Warning: Permanently added '[localhost]:46332' (ECDSA) to the list of known hosts. 2025/05/23 23:38:13 fuzzer started 2025/05/23 23:38:14 dialing manager at localhost:46087 syzkaller login: [ 93.642017] cgroup: Unknown subsys name 'net' [ 93.770656] cgroup: Unknown subsys name 'cpuset' [ 93.808990] cgroup: Unknown subsys name 'rlimit' 2025/05/23 23:38:29 syscalls: 2214 2025/05/23 23:38:29 code coverage: enabled 2025/05/23 23:38:29 comparison tracing: enabled 2025/05/23 23:38:29 extra coverage: enabled 2025/05/23 23:38:29 setuid sandbox: enabled 2025/05/23 23:38:29 namespace sandbox: enabled 2025/05/23 23:38:29 Android sandbox: enabled 2025/05/23 23:38:29 fault injection: enabled 2025/05/23 23:38:29 leak checking: enabled 2025/05/23 23:38:29 net packet injection: enabled 2025/05/23 23:38:29 net device setup: enabled 2025/05/23 23:38:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/23 23:38:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/23 23:38:29 USB emulation: enabled 2025/05/23 23:38:29 hci packet injection: enabled 2025/05/23 23:38:29 wifi device emulation: enabled 2025/05/23 23:38:29 802.15.4 emulation: enabled 2025/05/23 23:38:29 fetching corpus: 0, signal 0/0 (executing program) 2025/05/23 23:38:32 starting 8 fuzzer processes 23:38:32 executing program 0: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) getsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000400)=""/185, 0xb9}], 0x3, &(0x7f0000000500)=""/125, 0x7d}, 0x58e}, {{&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000680)=""/167, 0xa7}, {&(0x7f0000000740)=""/49, 0x31}], 0x3, &(0x7f00000007c0)=""/78, 0x4e}, 0x266}, {{&(0x7f0000000840)=@phonet, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/197, 0xc5}, {&(0x7f00000009c0)=""/234, 0xea}], 0x2}}, {{&(0x7f0000000b00)=@tipc=@id, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000b80)=""/94, 0x5e}, {&(0x7f0000000c00)=""/66, 0x42}, {&(0x7f0000000c80)=""/208, 0xd0}, {&(0x7f0000000d80)=""/109, 0x6d}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/234, 0xea}], 0x6, &(0x7f0000001f80)=""/99, 0x63}}, {{&(0x7f0000002000)=@vsock, 0x80, &(0x7f0000003180)=[{&(0x7f0000002080)=""/251, 0xfb}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x2, &(0x7f00000031c0)=""/105, 0x69}, 0xf1}, {{&(0x7f0000003240)=@generic, 0x80, &(0x7f0000003380)=[{&(0x7f00000032c0)=""/182, 0xb6}], 0x1}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000004480)=[{&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/167, 0xa7}], 0x2, &(0x7f00000044c0)=""/241, 0xf1}, 0x2}, {{&(0x7f00000045c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004640)=""/51, 0x33}, {&(0x7f0000004680)=""/238, 0xee}, {&(0x7f0000004780)=""/102, 0x66}], 0x3, &(0x7f0000004840)=""/123, 0x7b}, 0x9}], 0x8, 0x40000000, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000004ac0), &(0x7f0000004b00)=0x8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000004b40)={@initdev, @multicast2}, &(0x7f0000004b80)=0xc) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000004bc0)={@dev, @multicast1}, &(0x7f0000004c00)=0x8) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000004c40)='./binderfs/binder-control\x00', 0x2, 0x0) fstat(r2, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r1, r5) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000004d40)={0x6, 0x40, '\x00', 0x1, &(0x7f0000004d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) lsetxattr$security_ima(&(0x7f0000004d80)='./file0\x00', &(0x7f0000004dc0), &(0x7f0000004e00)=@v1={0x2, "83cd1b9d27f094838e55fbbb56aa84e641"}, 0x12, 0x1) lstat(&(0x7f0000004ec0)='./file0/file0\x00', &(0x7f0000004f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000004fc0)='./file0\x00', &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) statx(0xffffffffffffff9c, &(0x7f0000005080)='./file0\x00', 0xba43c49bdee69772, 0x1, &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000004e40)='./file0\x00', &(0x7f0000004e80)='system.posix_acl_access\x00', &(0x7f00000051c0)={{}, {0x1, 0x3}, [{0x2, 0x4, r1}, {0x2, 0x4, r1}, {0x2, 0x5, r1}, {0x2, 0x4, r4}, {0x2, 0x2, r1}, {0x2, 0x5, r4}, {0x2, 0x1, r4}, {0x2, 0x7}], {0x4, 0x2}, [{0x8, 0x4, r7}, {0x8, 0x3, r5}, {0x8, 0x6, r5}, {0x8, 0x2, r5}, {0x8, 0xa, r5}, {0x8, 0x5, r9}, {0x8, 0x4, 0xee01}, {0x8, 0x5, r10}], {0x10, 0x4}}, 0xa4, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000005280)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000052c0)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) fsetxattr$system_posix_acl(r3, &(0x7f0000005300)='system.posix_acl_default\x00', &(0x7f0000005340)={{}, {0x1, 0x2}, [{0x2, 0x2, r8}, {0x2, 0x3, r6}, {0x2, 0x5, r6}], {0x4, 0x4}, [{0x8, 0x2, r5}], {0x10, 0x3}, {0x20, 0x1}}, 0x44, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r11, 0x6, 0x2, &(0x7f00000053c0), &(0x7f0000005400)=0x6) 23:38:32 executing program 1: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x5, 0xc2, 0x44, @mcast1, @local, 0x8000, 0x8000, 0x1e, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', r0, 0x2f, 0x2, 0x1, 0x5, 0x2, @loopback, @private1, 0x700, 0x1, 0x9}}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000180)={0xfa9f, 0x9, 0x40, 0x6, 0x1b, "66b1c9371e98490306f208e8a5fd18bd0ddff1"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f00000001c0)={0x4, 0x20, 0x4}) r2 = syz_open_dev$mouse(&(0x7f0000000240), 0x4, 0x800) ioctl$VT_WAITACTIVE(r2, 0x5607) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x164, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000004c0)=0x2723, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000500)={0x8, 'veth0_to_bond\x00', {'veth0_to_team\x00'}, 0xb5}) r3 = openat2(r2, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x101000, 0x10, 0x4}, 0x18) sendmsg$802154_raw(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000640)={&(0x7f0000000600)="9797d01028c1208cf1069ddd754e34c3fe14900341a8d8eb45458ec281", 0x1d}, 0x1, 0x0, 0x0, 0x20000081}, 0x4810) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x10800, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000880)={0x3, 'bond_slave_0\x00', {0x6}, 0x4}) r6 = syz_open_dev$vcsn(&(0x7f0000000900), 0x8000, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r6) 23:38:32 executing program 2: setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0xffffffffffffffff, 0xee01, 0xee00}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0xb41, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080)=0x11, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000280)={{0x1, 0x0, 0x7fffffff, 0x0, 0x210}, 0xfffffffffffff788, 0x1f, 0x80000000}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2044800}, 0x4005) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "921453d7f567b74c03404fae1c"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6abbc8b74c4852c32a13642fc9"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "15fde74fe7293a"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "c82c2f2c1e"}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x44040) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000580)=0x4, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000005880)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000005740)=[{{&(0x7f0000000600)=@abs, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/107, 0x6b}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/111, 0x6f}], 0x7, &(0x7f0000003940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f00000039c0)=@abs, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003a40)=""/146, 0x92}], 0x1, &(0x7f0000003b40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003bc0)=@abs, 0x6e, &(0x7f0000004e40)=[{&(0x7f0000003c40)=""/239, 0xef}, {&(0x7f0000003d40)=""/17, 0x11}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/8, 0x8}, {&(0x7f0000004dc0)=""/126, 0x7e}], 0x5, &(0x7f0000004ec0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004f40)=""/95, 0x5f}, {&(0x7f0000004fc0)=""/76, 0x4c}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/63, 0x3f}, {&(0x7f0000005180)=""/45, 0x2d}, {&(0x7f00000051c0)=""/55, 0x37}, {&(0x7f0000005200)=""/134, 0x86}], 0x7, &(0x7f0000005340)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005480)}, {&(0x7f00000054c0)=""/211, 0xd3}], 0x2, &(0x7f0000005600)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}], 0x5, 0xc0000000, &(0x7f00000058c0)={r4, r5+10000000}) ioctl$INOTIFY_IOC_SETNEXTWD(r9, 0x40044900, 0x5) sendmsg$nl_generic(r6, &(0x7f0000005ac0)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005a80)={&(0x7f0000005940)={0x128, 0x3a, 0x800, 0x70bd2c, 0x25dfdbfc, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@remote}, @generic="a68b51168b06dba129123da0368acfe0c25b8957d6ec4036cdb9aa4ca2627983fb25f9676b368f2c192f9c3be1717633bfd6406e183942b4e81b396d6ab9fdedc97f4a3d8986e0ae2f2c0ced701d52f2ade056648417881f95e241d7e61f484ccb6d58ee51f0c783e8b30677d8e6a26150e66ac3dfed1f0cec81db2116714dd5f3b2625aa0ba8efc95e3f15024b9a27826fd1c78b63f26f470ddd036d8b21b3946d3355815a47df2100755f7b8a4030c809bb8103d160ab66810d6595b11f4349b5c700033f266eab08a339038f7fb610878239c046d00bd1c208942adcd48fa0a44ffd168a98cd8247a45b8235c538f3ea388ef70ebb97f", @typed={0x8, 0x8f, 0x0, 0x0, @uid=r10}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f0000005b00)={0x2, 0x10001}) socketpair(0x28, 0x2, 0x8001, &(0x7f0000005b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r11, 0x8907, &(0x7f0000005b80)) accept4$inet6(r8, &(0x7f0000005bc0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000005c00)=0x1c, 0x80000) 23:38:32 executing program 3: ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = fork() ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)={r1}) r2 = accept4$unix(r0, 0x0, &(0x7f0000000080), 0x800) syz_io_uring_setup(0x7d45, &(0x7f00000000c0)={0x0, 0x5df4, 0x1, 0x0, 0x218, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x13, 0x100, 0x70bd25, 0x25dfdbfb, {0x21, 0x5, 0x81, 0x2, {0x4e21, 0x4e21, [0x1f, 0x101, 0x38, 0x7], [0x9, 0x2, 0x80, 0x4], 0x0, [0x1, 0x1000]}, 0x5, 0xda}, [@INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "2d6a87e224904ba82ef21de0f78141e7a22a3cc5faed5941a435a2ed17b2f01be23d902aaafcc929"}]}, 0x78}}, 0x440c6) r3 = gettid() move_pages(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000340)=[0x4, 0x7f, 0x4, 0x0, 0x6, 0x0, 0x7], &(0x7f0000000380)=[0x0, 0x0], 0x2) fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x8, 0x200800, 0x80000000, 0x9, 0x0, 0x8}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x400c010) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x2, &(0x7f0000000540)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, r5, 0x100, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040041}, 0x40000) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000700)='async\x00', 0x0, 0x0) dup(r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x5}, {0x81, 0x4}, {0x91, 0x1}, {0x5, 0x4}], "6c63616c87519d08"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x4}, {0x3}, {0x5a, 0x3}, {0x9, 0x3}, {0x81, 0x1}, {0x2}, {0x20, 0x2}, {0x80}, {0x8, 0x3}, {0x7, 0x6}, {0x4, 0x3}, {0x3, 0x6}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x5}, {0x8, 0x6}, {0x4, 0x3}, {0x1f, 0x6}, {0x2, 0x3}, {}, {0xb9, 0x3}], "a18d3e7a51496336"}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x24004000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x5a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x55}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000019c0)={0x0, 0x1, 0x0, [0x0, 0x212, 0xffffffffffffb99c, 0x3, 0x1000], [0x1, 0x0, 0x9, 0x0, 0x7, 0x8, 0x800, 0x5, 0x1000, 0x786a, 0x297, 0xfffffffffffffeff, 0x2, 0x9, 0x9d3, 0x76, 0x2, 0xcf3, 0x5, 0x2, 0x401, 0x9, 0x47a, 0x54ba0dec, 0x8, 0x1, 0x80, 0x7fff, 0x7, 0x10001, 0x57a, 0x9, 0x20, 0x7fffffff, 0x20, 0x0, 0x3, 0x205830b7, 0x9, 0x0, 0x9, 0x7f, 0x8, 0x4, 0x800, 0x7, 0x400, 0x5, 0xffffffffffffff7f, 0x7, 0xfffffffffffffff9, 0xca5d, 0x6982, 0x0, 0xffffffe000000000, 0x8, 0x2000000000000000, 0x8, 0xffff, 0xde, 0x4, 0xa60, 0x400, 0x7, 0x3, 0xffff, 0xffffffffffff46c5, 0x0, 0xcc8, 0x100, 0x8000, 0x1f, 0xd2, 0x8000, 0x4, 0x9, 0x2, 0x7ff, 0x4, 0x4b9c, 0x20, 0x5e, 0xc000000000000, 0xa3, 0x1, 0x87, 0x4e68, 0x2, 0x5, 0x1, 0x96a, 0x7ff, 0x6, 0x2, 0x28000, 0x9, 0xeb7, 0x7f, 0x10000, 0x7fff, 0x10000, 0x1, 0xc31, 0x7ff, 0x3, 0x4, 0x3, 0x2, 0x5, 0x548b, 0x2, 0x2, 0x20, 0x24000, 0x3f, 0x6, 0x87, 0x40, 0x40, 0x4, 0x9]}) 23:38:32 executing program 4: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x1, 0x38, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={{0x0, 0xf8}, {0x3b, 0x7}, 0x3, 0x7, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0x401}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x352}]}]}, 0x20}}, 0x20040000) r3 = memfd_secret(0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x44}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5e}, @NL80211_ATTR_PMKID={0x14, 0x55, "fb45baf701d2b7dd189b882f8f8de9e0"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40040) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000440)={'\x00', 0x4, 0x9, 0x4, 0x5, 0xff, r5}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000004c0), &(0x7f0000000500)=0xc) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0xe0e2}, @val={0x0, 0x0, 0x0, 0x9, 0xf000, 0x1f}, @llc={@llc={0xe, 0xf8, '\tG', "2134b18e985f4f5e425782ed5fd8c66b8dde0d17d424964e99c70b50c3838d737f0737b8b74fb972ceff9c52d57a5f442b0fdc307fb813db5c2ebb551bdf013f91627a7e737ba57c06656b48eb531fc62b8ed8120e1881d68e990a51ffe4ec89a7d0b848c36e2ca6adefbfdf7ad5a6f1af9249a7deba1a1414ffaaa9d642ae58c9d0ff86d010ac58e04528c590d5777ee983a4dd7cf139586c7b710e99b7130dc78f7b84dfa1cd16c75601f569d9cca2ae3d23c1d9c0174a5d2edd723f05c597cf2db1"}}}, 0xd5) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) r8 = perf_event_open$cgroup(&(0x7f0000000700)={0x5, 0x80, 0x6, 0x81, 0x56, 0x6, 0x0, 0xfffffffffffffff7, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000006c0)}, 0x0, 0x8001, 0x6, 0x1, 0x3, 0xc04e, 0x9, 0x0, 0x1f, 0x0, 0x8001}, r7, 0x6, r6, 0x1) write$binfmt_misc(r8, &(0x7f0000000780)={'syz1', "3eeada369366ff0f813e99797da07a6bc17f60e31ab75832c4b2664be311c5d8eeb629d10134376293e6f18fefda3d66948503f4a800b818151fe0"}, 0x3f) r9 = syz_open_dev$vcsu(&(0x7f00000007c0), 0xba6, 0x100) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x75}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x26000804) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000900)) [ 111.350769] audit: type=1400 audit(1748043512.410:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:38:32 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)="122ba27bd892c31b7a643db6d86b512efaef00267c11b829f0e45af1af678f86a5f1e2eb8ca09ba0d02bcbfc464eb90432888e25c14208c90ccf557a91e5f77f80ad8ab38c9a5e7198f340b15fa5eb6c98571b4a0b9a03443d159c197ca56c675c5b6ae02a21dc229f01de4635f4eb43f8823b2dc96ff9624e0bf961303035f940131fe497995dfc5f88291fffa84e31dbfe1ff72af29316ff7ed74bff639fb91b7077ad2bf652fa6df6c4de9ba6fc910a1f26a804dd16b07cd8f71f527d754e4a0ae50a0f80dfc875e803623c87e21982392a136a9aa98539932be14c81cc8d6384bed716283842739d7d454845e30f1a9a") r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) r1 = open_tree(r0, &(0x7f00000001c0)='./file0\x00', 0x8800) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x81, 0x6a80, 0x0, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8, 0x4, 0x6}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1434682}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c1}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) renameat(r1, &(0x7f0000000740)='./file0\x00', r4, &(0x7f0000000780)='./file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000007c0)=0x2, 0x4) readahead(r1, 0xfff, 0x5) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000800)="4b6b9d8b5fe5699c3b24110de3744a062c9e223b859b7ff7a4d8ab8348adf1366749e2742a5b0dcf5943a54fe406449f1c00be2e6c8cf51b320aa2fabb9edd15a668ddc8573df4c3203313c18d2ec8f02458474f5ac59ea9d6cd067dbe5be066b0607c5b3543259e6fbf165cc49c31f5189554cb81c2426bad5d809614669703fd83b8fbc54bde311208330bfcf872f1d075dcc03f3762dfed05c214961671a55e57ad3d63c25ce5f5d7219dde6baa7eeefa8a704e2620a7e01e6ab56077331109068f6f79ceb33bab080ecabc50aa8d1f08cd55acfd37735f32f8ef2c9c70cc887d5bc67b4eb571ad1ad5c68b6de0f84b5f64fead3be4c248ca24035e6fb115") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000900)={0x100000000, 0x4, 0x4, 0x58, 0x3, [{0xffffffff, 0x3f, 0x4, '\x00', 0x202}, {0x7, 0x9, 0x800}, {0x0, 0x7fff, 0x2, '\x00', 0x2289}]}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000a00)) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000a40)=0xffffffffffffffff) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000a80)) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000ac0), 0x2, 0x0) 23:38:32 executing program 6: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={'virt_wifi0\x00'}) socketpair(0x0, 0x80c, 0xff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000000c0)={0xfff, 0x6, 0x5, 0x8}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x5480, @any, 0x100, 0xa566d111134fcbde}, 0xe) r3 = getpgid(0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') r5 = getpid() kcmp(0x0, r5, 0x1, r4, r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r7 = pidfd_getfd(r6, r6, 0x0) inotify_rm_watch(r7, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x12000) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r8) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000240)={0x101, 0x8, 0x4, 0x2}) fcntl$getownex(r7, 0x10, &(0x7f0000000280)={0x0, 0x0}) ptrace$pokeuser(0x6, r9, 0x1, 0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) ioctl$LOOP_CTL_ADD(r10, 0x4c80, 0x0) 23:38:32 executing program 7: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'gre0\x00', 0x5}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x29c, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x31}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x22c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x2}, {0x7, 0xa}, {0x7, 0x3}, {0x4, 0x5}]}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x1}, {0x1}, {0x5, 0x9}, {0x3, 0x1}, {0x4, 0x3}, {0x1}, {0x4, 0x2}, {0x6, 0x2}, {0x4, 0x4}, {0x5}, {0x6, 0x7}, {0x0, 0x3}, {0x6, 0x7}, {0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {0x7, 0x5}, {0x5, 0x9}, {0x5, 0x4}, {0x7}, {0x3, 0x2}, {0x1, 0x8}, {0x5, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x101, 0xfff, 0x0, 0x7fff, 0x36, 0xb8, 0xe2f]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0xb, 0x9, 0x30, 0x2a, 0xc, 0x24, 0x12, 0x48, 0x48, 0x16, 0x5, 0x60, 0x2, 0x3, 0x60, 0x12, 0x6, 0x6c]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0xa}, {0x1}, {}, {0x4, 0x8}, {0x0, 0x7}, {0x5}, {0x3, 0x9}, {0x0, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4}, {0x6, 0x4}, {0x0, 0x3}, {0x4, 0x4}, {0x2, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x2}, {0x5, 0x3}, {0x7, 0xa}, {0x2, 0x8}, {0x3, 0x5}, {0x0, 0x5}, {0x3, 0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0xa}, {0x4, 0x9}, {0x3, 0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x5, 0xa}, {0x3}, {0x2, 0x5}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x2, 0x6}, {0x5}, {0x4, 0x2}, {0x5}, {0x6, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x6, 0x7}, {0x2, 0x8}, {0x4, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0xa}, {0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x7, 0x1}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0x7}, {0x3, 0x8}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0xc, 0x48, 0x9, 0x24, 0x1, 0x2, 0x6c, 0x9, 0x36, 0x30, 0x4, 0x30, 0x0, 0x36, 0x12, 0x24, 0x30, 0x24, 0x6c, 0x6c, 0x24, 0x54, 0x60, 0x6, 0x3, 0x60, 0xb, 0x18, 0x18, 0x18]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6c, 0x48, 0x9, 0x6, 0x5, 0x70, 0x4, 0x6, 0x9, 0xb, 0x48, 0x16, 0x16, 0x60, 0x36, 0x4, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x800, 0x3ff, 0x7fff, 0x9, 0x0, 0x7f, 0xc652]}}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd051, 0x9, 0x80, 0x3, 0xf, 0x0, 0x9, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x36b2, 0x8, 0x5, 0x3, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x9}, {0x6, 0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x3, 0x4}, {0x3, 0x8}, {0x1, 0x1}, {0x3, 0x2}, {0x2, 0x8}, {0x7, 0x7}, {0x2}, {0x1, 0xa}, {0x6, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x0, 0x6}, {0x6, 0xa}, {0x3}, {0x7, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x2, 0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x2}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x6}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x6, 0x9}, {0x4, 0x6}, {0x3, 0xa}, {0x0, 0x7}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x6, 0x7}, {0x4, 0x2}, {0x2, 0x5}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x4, 0x9}, {0x5, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x6}, {0x5, 0x2}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x2, 0x6}, {0x2, 0x9}, {0x2, 0x4}, {0x3, 0x8}, {0x5, 0x6}, {0x3}, {0x2, 0x7}, {0x0, 0x8}, {0x4}, {0x6, 0x2}, {0x1, 0xa}, {0x5, 0x6}, {0x2, 0x5}, {0x5, 0x3}, {0x6, 0x2}, {0x4, 0x1}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x1}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x1}, {0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x5}, {0x4, 0x3}, {0x6, 0x7}, {0x5, 0x9}, {0x5, 0x5}, {0x7, 0x1f}, {0x0, 0x1}, {0x4, 0x8}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0x4}, {0x4, 0x8}, {0x7, 0x3}, {0x3}, {0x3, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x1, 0x9}, {0x2, 0x5}, {0x5, 0x8}, {0x2, 0x9}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x5, 0x9}, {0x6, 0x3}, {0x2, 0x9}, {0x5, 0xa}, {0x2, 0x8}, {0x2, 0x9}, {0x4, 0x5}, {0x3, 0x8}, {0x4, 0x3}, {0x1, 0x1}, {0x4, 0x1}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xff, 0x0, 0x7fff, 0x100, 0x7f, 0x6, 0xef]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x3, 0xc, 0x4, 0x4, 0x24, 0x24, 0x30, 0xb, 0x3, 0x4, 0x16, 0x12, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x800, 0x8000, 0x80, 0x1, 0x0, 0x8, 0x401]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xe2d8, 0x401, 0x9, 0x712, 0x100, 0x9, 0x101]}}]}]}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, [{0x30}, {0x5, 0x1}, {0x12}, {0x16}, {0x1b, 0x1}, {0x27}, {0x24, 0x1}, {0x5, 0x1}, {0x9}, {0x6, 0x1}, {0xb}, {0xc, 0x1}]}]}, 0x29c}}, 0xc0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, r3, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x6, 0x6}, {0x4, 0x3}, {0x0, 0x6}, {0x7f, 0x3}, {0x2, 0x7}, {0xff, 0x7}, {0xff}, {0x3, 0x2}], "29a4e75e0e9cc7a1"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x81, 0x2}, {0x0, 0x4}, {0x1}, {0x5, 0x6}, {0x9, 0x5}, {0x8}, {0x81, 0x5}, {0x87, 0x2}, {0x1, 0x2}, {0x81, 0x5}], "532a865cb4f586b6"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3f, 0x5}, {0x72, 0x2}, {0x1, 0x7}, {0x8, 0x2}, {0x1, 0x3}, {0x4, 0x5}, {0xff, 0x6}, {0xa5, 0x4}, {0x8, 0x2}, {0x4, 0x3}, {0x87}, {0x23, 0x4}, {0x2, 0x4}, {0xe7, 0x2}, {0xcd, 0x2}, {0x8, 0x3}, {0x3, 0x5}, {0x1f, 0x5}, {0x4, 0x7}], "fdcc535c66fe23a5"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x4, 0x1}, {0x1, 0x2}, {0x0, 0x5}], "38df96659e0dd211"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x6, 0x6}, {0x7f, 0x6}, {0x3, 0x3}, {0x3f, 0x5}, {0x96, 0x4}, {0xbf, 0x1}, {0xff, 0x2}, {0x0, 0x2}, {0x4, 0x6}, {0x7}, {0x9, 0x2}, {0x8, 0x6}, {0x3, 0x6}, {0x63, 0x1}, {0x8, 0x7}, {0x5, 0x3}, {0x4, 0x5}, {0x3, 0x1}], "a61e1f1ecf6a6852"}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40488d1}, 0x4008801) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000700)={@private1, 0x0}, &(0x7f0000000740)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @empty}, &(0x7f00000007c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xa4, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfc}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3f}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000a40)={0x0, @generic={0x15, "e97c535c77d0eda0152fdd85662a"}, @ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @can={0x1d, r4}, 0x3, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a00)='netdevsim0\x00', 0x800, 0xff, 0x9}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x90, r7, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40840}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000c00)={0x6, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) accept4(r0, &(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000dc0)=0x80, 0xc0800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000f00)={&(0x7f0000000e00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r7, 0x8, 0x70bd26, 0x5, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x20}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7e}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x40}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r10, 0x8983, &(0x7f0000000f80)={0x7, 'geneve1\x00', {0x200}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000001040)={0x1, 0x100, 0x80000001}) [ 112.908315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.914504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.920883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.933110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.942900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.961706] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.979222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.996199] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.001442] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.015803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.022797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.029837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.042836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.049461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.056842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.116367] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.118378] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.128836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.139635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.148020] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.151503] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.154080] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.156539] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.159641] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.161615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.162160] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.167835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.171474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.174315] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.180034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.187969] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.189507] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.199691] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.204853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.215915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.217862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.223963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.227042] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.230368] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.241761] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.987622] Bluetooth: hci0: command tx timeout [ 115.051444] Bluetooth: hci1: command tx timeout [ 115.115494] Bluetooth: hci2: command tx timeout [ 115.244478] Bluetooth: hci3: command tx timeout [ 115.310638] Bluetooth: hci4: command tx timeout [ 115.310665] Bluetooth: hci6: command tx timeout [ 115.311192] Bluetooth: hci5: command tx timeout [ 115.372347] Bluetooth: hci7: command tx timeout [ 117.037577] Bluetooth: hci0: command tx timeout [ 117.100417] Bluetooth: hci1: command tx timeout [ 117.164300] Bluetooth: hci2: command tx timeout [ 117.292509] Bluetooth: hci3: command tx timeout [ 117.355548] Bluetooth: hci6: command tx timeout [ 117.355673] Bluetooth: hci4: command tx timeout [ 117.356612] Bluetooth: hci5: command tx timeout [ 117.420641] Bluetooth: hci7: command tx timeout [ 119.084292] Bluetooth: hci0: command tx timeout [ 119.147381] Bluetooth: hci1: command tx timeout [ 119.211618] Bluetooth: hci2: command tx timeout [ 119.339479] Bluetooth: hci3: command tx timeout [ 119.404092] Bluetooth: hci4: command tx timeout [ 119.404668] Bluetooth: hci5: command tx timeout [ 119.404699] Bluetooth: hci6: command tx timeout [ 119.467971] Bluetooth: hci7: command tx timeout [ 121.133757] Bluetooth: hci0: command tx timeout [ 121.195932] Bluetooth: hci1: command tx timeout [ 121.259344] Bluetooth: hci2: command tx timeout [ 121.387625] Bluetooth: hci3: command tx timeout [ 121.451969] Bluetooth: hci5: command tx timeout [ 121.452882] Bluetooth: hci4: command tx timeout [ 121.452926] Bluetooth: hci6: command tx timeout [ 121.517327] Bluetooth: hci7: command tx timeout [ 173.062904] syz-executor.4 (282) used greatest stack depth: 25024 bytes left [ 175.305169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.308790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.313072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.317091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.320029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.327531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.338632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.344024] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.347053] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.351701] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.437871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.446440] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.451844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.466890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.473032] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.512142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.522399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.526749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.552845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.576667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.579305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.586050] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.606695] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.642657] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.651188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.655009] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.656999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.658512] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.666463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.671513] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.779892] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.795620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.798726] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.859877] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.864786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.882543] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.886526] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.897489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.931844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.949490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.388392] Bluetooth: hci0: command tx timeout [ 177.389143] Bluetooth: hci1: command tx timeout [ 177.579358] Bluetooth: hci2: command tx timeout [ 177.772689] Bluetooth: hci5: command tx timeout [ 177.835354] Bluetooth: hci4: command tx timeout [ 177.835429] Bluetooth: hci3: command tx timeout [ 178.028346] Bluetooth: hci7: command tx timeout [ 178.092423] Bluetooth: hci6: command tx timeout [ 179.435571] Bluetooth: hci1: command tx timeout [ 179.435620] Bluetooth: hci0: command tx timeout [ 179.627509] Bluetooth: hci2: command tx timeout [ 179.819399] Bluetooth: hci5: command tx timeout [ 179.883582] Bluetooth: hci4: command tx timeout [ 179.884540] Bluetooth: hci3: command tx timeout [ 180.077382] Bluetooth: hci7: command tx timeout [ 180.139320] Bluetooth: hci6: command tx timeout [ 181.483871] Bluetooth: hci0: command tx timeout [ 181.484496] Bluetooth: hci1: command tx timeout [ 181.675316] Bluetooth: hci2: command tx timeout [ 181.867648] Bluetooth: hci5: command tx timeout [ 181.933365] Bluetooth: hci3: command tx timeout [ 181.933422] Bluetooth: hci4: command tx timeout [ 182.123534] Bluetooth: hci7: command tx timeout [ 182.187615] Bluetooth: hci6: command tx timeout [ 183.531324] Bluetooth: hci1: command tx timeout [ 183.531383] Bluetooth: hci0: command tx timeout [ 183.723407] Bluetooth: hci2: command tx timeout [ 183.915430] Bluetooth: hci5: command tx timeout [ 183.979545] Bluetooth: hci4: command tx timeout [ 183.979981] Bluetooth: hci3: command tx timeout [ 184.172379] Bluetooth: hci7: command tx timeout [ 184.236086] Bluetooth: hci6: command tx timeout [ 235.801369] syz-executor.6 (2790) used greatest stack depth: 24896 bytes left [ 237.632994] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.636143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.642532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.652576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.655641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.687864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.690680] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.695635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.701480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.703122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.721340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.731428] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.737475] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.744379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.746070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.831344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.843851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.876421] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.897269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.921205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.008014] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.014513] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.035757] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.039145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.056954] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.062942] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.068684] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.070758] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.074521] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.084702] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.095890] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.118745] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.121217] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.129999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.130523] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.137016] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.142683] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.148781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.151186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.167546] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.723345] Bluetooth: hci1: command tx timeout [ 239.724488] Bluetooth: hci0: command tx timeout [ 239.788021] Bluetooth: hci2: command tx timeout [ 239.979500] Bluetooth: hci3: command tx timeout [ 240.172313] Bluetooth: hci6: command tx timeout [ 240.235353] Bluetooth: hci4: command tx timeout [ 240.236352] Bluetooth: hci7: command tx timeout [ 240.747527] Bluetooth: hci5: command tx timeout [ 241.772510] Bluetooth: hci0: command tx timeout [ 241.772775] Bluetooth: hci1: command tx timeout [ 241.835450] Bluetooth: hci2: command tx timeout [ 242.027342] Bluetooth: hci3: command tx timeout [ 242.221308] Bluetooth: hci6: command tx timeout [ 242.285524] Bluetooth: hci7: command tx timeout [ 242.285559] Bluetooth: hci4: command tx timeout [ 242.795457] Bluetooth: hci5: command tx timeout [ 243.819588] Bluetooth: hci1: command tx timeout [ 243.820884] Bluetooth: hci0: command tx timeout [ 243.883376] Bluetooth: hci2: command tx timeout [ 244.077371] Bluetooth: hci3: command tx timeout [ 244.270268] Bluetooth: hci6: command tx timeout [ 244.331313] Bluetooth: hci4: command tx timeout [ 244.331378] Bluetooth: hci7: command tx timeout [ 244.843658] Bluetooth: hci5: command tx timeout [ 245.133997] systemd-rfkill (5366) used greatest stack depth: 24648 bytes left [ 245.867442] Bluetooth: hci0: command tx timeout [ 245.867947] Bluetooth: hci1: command tx timeout [ 245.931475] Bluetooth: hci2: command tx timeout [ 246.123492] Bluetooth: hci3: command tx timeout [ 246.316822] Bluetooth: hci6: command tx timeout [ 246.379665] Bluetooth: hci4: command tx timeout [ 246.379702] Bluetooth: hci7: command tx timeout [ 246.891552] Bluetooth: hci5: command tx timeout [ 300.097806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.101663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.114841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.126963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.134473] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.170283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.179782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.182675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.189142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.195795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.283993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.288289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.290398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.296922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.302825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.354587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.358896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.361407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.367143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.372712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.413350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.444852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.482213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.522122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.545624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.891518] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.899466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.903165] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.912643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.924122] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.924430] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.954863] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.963071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.977946] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.979015] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.018985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.026810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.029737] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.030169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.051536] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.187325] Bluetooth: hci0: command tx timeout [ 302.252318] Bluetooth: hci1: command tx timeout [ 302.381352] Bluetooth: hci2: command tx timeout [ 302.444345] Bluetooth: hci3: command tx timeout [ 302.828345] Bluetooth: hci4: command tx timeout [ 303.083319] Bluetooth: hci6: command tx timeout [ 303.147510] Bluetooth: hci7: command tx timeout [ 303.148312] Bluetooth: hci5: command tx timeout [ 304.235390] Bluetooth: hci0: command tx timeout [ 304.300262] Bluetooth: hci1: command tx timeout [ 304.427372] Bluetooth: hci2: command tx timeout [ 304.492286] Bluetooth: hci3: command tx timeout [ 304.875498] Bluetooth: hci4: command tx timeout [ 305.131521] Bluetooth: hci6: command tx timeout [ 305.197285] Bluetooth: hci7: command tx timeout [ 305.197780] Bluetooth: hci5: command tx timeout [ 306.283344] Bluetooth: hci0: command tx timeout [ 306.347538] Bluetooth: hci1: command tx timeout [ 306.475321] Bluetooth: hci2: command tx timeout [ 306.539507] Bluetooth: hci3: command tx timeout [ 306.923333] Bluetooth: hci4: command tx timeout [ 307.179484] Bluetooth: hci6: command tx timeout [ 307.244373] Bluetooth: hci5: command tx timeout [ 307.244865] Bluetooth: hci7: command tx timeout [ 308.331564] Bluetooth: hci0: command tx timeout [ 308.396283] Bluetooth: hci1: command tx timeout [ 308.523336] Bluetooth: hci2: command tx timeout [ 308.587574] Bluetooth: hci3: command tx timeout [ 308.971766] Bluetooth: hci4: command tx timeout [ 309.229274] Bluetooth: hci6: command tx timeout [ 309.291352] Bluetooth: hci7: command tx timeout [ 309.291869] Bluetooth: hci5: command tx timeout [ 362.306519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.313147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.319924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.332709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.340103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.369113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.372284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.388003] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.394962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.400606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.575741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.581885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.591062] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.600713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.604744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.669978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.673976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.690622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.751999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.755037] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.760119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.763356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.795820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.810847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.814471] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.816935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.832800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.838532] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.874719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.894963] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.940881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.973762] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.977621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.983762] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.983831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.991439] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.998818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.001068] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.043476] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.091773] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.398305] Bluetooth: hci0: command tx timeout [ 364.460607] Bluetooth: hci1: command tx timeout [ 364.651328] Bluetooth: hci2: command tx timeout [ 364.908336] Bluetooth: hci5: command tx timeout [ 364.908359] Bluetooth: hci3: command tx timeout [ 365.035347] Bluetooth: hci4: command tx timeout [ 365.163495] Bluetooth: hci7: command tx timeout [ 365.227462] Bluetooth: hci6: command tx timeout [ 366.443533] Bluetooth: hci0: command tx timeout [ 366.508188] Bluetooth: hci1: command tx timeout [ 366.699428] Bluetooth: hci2: command tx timeout [ 366.955366] Bluetooth: hci3: command tx timeout [ 366.955404] Bluetooth: hci5: command tx timeout [ 367.084435] Bluetooth: hci4: command tx timeout [ 367.211321] Bluetooth: hci7: command tx timeout [ 367.276358] Bluetooth: hci6: command tx timeout [ 368.492333] Bluetooth: hci0: command tx timeout [ 368.555487] Bluetooth: hci1: command tx timeout [ 368.747381] Bluetooth: hci2: command tx timeout [ 369.003342] Bluetooth: hci5: command tx timeout [ 369.004295] Bluetooth: hci3: command tx timeout [ 369.131702] Bluetooth: hci4: command tx timeout [ 369.259319] Bluetooth: hci7: command tx timeout [ 369.323310] Bluetooth: hci6: command tx timeout [ 370.539518] Bluetooth: hci0: command tx timeout [ 370.603571] Bluetooth: hci1: command tx timeout [ 370.795660] Bluetooth: hci2: command tx timeout [ 371.051471] Bluetooth: hci3: command tx timeout [ 371.052673] Bluetooth: hci5: command tx timeout [ 371.180883] Bluetooth: hci4: command tx timeout [ 371.307827] Bluetooth: hci7: command tx timeout [ 371.372510] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 23:43:33 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff81bb8950 RCX=ffff88800e43f61c RDX=1ffff11001c87ee4 RSI=ffffffff85c1d1c0 RDI=ffffffff81bb8950 RBP=ffffffff81bb8950 RSP=ffff88800e43f690 R8 =0000000000000001 R9 =ffff88800e43f708 R10=000000000003b67d R11=00000000000272b3 R12=ffff88800e43f790 R13=0000000000000000 R14=ffff88800da93700 R15=0000000000000cc0 RIP=ffffffff8142fa7e RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe956bcc540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe956cbb7d0 CR3=00000000136eb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84ac15ce RDX=ffff8880135eb700 RSI=0000000000000003 RDI=0000000000000005 RBP=ffff8880265eee00 RSP=ffff88801672f650 R8 =0000000000000001 R9 =ffffed1006ed8d00 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=ffff8880265eee08 R14=dffffc0000000000 R15=ffff88801672f778 RIP=ffffffff84ac15ce RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c4cc93b080 CR3=000000002d0b0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000