syzkaller login: [ 97.178540] sshd (243) used greatest stack depth: 25000 bytes left Warning: Permanently added '[localhost]:22529' (ECDSA) to the list of known hosts. 2025/04/30 15:17:45 fuzzer started 2025/04/30 15:17:46 dialing manager at localhost:46073 [ 98.810784] cgroup: Unknown subsys name 'net' [ 98.924632] cgroup: Unknown subsys name 'cpuset' [ 98.955352] cgroup: Unknown subsys name 'rlimit' 2025/04/30 15:18:07 syscalls: 2214 2025/04/30 15:18:07 code coverage: enabled 2025/04/30 15:18:07 comparison tracing: enabled 2025/04/30 15:18:07 extra coverage: enabled 2025/04/30 15:18:07 setuid sandbox: enabled 2025/04/30 15:18:07 namespace sandbox: enabled 2025/04/30 15:18:07 Android sandbox: enabled 2025/04/30 15:18:07 fault injection: enabled 2025/04/30 15:18:07 leak checking: enabled 2025/04/30 15:18:07 net packet injection: enabled 2025/04/30 15:18:07 net device setup: enabled 2025/04/30 15:18:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/30 15:18:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/30 15:18:07 USB emulation: enabled 2025/04/30 15:18:07 hci packet injection: enabled 2025/04/30 15:18:07 wifi device emulation: enabled 2025/04/30 15:18:07 802.15.4 emulation: enabled 2025/04/30 15:18:07 fetching corpus: 0, signal 0/0 (executing program) 2025/04/30 15:18:09 starting 8 fuzzer processes 15:18:09 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000000) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000140)="d6ae9390810fd2295364bce7282ecb5fa3fb1243a0f4cfb4e8848373404edd18cbdf9bca5f9451cde1c59a28651d992e656bfacb472268b770c82040e6364bbda6c8463b45b3846089fbf57f27c6046ffb2e62db53a223920d8fc017c37013da752b5bccec2ff46d831a82485e0e2c893c961b491122475d75a38a7ed9b5dde7b906388cef898e7ffd03cf56009c29984e5b630d76a6c92b5e987a0fe8d883c99d5edba5327c65e8b47d2e2ee3537c687146893a4d1c70b9772625ff69a0fd508ec4df6d9e7a67e83c89977c82615edc7c789ea1e374905a8e3765d5edf667755029a8825bb67061c3e523b78fe349eac0") ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000240)={{0x0, 0xffffffff}, {0x8, 0x200}, 0x8, 0x1}) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000002c0)={"26f8b4122ada6a29d9fb7a71e5f3f68f", 0x0, 0x0, {0x0, 0x3}, {0x8001, 0x2}, 0x4, [0x80, 0xae, 0x9, 0x3, 0x2, 0x5, 0x3ff, 0x100, 0x9, 0x80, 0x1, 0x10000, 0x100, 0x7, 0x9, 0x100000001]}) r2 = getpgrp(0x0) kcmp(0x0, r2, 0x1, r0, r1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x10) ioctl$CDROM_SELECT_DISK(r3, 0x5322, 0x6) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000440)=0x1) r4 = syz_open_procfs(r2, &(0x7f0000000480)='smaps\x00') sendto(r4, &(0x7f00000004c0)="5975981ce2bf760d4a271b2c15bda9ce91d05769b9ff6d2b110c9329f7d13bc41ddaffc615cfcd4f41ba55fe8381732926c896e7390395202bcad8ffa4a53258759484423efad4097d93995a9267d961813897a7927fa3d7177b5c86c52aa23cab1f7f1190fd8602caa64c894dfa4a16e0fa428435eedb4d60f471b13312af261847c447ce2581a8d23af598f28c4cdf15f576bb7ebe638b5523b7aa059b2bbd880c46fe3f67619c532f64b171fd5faab538b8111165ce36fcbfa9d29d6dae0a44fbd02ba9de54b268ec42bb01b027b27bd1ac0247de529cfcfbfd9918c40f", 0xdf, 0x20000004, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) move_pages(r5, 0x9, &(0x7f0000000640)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f00000006c0)=[0x401, 0x1f, 0x14d2173b, 0xffffffff], &(0x7f0000000700)=[0x0, 0x0], 0x4) r7 = syz_open_dev$mouse(&(0x7f0000000740), 0x8, 0x12b600) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x472f) ioctl$TUNSETOWNER(r0, 0x400454cc, r6) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)="6f49dfc85a09d81d7cd963e9443d651d8686226aeb8574ca9527dce5fa27617dbfe83012284b700ed279630d157dfac080dfa345924c3f08e959d17e9a06687ea2fda10b037245e34938fde8d432c5b51140f00c9ca0dcf7e6a33df6c7402ba4bf23c3e47404ec5c31e1") 15:18:09 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x6, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x94}, 0x4000081) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x20010840) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x8, 0x3ff}}, './file0\x00'}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x610203, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xb7}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="10f846c6898a3c928ee13b9d1aed9cebd4e5c326bc3aa90af4c9"}]}, 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x4804) mount$9p_virtio(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x2000030, &(0x7f0000000680)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, '/dev/bsg\x00'}}, {@mmap}, {@afid={'afid', 0x3d, 0x7b}}, {@noextend}, {@cache_none}], [{@smackfsfloor={'smackfsfloor', 0x3d, '#&'}}, {@fowner_eq}, {@measure}, {@obj_type={'obj_type', 0x3d, 'syz2\x00'}}, {@hash}, {@dont_hash}]}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'}) r5 = syz_io_uring_complete(0x0) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000c0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) tee(r5, r6, 0xf3, 0x9) r7 = open(&(0x7f00000009c0)='./file0\x00', 0x0, 0x80) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x110, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc00}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7858}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff22}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf07c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008040}, 0x4) r8 = add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @desc1}, &(0x7f0000000c80)={0x0, "20f02be2e4f3dbc1cbf0c014b0f69737c0dcc514f1d3a29b6cb82f6ea95fb28081b11acc8cbf649f1f0ed4e373aee6d9093bf1e022c815822c93f7ef0bb902eb", 0x3d}, 0x48, 0xfffffffffffffff8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000d00)={@desc={0x1, 0x0, @desc2}, 0x7, r8, '\x00', @auto=[0x1b, 0x1c, 0x2d, 0x24, 0x16, 0x23, 0x3f]}) r9 = openat2(r6, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x498080, 0x40, 0x2}, 0x18) ioctl$CDROM_CLEAR_OPTIONS(r9, 0x5321, 0x8) 15:18:09 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2f0, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_LINK={0x19c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x40001}, 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RUNLINKAT(r2, &(0x7f0000000480)={0x7, 0x4d, 0x2}, 0x7) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x206200, 0x0) fsmount(r3, 0x1, 0x81) r4 = dup3(r3, r2, 0x80000) ioctl$KDENABIO(r4, 0x4b36) r5 = syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000540)='./file0/file0\x00', 0x6838, 0x7, &(0x7f0000000a00)=[{&(0x7f0000000580)="55c3b9533ddc859aaf5c308d47ff5994da435265b285a8050d1e30a127ad33500efb88dc1c958a5209e56dccf74652ce6d521342a5d03f865f91ce1dc8f24526deb8ea224d238039f1fb", 0x4a, 0x80000001}, {&(0x7f0000000600)="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", 0xfa, 0x6}, {&(0x7f0000000700)="cfa7e67775a580ecc03b16b2a9c2760d525752b61d5556d4be5c09f353993d0e94275f4d27d95d31ad15d4eed16247b0764e2776017217950e559ec9d739c714ce0868bb630dbfdbdffb438a2c625133240a34feb0bcf911241369fe009a07454c683fbd2b70e1405b97e38b2bb925eee2ed8322299dbbfe4f4538c0201c02ab4b07c21fc7e39a29bd6a2117df", 0x8d, 0xffff}, {&(0x7f00000007c0)="62105a66f5a1f528154695e59970513687517239491796b7a32c4c88445b469f2b28dc933d724802840f1141e3aeb6a9baa0749f5417a4dfb0fa4a83abe92a44d9776a0aa9da7f044b84146a6cbf9bab551d339906f309384713f40ef29d85889882e18fa033d84d20faa2aad8a9a51b4c83c7ce8ef60141bdb46a544296d4a533c7ec1ad0f1f5fb282893fa5d5fd44ef77e82f1ad17ee", 0x97, 0x8}, {&(0x7f0000000880)="3294a6557800e34241e4a4ec81b6d48707cf90df88547b7c82c15b15384f425ab6c933f45d77b1060c274b07508bb4971740f4e9e91bafc572efc2a844da00d9be04378ca34159cbd0e4e7cf09071e8c854adf9ece3584491db481572c02c902ebbacf6b1dd286a5", 0x68, 0x36b}, {&(0x7f0000000900)="2347af48d698796554c656fd76ea50eb35acb960a5e892b292c497c02496c1f965adf07cc2f870bde8e1350e2747517e7166ae81ab321e20e778ecd9425809754531b51b70f4a4a8321d51792bb2ee8b058fa15957e4a4c5b09f51441846036d28e53f17ba216ec2d68549816f75b8f6c8f070b60b0dfe9053e522b3d74601794a0f7065fba42a3581757f68a56f74838c27c3730bfad78c80c89c625ff56e1a", 0xa0, 0x5}, {&(0x7f00000009c0)="543175658dca80a9f27623299203e6f94f2bbd1ec7", 0x15, 0x400}], 0x80, &(0x7f0000000ac0)={[{@size={'size', 0x3d, [0x78, 0x6d, 0x6b, 0x34, 0x35, 0x65, 0x37, 0x70, 0x30]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x15, 0x35, 0x3a]}}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34, 0x5c, 0x70, 0x60, 0x67]}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x67, 0x32, 0x25, 0x39, 0x39]}}, {@huge_always}], [{@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@seclabel}, {@uid_gt={'uid>', 0xee00}}, {@fowner_gt}]}) move_mount(r5, &(0x7f0000000bc0)='./file1\x00', r4, &(0x7f0000000c00)='./file0\x00', 0x20) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c40), 0x402080, 0x0) finit_module(r6, &(0x7f0000000c80)='[({-@\x00', 0x3) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xfc, 0x0, 0x320, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8014}, 0x4000000) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000f00)={0x1, 0x2, 0x1000, 0x14, &(0x7f0000000e80)="5a18ff04d56b55d23dd8aa01c7d504582a8460a3", 0x4, 0x0, &(0x7f0000000ec0)="787ca2bd"}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x50) ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000001080)) r7 = syz_open_dev$loop(&(0x7f00000010c0), 0x1, 0x20100) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f0000001100)) [ 122.091990] audit: type=1400 audit(1746026289.771:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:18:09 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x240, 0x1) fchmod(r0, 0x140) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004491) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0x45, 0xff, 0xa74, 0x4, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x80, 0x7, 0x401}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x40, 0xb5f8, {{0x14, 0x4, 0x2, 0x0, 0x50, 0x68, 0x0, 0x80, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x17, 0x3, [{0x5, 0x11, "888e7dbecb2e3f74f40a12f6d3283b"}]}, @timestamp_prespec={0x44, 0x14, 0x4c, 0x3, 0xf, [{@local, 0x101}, {@empty, 0x1}]}, @generic={0x83, 0x10, "bdb960a26ca6d0f7c9f6a934c5ed"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa0, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2}, 0x4010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x42dc178e53b9a19}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r6, 0x211, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x48081) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) io_uring_enter(r9, 0xd9e, 0x72c1, 0x1, &(0x7f0000000a00)={[0x79fe71bc]}, 0x8) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r7) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r10, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4804) 15:18:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x3717, [0x6, 0x100000000000000, 0x861, 0x5, 0x3, 0x4]}) r1 = accept4(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x80, 0x800) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000140)) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x10000010) recvfrom$unix(r0, &(0x7f00000001c0), 0x0, 0x10062, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_proto_private(r1, 0x89ea, &(0x7f0000000280)="d8e9ebf41e41801f147c84db290a6b6e9f157dcfeede24c3e9f7a74437346f335d21e66fb41ca684b1ee36df66bdd49ae4d73e8df6d1e5aa2f1bb4f889390f57") r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000002c0)={0x0, @aes256, 0x0, @desc2}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) mkdir(&(0x7f0000000300)='./file0\x00', 0x1d1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x37c}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x401}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @handle=@pci={{0x8}, {0x11}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000540)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000580)={0x17, 0x0, 0x1, 'queue0\x00', 0xfff}) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000680)={0x6, 0x30, [0x8, 0x16, 0x6, 0xa1d], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)={'L-', 0x100}, 0x16, 0x1) lsetxattr$security_selinux(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)='system_u:object_r:fonts_cache_t:s0\x00', 0x23, 0x0) 15:18:09 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x41000001, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x20, 0x4, 0x1}, 0xfff}}, 0x18) fcntl$getflags(r0, 0x40a) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81800) ioctl$VT_RELDISP(r1, 0x5605) r2 = accept4(r1, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f00000002c0)=0x80, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000300)={0x0, 0x5, 0x3, 0x1}) fchmod(r0, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000700)=""/34, &(0x7f0000000740)=0x22) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3}, './file0/file0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x1, 0x20, 0x4, 0x7f, {{0xa, 0x4, 0x1, 0x3c, 0x28, 0x64, 0x0, 0x3b, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@end, @cipso={0x86, 0x12, 0x0, [{0x5, 0xc, "8d77aaa38b403caf6cdc"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x1, 0xfffffff8, 0x60, @remote, @loopback, 0x40, 0x7800, 0x3e2, 0x3}}) accept4$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x14, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000dc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b80)={0x1f8, r5, 0x10, 0xfc000000, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x84c3bbd4d9687cc3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000004}, 0x80001) mq_unlink(&(0x7f0000000e00)='ip6_vti0\x00') 15:18:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000094}, 0x40010) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5c8fca77c77d79f9276e42fb1eddb5c0c110da0ac6b54425e1c886b2f8e7f2bf"}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000084}, 0x840) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, 0x0, 0x80, r2) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x11, 0x1, {0x20, 0x3}}, 0x14) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa4, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x1f}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x80000000}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8}, @ETHTOOL_A_COALESCE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048005}, 0x40080) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x62}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x0, 0x5, 0x0, {0x7ff, 0x80, 0x0, 0xe6, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1}}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x4) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f0000000780)="51b23bf47b4c47b0e7df51919eb2503bb102da9c7f316c59a6da12ac8fb97c70c6c9a8d4343aadd7216c4bf45d9f217c1039f1e3dcb8a77b34b6de7dda50b0b3ac51901d0358a3d667e44024f47460a3c4b846f9109c9dde5b9590af131be3b82b43944cbe18004a0005123d8c73b0cf") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000840), r0) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x801) r6 = openat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x141001, 0x0) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000980)) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x100, 0x8}, 0x18) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc959}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff2c67}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 15:18:09 executing program 7: ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f00000000c0)=0x1c) fchdir(r0) r1 = syz_io_uring_complete(0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x6, 0x0, @l2={'ib', 0x3a, 'ipvlan0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4c000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x194, r5, 0x1, 0x7fff, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5b}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xab, 0xc5, "f270638933e7e47ea277bd619c6336e5bfc727cd7f625e7bb1ee12066146648652d043b3d15588f136e62a519b5fc4296bc00f900dbbd5b48f1a71bf2435ee5d6306dd7ee5a81ecd4f7877e888a293ec54ec35e46320fbefccb7dbb3a3e7f59358f52c2290a1c1a542f492b83621b4b92e9f7b4d36ddc7b7777aaf8226b9f74a013ae1929dfec158e8a4aa668d7581c757f8fe25d2c6668959ba2a3d2fdcccfe357cb7514d9550"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xcec6d7f}, @NL80211_ATTR_VENDOR_DATA={0xab, 0xc5, "49558f0e9c113854ce43aba201206ba4ab6508df16c7be604c7809da44eff095744de8f1bf56a406542e768a8f04f2b82dd268c7a8c12e85779f7fc063300d8eb0d77f96334da06d644ac99aaf6ed7d7f59f1abaeceda5eaf60a183f08509232a3cbe69f2df60833fd08bb8f80a9e14c7019331ae4e558b1b692f5180362122d54d597c9f31065bf6998ba8f0f7514d8f6d3743b3690b0c11b8ba0c2c794349584cc222bda20ec"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5c20}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x7ff, 0x4}}, './file0\x00'}) poll(&(0x7f00000006c0)=[{r1, 0x1424}, {r1, 0x10}, {r6, 0x210}, {r1, 0x80}, {r2, 0x1401}], 0x5, 0xfffffff9) syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r6) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r1) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x184, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xe0d}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xc005}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xfff}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x7}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x0) [ 123.543154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.545338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.546744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.548631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.548654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.551200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.554681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.556912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.569939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.574644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.605687] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.607367] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.614785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.618239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.627033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.633648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.635353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.639288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.639500] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.640379] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.643049] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.646127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.649072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.666033] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.667559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.692572] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.709982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.713185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.722393] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.725843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.727511] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.728902] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.737393] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.739222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.742375] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.753116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.755205] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.762602] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.794824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.800980] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.619369] Bluetooth: hci1: command tx timeout [ 125.619400] Bluetooth: hci0: command tx timeout [ 125.683510] Bluetooth: hci2: command tx timeout [ 125.684481] Bluetooth: hci4: command tx timeout [ 125.810663] Bluetooth: hci5: command tx timeout [ 125.810705] Bluetooth: hci6: command tx timeout [ 125.812816] Bluetooth: hci3: command tx timeout [ 125.874609] Bluetooth: hci7: command tx timeout [ 127.666826] Bluetooth: hci0: command tx timeout [ 127.668719] Bluetooth: hci1: command tx timeout [ 127.731120] Bluetooth: hci4: command tx timeout [ 127.733508] Bluetooth: hci2: command tx timeout [ 127.858703] Bluetooth: hci6: command tx timeout [ 127.859607] Bluetooth: hci3: command tx timeout [ 127.861177] Bluetooth: hci5: command tx timeout [ 127.922559] Bluetooth: hci7: command tx timeout [ 129.714554] Bluetooth: hci1: command tx timeout [ 129.715094] Bluetooth: hci0: command tx timeout [ 129.778901] Bluetooth: hci4: command tx timeout [ 129.779392] Bluetooth: hci2: command tx timeout [ 129.908497] Bluetooth: hci3: command tx timeout [ 129.909027] Bluetooth: hci5: command tx timeout [ 129.909898] Bluetooth: hci6: command tx timeout [ 129.970567] Bluetooth: hci7: command tx timeout [ 131.764074] Bluetooth: hci0: command tx timeout [ 131.764655] Bluetooth: hci1: command tx timeout [ 131.826595] Bluetooth: hci4: command tx timeout [ 131.827122] Bluetooth: hci2: command tx timeout [ 131.955747] Bluetooth: hci6: command tx timeout [ 131.956289] Bluetooth: hci5: command tx timeout [ 131.957471] Bluetooth: hci3: command tx timeout [ 132.018763] Bluetooth: hci7: command tx timeout [ 183.695243] syz-executor.0 (284) used greatest stack depth: 24744 bytes left [ 186.463690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.467221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.469638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.485941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.489838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.582690] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.586767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.591771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.599070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.602105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.618085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.622369] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.623843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.625792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.636320] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.637908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.639986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.641777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.643284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.644004] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 186.645940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.646086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.652985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.655116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 186.657043] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.658982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.663869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.669358] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.670863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.674810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.678022] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.690804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.704459] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.706064] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 186.707868] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.712672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.714199] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 186.717159] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.719130] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.721869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 188.594547] Bluetooth: hci0: command tx timeout [ 188.723532] Bluetooth: hci3: command tx timeout [ 188.725135] Bluetooth: hci2: command tx timeout [ 188.786618] Bluetooth: hci4: command tx timeout [ 188.787624] Bluetooth: hci5: command tx timeout [ 188.788267] Bluetooth: hci1: command tx timeout [ 188.788519] Bluetooth: hci7: command tx timeout [ 188.850878] Bluetooth: hci6: command tx timeout [ 190.642848] Bluetooth: hci0: command tx timeout [ 190.772483] Bluetooth: hci2: command tx timeout [ 190.772503] Bluetooth: hci3: command tx timeout [ 190.834515] Bluetooth: hci7: command tx timeout [ 190.836712] Bluetooth: hci4: command tx timeout [ 190.836839] Bluetooth: hci1: command tx timeout [ 190.837645] Bluetooth: hci5: command tx timeout [ 190.899754] Bluetooth: hci6: command tx timeout [ 192.691782] Bluetooth: hci0: command tx timeout [ 192.818838] Bluetooth: hci2: command tx timeout [ 192.819351] Bluetooth: hci3: command tx timeout [ 192.882515] Bluetooth: hci4: command tx timeout [ 192.882996] Bluetooth: hci7: command tx timeout [ 192.884604] Bluetooth: hci5: command tx timeout [ 192.885058] Bluetooth: hci1: command tx timeout [ 192.946549] Bluetooth: hci6: command tx timeout [ 194.739686] Bluetooth: hci0: command tx timeout [ 194.866505] Bluetooth: hci2: command tx timeout [ 194.866539] Bluetooth: hci3: command tx timeout [ 194.931874] Bluetooth: hci7: command tx timeout [ 194.932351] Bluetooth: hci1: command tx timeout [ 194.932437] Bluetooth: hci5: command tx timeout [ 194.933074] Bluetooth: hci4: command tx timeout [ 194.996462] Bluetooth: hci6: command tx timeout [ 247.009322] syz-executor.3 (2562) used greatest stack depth: 24648 bytes left [ 249.018973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.022112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.024357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.026349] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.027707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.029152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.033123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.035007] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.040684] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.056605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.089142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.093729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.101693] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.115382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.158334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.170321] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.195842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.213898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.237360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.239288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.257354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.259154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.277812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.283802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.286540] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.288838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.298808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.315891] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.324177] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.325808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.336332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.339350] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.349157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.366769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.368836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.376054] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.377751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.398491] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.398523] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.429014] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.122536] Bluetooth: hci1: command tx timeout [ 251.122547] Bluetooth: hci0: command tx timeout [ 251.250511] Bluetooth: hci2: command tx timeout [ 251.315714] Bluetooth: hci3: command tx timeout [ 251.466524] Bluetooth: hci4: command tx timeout [ 251.574535] Bluetooth: hci6: command tx timeout [ 251.635705] Bluetooth: hci7: command tx timeout [ 251.636010] Bluetooth: hci5: command tx timeout [ 253.170724] Bluetooth: hci1: command tx timeout [ 253.170796] Bluetooth: hci0: command tx timeout [ 253.298577] Bluetooth: hci2: command tx timeout [ 253.362698] Bluetooth: hci3: command tx timeout [ 253.490522] Bluetooth: hci4: command tx timeout [ 253.620475] Bluetooth: hci6: command tx timeout [ 253.682622] Bluetooth: hci5: command tx timeout [ 253.683980] Bluetooth: hci7: command tx timeout [ 255.218657] Bluetooth: hci0: command tx timeout [ 255.219239] Bluetooth: hci1: command tx timeout [ 255.346525] Bluetooth: hci2: command tx timeout [ 255.411548] Bluetooth: hci3: command tx timeout [ 255.539762] Bluetooth: hci4: command tx timeout [ 255.667462] Bluetooth: hci6: command tx timeout [ 255.730503] Bluetooth: hci5: command tx timeout [ 255.731486] Bluetooth: hci7: command tx timeout [ 257.266752] Bluetooth: hci1: command tx timeout [ 257.267037] Bluetooth: hci0: command tx timeout [ 257.395554] Bluetooth: hci2: command tx timeout [ 257.458886] Bluetooth: hci3: command tx timeout [ 257.586832] Bluetooth: hci4: command tx timeout [ 257.714537] Bluetooth: hci6: command tx timeout [ 257.779543] Bluetooth: hci7: command tx timeout [ 257.780076] Bluetooth: hci5: command tx timeout [ 311.622667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.627748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.631904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.638959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.653768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.822484] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.824338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.828961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.830819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.832208] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.833659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.835085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.838227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.839628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.841068] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.843761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.849591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.854118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.873206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.880561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.881364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.890857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.893824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.899393] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.901173] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.922944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.936382] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.938151] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.939930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.949098] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.951962] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.955231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.958927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.967301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.973869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.021675] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.024506] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.026978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.030807] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.035192] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.716522] Bluetooth: hci0: command tx timeout [ 313.906556] Bluetooth: hci2: command tx timeout [ 313.907645] Bluetooth: hci1: command tx timeout [ 313.971929] Bluetooth: hci4: command tx timeout [ 313.972759] Bluetooth: hci3: command tx timeout [ 314.035289] Bluetooth: hci5: command tx timeout [ 314.107316] Bluetooth: hci7: command tx timeout [ 314.108045] Bluetooth: hci6: command tx timeout [ 315.764820] Bluetooth: hci0: command tx timeout [ 315.955509] Bluetooth: hci1: command tx timeout [ 315.956057] Bluetooth: hci2: command tx timeout [ 316.018561] Bluetooth: hci4: command tx timeout [ 316.019077] Bluetooth: hci3: command tx timeout [ 316.084108] Bluetooth: hci5: command tx timeout [ 316.146784] Bluetooth: hci7: command tx timeout [ 316.147308] Bluetooth: hci6: command tx timeout [ 317.812458] Bluetooth: hci0: command tx timeout [ 318.003550] Bluetooth: hci2: command tx timeout [ 318.006981] Bluetooth: hci1: command tx timeout [ 318.067069] Bluetooth: hci3: command tx timeout [ 318.068646] Bluetooth: hci4: command tx timeout [ 318.130489] Bluetooth: hci5: command tx timeout [ 318.194586] Bluetooth: hci6: command tx timeout [ 318.195093] Bluetooth: hci7: command tx timeout [ 319.858833] Bluetooth: hci0: command tx timeout [ 320.050524] Bluetooth: hci1: command tx timeout [ 320.051054] Bluetooth: hci2: command tx timeout [ 320.115749] Bluetooth: hci3: command tx timeout [ 320.117385] Bluetooth: hci4: command tx timeout [ 320.178552] Bluetooth: hci5: command tx timeout [ 320.245594] Bluetooth: hci7: command tx timeout [ 320.247382] Bluetooth: hci6: command tx timeout [ 374.096253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.101672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.112608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.140841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.147768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.408872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.420426] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.422592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.433894] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.437000] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.437913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.452787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.460932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.466858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.479903] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.542375] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.546833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.557619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.577777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.583168] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.591571] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.594210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.598254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.616123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.622061] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.789043] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.795344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.797719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.812842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.817139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.856182] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.876859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.898696] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.902385] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.909688] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.047489] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.144171] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.152874] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.210830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.226716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.178770] Bluetooth: hci0: command tx timeout [ 376.498571] Bluetooth: hci1: command tx timeout [ 376.562856] Bluetooth: hci2: command tx timeout [ 376.626627] Bluetooth: hci4: command tx timeout [ 376.952154] Bluetooth: hci3: command tx timeout [ 377.010592] Bluetooth: hci5: command tx timeout [ 377.074787] Bluetooth: hci6: command tx timeout [ 377.333477] Bluetooth: hci7: command tx timeout [ 378.227571] Bluetooth: hci0: command tx timeout [ 378.547502] Bluetooth: hci1: command tx timeout [ 378.611905] Bluetooth: hci2: command tx timeout [ 378.675745] Bluetooth: hci4: command tx timeout [ 378.994548] Bluetooth: hci3: command tx timeout [ 379.063914] Bluetooth: hci5: command tx timeout [ 379.122742] Bluetooth: hci6: command tx timeout [ 379.378877] Bluetooth: hci7: command tx timeout [ 380.274504] Bluetooth: hci0: command tx timeout [ 380.595571] Bluetooth: hci1: command tx timeout [ 380.658492] Bluetooth: hci2: command tx timeout [ 380.723576] Bluetooth: hci4: command tx timeout [ 381.043640] Bluetooth: hci3: command tx timeout [ 381.106741] Bluetooth: hci5: command tx timeout [ 381.171048] Bluetooth: hci6: command tx timeout [ 381.427543] Bluetooth: hci7: command tx timeout [ 382.322643] Bluetooth: hci0: command tx timeout [ 382.644507] Bluetooth: hci1: command tx timeout [ 382.707493] Bluetooth: hci2: command tx timeout [ 382.770504] Bluetooth: hci4: command tx timeout [ 383.091859] Bluetooth: hci3: command tx timeout [ 383.156482] Bluetooth: hci5: command tx timeout [ 383.218576] Bluetooth: hci6: command tx timeout [ 383.475855] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:23:15 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffea00001d9240 RCX=ffffffff81a0f67b RDX=fffff9400003b24f RSI=0000000000000004 RDI=ffffea00001d9270 RBP=ffffea00001d9240 RSP=ffff88802a8efad8 R8 =0000000000000001 R9 =fffff9400003b24e R10=ffffea00001d9273 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=ffffea00001d9258 RIP=ffffffff81a0f67f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5648000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1a0bb575d0 CR3=000000002c661000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88806cf37d12 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c274d8 RDI=ffff8880096041d8 RBP=ffffffff85c274c0 RSP=ffff888009627c88 R8 =0000000000000001 R9 =ffffed10012c4f8f R10=0000000000000003 R11=0000000000000000 R12=ffff88806cf37d00 R13=ffff88806cf37da8 R14=0000000000000000 R15=ffffffff85c27500 RIP=ffffffff815b9afc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5748000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcb0149e4a1 CR3=000000000db6a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000