Warning: Permanently added '[localhost]:30246' (ECDSA) to the list of known hosts. 2025/06/07 08:26:02 fuzzer started 2025/06/07 08:26:03 dialing manager at localhost:40003 syzkaller login: [ 100.942557] cgroup: Unknown subsys name 'net' [ 101.086695] cgroup: Unknown subsys name 'cpuset' [ 101.142616] cgroup: Unknown subsys name 'rlimit' 2025/06/07 08:26:22 syscalls: 2214 2025/06/07 08:26:22 code coverage: enabled 2025/06/07 08:26:22 comparison tracing: enabled 2025/06/07 08:26:22 extra coverage: enabled 2025/06/07 08:26:22 setuid sandbox: enabled 2025/06/07 08:26:22 namespace sandbox: enabled 2025/06/07 08:26:22 Android sandbox: enabled 2025/06/07 08:26:22 fault injection: enabled 2025/06/07 08:26:22 leak checking: enabled 2025/06/07 08:26:22 net packet injection: enabled 2025/06/07 08:26:22 net device setup: enabled 2025/06/07 08:26:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/07 08:26:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/07 08:26:22 USB emulation: enabled 2025/06/07 08:26:22 hci packet injection: enabled 2025/06/07 08:26:22 wifi device emulation: enabled 2025/06/07 08:26:22 802.15.4 emulation: enabled 2025/06/07 08:26:22 fetching corpus: 0, signal 0/0 (executing program) 2025/06/07 08:26:25 starting 8 fuzzer processes 08:26:25 executing program 0: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x80000) fcntl$getownex(r3, 0x10, &(0x7f0000000480)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x802) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x80) r5 = accept4(r2, &(0x7f0000000600)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000680)=0x80, 0x80000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'sit0\x00', r1, 0x29, 0x3f, 0x67, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x8000, 0x7800, 0x7098, 0x2}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x80}, @ETHTOOL_A_COALESCE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x73ce1d2}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xfffffffe}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xab}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4000880) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000900), 0x80, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x8010) getsockopt$WPAN_WANTLQI(r8, 0x0, 0x3, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000b00)=0x51) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000c40)={0x5, 0xcf3, 0x8d, &(0x7f0000000b80)="b829922c0bfc9e39da215821a2e060731592d271ea296a51070bfaccc66bf5b61bb6254a2121e6cd4de4a2af3ccb98aad2879c572291b2b25be7ecac266553cad7ca0d89d1c03f2a95ac68e93e426bc07cb814c71017a75f24bfd0339d82f1943d701a628351997bcd52676b898980dca1557211086123a7709e21558777ac422980244ab23660c5d7fb48b7cf"}) pipe2$9p(&(0x7f0000000c80), 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) dup(r10) 08:26:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x922}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800c040}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}}, 0x10000000) r3 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0xc0000) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000002c0)={'veth1_to_bond\x00', {0x2, 0x0, @local}}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x85}, 0x4048040) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) perf_event_open(&(0x7f00000004c0)={0x6, 0x80, 0x5, 0xff, 0x1, 0x3b, 0x0, 0x3, 0x80302, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c25, 0x2, @perf_config_ext={0x1, 0x200}, 0x4a246, 0x4, 0x4, 0x3, 0x6, 0x7231, 0xcab, 0x0, 0x2, 0x0, 0x7}, r6, 0xd, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, @hci={0x1f, 0x1, 0x2}, @can, 0xf2a5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x4, 0x44a3}) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r7, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000780)) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f00000007c0)) 08:26:25 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x466002, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x7800, 0x80, 0x100, 0x5, {{0xf, 0x4, 0x1, 0x24, 0x3c, 0x66, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x1e, 0x1, [{0x6, 0x11, "2141764768644580fc0e679200fd09"}, {0x7, 0x7, "f46b8216a4"}]}, @timestamp={0x44, 0x8, 0x65, 0x0, 0x6, [0x2]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x29, 0x80, 0x2, 0x9, 0x40, @private1, @rand_addr=' \x01\x00', 0x1, 0x7, 0x7, 0xf7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x20, 0x7800, 0xf0, 0x6, {{0xe, 0x4, 0x1, 0x4, 0x38, 0x66, 0x0, 0xf7, 0x2f, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0xf, 0x46, [@loopback, @empty, @rand_addr=0x64010101]}, @rr={0x7, 0x13, 0x17, [@private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x164, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x164}}, 0x4000) r5 = open(&(0x7f0000000680)='./file0\x00', 0x0, 0x160) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0x8150) r7 = openat$incfs(r5, &(0x7f0000000800)='.pending_reads\x00', 0x133001, 0x160) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000c40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000880)={0x380, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e7c834fc44b0562b0dcd4b63cbeba21d45e273b582dee8cd9f65"}}, @TIPC_NLA_NODE_ID={0x58, 0x3, "8528cc2617528346fe1a428eb55430b4f74b775e9a44f4ded3cab3bb1bebca9d86b6a45524f00cd186f5644b10e6564bfd65dbdd1e3d088efb7dc8985ca3e129889a334a925559cd18ca9f9bc3ca461e0fdadb0b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "1a0cda29d2eb193a499c51417cc18342402921b89f6a467253"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "d150d5eb4e9f2855c83eb9c7e2c85db4eb9d34bd99f6"}}, @TIPC_NLA_NODE_ID={0x59, 0x3, "8400140f3e06f02c8f207480014149818dd5f3f254b499c5be5f66adca03c53bada238c633bc604c571a3d55e1e21718bc6cdd243696f5fd691e1c642828e6198315477626615b0015b0eb5f40b998b3aad809dd53"}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x16}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10001, @local, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @remote, 0x4}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x47dc}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x4000800}, 0x44841) getsockname$packet(r5, &(0x7f000000a100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000a140)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f000000a200)={'syztnl0\x00', &(0x7f000000a180)={'syztnl1\x00', r1, 0x29, 0x1, 0x81, 0x8, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x20, 0x40, 0xffffffff, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f000000a3c0)={&(0x7f0000000c80), 0xc, &(0x7f000000a380)={&(0x7f000000a240)={0x110, 0x0, 0x10, 0x1ff, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x94}, 0x20000000) r10 = accept4$packet(r7, &(0x7f000000a400), &(0x7f000000a440)=0x14, 0x80000) ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f000000a480)='nr0\x00') sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f000000a680)={&(0x7f000000a4c0), 0xc, &(0x7f000000a640)={&(0x7f000000a500)={0x140, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x162}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, [{0x12, 0x1}, {0xb, 0x1}, {0x12}, {0x24}, {0x13, 0x1}, {0xb, 0x1}, {0x30, 0x1}, {0x36, 0x1}, {0x48, 0x1}, {0xc, 0x1}, {0x60}, {0x36, 0x1}, {0x4}, {0x1b, 0x1}, {0x48, 0x1}, {0x0, 0x1}, {0x18, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0xc, 0x1}, {0x24}, {0x6, 0x1}, {0x18}, {0x36, 0x1}, {0x12, 0x1}, {0xb, 0x1}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xff}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd0, 0xbe, "52be9f8e2de6e7839d9a7f53f95dfc9178bab55e7591ac6e92f4d0ee31c4a5d5d19733b826679c7dc57b6f22b7478d3877538074b950900960c2383534ef27ac90a50a2b611fc1138ee557d92827505bf3f742616c0f8a552a4cdc8df935ecc4687eea2e37a83282a567ca35eec3e8eb4ba1d21b0888298203017324185bfd2e8585f835a50223d6cd1ed404da6aa63168c8a46b19e45923f9544e1580592b7c933a2b30d62929d83c491f6d8ff7b375b5029fb4b55d0345794cb0e20981b9e6a0edff7ed3d5dc9fb1bc9f96"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x80000000}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000884}, 0x24000080) r11 = socket$inet_icmp(0x2, 0x2, 0x1) fsetxattr$trusted_overlay_origin(r11, &(0x7f000000a6c0), &(0x7f000000a700), 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f000000a740)=""/213, &(0x7f000000a840)=0xd5) 08:26:25 executing program 3: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={0x0, 0x34, 0x3c}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'rmd160-generic\x00'}}, &(0x7f00000000c0)="91a7ca78777f40451d98e4a6bd60a029f67a13f21126749a001c7c1d0b283d719535f80dc6fd2a533c7783ea0e3df8f44a3ca37d", &(0x7f0000000100)="26f6f3b2984234d23e8f4afc21a6536e7bd2468fd948f390a4abe973918a68867928304bafd18860964f2ae18d56628f574f40336cf67a502523dcac") r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendto$inet(r0, &(0x7f0000000140)="1b7032336377a42ba2c55267f089989bd42ee9e6115a964e5ec02568c890cff3a6a95e214700b14ced2c18725b139cebb1a5ef1c12fc3403ad", 0x39, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048890}, 0x240088c1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000300)={0x8, 'nr0\x00', {'batadv_slave_1\x00'}, 0x37}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000340)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x14) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/netlink\x00') sendto$packet(r4, &(0x7f0000000700)="90fa3756ec183d41da1e44c31f6e6a75666dce9f447f7e3722da137da4b93a7bd0df195e70632faf58321f3c112ff49dd0e03858b2f091b839564e5e7a8c94b00f19cd27396fe192fa6b0abcac8a1cb1c0e7774ffdfaf7c74c5386bc055a81147bd487a35f867b13864d963c2a7d23cce5c1ae945668a36b40b1f8efd0218d7a9dd26c10240f38a946c0a7c26345e8a6be548f8c3a6573", 0x97, 0x4000000, &(0x7f00000007c0)={0x11, 0x1b, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000800)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000840)={0x4, 0x1, 'client0\x00', 0x1, "d63518556486591e", "17f0e39bd9b16bd789b531416f6ce88e0fd638efecda549c7cf49335d67bb91d", 0x7, 0x1f}) write$char_usb(r4, &(0x7f0000000900)="4fe7e9e06f2516f31c8d68e1d90b5ce351be525abd8a41ae07b31699868206", 0x1f) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000a40)={&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000980)=""/163, 0xa3}) add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) epoll_pwait(0xffffffffffffffff, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x3af, &(0x7f0000000b80)={[0x1000]}, 0x8) [ 122.957308] audit: type=1400 audit(1749284785.455:7): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:26:25 executing program 5: ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000280), 0xffffffffffffffff, 0x511081) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x8, &(0x7f00000002c0)=[{0x7, 0x4, 0x0, 0xb905}, {0x200, 0x81, 0x4, 0x7}, {0x300, 0x6c, 0x0, 0x80}, {0x6, 0x9, 0x1, 0x10001}, {0x40, 0x3f, 0x81, 0x5ab7}, {0x72, 0x9, 0xfc, 0x20}, {0x6, 0x1, 0x40, 0x62fc}, {0x3, 0xe0, 0x1f, 0xc5}]}, 0x10) write$P9_RRENAMEAT(r0, &(0x7f0000000340)={0x7, 0x4b, 0x2}, 0x7) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f2, 0x10, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0xc044) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000480)=0x9) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x2f4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2c}}}}, [@NL80211_ATTR_TESTDATA={0x8f, 0x45, "76522b5bb2f9c109a386e5e7efbbdf5de0c8206c8a3f11aecbb167515ea99db5fc04faa91aa9d1ae8a0f597153a920df492b7016b1385ffe6f80a304b95d295dbdbd068b7d10f485459e0bfffcd4d20f5df9aac8c5cd7ab8cdd29f4e0249582e76393cc0e437b0601e443d297525e2168d9f841cd6f572b9f5557839de1a518e52abc2730a525494816157"}, @NL80211_ATTR_TESTDATA={0xac, 0x45, "284e71081dc24c003cc49f250c514a7f6c19ea8588ffdae3b8fb68651dfe1879e60a394f5e6b5890b08e536e1ec23c524941368fbe31894cc3afbef384151412480838f1bcca1db4cfc6fc6bcc616ff000c9f80210d43b91a5fa8637d861fa69f38cdb4955382fa64b9b74110760d4d2e3e2238e31f20bc03ee0a767a73ecd0149f6aa7ef9828b0536c18e10e53b45c4297d2bcaba014c1b44f1f56017f3e7d5ba6ebf7b9ff78f89"}, @NL80211_ATTR_TESTDATA={0x92, 0x45, "160f39c261a6956e69a4a9a5832dbf03dfd213d70a06f6437c4311ba42e419d57787f6993bf945d83dac67bdc6161e15e4790c33816b44e7f88528a59a1ca706e56f1fd43d5b645dd48ad7825308ea5b5ee42264fb3c6b6c9113eefacf6d478440972a0da36f86d7c04d5c3d4334c3811d1baa00cb21bb99684912e5262be3e28561fd5abcb152da771c6e45d482"}, @NL80211_ATTR_TESTDATA={0x102, 0x45, "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"}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000880)={0x1ff, 0x7, 0x4, 0x8, 0x4}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000008c0)={0x2, 'ip_vti0\x00', 0x2}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000900)=r2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000940)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000009c0)={0x0, 0x8, 0x2, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000dc0)={{r4}, 0x0, 0x10, @unused=[0x2, 0x8, 0xffffffffffffff80], @devid=r5}) bind$bt_l2cap(r0, &(0x7f0000001dc0)={0x1f, 0x5, @any, 0x5a4, 0x1}, 0xe) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001e00)) 08:26:25 executing program 4: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x8, 0x1, 0x69f4, 0x5, 0x2400000}) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000040)="5620e05f77bb08a2cc43a1bfb17405ab76b6d9a05d4ea78502d5e8a02013") getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9180202ff5e2943b}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffbff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x40000005) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000003c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, {0x6, @remote}, 0x54, {0x2, 0x4e22, @broadcast}, 'veth1_macvtap\x00'}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400000c0}, 0x1) r3 = signalfd4(r1, &(0x7f00000005c0)={[0x81]}, 0x8, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000640)={0x2e8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x2d2, 0x2a, [@measure_req={0x26, 0x88, {0x82, 0x7f, 0x18, "725d0de6a54b93b44f87be91b820dc4c18a8b5de3247c148f50d6a88836e3157045c9af815a8fb84d6f8d6a59f3c44745fab57ff7e4d59d40ba59935ebec7b4563dc3c746b4f92c1c06f8a43054721f15caabb2ce83aadc84cea2aa92c43c377598f196fe630bfae370f8db74c742c44d0a0d98d3e11535cdf29e913bda9e79bb89b0198ce"}}, @tim={0x5, 0xe8, {0x2, 0x9d, 0x4, "1b59e474bba1575ec456a303cb022422d5c876ca9dafb041fb955e5c969c0711d6e1c17fffa013f53331b6433170850c37fa3801c050b4e73ac628631fb527f1cac135b80c649d2dfc3518df90aac6ca7f2bee88eed3c29fae0f370558c86884eda6de6bd1aa470bfd0aaec0e6048c203e65e73344a3113bb407ad6f5fc627d3e73da1f31b676db51c0e57db31ccf11a776e1e3c82d8893dfd0e1960788b64a1d45b9eb73e003c8dabbd43e307232d77e53fd247a779760dce266a20d5d1ffc55cb753d23a296d42f422c85bfb6eea0096ab491f6320845cf0de826bcc31ac46055fe727c0"}}, @mesh_chsw={0x76, 0x6, {0x2, 0x6, 0x32, 0x5}}, @perr={0x84, 0x35, {0x20, 0x3, [@ext={{}, @device_b, 0x0, @device_a, 0x11}, @not_ext={{}, @broadcast, 0x4bf, "", 0x36}, @ext={{}, @broadcast, 0x8000, @device_b, 0x2d}]}}, @perr={0x84, 0xa8, {0x7f, 0xa, [@not_ext={{}, @device_a, 0x5, "", 0xb}, @ext={{}, @broadcast, 0x7f, @device_b, 0x8}, @ext={{}, @device_a, 0x9, @device_b, 0x21}, @ext={{}, @broadcast, 0x1, @device_b, 0x1f}, @ext={{}, @device_b, 0xfffffffe, @device_a, 0x14}, @not_ext={{}, @broadcast, 0x3ff, "", 0xa}, @ext={{}, @broadcast, 0x4, @device_a, 0xf}, @ext={{}, @device_b, 0x5, @device_a, 0x16}, @not_ext={{}, @broadcast, 0x1e2, "", 0x30}, @not_ext={{}, @broadcast, 0x0, "", 0x1d}]}}, @tim={0x5, 0x6f, {0x3, 0xfc, 0x1, "5c866bf757ceda5317bf9b0011ff81b571b15d1873761fc1015cfa5fcbd491f80a7764a645a29dabfdeeba6fec8706894ecae6e5e726a144e771598b4e9a032fd223fe4b33e4862c3202ec08eb88e9be4bef57a962a48f34102cd958156966498d786c2e5cfb62ae14c77773"}}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x40880}, 0x20040048) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r3) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000011}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd9, 0x37}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000c80)={@loopback, 0x0}, &(0x7f0000000cc0)=0x14) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d00)={0x0, @remote, @initdev}, &(0x7f0000000d40)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0xc1) syz_mount_image$nfs(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0xf2, 0x4, &(0x7f0000001140)=[{&(0x7f0000000f40)="870eec57a67ecf955b5f81a6a9a1f7e566e2fed996d7d6953b5c500df0785140e9aa71e6", 0x24, 0x5}, {&(0x7f0000000f80)="3ccddc0a7c1f608657c3f74f3e664192e396ecd1327b21fe09a153ad94f11ac5f39a81ecc6897adb27", 0x29, 0x1ff}, {&(0x7f0000000fc0)="b1270bab1605c518e55945449b3c326a07cf653985661f9c43d19f8466fe59a5df258908eb84a214e266a2e1675f3724e361fa59244fa1acea7d8a6de64725dbbc5da7c6cfa6ac0e8ae9ed62588ad2962de14ad3edf7abe3584069f444f23cfc1d09ce353a73550de62e70", 0x6b, 0x8}, {&(0x7f0000001040)="e7370f110627fbb8daebbae57a0102a79818c1de0fba3e3328ac9acaf3ce8d2c636a9cad86238123c6e725c78bde10c84ed56af84cf9a924f118ef03ca5ad4180763affd4ed13863fb5541142a49952479e9df74246cf007da1395672344e457e39d517dc3ff963faea65ef5d45d8302657bf3a89f888d1a711b1a066fcafc28f0c72865d849029de03c3fadfd84365a575834b4b79c1f938e2419cc5a3ea5ff766ce90d343fe4bfc012efb5823546c48f78d5561170c114261fc16e5e44ff55cc84dd27c990a98c42f2422fee50d1de845f", 0xd2, 0x6}], 0x40008, &(0x7f00000011c0)={[], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, '.$+{'}}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) socket$nl_generic(0x10, 0x3, 0x10) 08:26:25 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000040)) r1 = accept$packet(r0, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000b40)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x1) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x188, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x47}}}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8a, 0x3}, {0x1, 0x2}, {0x3, 0x7}, {0x1, 0x3}, {0xdf, 0x1}, {0x1, 0x1}, {0x6, 0x7}, {0x8, 0x3}, {0x6, 0x5}, {0x20, 0x7}, {0x80, 0x7}, {0xff, 0x4}, {0xfc, 0x2}, {0x92, 0x6}, {0x3, 0x3}, {0x1, 0x4}, {0x35}], "de923bbbeb00253f"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x6}, {0x6, 0x6}, {0xb3, 0x2}, {0x3, 0x5}, {0x40}, {0x7f, 0x3}, {0x0, 0x3}, {0x8, 0x3}, {0x9, 0x7}, {}, {0x9, 0x5}, {0x6, 0x7}, {0x2f, 0x5}, {0x6, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x2, 0x1}, {0x14, 0x3}, {0x9, 0x6}, {0x4, 0x3}], "2ebb970fbf4aea46"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x81, 0x3}, {0x1f, 0x7}, {0x6, 0x1}, {0x7, 0x6}, {0x0, 0x2}, {0x7}, {0x2, 0x4}, {0xc0, 0x4}, {0x15, 0x4}, {0x6, 0x3}, {0x1}], "6a806011de40a22a"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x4, 0x4}, {0x7f}, {0x1, 0x6}, {0x8a, 0x3}, {0x3f, 0x6}, {0x40, 0x5}, {0x8, 0x4}, {0x80, 0x2}, {0x1}], "bced7a8b7146370d"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x80, 0x6}, {0x9, 0x2}, {0x80, 0x2}, {0x8, 0x5}, {0x5, 0x1}, {0x1, 0x6}], "693d06a4022a4668"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x81, 0x2}, {0x1f, 0x2}, {0x0, 0x7}, {0x1, 0x5}, {0x8, 0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x12, 0x3}, {0xcd, 0x4}, {0x5, 0x6}, {0xff, 0x1}, {0x8, 0x2}, {0x9}, {0x3f, 0x3}, {0x9, 0x6}, {0xff, 0x2}, {0x9, 0x1}, {0xfd, 0x2}, {0x3, 0x3}], "f329c2710f36d9c8"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x3f, 0x1}, {0x2, 0x3}, {0x1f, 0x6}, {0x5, 0x1}, {0x4, 0x6}, {0x80, 0x3}, {0x7, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x1f, 0x7}, {0x6, 0x3}], "08ddd628a8282c03"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x1, 0x3}, {0x3, 0x6}, {0x2}, {0x4, 0x7}, {0x9, 0x2}, {0x11, 0x1}, {0x1, 0x5}, {0xf4, 0x2}, {}, {0x4b, 0x1}, {0x0, 0x4}, {0x20, 0x2}, {0x7, 0x4}, {0x20, 0x4}], "b9b99fc47e3c5030"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7, 0x3}, {0x1f, 0x4}, {0x5, 0x4}, {0xe8, 0x2}, {0x5, 0x6}, {0x5, 0x1}], "29b29030284e6f62"}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40840}, 0x2000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xcf}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5e}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x55}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r1, {0x7fff, 0x1f}}, './file0\x00'}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000f40)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000f80)={r0, 0x3, 0x2, 0x7fffffff}) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000fc0)) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001000)='./binderfs/binder-control\x00', 0x0, 0x0) fsetxattr(r3, &(0x7f0000001040)=@random={'btrfs.', '/dev/hpet\x00'}, &(0x7f0000001080)='/dev/hpet\x00', 0xa, 0x3) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) r5 = accept$packet(r0, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001100)=0x14) pread64(r5, &(0x7f0000001140)=""/52, 0x34, 0x4) rt_sigprocmask(0x0, &(0x7f0000001180)={[0x2]}, &(0x7f00000011c0), 0x8) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000001240)={{0x0, 0x989680}}, &(0x7f0000001280)) 08:26:25 executing program 7: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10400, 0xc1) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x8, 0x9}, 0x100, './file0\x00'}) chroot(&(0x7f0000000180)='./file0\x00') ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)) setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)={'L-', 0x1000}, 0x16, 0x3) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8, 0x80800) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000300)={0xff, 0xf8, 0x1ff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000380)=0x9) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0xf06, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3f}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000006c0)={0x10001, 0x6, 0x9}) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000700)={{0xc, @remote, 0x4e21, 0x2, 'fo\x00', 0xa, 0xfffffff7, 0x6d}, {@empty, 0x4e22, 0x10000, 0x26e, 0x401, 0x4}}, 0x44) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000780)=@v2={0x2, @aes128, 0x3, '\x00', @auto="726f1ae8362989910555182d995c20d4"}) statx(r2, &(0x7f00000007c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000800)) prctl$PR_CAPBSET_READ(0x17, 0x1e) [ 124.524768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.532043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.534840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.543597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.549868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.592854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.599489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.604119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.607560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.609395] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.612492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.620944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.628023] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.632816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.641486] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.662807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.693796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.699477] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.701852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.709000] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.710505] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.717652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.723312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.727648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.740584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.751178] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.752318] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.768504] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.773621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.793672] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.796395] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.798294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.800110] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.819801] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.823708] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.828160] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 124.840860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.843498] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.850191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.864404] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 126.601283] Bluetooth: hci0: command tx timeout [ 126.729009] Bluetooth: hci1: command tx timeout [ 126.729713] Bluetooth: hci2: command tx timeout [ 126.857123] Bluetooth: hci7: command tx timeout [ 126.857704] Bluetooth: hci5: command tx timeout [ 126.859173] Bluetooth: hci3: command tx timeout [ 126.859203] Bluetooth: hci4: command tx timeout [ 126.921250] Bluetooth: hci6: command tx timeout [ 128.649089] Bluetooth: hci0: command tx timeout [ 128.779188] Bluetooth: hci1: command tx timeout [ 128.779503] Bluetooth: hci2: command tx timeout [ 128.905645] Bluetooth: hci4: command tx timeout [ 128.905703] Bluetooth: hci5: command tx timeout [ 128.906363] Bluetooth: hci3: command tx timeout [ 128.906400] Bluetooth: hci7: command tx timeout [ 128.968981] Bluetooth: hci6: command tx timeout [ 130.696957] Bluetooth: hci0: command tx timeout [ 130.825169] Bluetooth: hci1: command tx timeout [ 130.827963] Bluetooth: hci2: command tx timeout [ 130.953935] Bluetooth: hci4: command tx timeout [ 130.954412] Bluetooth: hci5: command tx timeout [ 130.954833] Bluetooth: hci7: command tx timeout [ 130.955300] Bluetooth: hci3: command tx timeout [ 131.017211] Bluetooth: hci6: command tx timeout [ 132.745160] Bluetooth: hci0: command tx timeout [ 132.873086] Bluetooth: hci2: command tx timeout [ 132.873220] Bluetooth: hci1: command tx timeout [ 133.001114] Bluetooth: hci3: command tx timeout [ 133.001329] Bluetooth: hci7: command tx timeout [ 133.002104] Bluetooth: hci5: command tx timeout [ 133.002453] Bluetooth: hci4: command tx timeout [ 133.064944] Bluetooth: hci6: command tx timeout [ 184.297012] syz-executor.0 (295) used greatest stack depth: 24640 bytes left [ 184.528717] syz-executor.3 (292) used greatest stack depth: 24576 bytes left [ 186.984441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.988305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.992481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.007186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.015586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.123068] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.129613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.134734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.139575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.143668] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.145430] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.151436] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.156507] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.165123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.165518] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.167171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.172749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.194768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.205090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.222513] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.239703] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.251405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.274485] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.299429] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.334701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.661142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.673443] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.692319] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.694084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.698024] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.702607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.716643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.736608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.743034] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.746587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.758595] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.766833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.772396] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.774379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.781481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.067114] Bluetooth: hci0: command tx timeout [ 189.258096] Bluetooth: hci3: command tx timeout [ 189.258132] Bluetooth: hci2: command tx timeout [ 189.321011] Bluetooth: hci1: command tx timeout [ 189.385102] Bluetooth: hci4: command tx timeout [ 189.833279] Bluetooth: hci5: command tx timeout [ 189.897615] Bluetooth: hci6: command tx timeout [ 189.897667] Bluetooth: hci7: command tx timeout [ 191.113028] Bluetooth: hci0: command tx timeout [ 191.306040] Bluetooth: hci3: command tx timeout [ 191.306119] Bluetooth: hci2: command tx timeout [ 191.370951] Bluetooth: hci1: command tx timeout [ 191.434019] Bluetooth: hci4: command tx timeout [ 191.881017] Bluetooth: hci5: command tx timeout [ 191.944969] Bluetooth: hci7: command tx timeout [ 191.946457] Bluetooth: hci6: command tx timeout [ 193.161967] Bluetooth: hci0: command tx timeout [ 193.353017] Bluetooth: hci2: command tx timeout [ 193.353524] Bluetooth: hci3: command tx timeout [ 193.417099] Bluetooth: hci1: command tx timeout [ 193.481238] Bluetooth: hci4: command tx timeout [ 193.929133] Bluetooth: hci5: command tx timeout [ 193.993269] Bluetooth: hci6: command tx timeout [ 193.993766] Bluetooth: hci7: command tx timeout [ 195.209022] Bluetooth: hci0: command tx timeout [ 195.401843] Bluetooth: hci2: command tx timeout [ 195.401948] Bluetooth: hci3: command tx timeout [ 195.465378] Bluetooth: hci1: command tx timeout [ 195.529982] Bluetooth: hci4: command tx timeout [ 195.978255] Bluetooth: hci5: command tx timeout [ 196.042428] Bluetooth: hci7: command tx timeout [ 196.042612] Bluetooth: hci6: command tx timeout [ 249.568734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.571392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.574435] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.587781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.591643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.645299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.649679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.654530] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.666446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.675608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.922433] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.936243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.955623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.963547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.969556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.972291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.982270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.984705] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.985622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.991761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.998800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.002419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.011459] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.028674] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.046359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.050110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.055637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.106558] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.111651] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.114790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.120193] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 250.130418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.133669] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 250.140150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.145341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.149252] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.164676] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.182576] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.219192] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.238296] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.660052] Bluetooth: hci0: command tx timeout [ 251.722191] Bluetooth: hci1: command tx timeout [ 252.105045] Bluetooth: hci3: command tx timeout [ 252.169053] Bluetooth: hci4: command tx timeout [ 252.233001] Bluetooth: hci5: command tx timeout [ 252.233721] Bluetooth: hci7: command tx timeout [ 252.234002] Bluetooth: hci2: command tx timeout [ 252.361375] Bluetooth: hci6: command tx timeout [ 253.705014] Bluetooth: hci0: command tx timeout [ 253.769130] Bluetooth: hci1: command tx timeout [ 254.153285] Bluetooth: hci3: command tx timeout [ 254.217043] Bluetooth: hci4: command tx timeout [ 254.281135] Bluetooth: hci7: command tx timeout [ 254.281635] Bluetooth: hci5: command tx timeout [ 254.283138] Bluetooth: hci2: command tx timeout [ 254.410093] Bluetooth: hci6: command tx timeout [ 255.755956] Bluetooth: hci0: command tx timeout [ 255.817090] Bluetooth: hci1: command tx timeout [ 256.202986] Bluetooth: hci3: command tx timeout [ 256.265999] Bluetooth: hci4: command tx timeout [ 256.329589] Bluetooth: hci5: command tx timeout [ 256.330522] Bluetooth: hci2: command tx timeout [ 256.331447] Bluetooth: hci7: command tx timeout [ 256.457108] Bluetooth: hci6: command tx timeout [ 257.801479] Bluetooth: hci0: command tx timeout [ 257.865831] Bluetooth: hci1: command tx timeout [ 258.249967] Bluetooth: hci3: command tx timeout [ 258.314925] Bluetooth: hci4: command tx timeout [ 258.376973] Bluetooth: hci2: command tx timeout [ 258.378204] Bluetooth: hci5: command tx timeout [ 258.378632] Bluetooth: hci7: command tx timeout [ 258.507029] Bluetooth: hci6: command tx timeout [ 312.101500] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.108362] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.116512] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.127446] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.135417] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.179064] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.183173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.191720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.197763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.202086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.320623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.327763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.345525] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.364256] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.366849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.373222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.379820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.390401] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.397795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.445790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.451605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.457014] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.462177] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.481475] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.486598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.488604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.499290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.514632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.524353] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.526540] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.530770] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.533450] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.538731] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.541328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.596598] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.598454] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.605511] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.607254] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.609683] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.647851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 314.186339] Bluetooth: hci0: command tx timeout [ 314.249372] Bluetooth: hci1: command tx timeout [ 314.441246] Bluetooth: hci2: command tx timeout [ 314.634041] Bluetooth: hci3: command tx timeout [ 314.697342] Bluetooth: hci6: command tx timeout [ 314.699055] Bluetooth: hci4: command tx timeout [ 314.762323] Bluetooth: hci5: command tx timeout [ 314.762479] Bluetooth: hci7: command tx timeout [ 316.234014] Bluetooth: hci0: command tx timeout [ 316.298232] Bluetooth: hci1: command tx timeout [ 316.491910] Bluetooth: hci2: command tx timeout [ 316.681995] Bluetooth: hci3: command tx timeout [ 316.745049] Bluetooth: hci4: command tx timeout [ 316.747917] Bluetooth: hci6: command tx timeout [ 316.809346] Bluetooth: hci5: command tx timeout [ 316.811010] Bluetooth: hci7: command tx timeout [ 318.282930] Bluetooth: hci0: command tx timeout [ 318.345141] Bluetooth: hci1: command tx timeout [ 318.536985] Bluetooth: hci2: command tx timeout [ 318.729180] Bluetooth: hci3: command tx timeout [ 318.793053] Bluetooth: hci6: command tx timeout [ 318.793291] Bluetooth: hci4: command tx timeout [ 318.857910] Bluetooth: hci7: command tx timeout [ 318.857979] Bluetooth: hci5: command tx timeout [ 320.329982] Bluetooth: hci0: command tx timeout [ 320.393026] Bluetooth: hci1: command tx timeout [ 320.584970] Bluetooth: hci2: command tx timeout [ 320.776957] Bluetooth: hci3: command tx timeout [ 320.841952] Bluetooth: hci6: command tx timeout [ 320.841979] Bluetooth: hci4: command tx timeout [ 320.905918] Bluetooth: hci5: command tx timeout [ 320.905976] Bluetooth: hci7: command tx timeout [ 374.305478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.308991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.315512] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.323809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.330096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.635107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.642211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.644727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.666847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.679579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.685757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.690063] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.693454] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.699491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.711947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.748157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.752470] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.756802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.766419] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.776629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.796342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.803555] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.814942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.821831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.824792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.830125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.833258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.838598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.864666] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.865617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.879091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.879225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.884378] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.890198] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.890681] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.896866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.944983] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.948802] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.957452] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.969803] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.393146] Bluetooth: hci0: command tx timeout [ 376.777530] Bluetooth: hci1: command tx timeout [ 376.840962] Bluetooth: hci2: command tx timeout [ 376.906024] Bluetooth: hci6: command tx timeout [ 376.969046] Bluetooth: hci3: command tx timeout [ 376.969636] Bluetooth: hci5: command tx timeout [ 377.034181] Bluetooth: hci7: command tx timeout [ 377.034756] Bluetooth: hci4: command tx timeout [ 378.441011] Bluetooth: hci0: command tx timeout [ 378.825136] Bluetooth: hci1: command tx timeout [ 378.889136] Bluetooth: hci2: command tx timeout [ 378.954507] Bluetooth: hci6: command tx timeout [ 379.017044] Bluetooth: hci3: command tx timeout [ 379.017461] Bluetooth: hci5: command tx timeout [ 379.080979] Bluetooth: hci7: command tx timeout [ 379.081404] Bluetooth: hci4: command tx timeout [ 380.489956] Bluetooth: hci0: command tx timeout [ 380.873948] Bluetooth: hci1: command tx timeout [ 380.938299] Bluetooth: hci2: command tx timeout [ 381.003049] Bluetooth: hci6: command tx timeout [ 381.065961] Bluetooth: hci5: command tx timeout [ 381.066393] Bluetooth: hci3: command tx timeout [ 381.130015] Bluetooth: hci7: command tx timeout [ 381.130451] Bluetooth: hci4: command tx timeout [ 382.538140] Bluetooth: hci0: command tx timeout [ 382.922160] Bluetooth: hci1: command tx timeout [ 382.986170] Bluetooth: hci2: command tx timeout [ 383.049966] Bluetooth: hci6: command tx timeout [ 383.113923] Bluetooth: hci3: command tx timeout [ 383.114379] Bluetooth: hci5: command tx timeout [ 383.177111] Bluetooth: hci4: command tx timeout [ 383.177567] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 08:31:31 Registers: info registers vcpu 0 RAX=0000000080010100 RBX=00000000000c9cfc RCX=ffffffff81621ca1 RDX=ffff888016013700 RSI=00000000004f1a4a RDI=0000000000000006 RBP=00000063bd7cd8d4 RSP=ffff88806ce086e8 R8 =0000000000000001 R9 =0000000000000000 R10=000002848e100549 R11=0000000000000001 R12=00000000004f1a4a R13=dffffc0000000000 R14=ffffffffffffffff R15=000002848e100549 RIP=ffffffff81621ca4 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f71781a8540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffcd9c72a00 CR3=000000002a9d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff817410db RDX=ffff8880184cb700 RSI=ffffffff81741197 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff88806cf089f8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c74de8 R15=ffff8880389c5400 RIP=ffffffff815ab8e5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f30afd92540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f30b025c008 CR3=000000002a946000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000