.777289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.788064] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.790730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.807551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.814597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.864657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.867839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.870405] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.879437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.895386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.914825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.919587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.926499] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.926835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.938361] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.944685] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.966720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.975504] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.998476] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.029100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.033306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.037112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.038291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.039721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.045372] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.048505] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.077176] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.094872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.122618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.133364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.211775] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.234325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.253582] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.275621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.299301] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.393837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.429762] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.440397] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.474382] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.482381] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.864014] Bluetooth: hci0: command tx timeout [ 194.993157] Bluetooth: hci1: command tx timeout [ 195.058013] Bluetooth: hci3: command tx timeout [ 195.119973] Bluetooth: hci2: command tx timeout [ 195.183987] Bluetooth: hci4: command tx timeout [ 195.312380] Bluetooth: hci5: command tx timeout [ 195.440973] Bluetooth: hci7: command tx timeout [ 195.633279] Bluetooth: hci6: command tx timeout [ 196.912191] Bluetooth: hci0: command tx timeout [ 197.040040] Bluetooth: hci1: command tx timeout [ 197.103976] Bluetooth: hci3: command tx timeout [ 197.167980] Bluetooth: hci2: command tx timeout [ 197.231952] Bluetooth: hci4: command tx timeout [ 197.359967] Bluetooth: hci5: command tx timeout [ 197.488131] Bluetooth: hci7: command tx timeout [ 197.681223] Bluetooth: hci6: command tx timeout [ 198.960977] Bluetooth: hci0: command tx timeout [ 199.088213] Bluetooth: hci1: command tx timeout [ 199.152203] Bluetooth: hci3: command tx timeout [ 199.216341] Bluetooth: hci2: command tx timeout [ 199.280141] Bluetooth: hci4: command tx timeout [ 199.407972] Bluetooth: hci5: command tx timeout [ 199.536180] Bluetooth: hci7: command tx timeout [ 199.729955] Bluetooth: hci6: command tx timeout [ 201.009276] Bluetooth: hci0: command tx timeout [ 201.135966] Bluetooth: hci1: command tx timeout [ 201.200216] Bluetooth: hci3: command tx timeout [ 201.264014] Bluetooth: hci2: command tx timeout [ 201.328416] Bluetooth: hci4: command tx timeout [ 201.455996] Bluetooth: hci5: command tx timeout [ 201.583972] Bluetooth: hci7: command tx timeout [ 201.776333] Bluetooth: hci6: command tx timeout [ 255.168852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.171762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.176511] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.186316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.193531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.311360] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.314800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.319369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.327184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.333378] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.440230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.450579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.453495] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.471381] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.479427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.509798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.529194] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.534203] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.581494] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.586245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.591387] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.604248] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.612873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.625960] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.649453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.669330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.672948] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.683391] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.688607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.695339] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.705962] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 255.712361] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.716633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 255.721668] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 255.726917] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 255.733431] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.740088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.809473] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.810852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.843033] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.264205] Bluetooth: hci0: command tx timeout [ 257.391967] Bluetooth: hci1: command tx timeout [ 257.520006] Bluetooth: hci2: command tx timeout [ 257.648120] Bluetooth: hci3: command tx timeout [ 257.841013] Bluetooth: hci4: command tx timeout [ 257.841037] Bluetooth: hci7: command tx timeout [ 257.967993] Bluetooth: hci6: command tx timeout [ 257.969029] Bluetooth: hci5: command tx timeout [ 259.312150] Bluetooth: hci0: command tx timeout [ 259.442069] Bluetooth: hci1: command tx timeout [ 259.567986] Bluetooth: hci2: command tx timeout [ 259.696180] Bluetooth: hci3: command tx timeout [ 259.890151] Bluetooth: hci4: command tx timeout [ 259.890627] Bluetooth: hci7: command tx timeout [ 260.017087] Bluetooth: hci5: command tx timeout [ 260.017540] Bluetooth: hci6: command tx timeout [ 261.359988] Bluetooth: hci0: command tx timeout [ 261.489091] Bluetooth: hci1: command tx timeout [ 261.616253] Bluetooth: hci2: command tx timeout [ 261.745939] Bluetooth: hci3: command tx timeout [ 261.936970] Bluetooth: hci7: command tx timeout [ 261.937426] Bluetooth: hci4: command tx timeout [ 262.065071] Bluetooth: hci6: command tx timeout [ 262.065517] Bluetooth: hci5: command tx timeout [ 263.408639] Bluetooth: hci0: command tx timeout [ 263.536383] Bluetooth: hci1: command tx timeout [ 263.664194] Bluetooth: hci2: command tx timeout [ 263.793265] Bluetooth: hci3: command tx timeout [ 263.984278] Bluetooth: hci4: command tx timeout [ 263.984312] Bluetooth: hci7: command tx timeout [ 264.113016] Bluetooth: hci5: command tx timeout [ 264.113078] Bluetooth: hci6: command tx timeout [ 317.446708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.458514] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.460754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.465751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.473453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.492328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.496172] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.500129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.509134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.515792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.640295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.648213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.654741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.666505] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.683168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.733870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.737763] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.741385] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.758765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.764572] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.768185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.772401] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.777243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.783399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.787450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.867116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.888767] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.908836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.920555] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.924545] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.933350] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.947737] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.953418] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.959677] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 317.971491] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.973801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 317.987630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 317.990844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.013385] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.065463] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.537935] Bluetooth: hci1: command tx timeout [ 319.601106] Bluetooth: hci0: command tx timeout [ 319.727999] Bluetooth: hci2: command tx timeout [ 319.855987] Bluetooth: hci3: command tx timeout [ 319.920201] Bluetooth: hci4: command tx timeout [ 320.048450] Bluetooth: hci5: command tx timeout [ 320.112685] Bluetooth: hci6: command tx timeout [ 320.369013] Bluetooth: hci7: command tx timeout [ 321.585478] Bluetooth: hci1: command tx timeout [ 321.648010] Bluetooth: hci0: command tx timeout [ 321.777185] Bluetooth: hci2: command tx timeout [ 321.905148] Bluetooth: hci3: command tx timeout [ 321.967981] Bluetooth: hci4: command tx timeout [ 322.097145] Bluetooth: hci5: command tx timeout [ 322.161993] Bluetooth: hci6: command tx timeout [ 322.416083] Bluetooth: hci7: command tx timeout [ 323.632940] Bluetooth: hci1: command tx timeout [ 323.696950] Bluetooth: hci0: command tx timeout [ 323.824940] Bluetooth: hci2: command tx timeout [ 323.953015] Bluetooth: hci3: command tx timeout [ 324.016957] Bluetooth: hci4: command tx timeout [ 324.144262] Bluetooth: hci5: command tx timeout [ 324.210955] Bluetooth: hci6: command tx timeout [ 324.464000] Bluetooth: hci7: command tx timeout [ 325.683297] Bluetooth: hci1: command tx timeout [ 325.743968] Bluetooth: hci0: command tx timeout [ 325.872174] Bluetooth: hci2: command tx timeout [ 326.001941] Bluetooth: hci3: command tx timeout [ 326.065345] Bluetooth: hci4: command tx timeout [ 326.192185] Bluetooth: hci5: command tx timeout [ 326.258932] Bluetooth: hci6: command tx timeout [ 326.512965] Bluetooth: hci7: command tx timeout [ 379.784624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.787937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.793741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.807586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.816981] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.919501] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.925681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.928522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.935530] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.940718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.944685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.959153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.963707] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.994418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.002359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.128431] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.139366] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.155643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.186550] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.188445] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.194572] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.207626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.218345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.220584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.232836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.234451] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.248527] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.253139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.260611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 380.288269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.315089] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 380.323198] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 380.349434] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.357433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.363641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.370584] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.373220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.375475] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 380.382513] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 380.386519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.872968] Bluetooth: hci0: command tx timeout [ 382.000188] Bluetooth: hci1: command tx timeout [ 382.065068] Bluetooth: hci2: command tx timeout [ 382.320971] Bluetooth: hci3: command tx timeout [ 382.385149] Bluetooth: hci4: command tx timeout [ 382.448004] Bluetooth: hci5: command tx timeout [ 382.511972] Bluetooth: hci6: command tx timeout [ 382.513297] Bluetooth: hci7: command tx timeout [ 383.919983] Bluetooth: hci0: command tx timeout [ 384.048085] Bluetooth: hci1: command tx timeout [ 384.111985] Bluetooth: hci2: command tx timeout [ 384.368120] Bluetooth: hci3: command tx timeout [ 384.434102] Bluetooth: hci4: command tx timeout [ 384.495966] Bluetooth: hci5: command tx timeout [ 384.560250] Bluetooth: hci7: command tx timeout [ 384.560739] Bluetooth: hci6: command tx timeout [ 385.967975] Bluetooth: hci0: command tx timeout [ 386.096353] Bluetooth: hci1: command tx timeout [ 386.161060] Bluetooth: hci2: command tx timeout [ 386.416303] Bluetooth: hci3: command tx timeout [ 386.481156] Bluetooth: hci4: command tx timeout [ 386.544004] Bluetooth: hci5: command tx timeout [ 386.608937] Bluetooth: hci6: command tx timeout [ 386.608969] Bluetooth: hci7: command tx timeout [ 388.017013] Bluetooth: hci0: command tx timeout [ 388.144128] Bluetooth: hci1: command tx timeout [ 388.208017] Bluetooth: hci2: command tx timeout [ 388.464213] Bluetooth: hci3: command tx timeout [ 388.529916] Bluetooth: hci4: command tx timeout [ 388.591992] Bluetooth: hci5: command tx timeout [ 388.656225] Bluetooth: hci7: command tx timeout [ 388.656673] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:12:41 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff818c7d3b RDX=ffff88802e990000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffea00004fbb80 RSP=ffff88803747f908 R8 =0000000000000000 R9 =fffffbfff0c81d82 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=ffff88803747fb28 R15=0000000000000000 RIP=ffffffff8172e506 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa189c82540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa189e1d4a1 CR3=00000000375ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff818ba5d8 RDX=fffff940003677e1 RSI=0000000000000008 RDI=ffffea0001b3bf00 RBP=ffffea0001b3bf00 RSP=ffff888027ea7b60 R8 =0000000000000001 R9 =fffff940003677e0 R10=ffffea0001b3bf07 R11=0000000000000000 R12=0000000000000186 R13=0000000000000000 R14=ffffea0001b3bf00 R15=ffff888027ea7d90 RIP=ffffffff818ba5dd RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007faa3b3cf540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faa3b57d4a0 CR3=00000000335a8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000