Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:46695' (ECDSA) to the list of known hosts. 2025/06/07 17:42:09 fuzzer started 2025/06/07 17:42:10 dialing manager at localhost:40003 syzkaller login: [ 94.618984] cgroup: Unknown subsys name 'net' [ 94.752245] cgroup: Unknown subsys name 'cpuset' [ 94.802981] cgroup: Unknown subsys name 'rlimit' 2025/06/07 17:42:25 syscalls: 2214 2025/06/07 17:42:25 code coverage: enabled 2025/06/07 17:42:25 comparison tracing: enabled 2025/06/07 17:42:25 extra coverage: enabled 2025/06/07 17:42:25 setuid sandbox: enabled 2025/06/07 17:42:25 namespace sandbox: enabled 2025/06/07 17:42:25 Android sandbox: enabled 2025/06/07 17:42:25 fault injection: enabled 2025/06/07 17:42:25 leak checking: enabled 2025/06/07 17:42:25 net packet injection: enabled 2025/06/07 17:42:25 net device setup: enabled 2025/06/07 17:42:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/07 17:42:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/07 17:42:25 USB emulation: enabled 2025/06/07 17:42:25 hci packet injection: enabled 2025/06/07 17:42:25 wifi device emulation: enabled 2025/06/07 17:42:25 802.15.4 emulation: enabled 2025/06/07 17:42:25 fetching corpus: 0, signal 0/0 (executing program) 2025/06/07 17:42:27 starting 8 fuzzer processes 17:42:27 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x21) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r1, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x40040) r2 = pidfd_getfd(r0, r0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x324, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x120, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffff}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x800}}, {0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xfd, 0x1, "65c7ef8d45cab6853bab1fa539c07117d907d597c75253c5da1f8f85bd266af75be8093d1f78c883be12449fa3df625bb2935572f8f978c5a274cb053eee0fa02db0c83ec319b80384b6f3878f563b8cebbd52ef7c96cbc2ebd05d06b675a5b1e5431f821aff33db576c4225fa444bae5540d7075ca057392ea8f722d901f2346e04059e61a828a5d1544e949fc0321045e9e7712a8e6447d9896e5b243367e83a68031d4ba061e0a4b876cc97882bad9a9256a4e1865e511c4f5fef4c784aeb0149695b295999821281598fe2aa0973a58d7275a9d467f55aa2bc0ce0cbdeddcb20129ba08807934d4aa7d2503113f9fc8155728624f48c1d"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe, 0x1, "7dc5e66f5cd2173fb949"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x200}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfff}}, {0xd4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xce, 0x2, "d5646af7740dd77b0758be98966debb41937651be54e02dfd48e8ff7127b472fe6013ce77c234ee16af4c3320c0099187f1e95cbc0e34779aea409d8c3f8acc9824b765ee8968f6305fbcdf5eebadb4fa5f3cc838ba0ab6515e89add815928279f6ca98131d7012d66c71fb7dcfc7a32c8add0c932d8fa63f7b3c3ef9b0d97604fbdbbe617f7d02d58d0ff2c61156c0208384a65327c6d98791774aef3023bbdfc43b85d4445cf289c71023c13a17cb52fb57aeb5e18e1399bef93afe67cc096fcb3aebd0f2e0e3e7671"}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x9, 0x1, "94719f26b9"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa8, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x9d, 0x1, "8080f655c6ddb7b7f556f9176410766c561c7026c24e028261017280ccf2f57421dd7cdedd7bdb3b8fbd5bf88506e60cad7efe54a82b18b964103aaf9c4c3cb847c008127f4475a1a7451452b8c927030fdb079f09df5b10fc6cb74d7866d80e2534deccd1e18f0729a76f99fa2da8ebf0d2a394c14fb964699a9f8d6510b063b48b2afc70ae6dccf051987dbe927220e4adf0ef4c4dd82e3e"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1a}]}, 0x324}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000010) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000580)={0x9, {{0xa, 0x4e21, 0xed7, @remote, 0x1}}, {{0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000008c0)=0xe8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000a00)={&(0x7f0000000700), 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x94, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000080) mount$9p_rdma(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x28, &(0x7f0000000b00)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0xf43}}, {@common=@fscache}, {@rq={'rq', 0x3d, 0x8}}, {@sq={'sq', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x6}}], [{@context={'context', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, 'nl80211\x00'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r7, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x46}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$FIOCLEX(r2, 0x5451) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000d80)={0x10001, {{0xa, 0x4e24, 0x1f, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}}, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000e40)={{0xa, 0x4e22, 0x789b, @empty, 0x2e}, {0xa, 0x4e22, 0x28025192, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x401}, 0x8, [0x7fffffff, 0x8, 0x3e9a4d52, 0x8, 0x8, 0xfffffffc, 0x5, 0x6]}, 0x5c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r2) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r9, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6e}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8000, 0x3f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40001) 17:42:27 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xf7}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3f}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5b}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000400)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x7}, [{0x2, 0x6, r3}, {0x2, 0x2, 0xee00}, {0x2, 0x1}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x0, r4}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x2, r5}], {0x4, 0x3}, [{0x8, 0x2, 0xee01}, {0x8, 0x2, r6}], {0x10, 0x4}}, 0x74, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x6766c350ef8bb87f}, 0x40001) socketpair(0x37, 0x80000, 0x5, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TRIM(r7, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x400, 0x70bd2b, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8084}, 0x4000001) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000780)={'ipvlan0\x00'}) r8 = dup(r2) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r8, 0x8008330e, &(0x7f00000007c0)) r9 = dup(r8) ioctl$HIDIOCGVERSION(r9, 0x80044801, &(0x7f0000000800)) ioctl$F2FS_IOC_FLUSH_DEVICE(r9, 0x4008f50a, &(0x7f0000000840)={0x1}) [ 111.323222] audit: type=1400 audit(1749318147.239:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:42:27 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x22, 0x2a, [@cf={0x4, 0x6, {0x4, 0x1f, 0x5, 0x2000}}, @peer_mgmt={0x75, 0x14, {0x0, 0x6, @void, @void, @val="094c9d31a71512aee267c9345b77e11b"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x3, 0x101, {{0x3a, 0x4, 0x0, 0x15, 0xe8, 0x68, 0x0, 0x20, 0x2f, 0x0, @local, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x2c, 0xf8, 0x3, 0x3, [{@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x7}]}, @timestamp_addr={0x44, 0x44, 0x73, 0x1, 0x8, [{@multicast1, 0xc3}, {@empty, 0x200}, {@empty, 0x200}, {@rand_addr=0x64010100, 0x3}, {@local, 0x10000}, {@remote, 0x80000000}, {@rand_addr=0x64010101, 0x2000}, {@multicast2, 0x3}]}, @generic={0x89, 0xc, "921164542fa7fa963e2a"}, @timestamp_prespec={0x44, 0x54, 0xd8, 0x3, 0x7, [{@private=0xa010102, 0x8}, {@loopback, 0x4}, {@multicast1, 0x1}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0x3}, {@empty, 0x20}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7}, {@multicast1, 0xa6}, {@local, 0x8}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000540)={@multicast1, @multicast2, 0x0}, &(0x7f0000000580)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000700)=0xe8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1f0, 0x0, 0x808, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000009c0)=0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x4a0bb34c44b523f0}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000a40)={'veth1_to_team\x00'}) fsetxattr$security_evm(r0, &(0x7f0000000a80), &(0x7f0000000ac0)=@ng={0x4, 0x4, "e3c4bcf51edbe6f2576acd19cfe605d6"}, 0x12, 0x2) recvmmsg$unix(r6, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000b00)=""/28, 0x1c}, {&(0x7f0000000b40)=""/1, 0x1}, {&(0x7f0000000b80)=""/155, 0x9b}, {&(0x7f0000000c40)=""/73, 0x49}, {&(0x7f0000000cc0)=""/61, 0x3d}, {&(0x7f0000000d00)=""/105, 0x69}, {&(0x7f0000000d80)=""/242, 0xf2}, {&(0x7f0000000e80)=""/195, 0xc3}], 0x8, &(0x7f0000001000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001080), 0x6e, &(0x7f0000001380)=[{&(0x7f0000001100)=""/65, 0x41}, {&(0x7f0000001180)=""/136, 0x88}, {&(0x7f0000001240)=""/63, 0x3f}, {&(0x7f0000001280)=""/210, 0xd2}], 0x4, &(0x7f00000013c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x148}}], 0x3, 0x40002102, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000001680), 0x4) r13 = dup(r10) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000016c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000017c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000001800)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e21, 0x9, 0x4e24, 0x8, 0xa, 0x80, 0x20, 0x62, r14, r12}, {0x7, 0x5, 0xb94, 0x8000, 0x7, 0x5, 0x6, 0x7}, {0x940d, 0x23, 0x40, 0x2}, 0x1, 0x6e6bb4, 0x0, 0x1, 0x3, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d2, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x3507, 0x1, 0x2, 0xe6, 0x5, 0x4, 0x3}}, 0xe8) perf_event_open$cgroup(&(0x7f0000001940)={0x3, 0x80, 0x2, 0xeb, 0xd6, 0x7f, 0x0, 0x7779b77b, 0x12012, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000001900), 0x4}, 0x463, 0x8, 0x4, 0x0, 0x6a2, 0x51bc, 0x7, 0x0, 0x4, 0x0, 0x4}, r11, 0xa, r6, 0x2) getsockopt$IP_SET_OP_GET_FNAME(r9, 0x1, 0x53, &(0x7f00000019c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000001a00)=0x2c) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000001a40)='team_slave_1\x00') 17:42:27 executing program 3: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6_vti0\x00', 0x4}, 0x18) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffff000]}, 0x8, 0x400) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'veth1_to_hsr\x00', {0x2, 0x0, @initdev}}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4420008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", "", ""]}, 0x14}}, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x9, 0x1, 0x51, @empty, @mcast2, 0x8, 0x40, 0x9, 0x8}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x26c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40002}, 0xc800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000740)={0x0, 'team_slave_1\x00', {0x4}, 0x5e49}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'ip6tnl0\x00', r1, 0x29, 0x1b, 0x6, 0x3, 0x77, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x20, 0x0, 0x400}}) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000840)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x881) r4 = dup2(r0, r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x68, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008015}, 0x8080) sendmsg$802154_dgram(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x24, @long}, 0x14, &(0x7f0000001680)={&(0x7f00000015c0)="61b8cdbc828cf4e6b63a22654e7ed123e6bb802ec122554a38aca062511fdd028bbdfc071dd64df170186232c9e3a92e9be2f5a833dfc84bacf96cf0bd81f3d55148cbb9da9d8c434d37135d1c88705d6f38747f99fbadb0df16058ef1101fc520303e078e5c108587fea1f735b4c6396e683401ddf0df6287a227d340652caab64f50878beb8dc04d9192603db2ccdfcf932c561e0d0bf16636c50792680553af564d25e6dd9a77434e9fb2d745af7a855b384d45a5865578732f1b", 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001700)={0x3, 'virt_wifi0\x00', {0x6}, 0x4}) read$hiddev(r4, &(0x7f0000001740)=""/64, 0x40) epoll_pwait(r2, &(0x7f0000001780)=[{}], 0x1, 0x80000001, &(0x7f00000017c0)={[0x4]}, 0x8) 17:42:27 executing program 4: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8000, 0x32}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000010) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000002c0)={'geneve0\x00', {0x2, 0x0, @multicast2}}) prctl$PR_GET_TSC(0x19, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2a}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) r4 = accept4(0xffffffffffffffff, &(0x7f00000004c0)=@can, &(0x7f0000000540)=0x80, 0x800) r5 = dup3(r4, r4, 0x80000) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) recvmsg$unix(r5, &(0x7f00000007c0)={&(0x7f0000000580), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000600)}], 0x1, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}, 0x40000000) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x3fb, 0x4, 0x70bd26, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8c00) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, 0x13, 0x0, 0x70bd28, 0x25dfdbff, {0x1f, 0x2, 0xfc, 0x40, {0x4e24, 0x4e21, [0x9, 0x8000, 0x2, 0x6], [0x68, 0x8, 0x8, 0xc4553bbe], 0x0, [0x5, 0x2]}, 0xfaa, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x18, 0x1, "6d24f5ee62c6cc226324118b0081e53f4ca312f8"}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x50) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/6, 0x6}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x100, 0x72}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x0, 0x1, 0x40, 0x7f}}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x1, 0x4, 0x1f, 0x7f, 0xaa2, 0x4, 0xc1, 0x5, 0x8, 0x5, 0x5, 0x6, 0x1000, 0x1, 0x1ff, 0x7]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x4, 0x3, 0xd9, 0x800}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x20000016) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c40)={r2, @local, @multicast1}, 0xc) 17:42:27 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = dup(0xffffffffffffffff) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000040)=0x1c) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x7}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}, {0x2, 0x3, 0xee00}, {0x2, 0x1}], {0x4, 0x2}, [{0x8, 0x0, r2}, {0x8, 0x2, 0xee00}], {0x10, 0x1}}, 0x54, 0x3) setxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@sha1={0x1, "839215a68c4290b56e7c08a7d73d262d16ea931b"}, 0x15, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1a800, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000300)={0x0, 0x0, 0x10001}) r4 = signalfd(r3, &(0x7f0000000340)={[0xa6]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x224, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1f8, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x800}}, {0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xfe, 0x2, "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"}}, {0xe4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xdd, 0x2, "42767aacbdbe04c15aa6c5932be7c74632a9301d31747e5ef10cef1bf6de6667bf9e74b175ead630f02370d257b7623efa76d94d3fb444aa9a62796171dbaff54598fb42b3a0646fd1ebb25f07bdd0b29fd0a0ccbf94ddd2ac8d3ffbb49a0ad2e68aa22e8e6a5ad9b0607e8a8d6f6a0c963b108c20eebad00eb412092975921ee3517a683f4f2ab4e631460d01e606d714b49f944199c90faa07f4c693b7982b532ea28baf0d19490279edd4c9cd08a5e4d9e3ea065700d1d70e89e8165a37a9541efd210c589dbc5993bfce8f317ea5dc757b8f1b1ca94508"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x224}, 0x1, 0x0, 0x0, 0x4040000}, 0xc068041) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000700)={0x0, 0x1, 0xffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000740)={{0x1, 0x1, 0x18}, './file0\x00'}) fsmount(r4, 0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x73}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x800) lchown(&(0x7f0000000a40)='./file0\x00', r1, 0x0) 17:42:27 executing program 6: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000000c0)=0x2c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x8, 'batadv_slave_1\x00', {'bridge_slave_1\x00'}, 0x3ff}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x18200, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000200)=0xf4a1, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000240)=0x101, 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000280)={0xad32, {0x21, 0x0, 0xfffffffffffffffc, 0x2}}) preadv(r0, &(0x7f0000002580)=[{&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/128, 0x80}, {&(0x7f0000000500)=""/41, 0x29}, {&(0x7f0000000540)=""/22, 0x16}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x8, 0x2, 0x9) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000002980)={{}, {0x400}, 0xb5, 0x0, 0x0, &(0x7f0000002600)='./file1\x00', &(0x7f0000002640)='./file0\x00', &(0x7f0000002680)="5909e23aa439d013a445666c747c2404fd034ede989792a7e0b2ed65015764f298e497f4aa89730166ab9152a42c7985d50ecbb1de69b68f3894a4606c8ff191eca399960811774ea0c74882fc4d3c3e9a881011887255236699830a46c7ef4c67c510454b656e908f65ba7d3c1996745b2fb720aa19ed2ebb40075038fd22bf48e90e906bbcd64e74609a40e4754788efa5915ce5f9596cf6729394801ec69aa996af92", 0xa4, 0x0, &(0x7f0000002740)={0x2, 0x181, {0x1, 0xc, 0xbb, "d5957cf761e334c367e78a7f146cfc8f2cf434e7d11ed1ac8647fd5fb5c317304738479ebe7c264b46ff502e71321b75f364f15c6132a98ecd6ad21893f2520ac16c526feed5e3ddfa4eb2c94395c8cbf58e168f96818ffe75ea02668229528b22ba3c72c2f6247761a1be03b00f49eb88a9ee1340fe3a83ada47c114f5feeb84012ad5594ced18c8114eef343596a0b6ad16346c0c4a09de83c24f2406630d660f25716679ec91e0d60ba4ef561775da967c8d79c2b41a4c2fbbf", 0xb9, "4c803c47668c06c178d1986e1252506f6a3baf80578a486e789f58e27046688ac78930dfdb5bd98bb33c64f479a3a194fccb988afe41945296e146b1ca4c5cc35087b25c0000666e1d38897e9d29f79582245d237a01ef186a13894223571bef457d7e7e6f787dd954af2f333e06095ce2e291107b8cce053c541c0176e57203f138241fee66c019ef9e133440c7dbff792bb3a4c07a254e5be9d42c66c354c479af100324ac838b4f5ee6c1f50c4a8fc74c68524dd49b85c6"}, 0x9c, "7e1e63b27315f07b9d785050ae01e0349f289d3a9715014dc7e7b9e2df1e9424b9cc7a2731491ef4b8a967ebc125438e24702dc84b3be5cf139131fe70718004c34630cdf23bc7e4d1268cccd49f7a1f3c5a8e66016b3ae53e9fcb7f9ea510c643f78554b71afc8d53acd10f1e7c4450374b27d5a01f6cea9c6eccecc52e4dd36d05f0f1415c454e94d73b7f2edaa7f2ce23206fc35cd392f823ef4c"}, 0x229}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r1) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x28, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x75}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x8000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002b40), 0x40, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002bc0), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x48, r4, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x5b}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x387}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000801) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002d00), 0x80, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000002d40)={0x9, 0x40, 0x8, 0x0, 0x81, "24857feee9a004a4"}) r6 = syz_open_procfs(0x0, &(0x7f0000002d80)='net/kcm\x00') ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f0000002dc0)) 17:42:27 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x7, 0x1}, 'port0\x00', 0xcc, 0x121000, 0xfffffffd, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0xbd}) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f00000000c0)=@bca={0x3, 0xbc, "3a2b00543d51d8fecbe73104bd46e618a111872f774520b255dd2df70e6d69bd44a8441e4ae2fa2de22baf27993c0122976c6e1f3561f9eab656b2f61ea582eb22c37cfecd26e2a47272a9323ab5d2de3b5b181fa6eff3b301d8527c2e154bb03cd52ef21b15ce90dc47f88faf1a778dc23c0af562773998f2a97134abe3f98f90cb7548391bd982e67f3c994d4753f492744da83f2f55eedd7786a75a8e33766ff795bb5fbf61e1bccd73c20411d3e3199f3482bee96df34e2ea2ed"}) r1 = openat$cgroup_ro(r0, &(0x7f0000000900)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x88c4}, 0x8045) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000a80)) write$sndseq(r0, &(0x7f0000000ac0)=[{0x48, 0x2, 0x2, 0x7f, @tick=0x1, {0x7, 0x1}, {0x1, 0x3}, @result={0x6b, 0x1}}, {0x80, 0x9, 0xe6, 0x4c, @time={0x4, 0xfffffffe}, {0x9, 0x80}, {}, @raw32={[0x4, 0x9]}}], 0x38) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) readv(r2, &(0x7f0000000d40)=[{&(0x7f0000000cc0)=""/102, 0x66}], 0x1) r3 = accept4$inet(r1, &(0x7f0000000d80)={0x2, 0x0, @multicast2}, &(0x7f0000000dc0)=0x10, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000e00)={{0x3f, 0x81}, {0x3, 0x1}, 0x24, 0x5}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000e80)={0x0, "57e58a4e8e9d0557a92a5fc0d9483c34"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001e80)={0x0, 0x1ff, 0x100}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000002280)={0x8, 0x4, {0xffffffff9e810083, @struct={0x2, 0x6}, r4, 0x63, 0x401, 0xffffffff, 0xb3, 0x80000000, 0x81, @usage=0x1, 0x5, 0x7ff, [0x8, 0x0, 0x7, 0xa7, 0x1ff, 0x5c]}, {0x1, @struct={0x6, 0x1f}, r5, 0x8, 0x0, 0x100000001, 0x7f, 0x80000000, 0x4a8, @usage=0x800, 0x8, 0x1, [0xe9, 0x0, 0x4, 0x8, 0x8, 0x6]}, {0x10000, @struct={0xfffffffe, 0x7fffffff}, 0x0, 0xfffffffffffffe01, 0x5, 0x1, 0x4, 0xffffffffffffffce, 0x0, @struct={0x0, 0x2}, 0x7f, 0x9, [0x2, 0x2, 0x10000, 0x6, 0x5, 0xff]}, {0x4, 0x2d5, 0x1ff}}) r6 = openat$cgroup_subtree(r0, &(0x7f0000002680), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000026c0)={{0x1, 0x1, 0x18, r2, {r6}}, './file0\x00'}) ioctl$RTC_WKALM_RD(r8, 0x80287010, &(0x7f0000002700)) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000002740)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f0000002780)={0x0, 0x3, 0x223, {0x3, 0x4}, 0xa76, 0x5}) [ 112.817977] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.824666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.827898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.837864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.842328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.009416] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.016051] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.022735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.057452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.067941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.078603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.091258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.094846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.100876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.103941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.105413] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.106809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.133365] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.133597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.136634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.137998] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.139593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.144782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.147004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.152735] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.159744] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.161562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.169718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.179918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.183550] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.197633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.216737] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.219797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.224067] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.230015] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.242834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.308422] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.318355] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.350242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.356819] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.898926] Bluetooth: hci0: command tx timeout [ 115.219402] Bluetooth: hci1: command tx timeout [ 115.219527] Bluetooth: hci2: command tx timeout [ 115.282775] Bluetooth: hci6: command tx timeout [ 115.283339] Bluetooth: hci4: command tx timeout [ 115.346465] Bluetooth: hci5: command tx timeout [ 115.348368] Bluetooth: hci3: command tx timeout [ 115.410400] Bluetooth: hci7: command tx timeout [ 116.946379] Bluetooth: hci0: command tx timeout [ 117.266607] Bluetooth: hci1: command tx timeout [ 117.267090] Bluetooth: hci2: command tx timeout [ 117.330477] Bluetooth: hci4: command tx timeout [ 117.331013] Bluetooth: hci6: command tx timeout [ 117.396364] Bluetooth: hci3: command tx timeout [ 117.396921] Bluetooth: hci5: command tx timeout [ 117.459549] Bluetooth: hci7: command tx timeout [ 118.995380] Bluetooth: hci0: command tx timeout [ 119.315663] Bluetooth: hci2: command tx timeout [ 119.316151] Bluetooth: hci1: command tx timeout [ 119.378360] Bluetooth: hci4: command tx timeout [ 119.378421] Bluetooth: hci6: command tx timeout [ 119.442779] Bluetooth: hci5: command tx timeout [ 119.442946] Bluetooth: hci3: command tx timeout [ 119.507697] Bluetooth: hci7: command tx timeout [ 121.043341] Bluetooth: hci0: command tx timeout [ 121.362347] Bluetooth: hci2: command tx timeout [ 121.363538] Bluetooth: hci1: command tx timeout [ 121.426365] Bluetooth: hci4: command tx timeout [ 121.426385] Bluetooth: hci6: command tx timeout [ 121.490491] Bluetooth: hci5: command tx timeout [ 121.490610] Bluetooth: hci3: command tx timeout [ 121.554691] Bluetooth: hci7: command tx timeout [ 172.732671] syz-executor.4 (287) used greatest stack depth: 24640 bytes left [ 175.262333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.265574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.267784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.271630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.274843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.406339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.408336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.412382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.421973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.424916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.426522] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.429009] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.430748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.432616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.439956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.441101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.444963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.446822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.460911] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.475160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.489786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.490669] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.496723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.497499] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.498209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.515757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.543735] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.547431] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.553584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.567969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.575566] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.578234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.587841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.635822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.641689] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.658768] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.661894] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.669412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.707860] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.720436] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.298396] Bluetooth: hci0: command tx timeout [ 177.490563] Bluetooth: hci2: command tx timeout [ 177.554721] Bluetooth: hci1: command tx timeout [ 177.618998] Bluetooth: hci3: command tx timeout [ 177.685378] Bluetooth: hci5: command tx timeout [ 177.810903] Bluetooth: hci6: command tx timeout [ 177.811755] Bluetooth: hci4: command tx timeout [ 177.812022] Bluetooth: hci7: command tx timeout [ 179.346390] Bluetooth: hci0: command tx timeout [ 179.539574] Bluetooth: hci2: command tx timeout [ 179.603647] Bluetooth: hci1: command tx timeout [ 179.667672] Bluetooth: hci3: command tx timeout [ 179.731465] Bluetooth: hci5: command tx timeout [ 179.858642] Bluetooth: hci7: command tx timeout [ 179.861338] Bluetooth: hci6: command tx timeout [ 179.861770] Bluetooth: hci4: command tx timeout [ 181.394905] Bluetooth: hci0: command tx timeout [ 181.586374] Bluetooth: hci2: command tx timeout [ 181.650672] Bluetooth: hci1: command tx timeout [ 181.714396] Bluetooth: hci3: command tx timeout [ 181.779519] Bluetooth: hci5: command tx timeout [ 181.907358] Bluetooth: hci4: command tx timeout [ 181.907486] Bluetooth: hci6: command tx timeout [ 181.908133] Bluetooth: hci7: command tx timeout [ 183.442425] Bluetooth: hci0: command tx timeout [ 183.634407] Bluetooth: hci2: command tx timeout [ 183.698758] Bluetooth: hci1: command tx timeout [ 183.763701] Bluetooth: hci3: command tx timeout [ 183.828313] Bluetooth: hci5: command tx timeout [ 183.955383] Bluetooth: hci7: command tx timeout [ 183.955896] Bluetooth: hci6: command tx timeout [ 183.955942] Bluetooth: hci4: command tx timeout [ 237.473166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.482148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.484851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.491654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.497255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.533775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.538669] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.552257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.558137] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.562516] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.599703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.605533] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.611834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.629142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.634051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.685258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.697751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.706451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.714829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.727089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.749370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.754970] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.771243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.789027] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.797141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.816745] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.824136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.836523] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.842516] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.847559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.852365] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.877736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.888156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.899028] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.903672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.909468] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.943668] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.961118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.999527] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.008710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.570643] Bluetooth: hci0: command tx timeout [ 239.635548] Bluetooth: hci1: command tx timeout [ 239.699359] Bluetooth: hci2: command tx timeout [ 239.762382] Bluetooth: hci3: command tx timeout [ 239.890387] Bluetooth: hci4: command tx timeout [ 240.018378] Bluetooth: hci5: command tx timeout [ 240.082382] Bluetooth: hci6: command tx timeout [ 240.402675] Bluetooth: hci7: command tx timeout [ 241.619311] Bluetooth: hci0: command tx timeout [ 241.682726] Bluetooth: hci1: command tx timeout [ 241.747336] Bluetooth: hci2: command tx timeout [ 241.811121] Bluetooth: hci3: command tx timeout [ 241.938327] Bluetooth: hci4: command tx timeout [ 242.066502] Bluetooth: hci5: command tx timeout [ 242.130686] Bluetooth: hci6: command tx timeout [ 242.450349] Bluetooth: hci7: command tx timeout [ 243.666375] Bluetooth: hci0: command tx timeout [ 243.730337] Bluetooth: hci1: command tx timeout [ 243.794556] Bluetooth: hci2: command tx timeout [ 243.858467] Bluetooth: hci3: command tx timeout [ 243.987308] Bluetooth: hci4: command tx timeout [ 244.114370] Bluetooth: hci5: command tx timeout [ 244.178349] Bluetooth: hci6: command tx timeout [ 244.498697] Bluetooth: hci7: command tx timeout [ 245.715689] Bluetooth: hci0: command tx timeout [ 245.778649] Bluetooth: hci1: command tx timeout [ 245.842849] Bluetooth: hci2: command tx timeout [ 245.906683] Bluetooth: hci3: command tx timeout [ 246.034349] Bluetooth: hci4: command tx timeout [ 246.162540] Bluetooth: hci5: command tx timeout [ 246.226655] Bluetooth: hci6: command tx timeout [ 246.546774] Bluetooth: hci7: command tx timeout [ 300.127779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.129931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.138596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.148419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.152773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.194861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.202989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.205483] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.215820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.219864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.236848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.248958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.251072] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.260723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.266705] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.343186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.348136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.350742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.375690] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.386539] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.399189] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.401893] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.404329] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.409334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.412873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.501136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.511726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.514028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.535494] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.548787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.569020] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.595805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.602828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.612088] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.631777] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.642789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.651470] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.680481] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.708698] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.728706] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.226566] Bluetooth: hci0: command tx timeout [ 302.290389] Bluetooth: hci2: command tx timeout [ 302.291556] Bluetooth: hci1: command tx timeout [ 302.483343] Bluetooth: hci3: command tx timeout [ 302.547389] Bluetooth: hci4: command tx timeout [ 302.610381] Bluetooth: hci5: command tx timeout [ 302.738351] Bluetooth: hci6: command tx timeout [ 302.866830] Bluetooth: hci7: command tx timeout [ 304.276329] Bluetooth: hci0: command tx timeout [ 304.339421] Bluetooth: hci1: command tx timeout [ 304.339878] Bluetooth: hci2: command tx timeout [ 304.531621] Bluetooth: hci3: command tx timeout [ 304.595305] Bluetooth: hci4: command tx timeout [ 304.658624] Bluetooth: hci5: command tx timeout [ 304.787864] Bluetooth: hci6: command tx timeout [ 304.914601] Bluetooth: hci7: command tx timeout [ 306.323465] Bluetooth: hci0: command tx timeout [ 306.386843] Bluetooth: hci2: command tx timeout [ 306.387648] Bluetooth: hci1: command tx timeout [ 306.579757] Bluetooth: hci3: command tx timeout [ 306.642565] Bluetooth: hci4: command tx timeout [ 306.706812] Bluetooth: hci5: command tx timeout [ 306.834647] Bluetooth: hci6: command tx timeout [ 306.962382] Bluetooth: hci7: command tx timeout [ 308.372331] Bluetooth: hci0: command tx timeout [ 308.434625] Bluetooth: hci1: command tx timeout [ 308.435248] Bluetooth: hci2: command tx timeout [ 308.627379] Bluetooth: hci3: command tx timeout [ 308.690380] Bluetooth: hci4: command tx timeout [ 308.755557] Bluetooth: hci5: command tx timeout [ 308.882545] Bluetooth: hci6: command tx timeout [ 309.011555] Bluetooth: hci7: command tx timeout [ 362.728014] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.732997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.738731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.751731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.761133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.818703] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.827427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.833035] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.844808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.849865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.913198] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.926618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.944548] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.955670] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.960312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.207226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.233182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.237074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.242016] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.246178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.249857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.259516] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.272136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.272555] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.278538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.377906] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.383888] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.395920] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.405193] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.411200] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.748383] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.764163] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.814601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.814909] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.826619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.830509] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.833986] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.839716] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.849879] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.853101] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.818343] Bluetooth: hci0: command tx timeout [ 364.884530] Bluetooth: hci1: command tx timeout [ 365.010357] Bluetooth: hci2: command tx timeout [ 365.394377] Bluetooth: hci3: command tx timeout [ 365.522604] Bluetooth: hci5: command tx timeout [ 365.523512] Bluetooth: hci4: command tx timeout [ 365.971516] Bluetooth: hci7: command tx timeout [ 365.972524] Bluetooth: hci6: command tx timeout [ 366.868763] Bluetooth: hci0: command tx timeout [ 366.930679] Bluetooth: hci1: command tx timeout [ 367.058623] Bluetooth: hci2: command tx timeout [ 367.443351] Bluetooth: hci3: command tx timeout [ 367.570437] Bluetooth: hci5: command tx timeout [ 367.570461] Bluetooth: hci4: command tx timeout [ 368.018481] Bluetooth: hci6: command tx timeout [ 368.021283] Bluetooth: hci7: command tx timeout [ 368.914345] Bluetooth: hci0: command tx timeout [ 368.980286] Bluetooth: hci1: command tx timeout [ 369.106484] Bluetooth: hci2: command tx timeout [ 369.490637] Bluetooth: hci3: command tx timeout [ 369.618585] Bluetooth: hci4: command tx timeout [ 369.618763] Bluetooth: hci5: command tx timeout [ 370.067563] Bluetooth: hci7: command tx timeout [ 370.067669] Bluetooth: hci6: command tx timeout [ 370.962455] Bluetooth: hci0: command tx timeout [ 371.026645] Bluetooth: hci1: command tx timeout [ 371.154722] Bluetooth: hci2: command tx timeout [ 371.538402] Bluetooth: hci3: command tx timeout [ 371.667372] Bluetooth: hci4: command tx timeout [ 371.667839] Bluetooth: hci5: command tx timeout [ 372.114334] Bluetooth: hci7: command tx timeout [ 372.116514] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 17:47:28 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=1ffff110071a3e5f RSI=ffff888038d1ff48 RDI=ffff888038d1f2f8 RBP=0000000000000000 RSP=ffff888038d1f238 R8 =0000000000000001 R9 =ffff888038d1f2e8 R10=000000000003b6cd R11=00000000000c4cf3 R12=ffff888038d1f308 R13=ffff888038d1f2f0 R14=ffff888038d1ff48 R15=ffff888038d1f2a8 RIP=ffffffff813554b4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8ca28fe540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c88aac14c8 CR3=00000000333d1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000003b6cc RBX=0000000000000001 RCX=ffffffff813b013d RDX=dffffc0000000000 RSI=0000000000003b01 RDI=ffff88806cf31850 RBP=ffff88802aecf698 RSP=ffff88802aecf5d0 R8 =0000000000000001 R9 =0000000000000000 R10=000000000003b6cd R11=0000000000000001 R12=ffff88802aecf6a0 R13=ffff88802aecf688 R14=ffff88802aecf681 R15=ffff88802aecf640 RIP=ffffffff81353f22 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f64796e8710 CR3=000000002d981000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000