Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:41917' (ECDSA) to the list of known hosts. 2025/06/01 23:09:15 fuzzer started 2025/06/01 23:09:15 dialing manager at localhost:34361 syzkaller login: [ 93.854114] cgroup: Unknown subsys name 'net' [ 93.999404] cgroup: Unknown subsys name 'cpuset' [ 94.037101] cgroup: Unknown subsys name 'rlimit' 2025/06/01 23:09:30 syscalls: 206 2025/06/01 23:09:30 code coverage: enabled 2025/06/01 23:09:30 comparison tracing: enabled 2025/06/01 23:09:30 extra coverage: enabled 2025/06/01 23:09:30 setuid sandbox: enabled 2025/06/01 23:09:30 namespace sandbox: enabled 2025/06/01 23:09:30 Android sandbox: enabled 2025/06/01 23:09:30 fault injection: enabled 2025/06/01 23:09:30 leak checking: enabled 2025/06/01 23:09:30 net packet injection: enabled 2025/06/01 23:09:30 net device setup: enabled 2025/06/01 23:09:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/01 23:09:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/01 23:09:30 USB emulation: enabled 2025/06/01 23:09:30 hci packet injection: enabled 2025/06/01 23:09:30 wifi device emulation: enabled 2025/06/01 23:09:30 802.15.4 emulation: enabled 2025/06/01 23:09:30 fetching corpus: 0, signal 0/0 (executing program) 2025/06/01 23:09:31 starting 8 fuzzer processes 23:09:31 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x1c}}, 0x4008004) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x5c}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x48010) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000004c0)={0x5, 0x703e52bb, 0xfffffffe, 0x0, 0x8}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x44}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20004044) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40080) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000840)={{0x2, 0x1, 0x800, 0x1, 0xde}, 0x8, 0x20, 0x1}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @ethernet={0x306, @broadcast}, @vsock={0x28, 0x0, 0x0, @hyper}, @ax25={0x3, @default, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a40)='veth1_vlan\x00', 0x8b7d, 0x9, 0x4}) socket$netlink(0x10, 0x3, 0x9) 23:09:31 executing program 3: shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000030}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x30044000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000100)=""/72) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/bdi', 0x480, 0x84) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000001c0)=""/50) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r2, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x2d}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000400)=""/130) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000500)=""/186) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000005c0)=""/174) r3 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x2000) 23:09:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x181001) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x8, 0x2000}, 0x8000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000200)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000280)=0x41) r2 = getpgrp(0x0) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r3, &(0x7f00000002c0)={r1, r1, 0x80000000}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000300)) r4 = gettid() r5 = io_uring_setup(0x78d, &(0x7f0000000340)={0x0, 0x147a, 0x1, 0x0, 0x206}) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r5, &(0x7f00000003c0)={r1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x870}, 0x4064084) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getpeername(r6, &(0x7f0000000600)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, &(0x7f0000000680)=0x80) mq_notify(r1, &(0x7f0000001700)={0x0, 0x20, 0x4, @thr={&(0x7f00000006c0)="d830fba535673ba705ad77080c3d829b6c46e64c27eae6f0ea31da75c80b68ccf5d549a523d123d08a5357feb9239e98a29fed2f0b871d8324f30acbe7bdacdfd924cf34c72360c698b10a7396b391a98a24a944b105c0bad5618daf06f85059134f0db16587faa155df1c0cae13dde18eb2d8f99d2cfd6b7e33e08e0819f1ae6390f07c595215ef4d52fa9af24261603e422039710a89173f3bbdde14112ba42866abc7cf87f8466aecab94db0496cf4f301c6b0caec608effdd762e9fb45a7c832b417e7aa0e320e1e248db0b0ebd670183c2eb2c0e9b7ae7aada583c1a647f9ba05780cb5f4c4a158ef1526859775f5fc31af8f34076b602fd8056385507b4a3bbb1b7bf3a9748d6113a5a3e3c90b66ed07a3f61f3d093ad5c5dfe166d2f22e4273659dd81d0edd937b544f530252cededcccf57eccd333dbc61f4183a0dfb039d1af6ada00d71bdbeb70d0e8d70d2991c892d9bf3c4541c76e5007352ed75a89f01797b2cd4ceb70651e5f777f5c1be3dc472d99b537b70aab673dc18104be6190402b84eb10810123de609b9031a81a9266845332d1995d58c41aa3e8e7b64f695d4b7bfbfe44b202d22dbd7f18e27ecc983757849a8c8205e7f1e31582a3e920b678081465cc6011149adba237f9851b7c2c72c1b0089479e93937adb996559a5a4e197088960824720777815abaec50fc5c4ba731c9e825665a5942ed78e31bf0d462f6f876cdca39c7249e4e4463d70a4d853e70e69f34e8c78b018a62458fb76576fe3d7d143b25f8b5ae467df8cfd153e80ff9deeea022c8b8b997f3ca96b61a10e81a6f3216d4a61a355fafe2a6f638de16d1e21c1621b6e794b03e2537fdf9146641f2b8cf7a8d8ad09a1d41d618017da3b87ec6e62d29c84474316588ff1951693f8a0e09658adb5924a3ab919cc849080f048ccc0b9b0d7a6956774e5a8ae519cb83a4d0ee77ab4d730b5f941a630b36d060d16109ca7d169267ef2f321f31f9da79a98eb4facec4a3347ce2bee375749299adee1a2e8c8a06c8e90275ce42620f03022e6c2c9b98ebfcb68f0c64d731afc354e63884321caac166b31f835591111e747c006bf128921e954e289f9b6ae6f54e2fb4340ccc6781f97bbfb45bb74c8f0b2ce499b26172a39e7442784f2eadb72ababfe69efca8018270db8648acb152cd04c6a7602eae94257a26ea227b49494837795af7967f9a6bfe22eae252a432f6c1ba0480f2fa9d45c82e1c371ea116b897b0e15f7cffdd90a673f01e8b804bf91a36812c1a12530d317d7ee5249d1b512e4be82abb0a5e755bfb76c82023eaf0fc9df3721ba4fb1e0a2819c72a5b92f1f4d824a582a8fcfb772bcd31582241c5f0c0814ad9327544375ccbd569b0e52510cb757cd28205c5bc0e43ce86f694bd8b4fb6bfbd32205b5087c80113fb6d5cc7480f14824e3b6514da8860d67561c62613f5034bfe288efeeb7708f01e93235b6de38073cc7b3e4bc730b30136460762ca8fd744c5ec9c75a731760cc0e008f5661c466cf8c83ef8c25ce8d7c4b5db9dc13668f9b694517fcd272d79769978345f1fea4da792af154f88e11af1171381fe9df946dae372754ba72852394367df8945060b55402cfd2da41b749bb552dd8f6690a6f9f8ac62fa5b0018696eeb1be2ee3ac40edde9c34c8d67ff94cf3126d5661d896aec056c93da8c9903400111b385872359c9331b043c80081d13616c8162f440a0e9d31379a870e9d6e827f31a89c5bf0b97fe4450ae3514f4bfee8b9aa7cfa0752d966185584bde8b8261c8275c312913aa6fb6db6ce2cc97a03e4a3ef35c878eaecf8077e6be313747c3cff1910c96b3ed57c01e1c70e26ac722d8553ca724a8485efd2e3da5459ae33421915619dd0dafee1144e993850fc20f752102b53269ae574a5d9a8d989a189c1421f45312ba1c48710223b83e97ea1678a050487c6b3ce1d8b5eaf3c7103f47c7b60b6a60c7d45f312aa75f75e144704c783ca778aef3b56f757dd2c82bc66f11c42e6238a77c6888e84208b16b3772b2c3431ce959335710ae6e09b048dc07aa81ccfc9d24d6eb2756762c30ccfa02bb16347882c09f9261383b5b211fd5ab124ee1dff41d308f46049834f034d0025e7546a3d71218c97cc236d2d32f45ed3974c563d9feeb8892d74d796ec97b7efebb9a78d52532b497cfa2963d5e8894166ee47604848925fb4da83ee172fd3784513b6b3f0cf724b48cf38521c78fd8ed4dd10e2a296d056c40fdc39bda576f84d751134cfe68ff75da46fd8ff26b8958843585046dcfc332d2be7103fa603faf09253f513b491b33e80b13d6d2bb46835c20c415f8aa87a80868ec290d17a211568e4f2f4d63490663a0b41f56ea39d769bfa89f40edec77cb5e54977e076431482c2719ccf8fb36af16bc7e4be36cd1d2ae91c37c0949a6989088fbc75b5e06487a12d781974b37cf7fc8667433d98b011c3fcdc2ed9cc00553b0f6d771b33b79de87d9ecca938aa204b09e5f20ece54cb00bb2b5fbdc150a293566a3606bc29f924ecdc603571c6c64e77cafca8d328342bdd19f584db8d450aab451c0f51679632416ed579d9ea3be9214ca9af1510d16fa76d60a3b7562c20879e0b61b73951d728457c0cf8bc48bdb4e1d3b2096e1087a27f66d1edae2bc12942f31b6c84ce0bc13b23d4f3b1891efa84abd30304116bbf33f92093a5058ee7d9ef4939bbf04446d5e56a7b6e5adae870d42383467706b5cde3c758ef0f726c3e2655f5ad91ef1124e98374a1258f7efb01a1b86259b3fe2351469fe5a68555369615c0c221b2bfd005de1fe918b57983b0f231411b2dbd9abe0c976de2ef4aaaae47f52c7a895eec0775c123dd81cdbbd4783776adb162f5555527bccabb61cd5d2d2af29699964e50c0c8b8413da7e43aa0bec8f9b3073a4b12bad929995b377b186a366fbc57d7031ba86f42f72ca8afcd343f7585841477d9ea136d8aec6e4ccf86698b1ee0c8ea086feab359537bfceef8f38f8f6716fe052a7d83dfaa4ca9c39db3059dea05aab05ee7d78fa711dc44725acc2e5419dd7389de4567262a58241816bac55c7ea6447952ed57ab60d77e2e16dce2e6edb63c2e7b3a94888de7cc610857bbc69c5deb24fd4ee87192f6cbee4905f225fe111ca0908835cf150efca25ab65ed7a2c514752096d3f270fafe5b82ce73023a78706ea677db564b0de2079a260e2293df4e72d16934e4b95e4bbe9117047d6dcadef2771916f9ae32178cba491f4e328518c0292882a01ff41a4a45eba2d166d2fb2a41b0d0fa2daa1b05467a272b10aefe8fa2d5b0009e7513c87bfa6c8886b0df1bfdaa426493c3d384c227f31450cda0741a6e7760ee6d0b24516a363a3086bb69027e19c39982b918f2286c6bc74c7fdbf0bc0baa96f57cebd1eee2a7df9a764d93f282d4b3213dac189d0d9d3983b76dc5b766b3cfc96d44e9866222cd226d9aa58374f5a6c29ea77fedf53862eaaef87738ff866c3fe13a71900a2b3d7e4b9940ce783b64ae6340ac54d73d59c314de39bf82ba7ae801f0b3c67582c0d358c98aaf8ebdd1ca24ba4bc71558e794f3eec981504c3a7e91287ea0ebcc165b283d8243d5631b0f43f95070282956e13f8028068811fb4ffa79e67e4742af7924fe66ae7dc94635b4dc7c089b72d734e2e433072a64ab1fdb5c207437b1e92d466c7292106aaee67a3042f559589ffc71f2e97f680e391bfb5a22738ae879b5e56d4ed5d034ce1b980dbafb00748b014f63aa4015fdfe4a418202a52fa6a6da0748f59a173315af5fb34b9e36b9baeb32e5808b1f2b7470557d11ae212215037dcadb40a3c5009f5fd6dff8773b1cc592484dfed6e0f295cb9226ff450c3678152c7c46d34c202fdda4400f7a1fc5edcd3360d0658a07a920be1cdaa8e10acd5cf31390d5ad129ef028bb8912f439054cbbb6d24aef954fe84b873ebdf30f23c37f295e09ee33f6ef99802a778829f170257c6ab56869d6fd9cff52a6164a7391d0085dc59d10e7f255204545fa07c3fe45954a90feb4348147aaff0ad5fb57a3895c1e6d75629d1775822ea6cb9127a017d5a786c9b8faa50b574772b7137efef90c0079164050a8b5a341c1bd7d82860e85d185e038d855edf96ddc6757862b91247b4a4398094f97fc29d04055a559ba1eb59aa5b83977dbbda826bd6a8a07308fd2efb2ff47f5279514c271efc577883942b192320bc3b1411622b7b1d82e94c657c26073abaebdba935b1c58a64415d887f17a31ad0baf9322b749aa4c2b5125e3a518ab4555394b2a77d274b22b22ba7a44a5768fe3e9bf1dabd016a69ff23f2bd7f1a223e758398c6710ddbe1c3ab818e4762e253151299a55a506659ab0f3f4962a06cd2799e1c68fffe96f41cb8f9b18308512e8a61ba5d806cd608d78f5140872b8e8eedd0ec047f27aff366d0abc5a97f3f3c586167dfabd16c965225bab1a91d90ce4058b8f70c99842ff16ff841264563aca8f33ea9461369280fcbd039acc25fdb4c1e684e0b3ac3a6a6ea85edff5537365700c33ebb96d9c01cc5c3f10499c2279bad10700b6b9ec7ce0bfe7e128ceeaa217ab1ffd3c37d522c66e09877fadca198ebc518abdb9014bd8e4ec55c0aac52db162ea3a01e66fff49afefcb17299150574dc9ec7224ed21bbec351f199900b266d76c4c8ce5e28cf6736e4f4544c666c3d22648c8a5a8feedf1161cca876dc61e577e989d98f2da98818b650495fbc9716093aa1b82c398fb91597eadd3277b34748ab79acd4652656c65383adf754b942f3e9a011c1a2c345b4ff3adb29124760bccb347163e7e6fcb149a8e9ed39d55a08df614be96eed19d11037468c699e35821a5bb4d2a230774c521235c489ffad479d4ac2524e816374df24ef0a7356fb0e16aec0b4fb3c67d05c442826ae8f79ea2ff7ce10da3d773d308d934312dc10243be1435b8d588f128fe217967a045696cdd7acebde3b897e3f9c057f3a802ec88c8e233e4a260442f2ffdc9fa5d29eb432a8fa7401a1dff4a957340917d1e0f648746fc3c1db18edbe80e619e38477ba9ee3c526d7ac64924f081510887b7d9f4ee0a90c44db545b3768076362b70a1b28af143dd08b3108305a6b191ab6c9427ed5467be24beef367229f32860c65eec6d2c5cf8690cefb11aaecac35efaa1db1ea0b7ac0c5b603331a5d1a9f95df272ed910532792688af8ab8a3c034c6eff622fc7a4957e2c6334b1a4190607bb9e8219f2a8ef5a2928d05a64634feab90ac80a20cb2addd3a4fb0ab37df74442008d3d5db41bcce72d7adc84647f0ff658960164646200f728e64e1e62836a950731d566724dfd51d039d546c43f6d42ffdde040d4faa90bc22a01fbe0cc59e97dd3c751c9e534abf242473613f6a695dd70c981ba91c664d1f842195ba5c4e15002b4133791ccd996ff4a6f903b5d36778e616018523d8cfd0a49e4b7a97340964b2970bec9d32919b74215593e78e5adbb471513326a8a2eb9a2f4801f8e936709a1231996a00f40e400b3aa59f4832ab79431ee9feec6b2ef65f7521873120faa3b449a699fd717d0dc91397c840dc8b107683dfcb0ab1edb420b47d31a56a9a11b5c01334e94c44d12e31bcc4d5066172fed57cf45217cac7e52b91c92dda2abd9ccc38f7091d3ded733c5c558000d34ffa1449a177d30d563c9bd39d918d6bae1ead3527cd208602dda8700b9edaf63e5a808a2c44aa4e36e9acfc3ecb5e049a0338f565e1debe7190b6e36c867002b947b4d", &(0x7f00000016c0)="08366a6ee5"}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000001840)={&(0x7f0000001740), 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x44, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) mq_timedreceive(r1, &(0x7f0000001880)=""/69, 0x45, 0x100000000, &(0x7f0000001900)={0x77359400}) 23:09:31 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x62033, 0xffffffffffffffff, 0x8000000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x1f) recvmsg(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)=@generic, 0x80, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/249, 0xf9}, {&(0x7f0000001240)=""/213, 0xd5}], 0x4}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000013c0)={{0x3, 0x1, 0x3, 0x6d19e8ecc76679b3, 0x7ea7}, 0x8, 0x8, 'id0\x00', 'timer1\x00', 0x0, 0x8, 0xa92, 0x3ff, 0x5}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/module/virtio_gpu', 0x24000, 0xd0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r2, &(0x7f0000001500)={r3, 0xffffffffffffffff, 0x34e}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000001540)={0x3}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001580), 0x68440) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f00000015c0)) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000001640)=0x8) io_uring_setup(0xe13, &(0x7f0000001680)={0x0, 0x77c0, 0x2, 0x3, 0x273, 0x0, r3}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000001700)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001740)='/proc/bus/input/handlers\x00', 0x0, 0x0) epoll_pwait(r5, &(0x7f0000001780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f0000001800)={[0x4]}, 0x8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001840)={'wg2\x00'}) 23:09:31 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) socket(0x9, 0x2, 0x639) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x10010, r1, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x5) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000180)=0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81204000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe6b}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfdff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008000}, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r1) r6 = shmget(0x1, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f00000002c0)=""/207) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r7 = syz_open_dev$vcsa(&(0x7f0000000440), 0xffffffff00000001, 0x80800) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xab}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/module/keyboard', 0x181202, 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xdc, 0x0, 0xa, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0xb0, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x7fff, 0xff, @loopback, 0x5}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x16, @mcast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8800}, 0x4004040) [ 109.917259] audit: type=1400 audit(1748819371.983:7): avc: denied { execmem } for pid=271 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:09:32 executing program 5: setns(0xffffffffffffffff, 0x40000000) r0 = mq_open(&(0x7f0000000000)='&\x00', 0x2, 0x2, &(0x7f0000000040)={0x1, 0x2, 0x1, 0xfffffffffffffffc}) mq_timedreceive(r0, &(0x7f0000000080)=""/70, 0x46, 0x8, &(0x7f0000000100)={0x77359400}) r1 = gettid() mq_notify(r0, &(0x7f0000000140)={0x0, 0xd, 0x4, @tid=r1}) mq_timedsend(r0, &(0x7f0000000180)="6e351e1445932aaff43569aafd485afd25eace42c820af165f5a512ec2f86b0e0d9ec42e300f7e240aca015ac7aec9cb90a0b9931fe5266a9178a507be3f2ae00369c6c878300ce93a9e85aee3c0afb1e05990d05561201247ded86a0d985ff49ca538e2f26c60d2738adf1883f623436ac89be5f8d013374de158cf9b6ff8ea034c42c2f08e9945fc23e9208d22ae502b6fc1f8b44f6893ca49b69d62d2fca03aaba1d7f486bda24560a33fe4edddd40f896e14f0e9a03074580f438d0971c96b523bdc726455cc0fd2fd95391ad826fcf24c657d23514ac7f4f41d7d7888d2ffb9ad1869a1acb21bf128233ca0bef644123808492290628085d9e5d51c0b918fd172ff745c81d04c1021ddae9126434881101695cdc78fac2b97d13accb07c993ce64362189912dbebe82484b4b0876f43975dc528f1599e89b19da5e499dbeb3c9ed9264306a697f2c7572fcc3de7010717b79b4c4cea13552558c602a18cbbac778bdb269d2b48901f4eff22f254dff067e23137eed8f605e030313c5aab9dd87068b3de5feafbc04dfc5d49b0e75680b2a8e69a2a9c8653dfef57e35c119f6800675374f681b73b4506bc265993b95f5c91dbc6e877d9908ef692ce4f852479d5d4bffd56739ddfcb2a245fdea44d7e19f3a5ba8994fd95d865809be6036b56ec5b8331acf5dc1d01d70be0237cafc7311a307f3191740b32a3a5bd680434b84f4b9f41e4e0b5d2d7de63375ce245e5bcea9eb3abb4df16a01c587c66a66113c435f642c4667280a2133f0374b977928218f99128c1d24551d85ccb7eef55e0fde383ce8f9645aad39ebd6528cb458c43deea98f278ab527f2c23f66bac1d201c5c4bc5fb41207d0023a02000c7768aee40ac8a3dfd859abee1476b31fff3a31f98f1af5cf9a3f85fa7defb07ea4c566b8f4dd948f062a1c80c3c882ab4501d482ad8f383653a0b01c2af07953d6b303855c974863e6090a5539e1c1bf539f2424efe3b995c01b9a911ecb512b94ebf5ecda4d235a355f5ae66991d4ae2f08f400a823f0085b7e7b566872feb11732d4ea1abebc5773f92bb64aa07815e28509e26a0ed2277f1184b17918391778ea3cc40343f725939c41565e8d500c73580c12f4ef380bb86ddabd93630a26299ae784259478c8c5a679d1f8bc8d6747225aaecb9a64343b3fa688e791ac2c2018ee8460513300f1c1f90a8bbc8f7b79db78cb73a6b693f88cc2f2dbe4939b32d2e36b22a1354a86db74e3af0519d9a035dce5159469c18e96dbe4396f7f2a0438a01e5c0e309fa835495048b78d6f227ea3092d2547fe0e329f9f7d979702bbc68d5e37625de97bb6064c7c5519351e9e2bc137c66a0cfce7fdfa5769170fae6a0d47385ec148f61e1e9da4e4661af91be2812ac04bc3164a3f20cb04a05a062a23726a4addb87d997d60d4ae4418b797495a216a16d7db28499778a039b3abd84e279ed8865fb08800edde6e009b6f163778b3e8ab30f3804ee3ac5c7794d464f7467e9d7887e505f432c751d340eb9860afc74063c68aa5c3fa900af44853ba43fdb6beb37b84fe69e0d4ce11ff77b50d98788eaf4e5e2f3fdf3df17ab3c9c59a12b6be61f495529e988aa24f09bc7f1632df5ee79c7290fca8e3e640a142c8676c8e381086e5d3b461a0f15e74881416e84b34f7a4ea556f3536ab3441b7f6bc81a2ac5cc2b3262561ced44258d4bd9c420a97267fe15bc8405e7c5190adbd822689eba6425698d612610a791649e0638c623e2e6b788c088c7d65631ad05fd4d76ecf5f51ed22cb02e94dafe56bdabcd101a28121593da5a8514df22acbcb2ca5e179de0cd0d58d83793a6f9d42cffd3e0b586e466b4b191fb93f89a577650301c5e732d0805e76b88580fa96add8659f6a7ea5d3f6505c5cb5c612fa83b0828b5e7397d7bfb65c0e9b0810e6dd5dacae0c88e6229d19afe3090de59ad9a47910dc7fa442eaaf859e5c8e0dfe1bd5e88f01feca1a626000220b94d878a493f34bc74817bd42ec72e565614d97d3ad772306e27c5bb69c6c9bf35d1d8e9d66a877498e35f966d35ffae1c626be1d30c220386940455f86290146627f853bb828bef33fe1bd4b564f77456845f1d67a92a7cae3ad24d9327d0f81e0348d5ee9febf8a92cdc690c1ec51440ac495998368f20cb6cd5d848cc2489a80505bbbe928f4436f8bfce75f8a21fd7a8300b8f78c647c5b76cae4dedfd4ec904a0e075017359cdca1646489e8ce042f4a72c169e62dd201ba491abf7f31bd25db00c0c15adfda3827236d73c130fb09deca81dd0aa3e5755b6300094dd4bed4bbccbf2b853b7692d8a6baadf77e4109a944a1011d2cf987a0a7d3299331eac422e253032c672c8a76af1056a2c773dee5b4010533ca8c2b1ea25316d702e069b9914217ab2de1ba6df14a208d415a154c95339aff2105e8dc8418a6a29dec6c79f073a74378ee9a6dd597ee1eb3a3956c2bf451faf80ddadc544e480f235d961998ca3dd720dfdb7a93088d942e00e054bc9165d249e48237b82bfff7130c884c8c8c46150bae69797083b9ee811cdce92519483b338b69df6d58afafe89e5f0b20ce4b2e1640129ddd63baf140ef55a683fe6adc7963bb3819e07d065623674a2ad2964154ed2153977be5c2688f5d0b46eb7da26c726b697061131c127efd24aa95be72ec2db3723c488d8cc71f1e71fe9cbc598093d4d943e1c3cdb0adcabf10a9a412d3142c6830f649e218b2e56ac0bac8a286d5d25e7cff7cb3589d86c969749390924e23f2ce68af15720b014096feeeb5a7a6c7ed0b1aea03865f3fb01639acabdb90aa3bb723ae350f2bfa6a95c66c365577a8b4c045a8101a487c0e10cff79dc23025882f40b12d7494ab2ded363160de134c27213f7529977b2e6ee21349ed1bd81a7b9e8b8beae8d9333659bd5e765d64eebed8f6acbb34f39c5214ed31f72e637d272ac39816e540e450d19b60e2e909fd47771fd0ca732113d3057dfd1a671c3181d8ebccde5a50f7fcd3ae3b984e0baa7ed8243e2e5cf8dfb8b7201471e5cc0e5850dfeb35199d01fddd922212ff47a47e670b28626967592c795ea3f1e66d35394dcdca91c1dfe84d707a8fd1e4d4ce7582f0758b9f3e9de62b9205a88ccefcf5cbe0b0bdbe526c515b468f377617999702d7b673d446c6ce0fb2842a2c3a8f7e97a91268449ff874612756d9a56341420ee0b6d02fc34edccd98f2d352dfee57d516e87f93f92e301f2603b229ed5ed7eb3617b41dee5e4c6ff4d15f4298814d6151ccb683bcb7b3a28d126ae304a49e94353e19d7455323ba00f0d764e7d2b446b715606eca6fb85676e82a05094fc16562c2cb748b6a8d1b0f7281b2b474904004b40ecb5385c0746b40370ef953f9adc8e2dfdad2ad748929b34746b7852af29212cf4b39d204c20f6b47fd5fab6bb0f08fc3d3689822cc18c0385301d581e211fc6941cf0ded1ae42b2d65a1955f19bad420c5292a131016bbe4bf063865e168b2ee1afc49e4c1a934622ae8387d66defcd32cab7716f709c97b653989c5ef90547d82e2c8c55abc1c14be0113d3506b66c3161f5f091e153a39edc1cb724858c2df93052e1f87864b89a9253e5b4751da410d2ac297a4a2b695f05de02d308a5b99cf1f2ef54b5eba89061a858c685b555305b37ccdfd5f38fdfb8d306bc2427a3d45d1afe8fa1637564f1dac9309fed73fa8dad870784e04aa6a3a916f12269047601fa947c35c7050950edba5dfc52e5b79e9c267e3be485c1f1974e28529b3cba90e090721d79000bc25665e11af5d47b2d79bf6f203f689bb6a76c62f49176514b7c969ce2cfba93250495c91b2dc7f8a65a2036b080e9239a7236e3ae6892e81bd15fdb15bbf09e06985108a1f970fd6fab4f104d61b1a3e2930895d421416603ea954b9191cb8b309b7e0d107f2cdd4ec1f4213febdf271f33a51912afd28a30e6ccf83ade72f1ebc375e62bde4620e30fb49a19d3ec848a62b0a4c080f8893798c1dde33ea2cad89e4e2f4f70e2fd085dd2ea7cf78e6b395891d357ac3a9f2fe37ddf54428de513cdf4f4c8912aa0084ae6d81ece99a262d6571b9e26e6b28d70af7968bf03e87b9027c9529eaae25ce5c194c94abb2e9165c4cf79c7bb20821ad64f4f6192b60c3b80927b3439b10fc31b30822af04f88ee9bd15270fbc02129fe26dda2e0b92fb3bec38f2048be07f44e47940aebe5da6e0995145c1a7d31026167eab4f0d8b9d90c1372db654012f319f277492f5b1658477a2acded249a8ff76f0602e1869e984f189dd15e78f0851657d79417fca988b9a02dd71448ce2c92a264f2c13a41742540c755bc251cd118ce64f92a635471228b7159bff5e4815ccf2d60f69a0812381e948eb3c241a807327a7af5f56375fd47359648112a94b37eab3d436e7d768e988ac4dd9c9420755f33f8e16a02caf17980f68a5bf2ea435f3cd6692bf6488bcc384237b95fb6ebfaa4d11e08c77d64306f0c3a9cd44b39767f72db1dd6ea2c4a84cff717584ff9ab42df414b8a12f8a5ba1f0896cc0e52bd94f78ee12a511e3abec66a886ea83182072849836246a4e02c93974ab99c70830e99143cd394cb05e8f913b81957819d4b7076e26f08015fafae96f620a365376c7854f2b27b3a626ffe481b9d5aff17af6f9d982d0afb43a91423aaf48622f82691283c013e52d4cdf5cfbaa2ef6343234d165bac7758d3a85a3dd7f77cac2d89549731fba57ac485e2562ea03492aa30df04d92e10a80d3fd5f5b6add6f498c446052690e2830dc7617497d21eb6f36a8b6462a2228fa1485d4e0d826119b03ea5e9cd2e77b01d58c6166d6aa7845d33285bf48ea6ec4c4c30cc6e512094ce38479cf7a716acb3a0510a43faa735b66e0dde147668bd83f6bf6e27fad52e4deed0c455187e06c136e4bf11e1b3e6708c2d9af1b8826cbd61a578f7f91d2199420a11c4148910f77fd775f3307a303acdcac8a6a2986444cda31a96d3f0a7d1ffde26821df09a7d93e960a6b93cd3e8615cc7dce14d4d8dd26bbf6a449c80ddba9028cd4cecce8a64f2d32b9e42cdb603127703aa0ad46631e87200bd04564df81326cf34b98bcaaf0e9a50cb106f2376b8b0ae894320a4917306f1be98a499ac1165a2727d2845de9d4de53bc32dcb2ddb42afaf4982b0e4dca943c465c11ae52bc5a5d7c86357f604826bde9a2f7da968093d3e5003227617bcfbefc676b2be2ac26306c6c481dafff30d1759530e482e3cff6da45de24ae96334d8ad26e1f3b17c5b8a05004747d45b034770356145d03ac61f0af887b7c140b2fb24132247f6599039434ea5ff985ed7aee517c66b6113d84279ba7f03ba744a3e6af0afaca8e89f90cee3e814c4ba72e5cc9ce9b0402ab0951695559c9b7f2cb40cfa68e0f03ef22eff870b533df42d12751e870503148b13f0cdfa1efb3d8cc70ec5dc50184f4b987510bd5f44a18c583fa1a2be6ef596d735183b794605bbf33047db9ccbab622ac4a590a3da8ea44bbdb054084aaa93ad6dc0d25a0248426c5ebc545d561843ed011e50a6b4964c3227a9e468fb86721d2f9c0cb134dc79e78bc7b9d2419a05e3b9148804cd465c308171a691c203f073aed30456d0b6a0e40bf217544e54cde1f1b22543bf8036528ea0916c58131e7d1aa649a495e2de64612173072f9d693ed027504ecd2faa598082474ba2eae737268f9bd5cc07b0f842b3500d0758baeeef2d5ad10efd6ef274205fbd8abd5e074e52daa882ecb548141a8bba", 0x1000, 0x5, &(0x7f0000001180)) setns(0xffffffffffffffff, 0x40000000) clock_getres(0x5, &(0x7f00000011c0)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000001200), 0x0, 0xc0081) r3 = mq_open(&(0x7f0000001240)='*-&\x00', 0x800, 0x10, &(0x7f0000001280)={0x40, 0x80000001, 0xd76, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000012c0)={0x2000}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001300)='/sys/module/cfg80211', 0x2400, 0xe0) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000001380)={0x8}) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) mq_timedreceive(r0, &(0x7f0000001400)=""/245, 0xf5, 0x5, &(0x7f0000001500)={0x0, 0x3938700}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x40, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c091}, 0x4000800) 23:09:32 executing program 6: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x2, 0x70bd29, 0x200, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0xd0a, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = accept(0xffffffffffffffff, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f00000002c0)=0x80) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) socketpair(0x28, 0x1, 0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2e}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "cf78be5326de0db2da2951753ec5161a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1c}, @NL80211_ATTR_SSID={0x19, 0x34, @random="dc0006930af865a2ce2199ed56178faf7c08973858"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x66}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x40080) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/nfsv4', 0x10000, 0xc8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/14, 0xe, 0x0, &(0x7f0000000640)=""/117, 0x75}, &(0x7f0000000700)=0x40) syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x161800) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) accept(r0, &(0x7f0000000780)=@in6, &(0x7f0000000800)=0x80) socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000840)={0x0, @can, @hci={0x1f, 0x0, 0x4}, @phonet={0x23, 0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x65, 0x1, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) openat$cgroup_type(r3, &(0x7f0000000900), 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1cc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6c}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x100}, @NL80211_ATTR_VENDOR_DATA={0xc8, 0xc5, "008a71870cd5fc66b5191815a37af786fed695c0e613a67c1bc641f9f91e3b4d053d417214519819029aeeeb12963b86e102f151f23a5ca55e425b40d7822c3d368ed696743e2444bb3ac0267b75cb498ac2e48c9f840337d345cd63167c2a96d0c57fb66d1b6111a411a3abcb9f84a00ac4789bc7a428878f07a205571df20624a513ad4973ca9e2b594746c71b6eb36c186985944e7da7eaee0cd13dac8ee1f5891e0383eea1a21082fd2c0294b47a7c043450825f29c1f8a5c43fabafc1140a6ae2d0"}, @NL80211_ATTR_VENDOR_DATA={0xd5, 0xc5, "53b735455676ddc2534a028aea85b7f7da9621369133953b308ba4c3080910d494263da452898a6cb06663e68af44d64ee94bed0af1d02d47ff6ec9798e12f8f497b06c1e0509c4836c2e29ed5e4060056f70026a39e4a9e41668f7863d0b32e9cd2743f60bf5eaad9b362b042fd8e859d1efe40c3a7863ed0ad5f7c626c2614b7bf4e7d83b4c66bc7f68772c8eb340b9a6542c4bd659e1dbac74a5a7ba8127e427e723c692b2f13c8697e372aed71a9068018cbf5d889854f4fdd56275712b9f5acc6328319dcfd2e5a70d91542ed6306"}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x804) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000c00)={0x8, 0x3, 0x8, 0x7}, 0x10) recvmmsg(r2, &(0x7f0000009040)=[{{&(0x7f0000000c40)=@sco={0x1f, @none}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000cc0)=""/209, 0xd1}, {&(0x7f0000000dc0)=""/14, 0xe}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/190, 0xbe}], 0x4, &(0x7f0000001f00)=""/149, 0x95}, 0x8}, {{&(0x7f0000001fc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002040)=""/189, 0xbd}, {&(0x7f0000002100)=""/225, 0xe1}, {&(0x7f0000002200)=""/102, 0x66}, {&(0x7f0000002280)=""/101, 0x65}], 0x4, &(0x7f0000002340)=""/248, 0xf8}, 0x642}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f00000024c0)=""/8, 0x8}, {&(0x7f0000002500)=""/42, 0x2a}, {&(0x7f0000002540)=""/192, 0xc0}], 0x3}, 0x2}, {{&(0x7f0000002640)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003cc0)=[{&(0x7f00000026c0)=""/173, 0xad}, {&(0x7f0000002780)=""/174, 0xae}, {&(0x7f0000002840)=""/217, 0xd9}, {&(0x7f0000002940)=""/66, 0x42}, {&(0x7f00000029c0)=""/185, 0xb9}, {&(0x7f0000002a80)=""/66, 0x42}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/113, 0x71}, {&(0x7f0000003b80)=""/198, 0xc6}, {&(0x7f0000003c80)=""/10, 0xa}], 0xa, &(0x7f0000003d80)=""/12, 0xc}, 0x800}, {{&(0x7f0000003dc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003e40), 0x0, &(0x7f0000003e80)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000004e80)=@tipc, 0x80, &(0x7f0000006140)=[{&(0x7f0000004f00)=""/57, 0x39}, {&(0x7f0000004f40)=""/60, 0x3c}, {&(0x7f0000004f80)=""/160, 0xa0}, {&(0x7f0000005040)=""/214, 0xd6}, {&(0x7f0000005140)=""/4096, 0x1000}], 0x5, &(0x7f00000061c0)=""/173, 0xad}, 0x8}, {{&(0x7f0000006280)=@tipc=@id, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006300)=""/149, 0x95}, {&(0x7f00000063c0)=""/83, 0x53}, {&(0x7f0000006440)=""/219, 0xdb}, {&(0x7f0000006540)=""/65, 0x41}, {&(0x7f00000065c0)=""/251, 0xfb}], 0x5, &(0x7f0000006740)=""/250, 0xfa}, 0x5}, {{&(0x7f0000006840)=@x25={0x9, @remote}, 0x80, &(0x7f0000006b00)=[{&(0x7f00000068c0)=""/124, 0x7c}, {&(0x7f0000006940)=""/130, 0x82}, {&(0x7f0000006a00)=""/241, 0xf1}], 0x3}, 0x4}, {{&(0x7f0000006b40)=@alg, 0x80, &(0x7f0000007c40)=[{&(0x7f0000006bc0)=""/115, 0x73}, {&(0x7f0000006c40)=""/4096, 0x1000}], 0x2, &(0x7f0000007c80)=""/4096, 0x1000}, 0x31}, {{&(0x7f0000008c80)=@sco, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000008d00)=""/229, 0xe5}, {&(0x7f0000008e00)=""/83, 0x53}, {&(0x7f0000008e80)=""/181, 0xb5}, {&(0x7f0000008f40)=""/67, 0x43}], 0x4, &(0x7f0000009000)=""/51, 0x33}, 0x10001}], 0xa, 0x20, &(0x7f00000092c0)) 23:09:32 executing program 7: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x0, 0x3, 0x5, 0x1, 0x7}, 0xddb, 0x9}) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @isdn={0x22, 0x4, 0x3f, 0x9, 0x81}, @llc={0x1a, 0x33a, 0x1, 0x8, 0x20, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @rc={0x1f, @none}, 0x5d05, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)='batadv0\x00', 0xb8, 0x0, 0x51}) openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/rng_core', 0x2000, 0x2) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/cgroups\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xfc}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000380)) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000003c0)) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r6, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3a52}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000401}, 0x4) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40d4) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x14100) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000680)={{0x1, 0x1, 0x3, 0x2, 0x1}, 0x9b, 0x35d3, 'id1\x00', 'timer0\x00', 0x0, 0x9f4, 0x8, 0x4, 0x8}) [ 111.320306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.323006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.326595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.329806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.333590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.341594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.351468] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.354285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.362836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.365815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.376346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.382429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.387512] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.423013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.438403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.476722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.487596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.492811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.494286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.506712] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.518353] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.524868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.533764] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.543209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.545389] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.548443] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.550705] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.553998] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.557808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.559188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.564537] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.566740] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.568583] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.571920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.587459] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.590241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.603682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.619786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.629717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.631620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.450624] Bluetooth: hci0: command tx timeout [ 113.452096] Bluetooth: hci1: command tx timeout [ 113.578045] Bluetooth: hci2: command tx timeout [ 113.642108] Bluetooth: hci3: command tx timeout [ 113.642826] Bluetooth: hci7: command tx timeout [ 113.706365] Bluetooth: hci4: command tx timeout [ 113.707251] Bluetooth: hci5: command tx timeout [ 113.770005] Bluetooth: hci6: command tx timeout [ 115.498062] Bluetooth: hci0: command tx timeout [ 115.498536] Bluetooth: hci1: command tx timeout [ 115.626983] Bluetooth: hci2: command tx timeout [ 115.691194] Bluetooth: hci7: command tx timeout [ 115.691706] Bluetooth: hci3: command tx timeout [ 115.754280] Bluetooth: hci4: command tx timeout [ 115.754777] Bluetooth: hci5: command tx timeout [ 115.819267] Bluetooth: hci6: command tx timeout [ 117.547031] Bluetooth: hci1: command tx timeout [ 117.547590] Bluetooth: hci0: command tx timeout [ 117.675021] Bluetooth: hci2: command tx timeout [ 117.739970] Bluetooth: hci3: command tx timeout [ 117.740476] Bluetooth: hci7: command tx timeout [ 117.803046] Bluetooth: hci5: command tx timeout [ 117.803543] Bluetooth: hci4: command tx timeout [ 117.866381] Bluetooth: hci6: command tx timeout [ 119.594185] Bluetooth: hci0: command tx timeout [ 119.594670] Bluetooth: hci1: command tx timeout [ 119.724076] Bluetooth: hci2: command tx timeout [ 119.788113] Bluetooth: hci7: command tx timeout [ 119.788569] Bluetooth: hci3: command tx timeout [ 119.851992] Bluetooth: hci4: command tx timeout [ 119.852440] Bluetooth: hci5: command tx timeout [ 119.915028] Bluetooth: hci6: command tx timeout [ 171.391023] syz-executor.4 (283) used greatest stack depth: 24912 bytes left [ 173.713336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.716613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.720361] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.727641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.731718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.833819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.846314] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.850740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.853443] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.857830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.864557] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.878422] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.885458] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.888762] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.897098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.926569] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.958215] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.959616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.969823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.974498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.977684] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.978834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.982364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.992835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.998570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.029387] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.039270] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.047340] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.071671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.092884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.097812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.114357] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.115414] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.116000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.120600] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.122795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.131543] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.133203] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.144427] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.163447] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.787403] Bluetooth: hci0: command tx timeout [ 175.978323] Bluetooth: hci1: command tx timeout [ 175.979283] Bluetooth: hci2: command tx timeout [ 176.043079] Bluetooth: hci3: command tx timeout [ 176.107072] Bluetooth: hci4: command tx timeout [ 176.234514] Bluetooth: hci6: command tx timeout [ 176.235333] Bluetooth: hci7: command tx timeout [ 176.235845] Bluetooth: hci5: command tx timeout [ 177.835983] Bluetooth: hci0: command tx timeout [ 178.027560] Bluetooth: hci1: command tx timeout [ 178.027752] Bluetooth: hci2: command tx timeout [ 178.093297] Bluetooth: hci3: command tx timeout [ 178.154289] Bluetooth: hci4: command tx timeout [ 178.282214] Bluetooth: hci7: command tx timeout [ 178.283077] Bluetooth: hci5: command tx timeout [ 178.283375] Bluetooth: hci6: command tx timeout [ 179.883159] Bluetooth: hci0: command tx timeout [ 180.076041] Bluetooth: hci2: command tx timeout [ 180.076543] Bluetooth: hci1: command tx timeout [ 180.138250] Bluetooth: hci3: command tx timeout [ 180.202009] Bluetooth: hci4: command tx timeout [ 180.330235] Bluetooth: hci6: command tx timeout [ 180.330335] Bluetooth: hci5: command tx timeout [ 180.330722] Bluetooth: hci7: command tx timeout [ 181.931268] Bluetooth: hci0: command tx timeout [ 182.123126] Bluetooth: hci1: command tx timeout [ 182.123560] Bluetooth: hci2: command tx timeout [ 182.186045] Bluetooth: hci3: command tx timeout [ 182.250396] Bluetooth: hci4: command tx timeout [ 182.378659] Bluetooth: hci7: command tx timeout [ 182.379193] Bluetooth: hci5: command tx timeout [ 182.379197] Bluetooth: hci6: command tx timeout [ 235.913428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.918626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.923199] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.930028] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.933636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.040462] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.043189] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.046300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.052386] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.056280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.113366] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.119375] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.121361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.126245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.132977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.137123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.146240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.154075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.165741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.191999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.368684] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.370670] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.374320] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.376004] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.381673] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.386278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.404534] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.406684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.408841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.410919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.415580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.419605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.476767] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.483283] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.486386] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.503280] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.505701] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.509987] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.528121] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.537769] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.994279] Bluetooth: hci0: command tx timeout [ 238.122113] Bluetooth: hci1: command tx timeout [ 238.186049] Bluetooth: hci2: command tx timeout [ 238.314534] Bluetooth: hci3: command tx timeout [ 238.506341] Bluetooth: hci4: command tx timeout [ 238.570115] Bluetooth: hci7: command tx timeout [ 238.570702] Bluetooth: hci5: command tx timeout [ 238.572437] Bluetooth: hci6: command tx timeout [ 240.042560] Bluetooth: hci0: command tx timeout [ 240.172700] Bluetooth: hci1: command tx timeout [ 240.234443] Bluetooth: hci2: command tx timeout [ 240.363730] Bluetooth: hci3: command tx timeout [ 240.554375] Bluetooth: hci4: command tx timeout [ 240.619392] Bluetooth: hci5: command tx timeout [ 240.620790] Bluetooth: hci6: command tx timeout [ 240.621713] Bluetooth: hci7: command tx timeout [ 242.090268] Bluetooth: hci0: command tx timeout [ 242.220076] Bluetooth: hci1: command tx timeout [ 242.282636] Bluetooth: hci2: command tx timeout [ 242.410101] Bluetooth: hci3: command tx timeout [ 242.602024] Bluetooth: hci4: command tx timeout [ 242.667103] Bluetooth: hci6: command tx timeout [ 242.667649] Bluetooth: hci7: command tx timeout [ 242.668592] Bluetooth: hci5: command tx timeout [ 244.138058] Bluetooth: hci0: command tx timeout [ 244.266186] Bluetooth: hci1: command tx timeout [ 244.330162] Bluetooth: hci2: command tx timeout [ 244.458101] Bluetooth: hci3: command tx timeout [ 244.650010] Bluetooth: hci4: command tx timeout [ 244.714187] Bluetooth: hci5: command tx timeout [ 244.714648] Bluetooth: hci7: command tx timeout [ 244.715149] Bluetooth: hci6: command tx timeout [ 298.640568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.649616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.652577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.656366] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.659411] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.661236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.678856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.685382] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.687200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.695909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.845362] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.851354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.864428] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.897098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.911084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.913203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.913539] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.927703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.933162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.962476] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.985753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.988558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.993858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.006755] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.029099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.030824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.047725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.055456] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.080762] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.097704] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.108219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.133447] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.136508] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.164636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.180224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.213102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.216299] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.218627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.225343] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.229722] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.779986] Bluetooth: hci1: command tx timeout [ 300.780012] Bluetooth: hci0: command tx timeout [ 300.970328] Bluetooth: hci2: command tx timeout [ 301.162197] Bluetooth: hci3: command tx timeout [ 301.227302] Bluetooth: hci5: command tx timeout [ 301.228094] Bluetooth: hci4: command tx timeout [ 301.291162] Bluetooth: hci7: command tx timeout [ 301.546196] Bluetooth: hci6: command tx timeout [ 302.826206] Bluetooth: hci0: command tx timeout [ 302.826290] Bluetooth: hci1: command tx timeout [ 303.018244] Bluetooth: hci2: command tx timeout [ 303.210085] Bluetooth: hci3: command tx timeout [ 303.274022] Bluetooth: hci5: command tx timeout [ 303.274047] Bluetooth: hci4: command tx timeout [ 303.338443] Bluetooth: hci7: command tx timeout [ 303.594011] Bluetooth: hci6: command tx timeout [ 304.874217] Bluetooth: hci1: command tx timeout [ 304.874712] Bluetooth: hci0: command tx timeout [ 305.068173] Bluetooth: hci2: command tx timeout [ 305.258972] Bluetooth: hci3: command tx timeout [ 305.322051] Bluetooth: hci5: command tx timeout [ 305.322072] Bluetooth: hci4: command tx timeout [ 305.386053] Bluetooth: hci7: command tx timeout [ 305.642042] Bluetooth: hci6: command tx timeout [ 306.922499] Bluetooth: hci1: command tx timeout [ 306.922807] Bluetooth: hci0: command tx timeout [ 307.114028] Bluetooth: hci2: command tx timeout [ 307.306010] Bluetooth: hci3: command tx timeout [ 307.370100] Bluetooth: hci5: command tx timeout [ 307.371362] Bluetooth: hci4: command tx timeout [ 307.435002] Bluetooth: hci7: command tx timeout [ 307.690047] Bluetooth: hci6: command tx timeout [ 360.959791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.968275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.971404] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.980761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.987528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.039427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.043205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.047904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.055540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.060507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.237085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.247985] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.251902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.267482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.279574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.366286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.370801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.376559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.402360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.412501] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.501430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.510068] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.529216] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.531586] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.536569] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.538688] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.541705] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.557490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.559726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.571114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.573551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.575807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.579737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.582313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.587810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.591530] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.592517] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.604592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.619569] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.638502] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.051414] Bluetooth: hci0: command tx timeout [ 363.114122] Bluetooth: hci1: command tx timeout [ 363.371581] Bluetooth: hci2: command tx timeout [ 363.498168] Bluetooth: hci3: command tx timeout [ 363.690103] Bluetooth: hci4: command tx timeout [ 363.754062] Bluetooth: hci6: command tx timeout [ 363.754147] Bluetooth: hci5: command tx timeout [ 363.755415] Bluetooth: hci7: command tx timeout [ 365.098044] Bluetooth: hci0: command tx timeout [ 365.164233] Bluetooth: hci1: command tx timeout [ 365.418975] Bluetooth: hci2: command tx timeout [ 365.546625] Bluetooth: hci3: command tx timeout [ 365.738635] Bluetooth: hci4: command tx timeout [ 365.802145] Bluetooth: hci5: command tx timeout [ 365.803311] Bluetooth: hci6: command tx timeout [ 365.803501] Bluetooth: hci7: command tx timeout [ 367.146626] Bluetooth: hci0: command tx timeout [ 367.210555] Bluetooth: hci1: command tx timeout [ 367.467278] Bluetooth: hci2: command tx timeout [ 367.595021] Bluetooth: hci3: command tx timeout [ 367.786783] Bluetooth: hci4: command tx timeout [ 367.850365] Bluetooth: hci7: command tx timeout [ 367.851404] Bluetooth: hci5: command tx timeout [ 367.851840] Bluetooth: hci6: command tx timeout [ 369.195392] Bluetooth: hci0: command tx timeout [ 369.258814] Bluetooth: hci1: command tx timeout [ 369.513991] Bluetooth: hci2: command tx timeout [ 369.642126] Bluetooth: hci3: command tx timeout [ 369.834220] Bluetooth: hci4: command tx timeout [ 369.898969] Bluetooth: hci6: command tx timeout [ 369.899408] Bluetooth: hci5: command tx timeout [ 369.899632] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:14:34 Registers: info registers vcpu 0 RAX=0000010d50cafa20 RBX=0000000000000000 RCX=00000000000006e0 RDX=000000000000010d RSI=ffff88806ce238c0 RDI=000000000005344e RBP=ffff88806ce238c0 RSP=ffff88806ce08ed8 R8 =0000000000000001 R9 =0000000000000000 R10=00000000000ee5bf R11=0000000000000001 R12=000000000005344e R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce28080 RIP=ffffffff813276b5 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffec6f0aba8 CR3=000000001cab4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff888018707868 RCX=ffff88801870745c RDX=0000000000000000 RSI=ffffffff85c1d1c0 RDI=ffff888015901f7c RBP=ffff888015901b80 RSP=ffff888018707468 R8 =ffffffff868761c0 R9 =ffff888018707548 R10=000000000003b6bd R11=0000000000024aa4 R12=ffff888018707501 R13=ffff888018707550 R14=ffff888018707868 R15=ffff888018707508 RIP=ffffffff815bafd0 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fceba3118e0 CR3=0000000030ddf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000