Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:4894' (ECDSA) to the list of known hosts. 2025/05/26 12:00:06 fuzzer started 2025/05/26 12:00:07 dialing manager at localhost:46087 syzkaller login: [ 104.729064] cgroup: Unknown subsys name 'net' [ 104.928516] cgroup: Unknown subsys name 'cpuset' [ 105.005345] cgroup: Unknown subsys name 'rlimit' 2025/05/26 12:00:26 syscalls: 2214 2025/05/26 12:00:26 code coverage: enabled 2025/05/26 12:00:26 comparison tracing: enabled 2025/05/26 12:00:26 extra coverage: enabled 2025/05/26 12:00:26 setuid sandbox: enabled 2025/05/26 12:00:26 namespace sandbox: enabled 2025/05/26 12:00:26 Android sandbox: enabled 2025/05/26 12:00:26 fault injection: enabled 2025/05/26 12:00:26 leak checking: enabled 2025/05/26 12:00:26 net packet injection: enabled 2025/05/26 12:00:26 net device setup: enabled 2025/05/26 12:00:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/26 12:00:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/26 12:00:26 USB emulation: enabled 2025/05/26 12:00:26 hci packet injection: enabled 2025/05/26 12:00:26 wifi device emulation: enabled 2025/05/26 12:00:26 802.15.4 emulation: enabled 2025/05/26 12:00:26 fetching corpus: 0, signal 0/0 (executing program) 12:00:28 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/4096) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001040)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendmsg$unix(r0, &(0x7f0000001200)={&(0x7f0000001080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001100)="114a195fdaeb5b491f515c5f7272398b28834bf07a0404664faf3c1413ad1b1740a446c7facbb5ca6d9f5f8351d6f6a26108251d5ff3ba618645f881da6eb25ed7ec693b81b34512afd31cddcdb75d1307e06b6b7eff9950735b232e261494d63de6e79636120d58b57db303effe92c57c50412e1a81ad5fced81b05", 0x7c}], 0x1, &(0x7f00000011c0), 0x0, 0x100}, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001240)='/sys/module/thermal', 0x4082, 0x20) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000001280)={0xffffffffffffffff, 0x1}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r4 = dup2(r0, r2) fcntl$notify(r4, 0x402, 0x80000000) r5 = openat$incfs(r0, &(0x7f0000001300)='.pending_reads\x00', 0xac0, 0x80) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000001340)={0xfff, 0x8, 0x2, 0x1, 0x1, [{0x8, 0xb9, 0x200, '\x00', 0x808}]}) clock_gettime(0x0, &(0x7f0000001400)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f00000013c0)=[{}, {}, {}, {}], 0x4, &(0x7f0000001440)={r6, r7+10000000}, &(0x7f0000001480)={[0x10001]}, 0x8) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0), 0x100, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r3) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000001500)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001540)={{0x1, 0x1, 0x18, r2, {0x1, 0x18684139}}, './file0\x00'}) fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f0000001580)=0x6) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000015c0)) 2025/05/26 12:00:28 starting 8 fuzzer processes 12:00:28 executing program 1: ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x5c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x24}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3472db50c9"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x1) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r2 = open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x6000, 0x60) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000200)={0x80000001, 0x9}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x434, 0x3f4, 0x10, 0x70bd25, 0x25dfdbfc, {0x1, 0x2, 0x2c, [0x81, 0x3, 0x0, 0xff, 0x5, 0x6572, 0x2, 0x0, 0xf64, 0x8, 0x8, 0x1, 0x1, 0x80, 0xbf, 0x82, 0x8d90, 0x9, 0x1, 0x3, 0x2, 0xfffffffe, 0x232, 0xa6, 0x7fff, 0x200, 0x4, 0x8, 0x5, 0x6e, 0x1, 0x0, 0x81, 0x3, 0x2, 0xe235, 0x401, 0xd5, 0x6, 0x80, 0x0, 0x7, 0x8, 0x7, 0xedf, 0x8, 0x10001, 0x2, 0x7fffffff, 0xf6, 0x2aa, 0x40, 0x0, 0x3, 0x5, 0x7, 0xffff, 0x0, 0x1, 0x1000, 0x81, 0x8000000, 0x71c], [0x0, 0x95e, 0x32c80000, 0x3, 0xe, 0x8, 0x72f7eb51, 0x0, 0xd31f, 0x6, 0x5, 0x8001, 0x1f, 0x61, 0x3, 0x6, 0x8, 0xffffffc1, 0x8001, 0x1d, 0x3, 0x1, 0x10000, 0x9, 0xfff, 0x742a, 0x10000000, 0x4, 0x401, 0x1ff, 0x2, 0x3, 0x3, 0x800, 0xcb1, 0x81, 0x5, 0xffffffff, 0x159f, 0x7fcc773c, 0x4, 0x5, 0x10001, 0x2, 0x2, 0x8000, 0xf3cd, 0x6, 0x8, 0x0, 0x1, 0xffffffff, 0x8, 0x8, 0x21, 0x4, 0x7, 0x10001, 0x0, 0x9, 0x7ff, 0x3, 0x6, 0x1e0], [0x4, 0x25, 0x7, 0x7, 0xfff, 0xfffffff9, 0x5, 0x2, 0x401, 0x4826, 0x6, 0x80000, 0x7, 0x9, 0x80000001, 0x0, 0x1ff, 0x1fe00, 0x3, 0x2, 0x2, 0x80, 0x6, 0x42, 0x9cf6, 0x8, 0xb6a4, 0x6, 0x80000000, 0x6, 0x2, 0x5b, 0xfffffc01, 0x5, 0xffff7155, 0x10001, 0x0, 0x1, 0x4, 0x1, 0x5, 0x1, 0x5, 0xe19, 0x8, 0x3f5, 0x8, 0x1f, 0x1, 0x6, 0x1, 0x1, 0x8c, 0x4, 0x7, 0x80000000, 0x4, 0x4, 0x3f, 0x4, 0x2, 0x2, 0x9, 0x5], [0x4e6, 0x3ff, 0x7, 0x401, 0x67289ade, 0x518, 0x15715f51, 0x6, 0x2, 0xe8d, 0xfb, 0x80000000, 0xa9, 0xfffffffd, 0x80, 0xea, 0x166, 0x47, 0x1, 0x1, 0x6, 0x10001, 0xfff, 0xfffffffc, 0x3f, 0x0, 0x200, 0x8, 0x0, 0x2, 0x5, 0x9, 0xfffffffe, 0x7, 0x7, 0x200, 0x7fff000, 0x3, 0x8, 0x0, 0x9, 0x40, 0x81, 0xffffffff, 0x8, 0x100, 0x8, 0x6e9, 0x1, 0x400, 0x4, 0x800, 0x5, 0x1592, 0x100, 0x4, 0x0, 0x9, 0x3ff1e9e8, 0x6, 0xff, 0xa1, 0x9, 0x57b1], 0x13, ['}\x00', 'nl80211\x00', '[\x00', '+&\x00', ':/%\x00']}, ["", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x8000}, 0x10) read$snapshot(r0, &(0x7f0000000740)=""/4096, 0x1000) recvmsg(r0, &(0x7f00000019c0)={&(0x7f0000001740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000017c0)=""/244, 0xf4}], 0x1, &(0x7f0000001900)=""/154, 0x9a}, 0x102) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000001a00)={0x8, {{0x2, 0x4e24, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) r4 = dup2(0xffffffffffffffff, r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x10, &(0x7f0000001b40)=0x6, 0x4) read$rfkill(r0, &(0x7f0000001b80), 0x8) faccessat2(r4, &(0x7f0000001bc0)='./file0\x00', 0x10, 0x1000) chown(&(0x7f0000001c00)='./file0/file0\x00', 0xee00, 0xee00) utimensat(r0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={{}, {0x77359400}}, 0x100) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001cc0)='/sys/module/hid_sunplus', 0x210002, 0xe9) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000001d00)={0x0, 0xe9ba}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x71322844752d1655}}, './file0\x00'}) 12:00:28 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') ioctl$KIOCSOUND(r0, 0x4b2f, 0x6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x5, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x4}) ioctl$CDROMSTOP(r0, 0x5307) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r2) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000140)=""/72, 0x48}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x10d482) flistxattr(r3, &(0x7f0000000240)=""/102, 0x66) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000002c0)={{0x0, 0x1, 0xfffffffffffffff9, 0x1, 0x400, 0xffffffffffff8000, 0x8000, 0x4d16, 0x6, 0x1800000, 0x1ff, 0xffffffffffffffe1, 0x401, 0x2, 0x3f}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) read$hiddev(r0, &(0x7f0000001300)=""/48, 0x30) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000001340)={0x0, 0xdc, 0x1}) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000001380)) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0xc8, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x35}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10004011}, 0x20040800) 12:00:28 executing program 3: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @private=0xa010102}, {0x6, @multicast}, 0x36, {0x2, 0x4e21, @remote}, 'geneve1\x00'}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000080)=0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0xe3c1, 0x4) fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/243) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000200)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x385600, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x402201, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000300)={{0x0, 0x9189}, {0x48ad}, 0x5}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x14, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x100}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000004c0)={0x46c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x80000000}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xe}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x35}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x43}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3b}, @NL80211_ATTR_TX_RATES={0x420, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x1f, 0x1, 0x5, 0xfff7, 0x3f, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xaa, 0x5, 0x5d18, 0x101, 0xc52, 0xd8f0, 0x1ff, 0xfff8]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7, 0x5}, {0x4, 0x9}, {0x5, 0x9}, {0x0, 0xa}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x7}, {0x0, 0x6}, {0x0, 0x1c}, {0x2, 0x9}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0xa}, {0x6, 0x7}, {0x4, 0x6}, {0x6, 0x9}, {0x4, 0x9}, {0x6, 0x4}, {0x3, 0x7}, {0x7, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x8}, {0x4}, {0x1, 0x2}, {0x3, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x2, 0xa}, {0x5, 0x2}, {0x7, 0xa}, {0x3, 0xa}, {0x1}, {0x5, 0x4}, {0x6}, {0x0, 0x9}, {0x2, 0x4}, {0x1}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x48, 0x60, 0x36, 0x6, 0x4, 0x16, 0x9, 0x2, 0x36, 0x2, 0x1b, 0xb, 0x5, 0x1b, 0x16, 0xc, 0x1b, 0x60, 0x2, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x2, 0x20, 0x100, 0x3f, 0x0, 0x800, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x60, 0x36, 0x6, 0x4, 0x60, 0x1, 0x48, 0x1, 0x5, 0x2, 0x48, 0x18, 0x36, 0x3, 0x16, 0xc, 0x48, 0x9562c233e5540ad, 0x5, 0x3, 0x12, 0x4]}]}, @NL80211_BAND_5GHZ={0xf0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x8}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {}, {0x7, 0x4}, {0x6, 0x8}, {0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x5, 0x9}, {0x7, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x4, 0x3}, {0x1, 0x6}, {0x6, 0x8}, {0x5, 0x1e}, {0x0, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x1}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0x7}, {0x5, 0x8}, {0x1, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x2, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x4, 0x9}, {0x6, 0x8}, {0x7, 0x5}, {0x7, 0x1}, {0x4, 0x8}, {}, {0x7, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x7, 0xa}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x5}, {0x1, 0x7}, {0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x4}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x4}, {0x2, 0x3}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x4, 0x5, 0x3, 0x400, 0x5, 0x3]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x16, 0x48, 0x3, 0x1b, 0x18, 0x2, 0x5, 0x43, 0x18, 0x2, 0x6c, 0x24, 0x30, 0x30, 0x2, 0x6]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x8}, {0x4, 0x9}, {0x3, 0x8}, {0x4}, {0x7, 0xa}, {0x2}, {0x7}, {0x5, 0x5}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {}, {0x0, 0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x4, 0x6}, {0x7, 0x4}, {0x5, 0x2}, {0x7}, {0x0, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x3}, {0x5, 0x6}, {0x7, 0x3}, {0x3, 0x8}, {0x0, 0x8}, {0x7}, {0x1, 0x8}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x1}, {0x7, 0x3}, {0x6, 0x6}, {0x6, 0xa}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {}, {0x4, 0x8}, {0x5, 0x2}, {0x4, 0x4}, {0x2, 0x4}, {0x2, 0x4}, {0x3, 0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x7, 0x4}, {0x6, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x8}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x5}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0xa}, {0x3, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x1}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x3}, {0x2, 0x5}, {0x6, 0x2}, {0x7, 0x2}, {0x1, 0x6}, {0x7, 0x6}, {}, {0x0, 0x7}, {0x5, 0x9}, {0x2, 0x2}, {0x3, 0x4}, {0x0, 0x9}]}]}, @NL80211_BAND_60GHZ={0xe0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0xa}, {0x1, 0x5}, {0x3, 0x8}, {0x4}, {0x4, 0x3}, {0x6, 0x9}, {0x2, 0x2}, {0x4, 0x5}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x5}, {0x2, 0x7}, {0x5, 0x7}, {0x1, 0x2}, {0x6, 0x8}, {0x2, 0x6}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x1}, {0x7, 0x6}, {0x1, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0xa}, {0x7, 0x8}, {0x2, 0x9}, {0x7, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0x4}, {0x4, 0xa}, {0x2, 0x8}, {0x6, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x3, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x4}, {0x3, 0x8}, {0x5, 0x1}, {0x6, 0x2}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x60, 0x2, 0x19, 0x1, 0x6c, 0xb, 0x3, 0x30, 0x6c, 0x3, 0x6c, 0x12, 0x6, 0xc, 0x64, 0x69, 0xb, 0x24, 0x24, 0x1b, 0x1]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x0, 0x48, 0x2, 0x0, 0x16, 0x36, 0x5, 0x9]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x8}, {0x1, 0x8}, {0x6}, {0x5, 0x8}, {0x3, 0x2}, {0x6, 0xa}, {0x1, 0x1}, {0x2, 0x4}, {0x3, 0x7}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x2}, {0x7}, {0x3, 0xa}, {0x7, 0x4}, {0x2, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x3}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x8}, {}, {0x6, 0x6}, {0x6, 0x6}, {0x7, 0x6}, {0x1, 0x9}, {}, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x3}, {0x6, 0x3}, {0x7, 0x9}, {0x7, 0x2}, {0x1, 0x4}, {0x5, 0x8}, {0x6, 0x8}, {0x0, 0x2}, {0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x3}, {0x5, 0x6}, {0x2, 0x4}, {0x7, 0x7}, {0x4, 0x2}, {0x5, 0x6}, {0x3, 0x7}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x9}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x0, 0x8}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x16, 0x36, 0x36, 0x6, 0x1, 0x18, 0x68, 0x6, 0xb, 0x48, 0x5, 0x18, 0x6, 0x60, 0x48, 0x1b, 0x12, 0x9, 0x6c, 0x36, 0x5, 0x6, 0xc, 0x6c, 0x18, 0x18, 0x1d]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x2, 0x5, 0x48, 0x1, 0x6c, 0x1b, 0x60, 0x34, 0x30, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe5a0, 0x4, 0xffff, 0x2, 0x4000, 0x100, 0x0, 0xff27]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x1, 0x0, 0x6, 0x20, 0x101, 0x2, 0xfff8]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xffff, 0x6, 0x2, 0xf000, 0x8, 0x3, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3ff, 0xfff, 0x1, 0x3, 0x100, 0x4d06, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x9, 0x9392, 0x6, 0xb92, 0x5, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5b, 0x60, 0x6, 0x9, 0x36, 0x1, 0x4, 0x0, 0xb, 0x0, 0x36, 0x5, 0xb, 0x48, 0x48, 0x5, 0x36, 0x9, 0x6, 0xc, 0x18, 0x12, 0xc, 0x2, 0x30, 0x36]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x2, 0x2, 0x9, 0x16, 0x60, 0x6c, 0x24, 0x6, 0x1b, 0x5, 0x6, 0x2, 0x16, 0x5, 0x18, 0x1b, 0x1b, 0x4, 0x6, 0x6c, 0x1, 0x12, 0x48, 0x48, 0x6c, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x5, 0xc60, 0xffff, 0x7, 0x3f, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x4, 0x9, 0x6, 0xa6, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x0, 0x7, 0x96, 0x1, 0x7ff, 0x0, 0x200]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0xc, 0x1, 0x30, 0x6c, 0x18, 0x6, 0x12, 0x1, 0x36, 0x18, 0x61c05fe1b0d65dc6, 0x12, 0x3, 0x3, 0x6]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x4, 0x3, 0x6c, 0x24, 0x6c, 0x6, 0x18, 0x24, 0x1b, 0xb, 0x48, 0x6c, 0x16, 0x5, 0xc, 0x1, 0x2, 0x11, 0x5, 0x4, 0x12, 0xb, 0x5, 0x9, 0x30, 0x5, 0x36, 0x268039e1e9e1e4ab, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf51f, 0x7165, 0x8, 0xffff, 0x3ff, 0x5, 0x9]}}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4040004}, 0x88081) fstatfs(r0, &(0x7f00000009c0)=""/17) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000a00)={0x2, 0x2, 0x5, 0x0, 0x400000}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x402000, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000a40)='.\x00', 0x1180, &(0x7f0000000ac0)={0x1, 0x8e, 0x120000, {r3}}, 0x20) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000b00)={0x73, @private=0xa010101, 0x4e22, 0x2, 'wrr\x00', 0x9, 0xfffffffc, 0x3d}, 0x2c) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r2) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000bc0)={@empty, @local, 0x0}, &(0x7f0000000c00)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x25c, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "c7b88e2da06480881e44dea1da70f137289f63234e44e37ccb40633490f851b457aa7e6ed9fe39d788ddee2bd90726ad98e0067be42770fa6284c3af2aa35d314fac96f52f1f0895af0965b19e4a96c9f07117ee43a2cbf301ad9661117895670d5c13ce718a4c7dc02667c7d74b341e8e0550cf9fa1420d8aea6e7cd4377bf81be0fd4255f3d31b436c05e65443b5520ca385c08877fd15c4a79847218092b3b2e6282aab8e1ddf5e1f60d976edace131837f0ac67e162c2b8950fbdd67ffde53ee886a910c34b4dce7f015f707c64e8f34c684e80d98a99fdfd4b70d"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x0e\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'A\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x24}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x913e}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wrr\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.\xc9\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaece}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x400c800}, 0x2c044895) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x448c4) [ 125.414753] audit: type=1400 audit(1748260828.204:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:00:28 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0xffff, 0x5, 0x2, 0x3d}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r1, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x71}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x62}]}, 0x5c}}, 0x2040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb8, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x34}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x40841) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000c00)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x7, &(0x7f0000000a40)=[{&(0x7f00000005c0)="a9d3b51f071a557ea76a88f874192965c827aecb89854641c28d0be8d8f0af75f6f61476355236d86c1f1706deb5", 0x2e, 0x7f}, {&(0x7f0000000600)="03d432cc3a03bb51b6a31ada7d8bab117f71e223049ec0d3afb7b877a6285f68a47ec72522ba9b521dd156f2460e2910dac6d0b6f0d00c29338f5543b1cd38201007c4c6c81efde4de44be24c44fdcdb5e743ad85e645d0ef6ae48aa051662cd4ca91bf27944b85c35a7322fab7f7c63278e14277039383e451cd66f860824da990a9b2f800b19feaea89d11595e74b5f21d99f25d88fde0aad94d75ca7a586dc4b19114a7aa7683c1d38a29b11ef964", 0xb0, 0x5}, {&(0x7f00000006c0)="8f93ed3480383b7d7778a0044acd53cf178fc40a4f32996ebe3c31f530f91f8e915cc98aba52e6b3d72cd806ab65d5658cefeb391b9ac3e76604a102bef6b5c349fc2b110433ccf04b227ed9358eda000415f0e483f49e26cb1c691b49706682eb1f41", 0x63, 0x8}, {&(0x7f0000000740)="62134afc1f0cd1f250d369237d716c5ec0c2ed62d3fea80d1a35ec0feaca4e5f99cc7a633d2a91c2c6bdb2c89f6ef62bb9bb9e90fb1f5ba05afcafab4da673f25cd3ae6917f456fd742b2b2c15a450d709469f79f751a649693fb0a44481b3aa13caa300a9005fb37eacbb2dcf07fce44cb713dabaea9a0d1c48d12fc6e2f3075265201c93", 0x85, 0x40}, {&(0x7f0000000800)="ed81c4b3b6ee0cc0133ac95b1ae862bb7e33d1673e2eb685cbb15656a0815252c1fffa0aae035aeb4acf86dbb0e4bd34f985239694b9d7fc3255b7678bbb84f3e77e0784dcaf1507677e1ceeda21188fdbb996137e477f22c31d3d445838ed8f09915c590450a0805a1175", 0x6b, 0x200}, {&(0x7f0000000880)="54f8d80eb194f2f7a7ade0629e0ff0ea0bbf154872991afe9ef2a8c4b32eecccaac55383749f042fac226220a2ba7fb0d3581805d91fb04bae130e5072cb5d85f5a14b4cd5feba347a3a565e25e4d580d84c2aeba40db5ebd1548b7e48ce9e2e685914496f789f5b86becd545c797bcabb730dd233ee09c25e8965ef1803a8127f32d89ec8decc410d210ca14168422a", 0x90, 0x401}, {&(0x7f0000000940)="65dbffb8979cb72cfba668f5ba6df8069a64c6e30d48f8d77766f5cae788c6dca9a62cebcc9a2a8bb91d5899f26d98340e597226171e15f31cb7b8a70ca22d320614f2b898101b2b872699c83a0845a0f91a7c77c0c18e75dfaa0eb6b152bd7c94b66507a995a726581fb8101f1bc5ffde2047626e35ef8a74866a6b7a1fad498e61b78f77159b50e124a2385dd3359961da0ec85430abc25f899d7fa0b008627813ad432194b43ead581d1bca0334404c3ad96ddbe6a7f65b23376b178661fa885abfe487f8", 0xc6, 0x5}], 0x2200404, &(0x7f0000000c40)={[{@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x2d]}}, {@huge_always}, {@size={'size', 0x3d, [0x33, 0x38, 0x25, 0x34]}}, {@huge_never}, {@size={'size', 0x3d, [0x0]}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x35, 0x36, 0x25, 0x25]}}, {@huge_advise}], [{@smackfstransmute}, {@dont_hash}, {@euid_eq={'euid', 0x3d, r5}}, {@obj_type={'obj_type', 0x3d, '&'}}, {@smackfsdef={'smackfsdef', 0x3d, '\\'}}]}) r6 = open_tree(r0, &(0x7f0000000d00)='./file0\x00', 0x81001) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r7, 0x204, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x24040000) r8 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000e80)='cdg\x00', 0x4) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r8) sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2900}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, r10, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 12:00:28 executing program 4: ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000080)={0x1, 0xba5, 0x8}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x1ff000) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x9, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c001) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000280)={0xd20, 0x10, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x4}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000300)) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x5, 0x40) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.bfq.idle_time\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x3e880, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x40) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x100000, &(0x7f00000005c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x0, 0x33, 0x36, 0x25, 0x74, 0x64, 0x71, 0x34]}}, {@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x25, 0x30, 0x36, 0x30, 0x70, 0x70, 0x34]}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x37, 0x65, 0x62555877f5e812f0, 0x33, 0x61, 0x62, 0x64], 0x2d, [0x39, 0x65, 0x61, 0x62], 0x2d, [0x36, 0xa, 0x62, 0x37], 0x2d, [0x37, 0x61, 0x33, 0x39], 0x2d, [0x63, 0x37, 0x61, 0x34, 0x37, 0x61, 0x30, 0x63]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'cgroup.threads\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4050}, 0x20000804) 12:00:28 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setlease(r0, 0x400, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/87, &(0x7f0000000080)=0x57) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c80, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x80, 0xac}, 0x18) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) r4 = signalfd(r0, &(0x7f0000000240)={[0x3f]}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x6) syz_open_dev$vcsa(&(0x7f0000000280), 0x7, 0x230803) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x40, 0x94) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000300)={0x10000, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x0, 0x4, [{{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e21, @loopback}}]}, 0x290) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f00000005c0)=0x4) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x40400c5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000780)={'vxcan1\x00', &(0x7f0000000740)=@ethtool_sset_info={0x37, 0x7, 0x6, [0x3, 0x2, 0x7fffffff]}}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x200, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x0, &(0x7f0000000800)={0xf64, {{0xa, 0x4e23, 0x9bde, @remote, 0x9}}, {{0xa, 0x4e20, 0x3b, @remote, 0xfffffff7}}}, 0x108) 12:00:28 executing program 7: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x9f4, 0x101, 0x7, 0x0, 0xffff, 0x6}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3a, 0xffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x0, 0xffffffff8f647f0b, 0x7}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x2, 0x15, 0x137, &(0x7f0000000140)}) write$cgroup_devices(r0, &(0x7f0000000580)={'b', ' *:* ', 'wm\x00'}, 0x9) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0xc000) r3 = accept$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x101}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3ff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7fff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3ff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x401}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x48000) fcntl$setsig(0xffffffffffffffff, 0xa, 0x24) r5 = accept(r3, &(0x7f00000007c0)=@generic, &(0x7f0000000840)=0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000a80)={"55b4ecf3116a906ba84c0131105c56cf", r6, 0x0, {0x0, 0x64f3e4f7}, {0x4, 0x8}, 0x9, [0x9, 0x7131d3fc, 0x9, 0xffff, 0xfff, 0x1, 0x6, 0x3, 0x1f, 0x0, 0x3, 0xfffffffffffffffa, 0xfe6, 0x7fff, 0x7ff, 0x6]}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000b80)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x10b140, 0x10) linkat(r7, &(0x7f0000000c00)='./file0\x00', r0, &(0x7f0000000c40)='./file0\x00', 0x1000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000c80)={0xd2a0000, 0x6, 0x6f01, 0x0, 0x19, "608e2f62ea0678bec9d2d6f0a39998ee0f140d"}) [ 126.846347] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.848029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.850137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.854311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.857694] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.891478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.895617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.912931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.924253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.926624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.940297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.944376] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.945863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.947565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.954821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.957679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.976219] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.993115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.994003] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.995079] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.002231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.002901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.004912] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.005748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.006876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.010376] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.030647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.033980] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.036235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.036652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.039117] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.062554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.063723] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.099442] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.120098] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.121026] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.132489] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.133666] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.138496] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 127.222439] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.919659] Bluetooth: hci0: command tx timeout [ 128.983831] Bluetooth: hci2: command tx timeout [ 128.984614] Bluetooth: hci1: command tx timeout [ 129.175516] Bluetooth: hci5: command tx timeout [ 129.176559] Bluetooth: hci6: command tx timeout [ 129.177093] Bluetooth: hci3: command tx timeout [ 129.239586] Bluetooth: hci7: command tx timeout [ 129.367288] Bluetooth: hci4: command tx timeout [ 130.969216] Bluetooth: hci0: command tx timeout [ 131.032003] Bluetooth: hci2: command tx timeout [ 131.033461] Bluetooth: hci1: command tx timeout [ 131.223754] Bluetooth: hci3: command tx timeout [ 131.224766] Bluetooth: hci6: command tx timeout [ 131.225313] Bluetooth: hci5: command tx timeout [ 131.287583] Bluetooth: hci7: command tx timeout [ 131.415665] Bluetooth: hci4: command tx timeout [ 133.015256] Bluetooth: hci0: command tx timeout [ 133.081722] Bluetooth: hci2: command tx timeout [ 133.082995] Bluetooth: hci1: command tx timeout [ 133.271630] Bluetooth: hci3: command tx timeout [ 133.272608] Bluetooth: hci5: command tx timeout [ 133.273631] Bluetooth: hci6: command tx timeout [ 133.335433] Bluetooth: hci7: command tx timeout [ 133.463294] Bluetooth: hci4: command tx timeout [ 135.064433] Bluetooth: hci0: command tx timeout [ 135.127308] Bluetooth: hci1: command tx timeout [ 135.127803] Bluetooth: hci2: command tx timeout [ 135.319303] Bluetooth: hci3: command tx timeout [ 135.319816] Bluetooth: hci6: command tx timeout [ 135.320358] Bluetooth: hci5: command tx timeout [ 135.383296] Bluetooth: hci7: command tx timeout [ 135.512220] Bluetooth: hci4: command tx timeout [ 186.869600] syz-executor.1 (283) used greatest stack depth: 24672 bytes left [ 189.738682] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.740457] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.747477] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.769274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.771701] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.777888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.782503] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.784951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.787732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.790750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.799764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.801698] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.803249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.837997] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.838496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.842547] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.845320] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.856539] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.877262] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.878547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.881121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.882583] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.883774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.885861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 189.886862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.887875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.888756] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.894612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.901472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.902946] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 189.904261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.907848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.918509] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.920145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.921643] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.923502] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.931969] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.933912] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.942511] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.951492] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.831585] Bluetooth: hci1: command tx timeout [ 191.831875] Bluetooth: hci0: command tx timeout [ 191.959443] Bluetooth: hci2: command tx timeout [ 192.023341] Bluetooth: hci4: command tx timeout [ 192.024207] Bluetooth: hci3: command tx timeout [ 192.024888] Bluetooth: hci6: command tx timeout [ 192.096844] Bluetooth: hci5: command tx timeout [ 192.097597] Bluetooth: hci7: command tx timeout [ 193.879345] Bluetooth: hci1: command tx timeout [ 193.879555] Bluetooth: hci0: command tx timeout [ 194.007656] Bluetooth: hci2: command tx timeout [ 194.071507] Bluetooth: hci3: command tx timeout [ 194.071576] Bluetooth: hci6: command tx timeout [ 194.071965] Bluetooth: hci4: command tx timeout [ 194.135341] Bluetooth: hci7: command tx timeout [ 194.136281] Bluetooth: hci5: command tx timeout [ 195.927679] Bluetooth: hci0: command tx timeout [ 195.927768] Bluetooth: hci1: command tx timeout [ 196.056303] Bluetooth: hci2: command tx timeout [ 196.119684] Bluetooth: hci4: command tx timeout [ 196.119721] Bluetooth: hci6: command tx timeout [ 196.121396] Bluetooth: hci3: command tx timeout [ 196.183502] Bluetooth: hci5: command tx timeout [ 196.183597] Bluetooth: hci7: command tx timeout [ 197.975278] Bluetooth: hci1: command tx timeout [ 197.978221] Bluetooth: hci0: command tx timeout [ 198.103455] Bluetooth: hci2: command tx timeout [ 198.167550] Bluetooth: hci3: command tx timeout [ 198.167784] Bluetooth: hci6: command tx timeout [ 198.168108] Bluetooth: hci4: command tx timeout [ 198.232380] Bluetooth: hci7: command tx timeout [ 198.232689] Bluetooth: hci5: command tx timeout [ 252.011769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.016514] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.021456] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.033212] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.046067] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.207721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.211667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.214326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.223979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.232513] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.253459] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.256571] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.263516] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.284542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.306358] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.371602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.409836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.421888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.440481] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.453975] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.463025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.465371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.467553] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.475115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.481630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.484554] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.489869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.500483] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.503954] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.515710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.519037] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.520597] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.520842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.546125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.551494] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.615508] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.619630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.631374] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.643622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.661518] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.103360] Bluetooth: hci0: command tx timeout [ 254.320277] Bluetooth: hci1: command tx timeout [ 254.359310] Bluetooth: hci2: command tx timeout [ 254.552279] Bluetooth: hci3: command tx timeout [ 254.616313] Bluetooth: hci5: command tx timeout [ 254.679758] Bluetooth: hci6: command tx timeout [ 254.679846] Bluetooth: hci4: command tx timeout [ 254.743731] Bluetooth: hci7: command tx timeout [ 256.153247] Bluetooth: hci0: command tx timeout [ 256.343630] Bluetooth: hci1: command tx timeout [ 256.408351] Bluetooth: hci2: command tx timeout [ 256.599411] Bluetooth: hci3: command tx timeout [ 256.663295] Bluetooth: hci5: command tx timeout [ 256.727647] Bluetooth: hci6: command tx timeout [ 256.728072] Bluetooth: hci4: command tx timeout [ 256.791622] Bluetooth: hci7: command tx timeout [ 258.199943] Bluetooth: hci0: command tx timeout [ 258.392227] Bluetooth: hci1: command tx timeout [ 258.455473] Bluetooth: hci2: command tx timeout [ 258.648227] Bluetooth: hci3: command tx timeout [ 258.711557] Bluetooth: hci5: command tx timeout [ 258.776205] Bluetooth: hci4: command tx timeout [ 258.777233] Bluetooth: hci6: command tx timeout [ 258.839550] Bluetooth: hci7: command tx timeout [ 260.247271] Bluetooth: hci0: command tx timeout [ 260.440436] Bluetooth: hci1: command tx timeout [ 260.503596] Bluetooth: hci2: command tx timeout [ 260.696236] Bluetooth: hci3: command tx timeout [ 260.759505] Bluetooth: hci5: command tx timeout [ 260.823249] Bluetooth: hci6: command tx timeout [ 260.824241] Bluetooth: hci4: command tx timeout [ 260.888366] Bluetooth: hci7: command tx timeout [ 314.676747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.678479] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.679786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.686317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.694615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.794016] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.799735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.806627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.822641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.826120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.866671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.870483] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.879173] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.884100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.886104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.928917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.932748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.935744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.941053] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.944882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.960864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.967570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.983608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.991678] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.996490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.052829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.062258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.064556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.095018] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.104378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.218478] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.245504] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.258320] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.278665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.311448] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.461180] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.519122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.530388] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.559674] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.612752] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.759610] Bluetooth: hci0: command tx timeout [ 316.888099] Bluetooth: hci1: command tx timeout [ 316.951493] Bluetooth: hci2: command tx timeout [ 317.015268] Bluetooth: hci3: command tx timeout [ 317.079347] Bluetooth: hci4: command tx timeout [ 317.272274] Bluetooth: hci5: command tx timeout [ 317.720458] Bluetooth: hci7: command tx timeout [ 317.721598] Bluetooth: hci6: command tx timeout [ 318.807625] Bluetooth: hci0: command tx timeout [ 318.936327] Bluetooth: hci1: command tx timeout [ 319.000484] Bluetooth: hci2: command tx timeout [ 319.063313] Bluetooth: hci3: command tx timeout [ 319.127295] Bluetooth: hci4: command tx timeout [ 319.319515] Bluetooth: hci5: command tx timeout [ 319.767298] Bluetooth: hci7: command tx timeout [ 319.767850] Bluetooth: hci6: command tx timeout [ 320.855564] Bluetooth: hci0: command tx timeout [ 320.984485] Bluetooth: hci1: command tx timeout [ 321.047278] Bluetooth: hci2: command tx timeout [ 321.111696] Bluetooth: hci3: command tx timeout [ 321.176366] Bluetooth: hci4: command tx timeout [ 321.368229] Bluetooth: hci5: command tx timeout [ 321.816280] Bluetooth: hci6: command tx timeout [ 321.816942] Bluetooth: hci7: command tx timeout [ 322.904202] Bluetooth: hci0: command tx timeout [ 323.032573] Bluetooth: hci1: command tx timeout [ 323.096480] Bluetooth: hci2: command tx timeout [ 323.160319] Bluetooth: hci3: command tx timeout [ 323.223457] Bluetooth: hci4: command tx timeout [ 323.417301] Bluetooth: hci5: command tx timeout [ 323.863586] Bluetooth: hci7: command tx timeout [ 323.865247] Bluetooth: hci6: command tx timeout [ 377.607893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.609419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.616558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.632626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.639595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.778769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.784176] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.794833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.812139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.817450] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.860051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.871464] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.874002] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.877470] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.887326] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.891074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.892736] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.894255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.899869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.901930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.903534] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.904589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.905786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.910267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.917597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.919218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.923549] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.932235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.945959] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.954445] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.049961] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.066594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.070774] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.089456] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.093615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.211276] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 378.240753] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 378.241984] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.249071] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.251458] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 379.735610] Bluetooth: hci0: command tx timeout [ 379.866720] Bluetooth: hci1: command tx timeout [ 380.002945] Bluetooth: hci2: command tx timeout [ 380.003679] Bluetooth: hci3: command tx timeout [ 380.062646] Bluetooth: hci4: command tx timeout [ 380.063270] Bluetooth: hci5: command tx timeout [ 380.122595] Bluetooth: hci6: command tx timeout [ 380.312410] Bluetooth: hci7: command tx timeout [ 381.783233] Bluetooth: hci0: command tx timeout [ 381.912240] Bluetooth: hci1: command tx timeout [ 382.040217] Bluetooth: hci2: command tx timeout [ 382.041482] Bluetooth: hci3: command tx timeout [ 382.104496] Bluetooth: hci4: command tx timeout [ 382.106135] Bluetooth: hci5: command tx timeout [ 382.167288] Bluetooth: hci6: command tx timeout [ 382.360303] Bluetooth: hci7: command tx timeout [ 383.831408] Bluetooth: hci0: command tx timeout [ 383.959463] Bluetooth: hci1: command tx timeout [ 384.087404] Bluetooth: hci3: command tx timeout [ 384.087940] Bluetooth: hci2: command tx timeout [ 384.152720] Bluetooth: hci5: command tx timeout [ 384.154287] Bluetooth: hci4: command tx timeout [ 384.215259] Bluetooth: hci6: command tx timeout [ 384.407332] Bluetooth: hci7: command tx timeout [ 385.880289] Bluetooth: hci0: command tx timeout [ 386.007248] Bluetooth: hci1: command tx timeout [ 386.137313] Bluetooth: hci3: command tx timeout [ 386.139008] Bluetooth: hci2: command tx timeout [ 386.200298] Bluetooth: hci5: command tx timeout [ 386.201739] Bluetooth: hci4: command tx timeout [ 386.263290] Bluetooth: hci6: command tx timeout [ 386.455590] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 12:05:36 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff8880268d72a8 RCX=ffffffff86875908 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806ce31850 RBP=ffff8880268d0000 RSP=ffff8880268d6ee8 R8 =ffffffff8687590c R9 =ffff8880268d6f98 R10=000000000003b67d R11=0000000000024a79 R12=ffff8880268d6f01 R13=ffff8880268d6fa0 R14=ffff8880268d72a8 R15=ffff8880268d6f58 RIP=ffffffff8135466e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faa6519d020 CR3=0000000035327000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=eb8a3cfc2a4dc88f RDX=0000000060a32d2e RSI=00000000e1b8ee1a RDI=00000000d9a7945d RBP=ffffffff85c1d1c0 RSP=ffff8880097477e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff8151af6b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4c72b116f4 CR3=0000000028d9c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000ff000000000000ff00000000 XMM02=ff0000000000ff00000000000000ff00 XMM03=000000000000000000ff000000000000 XMM04=000000ff0000000000ff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000