Warning: Permanently added '[localhost]:13551' (ECDSA) to the list of known hosts. 2025/06/02 10:24:43 fuzzer started 2025/06/02 10:24:43 dialing manager at localhost:34361 syzkaller login: [ 94.668632] cgroup: Unknown subsys name 'net' [ 94.803359] cgroup: Unknown subsys name 'cpuset' [ 94.847485] cgroup: Unknown subsys name 'rlimit' 2025/06/02 10:24:59 syscalls: 2214 2025/06/02 10:24:59 code coverage: enabled 2025/06/02 10:24:59 comparison tracing: enabled 2025/06/02 10:24:59 extra coverage: enabled 2025/06/02 10:24:59 setuid sandbox: enabled 2025/06/02 10:24:59 namespace sandbox: enabled 2025/06/02 10:24:59 Android sandbox: enabled 2025/06/02 10:24:59 fault injection: enabled 2025/06/02 10:24:59 leak checking: enabled 2025/06/02 10:24:59 net packet injection: enabled 2025/06/02 10:24:59 net device setup: enabled 2025/06/02 10:24:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/02 10:24:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/02 10:24:59 USB emulation: enabled 2025/06/02 10:24:59 hci packet injection: enabled 2025/06/02 10:24:59 wifi device emulation: enabled 2025/06/02 10:24:59 802.15.4 emulation: enabled 2025/06/02 10:24:59 fetching corpus: 0, signal 0/0 (executing program) 2025/06/02 10:25:01 starting 8 fuzzer processes 10:25:01 executing program 0: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21006000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x2, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x34, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8000}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3fa, 0x10, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x40004004) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x3e9, 0x300, 0x70bd2a, 0x25dfdbff, {0x20, 0x0, 0x0, 0xffffffffffffffff, 0x834, 0xfffffffa, 0x0, 0x9, 0x0, 0x5}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd9}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9170}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xa0}}, 0x4000000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000005c0)='[\x00', &(0x7f0000000600)="5aa6cb0876cb4c7b2ce5e6c50fba3fa67fe43fb92df1b8c30853d741859dc605c9473052f4c9", 0x26) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000640), 0x2e4203, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x81) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x1000, 0x777a, 0x20, 0x7, 0x100000001, 0x3f, 0x9, 0x4, 0x0, 0xe6, 0x5, 0xc00, 0xd0, 0xfffffffffffffffe}}) r4 = getpid() sched_rr_get_interval(r4, &(0x7f00000017c0)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000001800)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001840), 0x100, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x2c, 0x3, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000001980), &(0x7f00000019c0)={0x0, 0xfb, 0xf4, 0x6, 0x3, "044d77f49356b869dcf2c935a63e9571", "0ada89e9b1a2f92ddfd215239286994f5368a74009a010eeaba168cbec23557fdb550971c0ef777be8a1051cafffc83f38cc21c7f13172070668716398e3e523cf308bc5d6caa31c221d331c47e76b093e944438cb5aebade36a212570f1eea894318042b25230d68390d34a1cb8331757da38d91bf049ab0e6fe378215df9027e912b9df27c8211043c75d8a3c2e63319427f190f78d446cc438856c4eef42b2cf5658cc9f840dac1630dd93d7532ba90bda9914711ef8f92001a36e24023475f9b05eaacac0bbb4f976c0e592d853b091cea6e08044da5573b2aee6fee0f"}, 0xf4, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001ac0)=0x0) sched_rr_get_interval(r6, &(0x7f0000001b00)) 10:25:01 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000)="7ac53ea730fb2468ec4f9e3f02c6adf7af8bdfd718e72ea14566969d07a172a735809be920c821bf389fba5caf64295a1e28aaaf24bf56dd8a2fbee9a3901a9f924721a308641735212867f634fb3eb1be3a6e96428b12a7d80cbb764477ae70229dc6b413c1f7dace4ad67d085f247200538ca33f6fc99a4355007eee4974a5a4c8aae97c7d4566a58a336d8bd38142d4e20da5aef3c0008b6edfca41cc6803a88e70418e5fd9d3a1acf416749b6783bb39acb2d5821b80b344c20f16f0147c873e7d2b37fa8e6cce3ef39d2548db29a782be7fc760713f8404c7a97b16be57041f10ede8a63ad6d1bdb34ec7206d25cd15d01d4865b8a452", 0xf9}, {&(0x7f0000001100)="70e0d8358a7618f3890d2f1755527b20e065433c7b29ed95a55a206b71a4669169f950a2b8b6ca96a4aea5104d33169f99b8b26126b944a034df265d13ca96f7908662c6ca73e6c5fcf306b9364201e06123ba89c9f44760c46ae18982e28cd8ea226d6499", 0x65}, {&(0x7f0000001180)="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", 0xfa}, {&(0x7f0000001280)="089b785ce9d2ced820228e9f97191cef7914b8e11a9732049079de999504a059df9d619f101a5e8adac2226aa349280a562a980553f91326a31b209355bd1aa5f0e4339df8559b4703128d68dcba66", 0x4f}, {&(0x7f0000001300)="6de9d88f02d8214ed1f43506689abb8b8cf124e0f310a764ddd6690b4205f4d01a63f3628fe449cb72fb1fe52a3eca313e1e7b2863ad8539519f94d791ae53ef713560778f26ccf927e79051fdc2d92adc766f1e3818bb085f2ac2076a5f5434d11081cf76a08c25c3f0e7a707ba413d1d844d0c3baeb6dbdaa4158a7ad12970c58480996c3d64a7f60a3619f27c1fb1ba934359", 0x94}], 0x6, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x10}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001540)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x9f5, 0x1f, 0x4e21, 0x1000, 0x0, 0x20, 0x180, 0x3b, 0x0, 0xee01}, {0x38d9, 0x8, 0x80000001, 0x0, 0x9, 0x3997, 0x5, 0x8001}, {0x7f, 0x3c, 0x3, 0x2}, 0x1, 0x6e6bbf, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x33}, 0x2, @in6=@empty, 0x3500, 0x2, 0x3, 0x8, 0x5, 0x8, 0x6}}, 0xe8) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001640)=0x7, 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001680)={0x3, 'sit0\x00', {0x2}, 0x8}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000016c0)) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000001700)) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000001740)=""/122) r0 = pidfd_open(0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f00000017c0)=""/4096, &(0x7f00000027c0)=0x1000) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002800)=0x1, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x64, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x400a080) setxattr(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)=@random={'os2.', 'netdevsim'}, &(0x7f0000002a40)='sit0\x00', 0x5, 0x2) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000002a80)=""/250) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000002c40)={'syztnl2\x00', &(0x7f0000002bc0)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x3, 0x0, 0x28, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x80, 0x7, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000002d00)={'sit0\x00', &(0x7f0000002c80)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x3f, 0x10000, 0x23, @mcast2, @private1, 0x8, 0x8000, 0x98, 0x33}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000003140)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003100)={&(0x7f0000002f80)={0x168, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x30000000) 10:25:01 executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) mknodat$null(r0, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x103) fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f0000000240)=@v3={0x3000000, [{0x10001, 0x8}, {0x3, 0x1ff}]}, 0x18, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x22c202, 0x0) r4 = dup3(r0, r3, 0x80000) symlinkat(&(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00') r5 = dup3(r3, r4, 0x80000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000003c0)=r6) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44910}, 0x51) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000500)) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb8, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbc68}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1c}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x51}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x43}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x9000) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x8000, 0x44, 0x10}, 0x18) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0xc1) 10:25:01 executing program 3: sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x800, 0x70bd2c, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4004844) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4051}, 0x20000080) r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x430ec0, 0x9c) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000280)) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r2) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000300)) r3 = accept4(r0, &(0x7f0000000340)=@l2tp={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x80, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7, 0xf89f, 0xffffffff, 0x0, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x67, 0x0, 0x2, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}, {[@cipso={0x86, 0x9, 0x0, [{0x5, 0x3, "98"}]}]}}}}}) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000480)) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) r4 = accept4$bt_l2cap(r2, &(0x7f0000000500), &(0x7f0000000540)=0xe, 0x800) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000580)={'batadv_slave_0\x00'}) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000005c0)={0xfffff000, {{0xa, 0x4e22, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80}}}, 0x88) syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f00000006c0)='./file0\x00', 0x1, 0x2, &(0x7f0000000800)=[{&(0x7f0000000700)="fff3a88565937b7557c4078f44ab581b", 0x10}, {&(0x7f0000000740)="be1d9b885a40b91a4ef5902ac6c63227f949a69bd48c9f7d1fc2b74eebd82dad2ec788d99bbc6d8599ce2d9af70936b2b7c8ed09287725d362b74ba2d23dc2e95b6bcf737cfbc80da785476478849cfec2ce9a0c3fcedf547c62db9e9a8885d298bdd49f2b2a4a988072024603b7840cb89ef5a13d695fd8a6b99f09956e245a4122cbffc8923f723a3c683d92afa67c010864b17f79017dbf69d76ef1addc", 0x9f, 0x2}], 0x81020, &(0x7f0000000840)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@data_ordered}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000900), 0xffffffffffffffff) r7 = syz_open_dev$vcsu(&(0x7f0000000940), 0x7, 0x200) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x42}, 0x4) [ 111.987735] audit: type=1400 audit(1748859901.506:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:25:01 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1b6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2988bae6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c0c4}, 0x8010) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe4, r0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x56}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, r0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdc}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000640)=0x6) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x12c, r4, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x84, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xd5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1604}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff56}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x39}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xcb3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7d}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xbc8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r5 = open(&(0x7f00000008c0)='./file1\x00', 0xa400, 0xc2) sendmsg$unix(r5, &(0x7f0000000ac0)={&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000980)="0e0e5034737fe9c717244862fa7a86b406a48de6c37179d22f65cf98427763bb04b68315d33eb2ae37866407b23b8a4b598bd4a57ef91acc32793bd7592bfe7448e15cb95e01b2b9e051f8f07613664b7e35a9affca41fda546ece79bd7d1be6bda9c41b26aba6dd01786cfaf56f6f7e7c0d04aef5087c8ef0aee921f569ecf6e46b581e8f8dcc7ed772ab0e32bac70ec982940fe26cb9333c3e6ded35d830215cfe9b674e80f1c5137330b01daba82af432677c1821df02479b1dc2d816abbb2b0433b109ceeed917777c8ab215d2d578591107", 0xd4}], 0x1, 0x0, 0x0, 0x40080d4}, 0x8000) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000800) setxattr$incfs_id(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40), &(0x7f0000000c80)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r4, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}]]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x10, 0x3f5, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x2000c8a5) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xb8, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xac82}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8001, @remote, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffffffc}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000001040)) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000010c0)={0x2, {0x2, 0x280, 0x0, 0x3, 0x0, 0x2}}) 10:25:01 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) r0 = socket$inet6(0xa, 0x6, 0xfffffffd) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xeb, 0x3, 0x0, "3f0f97c17dad91be7a3a53974591f7d0", "434dda4b5870387ff29e601c37748e82e72ab3fd6dfcb716049c39af4e8d867c8abf11f16b8e1356fc0511316999c75cc58cf41eb61c447cee006318a530cafdf4fb0d4a0e075b848e5f35549cd07941a49f3c4ec3bfca92eddfaed267f3b593d878e9a51d33cd3fd9063d05f4485c70e2e82e867b256c5c7d6639d9cc98f69391c1b781297bd235616d538034222bdf9d50a22aea59cc39b97a4803b5eda4099777ccfb7e2180dff4cdb6f52fdd5298c4b7aeb38f890e19eeea77337162691cfb8ea24f6958955ab2d595ba3ac1884a3e9332266df0"}, 0xeb, 0x3) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180), &(0x7f00000001c0)={'L-', 0x8}, 0x16, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000200)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004042}, 0x801) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0x8000) clone3(&(0x7f0000000680)={0x4818800, &(0x7f0000000480)=0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x0, {}, &(0x7f0000000540)=""/30, 0x1e, &(0x7f0000000580)=""/171, &(0x7f0000000640)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) fcntl$setownex(r0, 0xf, &(0x7f0000000700)={0x2, r3}) open_by_handle_at(r0, &(0x7f0000000740)=@FILEID_INO32_GEN={0x8, 0x1, {0x81, 0x2}}, 0x103000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x68}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40054}, 0x8000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000900)={&(0x7f00000008c0)=""/16, 0x10}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000980)={0x3, 0x7ff, "73bbe9", 0x6, 0x1}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f00000009c0)={0x5, 0x100000001, 0xa6c, 0x0, 0x200}) pipe2(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x7fffffff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000a40), 0x8000, 0x0) 10:25:01 executing program 6: recvmsg$unix(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000000), 0x6e, &(0x7f0000001180)=[{&(0x7f0000000080)=""/139, 0x8b}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x3, &(0x7f00000011c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x98}, 0x10100) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000012c0)={0x0, 0x6, 0x7f, 0x9, 0x1, "8272b6260ba5b7d7"}) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000001300)="997982b2539be0b3f3f5fd4617ec89871e12b0ffea924ce09a28845da056ad4d2b17b2ff40f1041ee400ed762e95d2fe0f5ee86401746a10f4d52a85666a933ce4092804878a72d86de6be19a8310ae528b588e62322d79531b72a749907814aec73ebdf61befc94e530a99dd1dd48c2e334ef17a1a0fde8b4333978bdd613075ab17f91de5e3f3b6dc67afd20504028256553b7cedf9bbb74b7574dcdbed5a2ba19aa3f751524ea3ac4430f7c55021033282b0314da102cd3f34e12d1910ee3067c01d65ba8cd833d4d0caeb2ed8d23ea7029487813", 0xd6) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000001400)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440), 0x143000, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000014c0)={{r2}, 0x4, &(0x7f0000001480)=[0x3, 0x2, 0x8, 0x8], 0x200, 0x4, [0x4e, 0x200, 0xd15a, 0x3]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20004080) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000001680)={0x0, 0x9, 0x2}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001a80)={0x1a, 0x7, {0x3ff, @usage=0x2, r5, 0x7, 0x40, 0x2, 0x0, 0xffffffffffff8001, 0x84, @usage=0x9, 0x3f, 0xfffffffc, [0x20, 0xfffffffffffffffd, 0x81, 0x0, 0x400]}, {0x401, @struct={0x1, 0x6}, 0x0, 0x7, 0x2, 0x49ff, 0x80000001, 0x8001, 0x2c, @usage=0x7, 0x10000, 0x8, [0xffffffffffffff7f, 0x0, 0x80000000, 0x8, 0x9, 0x2]}, {0x4, @struct={0x3, 0xe232}, 0x0, 0x100000001, 0x5, 0x3, 0x7f, 0x1ff, 0x3, @usage=0x5, 0x6, 0x0, [0xff, 0x280000000, 0x2, 0xf800000000, 0xfff, 0x100000001]}, {0x26e7c94f, 0x1, 0x100}}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001ec0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40884) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x10, 0x3f2, 0x100, 0x70bd28, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x8000000) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000002100)=0x200) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002380)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000002480)=0xe8) syz_mount_image$msdos(&(0x7f0000002140), &(0x7f0000002180)='./file0\x00', 0x9c4, 0x2, &(0x7f0000002340)=[{&(0x7f00000021c0)="355105a1fd0b93326446dcc3cfdd0dddb99b95bbc24cd1a372caad924fb997390e86b9bed765202cb92553bd9ec455da2e7bd275365eae954465a7575f8eae5781e7f631fa3f1f7b6d3f17787531b7acefd0e25da32fc0c5bee24fd234354f93004b928c7eb6728b422f1c869cb2defa6c5a08caddda959b114468978def97342fd2da1a440a43cfd654b3521e172a5a7d1f5047660c1d4247cf800199d623eb51", 0xa1, 0xb4}, {&(0x7f0000002280)="5f7c1a281f23dc6e0ab3d4cb4f09baae3d9314d5b2de5e3ef22c75aeafe56fc70996c3c5e0aed1f81bd9ad06f0a7651df8597f40e21cc24c85591b72dd03112ad7edb2b111ab25e68e17b3654d43282fc89bca63b281edc768a94254a325372321dbc0d6897a619cf67f924d8e10ea0a9993bf8a1917a5cc27062eba833d548739a6304c46bdb2e7a9c9e67a330e6281714c58136dae65d0cc32ba3fc9a0c3f9f93bdadd17cf9a8ae14c054ba1cdb8df932f90b0c2", 0xb5}], 0x9a0434, &(0x7f00000024c0)={[{@nodots}, {@nodots}, {@nodots}, {@fat=@errors_continue}], [{@uid_gt={'uid>', r1}}, {@euid_eq={'euid', 0x3d, r7}}, {@subj_type}, {@dont_measure}, {@audit}, {@context={'context', 0x3d, 'unconfined_u'}}, {@hash}, {@audit}, {@permit_directio}, {@seclabel}]}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000002580)={'nat\x00', 0x0, 0x0, 0x0, [0x100000, 0x6a8, 0x5, 0x4, 0x2, 0x3]}, &(0x7f0000002600)=0x78) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000002640), &(0x7f0000002680)=0x8) 10:25:01 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x70a0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x80, 0x1f, 0x0, 0x3}, {0x401, 0x6, 0x3f}, {0x6, 0xfd, 0x1, 0x4}, {0x401, 0x5, 0x8, 0xffffffff}, {0x1529, 0xba, 0xfc, 0xda5}, {0x6, 0x1, 0x5, 0xbbf}]}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000100)={&(0x7f00000000c0)}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000140)={0x7c4, 0x9, 0x20}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000180)={0x0, 0x20, 0x9}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2100, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8001) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000200)={{r4}, {@void, @max}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000280)={0x7f, 0x14, 0x4, 0x4, "e68702d4ae5f850ac3a80609c5f3c1fa91d50ca318f7113c125e0e7b3a8c4165"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) ioctl$LOOP_CLR_FD(r6, 0x4c01) sendmsg$nl_netfilter(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1e4, 0x8, 0x8, 0x101, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x9}, [@typed={0xd, 0x53, 0x0, 0x0, @str='/dev/vcs\x00'}, @typed={0xd, 0x34, 0x0, 0x0, @str='/dev/vcs\x00'}, @generic="e8430f58dde6e2c9cc9cd964408ba433329efc5eedf6d73449847d9e75f3f9c1d8411401292bbfcc539a15e87079b9107e3231fd7c5064b76b57b03f911b7d391a862ed0d2468a6123ed63148ae6b534a44ab3561feafb76498c0aef38", @generic="bac2d0c2022f0dc885b2f39a38d24a263ae7d0bd50ce630eb242c6d940ab88816d57403326c5041beefbe8a0c11ff2961afc993fa889e34171322b93fa85d7527a3fe091a4e910d71f999e15775730879b26caa789ac39c090144f655543e3906564a702edfdd09d1b1989c5c795366c92245a4a467e6ae8809585542abcf934f13cac376fa405888b55d3bb87041f6c0c8cc0d3ec66c7e015d8370949329a2fc3b07780713738c5ee3f02a34c20dc2ea315aedfecaa7591fd8cdb8e7e4e9f0df855b55292eef6558d823191f6281c4e00", @nested={0x7e, 0x29, 0x0, 0x1, [@generic="78e67e90bebc45855e1ce207563ae7fa1057a248b89bb48737c6082773224e28096b4a0c64dfed7571dc469122815f93665ae34a089bc8a6100d43a293f510786b289491ead91d1c59a5d4f9a57f0600df83db9a591d048b4e0faafac4f21c71cfe8a75f2285379c6051e7b85cd47cb6125f22c301f50d3492f2"]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x10000}, 0x4c810) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x7fff) r7 = syz_open_dev$loop(&(0x7f00000005c0), 0x400, 0x40) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4, 0x0, &(0x7f0000000600)=[@enter_looper], 0x3a, 0x0, &(0x7f0000000640)="7788336b0c3cf21ebb3266a5142e6b58684c30c30d210b5599d9818aa9098540f1cde0de5be4aa536f6456c28f3e9dfefbc094abd7470b398f81"}) perf_event_open$cgroup(&(0x7f00000006c0)={0x3, 0x80, 0x6, 0x40, 0x85, 0xf9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x1}, 0x4d000, 0x2, 0xa7, 0x8, 0x9, 0x401, 0x2}, r2, 0x4, r0, 0x3) [ 113.424671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.428127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.430696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.439223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.456523] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.488001] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.491593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.503181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.512868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.516359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.573907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.581629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.593339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.598869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.600081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.603455] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.612128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.613754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.615576] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.617649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.637279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.641573] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.641750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.647125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.650552] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.689878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.705416] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.727482] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.745579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.748568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.751461] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.759449] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.762671] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.773364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.780835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.782340] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.786436] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.798183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.806611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.813565] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.511310] Bluetooth: hci0: command tx timeout [ 115.573425] Bluetooth: hci1: command tx timeout [ 115.701089] Bluetooth: hci4: command tx timeout [ 115.765035] Bluetooth: hci2: command tx timeout [ 115.765610] Bluetooth: hci3: command tx timeout [ 115.829047] Bluetooth: hci7: command tx timeout [ 115.893987] Bluetooth: hci6: command tx timeout [ 115.894533] Bluetooth: hci5: command tx timeout [ 117.557146] Bluetooth: hci0: command tx timeout [ 117.621434] Bluetooth: hci1: command tx timeout [ 117.749654] Bluetooth: hci4: command tx timeout [ 117.813864] Bluetooth: hci2: command tx timeout [ 117.814886] Bluetooth: hci3: command tx timeout [ 117.877216] Bluetooth: hci7: command tx timeout [ 117.941521] Bluetooth: hci5: command tx timeout [ 117.942713] Bluetooth: hci6: command tx timeout [ 119.605327] Bluetooth: hci0: command tx timeout [ 119.669439] Bluetooth: hci1: command tx timeout [ 119.797286] Bluetooth: hci4: command tx timeout [ 119.861631] Bluetooth: hci2: command tx timeout [ 119.862725] Bluetooth: hci3: command tx timeout [ 119.925075] Bluetooth: hci7: command tx timeout [ 119.989178] Bluetooth: hci5: command tx timeout [ 119.990254] Bluetooth: hci6: command tx timeout [ 121.653050] Bluetooth: hci0: command tx timeout [ 121.717217] Bluetooth: hci1: command tx timeout [ 121.845277] Bluetooth: hci4: command tx timeout [ 121.909336] Bluetooth: hci3: command tx timeout [ 121.909818] Bluetooth: hci2: command tx timeout [ 121.973028] Bluetooth: hci7: command tx timeout [ 122.037027] Bluetooth: hci6: command tx timeout [ 122.037506] Bluetooth: hci5: command tx timeout [ 173.908722] syz-executor.0 (283) used greatest stack depth: 25072 bytes left [ 176.613597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.618467] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.637976] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.640369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.655239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.658720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.661657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.664402] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.674703] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.686161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.688911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.694763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.699709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.707663] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.707813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.806203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.811291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.829516] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.830994] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.836229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.848723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.856540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.868433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.871674] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.875442] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.981826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.989576] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.007975] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.034690] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.043123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.078874] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.085541] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.087781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.096426] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.103398] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.131477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.145394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.174405] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.198376] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.220845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.742173] Bluetooth: hci0: command tx timeout [ 178.805006] Bluetooth: hci1: command tx timeout [ 178.869096] Bluetooth: hci2: command tx timeout [ 178.934992] Bluetooth: hci3: command tx timeout [ 178.997039] Bluetooth: hci4: command tx timeout [ 179.125775] Bluetooth: hci7: command tx timeout [ 179.189046] Bluetooth: hci6: command tx timeout [ 179.317123] Bluetooth: hci5: command tx timeout [ 180.789074] Bluetooth: hci0: command tx timeout [ 180.853252] Bluetooth: hci1: command tx timeout [ 180.918991] Bluetooth: hci2: command tx timeout [ 180.981174] Bluetooth: hci3: command tx timeout [ 181.045984] Bluetooth: hci4: command tx timeout [ 181.174406] Bluetooth: hci7: command tx timeout [ 181.238966] Bluetooth: hci6: command tx timeout [ 181.365054] Bluetooth: hci5: command tx timeout [ 182.837176] Bluetooth: hci0: command tx timeout [ 182.901228] Bluetooth: hci1: command tx timeout [ 182.965296] Bluetooth: hci2: command tx timeout [ 183.029012] Bluetooth: hci3: command tx timeout [ 183.093288] Bluetooth: hci4: command tx timeout [ 183.221111] Bluetooth: hci7: command tx timeout [ 183.285300] Bluetooth: hci6: command tx timeout [ 183.413014] Bluetooth: hci5: command tx timeout [ 184.885029] Bluetooth: hci0: command tx timeout [ 184.951225] Bluetooth: hci1: command tx timeout [ 185.012973] Bluetooth: hci2: command tx timeout [ 185.076998] Bluetooth: hci3: command tx timeout [ 185.141088] Bluetooth: hci4: command tx timeout [ 185.271094] Bluetooth: hci7: command tx timeout [ 185.332999] Bluetooth: hci6: command tx timeout [ 185.461081] Bluetooth: hci5: command tx timeout [ 238.883541] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.888426] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.891075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.900127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.904678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.044472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.046202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.048438] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.054662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.058346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.186859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.192117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.195329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.200690] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.208417] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.233570] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.238259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.242338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.264282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.269675] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.283899] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.303516] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.305473] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.307046] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.311697] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.318681] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.325108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.357359] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.388056] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.426104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.461871] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.555767] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.566324] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.605339] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.626539] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.730092] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.750455] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.761568] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.895601] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.910301] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.949356] Bluetooth: hci0: command tx timeout [ 241.141054] Bluetooth: hci1: command tx timeout [ 241.269244] Bluetooth: hci2: command tx timeout [ 241.333023] Bluetooth: hci3: command tx timeout [ 241.397028] Bluetooth: hci5: command tx timeout [ 241.654969] Bluetooth: hci4: command tx timeout [ 241.781012] Bluetooth: hci6: command tx timeout [ 242.037198] Bluetooth: hci7: command tx timeout [ 242.997978] Bluetooth: hci0: command tx timeout [ 243.189012] Bluetooth: hci1: command tx timeout [ 243.317091] Bluetooth: hci2: command tx timeout [ 243.382615] Bluetooth: hci3: command tx timeout [ 243.445513] Bluetooth: hci5: command tx timeout [ 243.701062] Bluetooth: hci4: command tx timeout [ 243.829992] Bluetooth: hci6: command tx timeout [ 244.085990] Bluetooth: hci7: command tx timeout [ 245.046014] Bluetooth: hci0: command tx timeout [ 245.237995] Bluetooth: hci1: command tx timeout [ 245.366012] Bluetooth: hci2: command tx timeout [ 245.429982] Bluetooth: hci3: command tx timeout [ 245.493984] Bluetooth: hci5: command tx timeout [ 245.750105] Bluetooth: hci4: command tx timeout [ 245.877334] Bluetooth: hci6: command tx timeout [ 246.134022] Bluetooth: hci7: command tx timeout [ 247.094218] Bluetooth: hci0: command tx timeout [ 247.285277] Bluetooth: hci1: command tx timeout [ 247.414064] Bluetooth: hci2: command tx timeout [ 247.478148] Bluetooth: hci3: command tx timeout [ 247.541995] Bluetooth: hci5: command tx timeout [ 247.797173] Bluetooth: hci4: command tx timeout [ 247.927035] Bluetooth: hci6: command tx timeout [ 248.181436] Bluetooth: hci7: command tx timeout [ 299.312481] syz-executor.7 (5307) used greatest stack depth: 24912 bytes left [ 301.203619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.207062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.209811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.221486] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.229574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.339217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.343607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.352641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.360384] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.369852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.416240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.420819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.424508] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.439359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.454566] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.578421] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.594608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.597894] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.615343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.632445] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.634274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.642245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.651850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.677440] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.712734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.715328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.752440] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.755825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.758308] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.766288] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.773468] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.781437] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.783870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.844431] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.894494] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.909284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.913714] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.917126] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.923424] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.927689] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.286971] Bluetooth: hci0: command tx timeout [ 303.413012] Bluetooth: hci1: command tx timeout [ 303.541016] Bluetooth: hci2: command tx timeout [ 303.734021] Bluetooth: hci3: command tx timeout [ 303.797183] Bluetooth: hci7: command tx timeout [ 303.925019] Bluetooth: hci4: command tx timeout [ 303.988999] Bluetooth: hci5: command tx timeout [ 304.053059] Bluetooth: hci6: command tx timeout [ 305.333018] Bluetooth: hci0: command tx timeout [ 305.461101] Bluetooth: hci1: command tx timeout [ 305.590272] Bluetooth: hci2: command tx timeout [ 305.781261] Bluetooth: hci3: command tx timeout [ 305.845327] Bluetooth: hci7: command tx timeout [ 305.973003] Bluetooth: hci4: command tx timeout [ 306.037965] Bluetooth: hci5: command tx timeout [ 306.101104] Bluetooth: hci6: command tx timeout [ 307.381229] Bluetooth: hci0: command tx timeout [ 307.510988] Bluetooth: hci1: command tx timeout [ 307.637285] Bluetooth: hci2: command tx timeout [ 307.829040] Bluetooth: hci3: command tx timeout [ 307.893248] Bluetooth: hci7: command tx timeout [ 308.020990] Bluetooth: hci4: command tx timeout [ 308.085090] Bluetooth: hci5: command tx timeout [ 308.148981] Bluetooth: hci6: command tx timeout [ 309.429500] Bluetooth: hci0: command tx timeout [ 309.557274] Bluetooth: hci1: command tx timeout [ 309.685052] Bluetooth: hci2: command tx timeout [ 309.877036] Bluetooth: hci3: command tx timeout [ 309.941009] Bluetooth: hci7: command tx timeout [ 310.069102] Bluetooth: hci4: command tx timeout [ 310.133035] Bluetooth: hci5: command tx timeout [ 310.197037] Bluetooth: hci6: command tx timeout [ 363.721570] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.727504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.733475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.743658] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.751581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.808984] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.811716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.814395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.819632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.823172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.063706] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.089701] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.095171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.117776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.130829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.147024] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.184427] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.188279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.220483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.224733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.234861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.253305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.260805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.263090] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.270793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.274335] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.278987] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.282891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.287823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.289354] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.293616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.314437] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.324590] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.325564] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.331215] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.345673] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.353403] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.362333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.402629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.445695] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.813000] Bluetooth: hci0: command tx timeout [ 365.876998] Bluetooth: hci1: command tx timeout [ 366.197081] Bluetooth: hci2: command tx timeout [ 366.325053] Bluetooth: hci3: command tx timeout [ 366.392256] Bluetooth: hci4: command tx timeout [ 366.517072] Bluetooth: hci6: command tx timeout [ 366.582328] Bluetooth: hci5: command tx timeout [ 366.710043] Bluetooth: hci7: command tx timeout [ 367.862235] Bluetooth: hci0: command tx timeout [ 367.926056] Bluetooth: hci1: command tx timeout [ 368.245314] Bluetooth: hci2: command tx timeout [ 368.374313] Bluetooth: hci3: command tx timeout [ 368.438241] Bluetooth: hci4: command tx timeout [ 368.566207] Bluetooth: hci6: command tx timeout [ 368.628976] Bluetooth: hci5: command tx timeout [ 368.758973] Bluetooth: hci7: command tx timeout [ 369.910550] Bluetooth: hci0: command tx timeout [ 369.974238] Bluetooth: hci1: command tx timeout [ 370.293230] Bluetooth: hci2: command tx timeout [ 370.420996] Bluetooth: hci3: command tx timeout [ 370.485989] Bluetooth: hci4: command tx timeout [ 370.615436] Bluetooth: hci6: command tx timeout [ 370.676975] Bluetooth: hci5: command tx timeout [ 370.807199] Bluetooth: hci7: command tx timeout [ 371.957950] Bluetooth: hci0: command tx timeout [ 372.021299] Bluetooth: hci1: command tx timeout [ 372.340982] Bluetooth: hci2: command tx timeout [ 372.470297] Bluetooth: hci3: command tx timeout [ 372.534973] Bluetooth: hci4: command tx timeout [ 372.661994] Bluetooth: hci6: command tx timeout [ 372.725000] Bluetooth: hci5: command tx timeout [ 372.853191] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 10:30:02 Registers: info registers vcpu 0 RAX=ffffffff81aec004 RBX=ffffffff81604940 RCX=ffff88802da3754c RDX=1ffff11005b46eca RSI=ffffffff85c1d1c0 RDI=ffffffff81aec004 RBP=ffff88802da37650 RSP=ffff88802da375e8 R8 =ffffffff8680a694 R9 =ffff88802da37638 R10=000000000003b6bd R11=0000000000012b77 R12=ffff88802da376c0 R13=0000000000000000 R14=ffff88802ade1b80 R15=0000000000092cc0 RIP=ffffffff81353b39 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb311092f88 CR3=00000000274e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880341d9880 RBX=000000000008d310 RCX=ffffffff8151f5f3 RDX=0000000000000060 RSI=0000000000000000 RDI=ffff888037b94c40 RBP=ffff888037b94c40 RSP=ffff88802a057920 R8 =0000000000000001 R9 =ffffed100540af14 R10=0000000000000003 R11=0000000000000001 R12=ffff88800ebe09a8 R13=0000000000000246 R14=0000000000000000 R15=ffff888037b94c40 RIP=ffffffff81b21e1e RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc1c5321540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffefeb53a20 CR3=000000000da1a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000