Warning: Permanently added '[localhost]:9274' (ECDSA) to the list of known hosts. 2025/06/08 03:13:54 fuzzer started 2025/06/08 03:13:54 dialing manager at localhost:40003 syzkaller login: [ 98.986136] cgroup: Unknown subsys name 'net' [ 99.113393] cgroup: Unknown subsys name 'cpuset' [ 99.170576] cgroup: Unknown subsys name 'rlimit' 2025/06/08 03:14:10 syscalls: 2214 2025/06/08 03:14:10 code coverage: enabled 2025/06/08 03:14:10 comparison tracing: enabled 2025/06/08 03:14:10 extra coverage: enabled 2025/06/08 03:14:10 setuid sandbox: enabled 2025/06/08 03:14:10 namespace sandbox: enabled 2025/06/08 03:14:10 Android sandbox: enabled 2025/06/08 03:14:10 fault injection: enabled 2025/06/08 03:14:10 leak checking: enabled 2025/06/08 03:14:10 net packet injection: enabled 2025/06/08 03:14:10 net device setup: enabled 2025/06/08 03:14:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 03:14:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 03:14:10 USB emulation: enabled 2025/06/08 03:14:10 hci packet injection: enabled 2025/06/08 03:14:10 wifi device emulation: enabled 2025/06/08 03:14:10 802.15.4 emulation: enabled 2025/06/08 03:14:10 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 03:14:13 starting 8 fuzzer processes 03:14:13 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fsetxattr(r1, &(0x7f0000000040)=@random={'security.', '-/\x00'}, &(0x7f0000000080)='@%\x00', 0x3, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x3, 0x8, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40043}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x141200, 0x0) r5 = getgid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r4, &(0x7f0000000980)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000400)="51465dafb3f7fbcc434af35b3af583d9f1ece7a85a32d243caee98e4779fc6ec39e9ea8f2937ad714ad50e7c2540c33c755e58712ead9f4b574b577a7c5891189a148bc172c0f14d33abdc4eb9e4ce54d3c4aeb3eba046af5a4971aadb48cb58066643760cb545628d87963205cd2cb79ece44c2e2221fa8277f451608d8961f1a07ec71f3f55cd4becaf9159b9e0435554278d0f2fa5ea7b867eb78e0aef22df8c3d7cbb841f63c0ac7e6bd8050c39fa79406fa682eafabdfd44f80add37c48208d627689c7022ff2b97ae35a2e6398b73f0bd2c26139f7e9e7923613d72b881ab1f85d9025fda6d680ff19a9982e6fc35c", 0xf2}, {&(0x7f0000000500)="ac15f16633b54a36906b26d60a196dd8094bcc90f835801f16589a863f426662fcb02dea33f9987a54ab5ef1b3380a7148573776324d331b21a0fc0516a50d64899da462370865426e6f4fb555be2f7e19976dc425fd6e147a63e8dea926680eb1d02b2bc461a5f0ec50ef9cb3866ff1bd4851673c5d5d0b30c306", 0x7b}, {&(0x7f0000000580)="a900b22ce8c06ada294950f6d6c0d49f8095329a09ede67144a5062cde77130c3acd7393c448f2494cc8c5cfa34a5c4ab9c12750610e8aadd514c217", 0x3c}, {&(0x7f00000005c0)="5b5bc03534ced36ce073bde40970b66465fc362458c2108bd855361d0f1b454a2126449692339c89d8bfb3b525fd9b0c8f558a5248085401002657b646380c829263189bb66f2e603a82a511eed3eba43dc9f308089d5022dbf2a66c35799063a6dd17b2b5bdc4a6a38d88a7c3f8e4bb94d2b281278140d79147afb9198b2bb086c836708d16e95411f07b9fa968f600b9e4912a51c9a47e02e95209e4c6cc5a87b0dfbf956b2eecfe0f3eaa", 0xac}], 0x4, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r9}}}], 0x40, 0x200400c0}, 0x20000818) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r11, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x68}}, 0x4004810) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r0, {r7, r9}}, './file1\x00'}) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000bc0)={{0x0, r8, 0xee01, r8, r13, 0x48, 0x7}, 0x0, 0x0, 0x400, 0x3, 0x9, 0x8, 0x1ff, 0x1, 0x3ff, 0x9, r6, r6}) syz_mount_image$vfat(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x400, 0x1, &(0x7f0000000d80)=[{&(0x7f0000000cc0)="dcd967facdeed5ca5065c4734af5daa6d43efaa027191dc6374d7e314fff3db2e1e9da87c74617a87cf3cd1369f9645a65124eb6cf8727b3a4a444c4d26b13cc777efa1101af713d9a446cdad84c6ea5b037c01e76c3e0126ee850cc07f2f5c5e98e2aae8844533dff91783fd9b666530ad1fe677bdcc53db711e5cb577eafdca005c422cd7889494147f704b1b0883252a0289e49a328837d30d1301560f1", 0x9f, 0x8001}], 0x24022, &(0x7f0000000f00)={[{@numtail}, {@shortname_win95}], [{@euid_eq}, {@euid_gt={'euid>', r7}}]}) 03:14:13 executing program 1: sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000814) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000140)={0x30, 0x6f, 0x2, {0x3, [{0x4, 0x0, 0x2}, {0x8, 0x1, 0x3}, {0x40, 0x1, 0x5}]}}, 0x30) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ftruncate(0xffffffffffffffff, 0x10001) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e22, 0x3e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3000}, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20}, 0x4, [0x401, 0x3, 0x9, 0x4, 0xef1, 0x101, 0x800, 0x4b11]}, 0x5c) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000340)={0x5, 0xa1a, 0x0, 0x64, 0x10, "0d811ebf58837923f59ff74f960a55ee4e1c8c"}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000180}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xdc, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5ef393a132d7aed9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a9e0b124099ed960bf34ae6c595efcc7"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bfd61edcaf09f984bf0fdde94e498825c3e8909ef22f3df6"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32eb13fc94df1cf99bcfcecccc6b97a2"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5aaeb94257c74fc7be73fb7f399bd45a1c42fa487a2545ed99827f694eebbcac"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "67ab5ddc7a85daf6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="300005cbb8084a6a93d6363c1e2c036f"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5303}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000800}, 0x44000) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) r2 = eventfd(0x7) ioctl$FICLONE(r2, 0x40049409, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9d44, 0x3f}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x47, 0xbe, "54d669109487ef9100086d26c95f8b96c430bc9f5dc5f2404f2ac31907d2a8be108f2176b8e4f6119b233adabad728c757c73c114af1c67f8eb62902f95b5dfa18e932"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xde31}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x29c}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x810) write$P9_RXATTRWALK(r0, &(0x7f0000000840)={0xf, 0x1f, 0x1, 0x7}, 0xf) r4 = syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f00000008c0)='./file0\x00', 0x9, 0x1, &(0x7f00000009c0)=[{&(0x7f0000000900)="fbe0ece93eb298280405ad3a3002b1967a95b6f217b72a4a738e154c63fbb68d4665d46eea68f64be2e5f2ce82d13312b92c584b9c40a4b739c4a9925cc05469e3135daa5d3f86ae6474ee224409f92233d8d079b419ebfc5005386c93dea4a7556e11884e69e914c8d9963f2e7137f88b84c77c04b2aed51fe9f3a530fcb7217e46efb018e47385c48de530812b1928fdaf20cfb9d7d0c4972594097ce19490d8d14abdb85d0ebeaa149dab51d520f407d0249a65364f", 0xb7, 0xfd20}], 0x40, &(0x7f0000000a00)={[{@nobh}, {@usrjquota}, {@auto_da_alloc}, {@nolazytime}, {@nouid32}, {@nodelalloc}, {@data_ordered}], [{@fsname={'fsname', 0x3d, '-'}}, {@subj_user={'subj_user', 0x3d, '\xfa,'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, 'aa\x00'}}]}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000ac0)={0x0, 0x0, {0x37, 0x18, 0x6, 0x1a, 0x8, 0x9, 0x4, 0xd2, 0x1}}) 03:14:13 executing program 2: r0 = socket$inet(0x2, 0x5, 0xfffffffd) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)={0xd, 0x7, 0x1, {{}, 0x1}}, 0xd) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2cc, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x3b, 0xfc, "c6f6d21a52da82e6afc501297eb059e85f42de67f6b89de7300caae1c8bb27be22b05f09a139887efda76bc2068517bf0dc230f311785e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7ff}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "6e16f5745aeb20cc"}, @NL80211_ATTR_FILS_ERP_RRK={0xb2, 0xfc, "fa301efd152c6411963dac28faca7d4dcbec4716715e6d8a8dbd587dcf934d2c810bcafbfc0be6a9e5d5e74e55bbd4988c656f8757c77755b7de1771bbc40beeb143d9477da46c96a8ac002497ffb49b1a23469e978db9e55be89e3127638664f6f45d51cc477b13692d5943dd558791117858eb748fb0cdb387d7c0710df574113e903fd7925d58e95185ea6c6462bc6231735d10b1e08322373e44c0788cedc6b7a2c05d3f32e70712427479a1"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "b92c"}, @NL80211_ATTR_FILS_ERP_REALM={0xaa, 0xfa, "1c2f84740911ba7e5e2408f062759bd7fd8b11c598278e9358b9532df0c7d9e5aa41bc35b4db853454062e4aed3c6aa65a6c90ddb4da762a5117baf7076f809a702512f10e6919942f76bdde0fb19a33e8425f693a682ca948e543e5e22c6a57bc62785b0e5577711724bb499279a80c974a41b0b5481b3a1d9bb5c58d6c2b809e9db53b3839fa73f17845fe0ae96147b84cf8a8e40cb6e4cc5f71c07f481012c380cea0343b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x27, 0xfa, "72e5336c7af31af7b02b202db8532269ec2abef26b6d52f83784d5a9477f6a3f8c1168"}, @NL80211_ATTR_FILS_ERP_REALM={0xce, 0xfa, "098100d8b02c7833cec6db3e671fdafb37f3809848473553a954aee13f2e45ca48ed3ef55b48a7bccb91ee3ffb22a81297055312f542f541dd6cca0cbaeced5868ec0e3cc52aad8c107c948b9b184a538a17bd172c9bc5ecdc65177660b3481ae43c3368e0a1a3f521a6439d76d62df93853bc4bf1bdfe429aec4ba8f8a1d46a4313dfd0a63e518f0229a1df469946120d71040c0208938c74f9f5eaf659b5c039779c3b7a5754a99c1d10a99911b53ac20639cdf896bbe43ec01e6620aa4e2e6ecddd98116c608af1e6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}]]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40}, 0x40060) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000400)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x155000, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000480)) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000004c0)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x40, 0x0, 0x100, 0x4, {{0x1a, 0x4, 0x0, 0x15, 0x68, 0x64, 0x0, 0x18, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1b}, {[@timestamp={0x44, 0x10, 0x1a, 0x0, 0x1, [0x4, 0xb48, 0x3]}, @rr={0x7, 0x1f, 0x7, [@empty, @private=0xa010102, @private=0xa010101, @empty, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}]}, @ssrr={0x89, 0x17, 0xe2, [@rand_addr=0x64010102, @broadcast, @empty, @empty, @broadcast]}, @generic={0x89, 0xc, "f129def1cdc2b6bddd4d"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000980)={'gre0\x00', 0x0, 0x10, 0x80, 0x6eb, 0x3, {{0x9, 0x4, 0x2, 0x0, 0x24, 0x66, 0x0, 0xff, 0x29, 0x0, @multicast2, @multicast2, {[@generic={0x44, 0x2}, @ssrr={0x89, 0xb, 0xfa, [@multicast1, @rand_addr=0x64010100]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x4, 0x81, 0x81, 0x129, 0x6c, @rand_addr=' \x01\x00', @private0, 0x40, 0x8000, 0x3, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x2, 0x4, {{0x19, 0x4, 0x0, 0x4, 0x64, 0x68, 0x0, 0x80, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x88, 0x5, "6c3ed4"}, @ssrr={0x89, 0x13, 0x8e, [@private=0xa010101, @local, @multicast1, @empty]}, @generic={0x83, 0x9, "fa0548b6080085"}, @timestamp={0x44, 0x1c, 0x64, 0x0, 0x2, [0x6, 0xffffffff, 0x1, 0x7, 0x6, 0xf5e]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "b1d45cdc"}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x2f, 0xdd, 0x0, 0x400, 0x40, @mcast2, @remote, 0x1, 0x20, 0x80, 0x67d}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000d40)={'tunl0\x00', &(0x7f0000000cc0)={'gre0\x00', 0x0, 0x8740, 0x7, 0x9, 0x7, {{0xa, 0x4, 0x2, 0x1, 0x28, 0x67, 0x0, 0x81, 0x29, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x14, 0xffffffffffffffff, [{0x1, 0xe, "e9b639473445e5af14b62070"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000e40)={'wg2\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0xe, &(0x7f0000000e80)={@private1, 0x0}, &(0x7f0000000ec0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000f00)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000001000)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001040)={@multicast2, @loopback, 0x0}, &(0x7f0000001080)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000010c0)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002180)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x440800}, 0xc, &(0x7f0000002140)={&(0x7f0000001600)={0xb28, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x214, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x56af, 0x20, 0x40, 0xc7}, {0x2, 0x13, 0x7f, 0x6}, {0xcee, 0x49, 0x52, 0x400}, {0xffff, 0x6, 0x9, 0x2}, {0x4, 0x7, 0x8, 0x3ff}, {0x8001, 0x7, 0xb6, 0x100}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x20, 0x81, 0x32}, {0x7f, 0x1, 0x7}, {0x7, 0x8, 0x4, 0x1}, {0x9dab, 0x0, 0x90, 0x101}, {0x5, 0x2, 0x1, 0x5}, {0xffc0, 0x8c, 0xf5, 0x5}, {0x7, 0x0, 0x25, 0x3da2b2c6}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x906}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x16b}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0xb28}, 0x1, 0x0, 0x0, 0x20004001}, 0xc824) 03:14:13 executing program 3: ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x3) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0xff, 0x3, 0x1, 0x9, 0x2, [{0x2, 0xd75a, 0x8, '\x00', 0x82}, {0x5, 0x2, 0xa5e9, '\x00', 0x1080}]}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x3) r4 = openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x200100, 0x80}, 0x18) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000600)={0x7, 0x880, 0x1, 0x7, 0x2, [{0x3, 0xdcc, 0x80000000, '\x00', 0x601}, {0x6, 0x40, 0xb68, '\x00', 0x1100}]}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x410080, 0x0) setsockopt$inet_int(r7, 0x0, 0xc, &(0x7f0000000700)=0x7, 0x4) r8 = openat$incfs(r7, &(0x7f0000000740)='.log\x00', 0x40000, 0x104) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8200080}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x60b, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe4, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dda9a791807e489393562081b7dbd11f0199e54ad5584727"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) syz_usb_connect$cdc_ncm(0x6, 0x93, &(0x7f0000000a40)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x1f, 0x82acaaa8b69e0f5a, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "94006c92e859"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffa, 0x7fff, 0xdd}, {0x6, 0x24, 0x1a, 0xef6, 0x25}, [@network_terminal={0x7, 0x24, 0xa, 0xfc, 0x1, 0x1, 0x80}, @country_functional={0xc, 0x24, 0x7, 0x4, 0x57, [0x8001, 0x3a48, 0x4]}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x5, 0x31, 0x1f, 0x400, 0x3f}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x66, 0x2, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x81, 0xcd}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x3, 0xaf}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x110, 0x2, 0x4, 0x7, 0x8, 0x3}, 0x1e1, &(0x7f0000000b40)={0x5, 0xf, 0x1e1, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "205f45423d08d4a0ebab1cc400f3b8f0"}, @generic={0xe7, 0x10, 0x18, "8c48eff15ba59caa5e5c741e3ecd147766e388b42f3881185f96b032ed16b7edb2a2144b3c5648b87a75b82c96a11fa41b51c1366f8e1ee583b5f316fa1a976f327d3e2a2b6cf0391abbbf76a7a2aee288f1cbbf7b812a6b1a4219dcaa8956bb90cc7a36d597c8d96e8333ff0134e6b777b3b1bd003c89d3abc6bf987005a4ba57d5561b6143ef271912fe395c9cd1446436a40ae322574bc6fc4b8e22c341cdf7e3cdae3e1ea2b429d0040a921b859f6c605295d831ffe3fb7fa176914b7cc331366aca2ff35ab5d8371a0106f1f56e0edf97b0764842162cde955a16f1aff9c1ff7826"}, @generic={0xd, 0x10, 0x4, "db0a0e7411e7fcde0dc6"}, @wireless={0xb, 0x10, 0x1, 0xe, 0x85, 0x6, 0x3f, 0x401, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x3, 0x1}, @generic={0xbf, 0x10, 0x3, "a5654dd234f33feb8ad764ea97446e9824b044174ebd3bd820eb78ce5ebbd32a83a54b8489bd390aaf6c4a50a708cf7527486b0c537dec486db8df395d338f9853a558b5c63b4d127455da6fa1df489fcb9845fdbbf858aba06cbb9c3a12b330c2c4edf607cb4203172bc7e07e44ad4c99f6055d2115c06f376a45e15ee01112e46a6cf2522cbec01bbce433d6e0c913f4921542409b4fcbf964ab84eb771b15e27170146c29e9d297389d651f7511eebf19c0f6ed5a863b11cc8d75"}]}, 0x8, [{0x7c, &(0x7f0000000d40)=@string={0x7c, 0x3, "2edb33509fac2615f04b0d22fa62b51fd7b85a7a4245347cf4834d1751411c0385020d783c9c3fa2ee5965fc2c08f8656cb6a2b783141b90417241e32e6414276913eeb809715072fcc84db2ae04ba7b48ecbcb41aad08ad1feab5305e907cced1d05f3daf977ebc96d62bd3d911f8971db168117169433084aa"}}, {0x2a, &(0x7f0000000dc0)=@string={0x2a, 0x3, "de351eaf67c9299fb57159ae155f253a724974068772bca0933b5e2595f642b96308777bf9238417"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x3409}}, {0x100, &(0x7f0000000e40)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0xc2c}}, {0x64, &(0x7f0000000f80)=@string={0x64, 0x3, "3321dd392bcf923eeaf20d49a141fc041416e5b94fe739a1e7f42b33b8a080e820f2165f14d714316f423544d25d9507657041571eca85c6d74a1b733ca0aabda18d144cf7bbcf02a810b79d29b85d08cd9b2a3f2fa095de9757e6805d9bbceec8f9"}}, {0x64, &(0x7f0000001000)=@string={0x64, 0x3, "cecb94c28d1ec47423a43e903ed6e4141d44d67dfbc8a327debecb77c0ea82e6d89049e9165cb99f4c883c56efb01c74090249dd68069efdcfcb9b97bd2b2888ed6412117682ca1c4b2c8e0be7312e7aba03abc8633d34cbc8f5ff111b15b2466630"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x426}}]}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000001180), &(0x7f00000011c0)=0x10) [ 117.116521] audit: type=1400 audit(1749352453.364:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:14:13 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000140)=""/151, 0x97}], 0x4, &(0x7f0000000240)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x18000) write$P9_RGETLOCK(r2, &(0x7f0000000300)={0x25, 0x37, 0x2, {0x1, 0xfffffffffffffffb, 0x200, 0x0, 0x7, '&^\x93%*+-'}}, 0x25) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TUNSETNOCSUM(r8, 0x400454c8, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000380)=0x4) r9 = signalfd4(r6, &(0x7f00000003c0)={[0x1ff]}, 0x8, 0x800) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000400)='&^\x93%*+-', &(0x7f0000000440)='&^\x93%*+-', 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/stat\x00', 0x0, 0x0) process_mrelease(r1, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) r12 = accept$packet(r9, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xbc, r11, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x70b}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x114}, 0x20000000) r14 = dup2(r5, r0) setsockopt$inet_msfilter(r14, 0x0, 0x29, &(0x7f0000000700)={@multicast2, @private=0xa010102, 0x0, 0x8, [@remote, @private=0xa010100, @local, @rand_addr=0x64010102, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, @multicast2, @private=0xa010100]}, 0x30) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x26, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80880}, 0x0) r15 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r15, 0xf504, 0x0) ftruncate(r12, 0x4) write$P9_RWSTAT(r9, &(0x7f0000000880)={0x7, 0x7f, 0x2}, 0x7) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3f}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 03:14:13 executing program 5: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x7}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x250402, 0x0) fchdir(r0) r1 = socket$netlink(0x10, 0x3, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = pidfd_getfd(r0, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0xffff}}, './file0\x00'}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180)=0x3, 0x4) fcntl$setflags(r3, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x10) ioctl$CDROMSUBCHNL(r5, 0x530b, &(0x7f00000002c0)={0x2, 0x6, 0xc, 0x5, 0x41, 0xff, @msf={0x7, 0x3, 0x81}, @msf={0x3, 0x5}}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80200180}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x71}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5221}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r7 = signalfd4(r0, &(0x7f0000000480)={[0x81]}, 0x8, 0x80800) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe23}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdb91}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f00000006c0)={0x2, 0x2, 0x5}) 03:14:13 executing program 6: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000040)="e87e94f1f2014b989fbbd08147ed79a7", 0x10) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000000c0)) socketpair(0x23, 0x0, 0x1000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "58f1e730c01615c1", "59a56b6cfef9cdc74940cabb0bb2c4f7", "8d49fe9e", "29ef5cc7ca2afb21"}, 0x28) r3 = socket$unix(0x1, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x4}, &(0x7f00000001c0)=0x28) r4 = signalfd4(r2, &(0x7f00000002c0)={[0x1]}, 0x8, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000300)={0x5, 0x7, 0x7f, 0x7, 0x3}, 0x14) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) readahead(r0, 0x5, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000004c0)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000580)={{r6}, r7, 0xd2b1bb3a1ae00274, @inherit={0x58, &(0x7f0000000500)={0x1, 0x2, 0x9, 0x100, {0x10, 0x7ff, 0x7, 0x3, 0x861}, [0x0, 0x0]}}, @subvolid=0xdad}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001580)={0x2, 0x41, "68e4fac808cff6064566ef6885d7dc826ee4277b108334ba8ea247cbdbbbccdc0939d6899252f08c11e03729a50f7f1cbb20918c6d2b2ae24ec83eae3af92acf19"}) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001600)=""/117, &(0x7f0000001680)=0x75) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f00000016c0)=0xffffffff) 03:14:13 executing program 7: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x2) setsockopt(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080)="d9e5acf411d4f3b130c64eab3840b31a350204774f4de302c49ba1178107a015cd87afa903fcf0aa98851e328861e8ca0831baba8f410141b959955e9e9006c0dafec243ad76b20ff2a737", 0x4b) prctl$PR_SET_DUMPABLE(0x4, 0x0) setsockopt(0xffffffffffffffff, 0x7, 0x4, &(0x7f0000000100)="23fd236c5dd95c02576abeac131b9d79806207ebf3c03a530ca3cfbd30cd20a832b14a84bba3aba280665f590f153fad28d1f4d2351ec78f3e1c5de30c8c2591d384542adb65ce7ec97681f953d18b9c869f30c155d6da936c3944284dbd185e2ee5541224d92664cd3a2e6ebf429107ebf82287ab0906c4488a47f7d40ec1fd0716a80f85ed3fbf2907eda67322748416dca1d6", 0x94) ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x1) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x1, 0x65, &(0x7f0000000200)="ccc4dd1bacae28eb40b6368cbad921dc85d7edf51b3c2a3c0be55943dbd29cb57b1868c5dbd657b1e511d05ec665fd29033cea1400d6286fca812e87d7048c1721244d64938d0efc3310153e7c9bc5e15829b19270ad17158483ea850649f9f968cf06d5b6", 0x1}]}) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000340), &(0x7f0000000380)=0x28) r1 = memfd_secret(0x80000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000003c0)=0x1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='@\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)={0x7, 'batadv0\x00', {0x7}, 0x200}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) open_by_handle_at(r2, &(0x7f00000004c0)=@raw={0x5c, 0x4e, {"54d682f9865d730113f52622ed8667c290f178a1fe60ddbbf4beba9feb8f1d6a958d0699f6bfa93e3a19b259842be76a94be95fb8cf002bf73388f3e01956e0f81d816f2f94d174b0019b1a6c3d2ade92a3818b83b043a2c3168cc"}}, 0x484082) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000540)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "fa451cd5c8bfd3"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001540)={r3, 0x4}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000002540)) pipe(&(0x7f0000002580)={0xffffffffffffffff}) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f00000025c0)={0x40, 0x2, 0x800, 0x8af, 0x8, 0x4, 0x4}) [ 118.425817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.429030] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.431642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.436240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.439076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.629745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.634557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.640122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.654629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.666953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.762113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.771181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.774676] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.786844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.797945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.834051] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.848095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.853664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.898808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.900730] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.902999] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.905004] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.906230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.907806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.908892] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.912369] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.913267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.914383] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.917872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.922101] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.928051] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.933551] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.936901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.938790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.956745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.993527] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.001516] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.048830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.053606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.056879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.514976] Bluetooth: hci0: command tx timeout [ 120.770660] Bluetooth: hci1: command tx timeout [ 120.899171] Bluetooth: hci2: command tx timeout [ 120.962521] Bluetooth: hci4: command tx timeout [ 120.963858] Bluetooth: hci6: command tx timeout [ 121.026500] Bluetooth: hci3: command tx timeout [ 121.027036] Bluetooth: hci7: command tx timeout [ 121.154536] Bluetooth: hci5: command tx timeout [ 122.563369] Bluetooth: hci0: command tx timeout [ 122.818629] Bluetooth: hci1: command tx timeout [ 122.946726] Bluetooth: hci2: command tx timeout [ 123.011545] Bluetooth: hci6: command tx timeout [ 123.011980] Bluetooth: hci4: command tx timeout [ 123.074739] Bluetooth: hci7: command tx timeout [ 123.075179] Bluetooth: hci3: command tx timeout [ 123.204841] Bluetooth: hci5: command tx timeout [ 124.610688] Bluetooth: hci0: command tx timeout [ 124.866542] Bluetooth: hci1: command tx timeout [ 124.994481] Bluetooth: hci2: command tx timeout [ 125.058520] Bluetooth: hci4: command tx timeout [ 125.058956] Bluetooth: hci6: command tx timeout [ 125.122644] Bluetooth: hci3: command tx timeout [ 125.123082] Bluetooth: hci7: command tx timeout [ 125.250915] Bluetooth: hci5: command tx timeout [ 126.658495] Bluetooth: hci0: command tx timeout [ 126.914497] Bluetooth: hci1: command tx timeout [ 127.042626] Bluetooth: hci2: command tx timeout [ 127.106538] Bluetooth: hci6: command tx timeout [ 127.106972] Bluetooth: hci4: command tx timeout [ 127.171461] Bluetooth: hci7: command tx timeout [ 127.171895] Bluetooth: hci3: command tx timeout [ 127.298657] Bluetooth: hci5: command tx timeout [ 178.493725] syz-executor.0 (279) used greatest stack depth: 24912 bytes left [ 178.531470] syz-executor.2 (281) used greatest stack depth: 24672 bytes left [ 180.909584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.915075] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.918336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.921101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.924704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.927014] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.933400] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.937686] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.940076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.951830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.997966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.002950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.011211] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.023132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.023735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.028906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.035116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.048368] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.066111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.074714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.092841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.104147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.107277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.128393] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.174151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.200384] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.209760] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.212178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.214833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.221732] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.242229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.244198] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 181.248995] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.249072] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.252316] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.254827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.255045] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.262104] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.265914] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 181.267695] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.980648] Bluetooth: hci1: command tx timeout [ 183.042916] Bluetooth: hci0: command tx timeout [ 183.106891] Bluetooth: hci2: command tx timeout [ 183.171717] Bluetooth: hci3: command tx timeout [ 183.235204] Bluetooth: hci4: command tx timeout [ 183.362612] Bluetooth: hci6: command tx timeout [ 183.363539] Bluetooth: hci5: command tx timeout [ 183.363847] Bluetooth: hci7: command tx timeout [ 185.026526] Bluetooth: hci1: command tx timeout [ 185.091387] Bluetooth: hci0: command tx timeout [ 185.155093] Bluetooth: hci2: command tx timeout [ 185.218739] Bluetooth: hci3: command tx timeout [ 185.282780] Bluetooth: hci4: command tx timeout [ 185.410790] Bluetooth: hci7: command tx timeout [ 185.411302] Bluetooth: hci6: command tx timeout [ 185.411428] Bluetooth: hci5: command tx timeout [ 187.074513] Bluetooth: hci1: command tx timeout [ 187.139262] Bluetooth: hci0: command tx timeout [ 187.204238] Bluetooth: hci2: command tx timeout [ 187.266916] Bluetooth: hci3: command tx timeout [ 187.330483] Bluetooth: hci4: command tx timeout [ 187.458547] Bluetooth: hci5: command tx timeout [ 187.459068] Bluetooth: hci6: command tx timeout [ 187.459553] Bluetooth: hci7: command tx timeout [ 189.122770] Bluetooth: hci1: command tx timeout [ 189.186856] Bluetooth: hci0: command tx timeout [ 189.250975] Bluetooth: hci2: command tx timeout [ 189.314503] Bluetooth: hci3: command tx timeout [ 189.378487] Bluetooth: hci4: command tx timeout [ 189.506773] Bluetooth: hci7: command tx timeout [ 189.507274] Bluetooth: hci6: command tx timeout [ 189.507870] Bluetooth: hci5: command tx timeout [ 240.895188] syz-executor.1 (2943) used greatest stack depth: 24544 bytes left [ 243.167092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.170076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.172487] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.181820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.188625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.353554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.358976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.364065] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.373974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.383083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.435764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.446855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.449862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.468023] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.491109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.493031] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.496569] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.504789] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.507263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.511135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.513630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.519023] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.542955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.554092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.559107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.561514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.567994] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.574763] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.584733] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.600022] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.602144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.612678] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.614515] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.620552] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.624160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.626543] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.633914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.652106] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.681063] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.687059] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 245.251583] Bluetooth: hci0: command tx timeout [ 245.443644] Bluetooth: hci1: command tx timeout [ 245.570534] Bluetooth: hci2: command tx timeout [ 245.634547] Bluetooth: hci3: command tx timeout [ 245.698699] Bluetooth: hci5: command tx timeout [ 245.762739] Bluetooth: hci7: command tx timeout [ 245.763620] Bluetooth: hci4: command tx timeout [ 245.764107] Bluetooth: hci6: command tx timeout [ 247.298559] Bluetooth: hci0: command tx timeout [ 247.490634] Bluetooth: hci1: command tx timeout [ 247.621438] Bluetooth: hci2: command tx timeout [ 247.683682] Bluetooth: hci3: command tx timeout [ 247.748516] Bluetooth: hci5: command tx timeout [ 247.811560] Bluetooth: hci7: command tx timeout [ 247.812038] Bluetooth: hci4: command tx timeout [ 247.812490] Bluetooth: hci6: command tx timeout [ 249.347530] Bluetooth: hci0: command tx timeout [ 249.539842] Bluetooth: hci1: command tx timeout [ 249.666642] Bluetooth: hci2: command tx timeout [ 249.732575] Bluetooth: hci3: command tx timeout [ 249.794516] Bluetooth: hci5: command tx timeout [ 249.860480] Bluetooth: hci6: command tx timeout [ 249.860925] Bluetooth: hci4: command tx timeout [ 249.861340] Bluetooth: hci7: command tx timeout [ 251.395823] Bluetooth: hci0: command tx timeout [ 251.586495] Bluetooth: hci1: command tx timeout [ 251.714491] Bluetooth: hci2: command tx timeout [ 251.780256] Bluetooth: hci3: command tx timeout [ 251.846167] Bluetooth: hci5: command tx timeout [ 251.906919] Bluetooth: hci7: command tx timeout [ 251.907370] Bluetooth: hci4: command tx timeout [ 251.908501] Bluetooth: hci6: command tx timeout [ 305.751330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.757390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.760944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.770332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.786972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.825362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.830725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.838854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.848733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.855109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.030525] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.033166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.035824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.040580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.044288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.090757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.101560] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.119048] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.127475] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.144676] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.256837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.268689] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.273782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.280103] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.294345] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.296284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.301940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.306039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.318013] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.319822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.341277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.365726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.381237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.382791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.393011] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.412720] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.437627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.455936] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.510850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.518334] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.843594] Bluetooth: hci0: command tx timeout [ 307.908440] Bluetooth: hci1: command tx timeout [ 308.099498] Bluetooth: hci2: command tx timeout [ 308.290725] Bluetooth: hci3: command tx timeout [ 308.483725] Bluetooth: hci4: command tx timeout [ 308.484624] Bluetooth: hci5: command tx timeout [ 308.546496] Bluetooth: hci6: command tx timeout [ 308.674533] Bluetooth: hci7: command tx timeout [ 309.892769] Bluetooth: hci0: command tx timeout [ 309.955545] Bluetooth: hci1: command tx timeout [ 310.147030] Bluetooth: hci2: command tx timeout [ 310.338739] Bluetooth: hci3: command tx timeout [ 310.530547] Bluetooth: hci5: command tx timeout [ 310.531033] Bluetooth: hci4: command tx timeout [ 310.595693] Bluetooth: hci6: command tx timeout [ 310.722636] Bluetooth: hci7: command tx timeout [ 311.939715] Bluetooth: hci0: command tx timeout [ 312.002556] Bluetooth: hci1: command tx timeout [ 312.194703] Bluetooth: hci2: command tx timeout [ 312.386798] Bluetooth: hci3: command tx timeout [ 312.579537] Bluetooth: hci4: command tx timeout [ 312.580024] Bluetooth: hci5: command tx timeout [ 312.643672] Bluetooth: hci6: command tx timeout [ 312.770555] Bluetooth: hci7: command tx timeout [ 313.987925] Bluetooth: hci0: command tx timeout [ 314.050464] Bluetooth: hci1: command tx timeout [ 314.243498] Bluetooth: hci2: command tx timeout [ 314.435713] Bluetooth: hci3: command tx timeout [ 314.628482] Bluetooth: hci5: command tx timeout [ 314.628962] Bluetooth: hci4: command tx timeout [ 314.691471] Bluetooth: hci6: command tx timeout [ 314.819948] Bluetooth: hci7: command tx timeout [ 368.091936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.098190] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.102934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.109618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.115972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.281843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.289161] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.293066] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.300807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.305331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.364724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.378959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.396989] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.414932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.421120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.518657] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.524862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.550024] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.553831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.586985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.591318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.598973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.610104] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.623174] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.625844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.628267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.630541] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.633250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.646673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.655861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.690756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.735195] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.740809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 368.755029] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.800180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.809046] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 368.816984] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.848935] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 368.853094] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.863028] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 370.179079] Bluetooth: hci0: command tx timeout [ 370.370720] Bluetooth: hci1: command tx timeout [ 370.499446] Bluetooth: hci2: command tx timeout [ 370.754504] Bluetooth: hci4: command tx timeout [ 370.755272] Bluetooth: hci5: command tx timeout [ 370.818691] Bluetooth: hci3: command tx timeout [ 370.946669] Bluetooth: hci7: command tx timeout [ 371.010489] Bluetooth: hci6: command tx timeout [ 372.227483] Bluetooth: hci0: command tx timeout [ 372.419694] Bluetooth: hci1: command tx timeout [ 372.547492] Bluetooth: hci2: command tx timeout [ 372.803527] Bluetooth: hci5: command tx timeout [ 372.804020] Bluetooth: hci4: command tx timeout [ 372.867755] Bluetooth: hci3: command tx timeout [ 372.995524] Bluetooth: hci7: command tx timeout [ 373.060827] Bluetooth: hci6: command tx timeout [ 374.276142] Bluetooth: hci0: command tx timeout [ 374.467650] Bluetooth: hci1: command tx timeout [ 374.597482] Bluetooth: hci2: command tx timeout [ 374.852222] Bluetooth: hci5: command tx timeout [ 374.852707] Bluetooth: hci4: command tx timeout [ 374.915705] Bluetooth: hci3: command tx timeout [ 375.043474] Bluetooth: hci7: command tx timeout [ 375.107475] Bluetooth: hci6: command tx timeout [ 376.324436] Bluetooth: hci0: command tx timeout [ 376.514657] Bluetooth: hci1: command tx timeout [ 376.642456] Bluetooth: hci2: command tx timeout [ 376.899535] Bluetooth: hci4: command tx timeout [ 376.899993] Bluetooth: hci5: command tx timeout [ 376.962463] Bluetooth: hci3: command tx timeout [ 377.090667] Bluetooth: hci7: command tx timeout [ 377.154683] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:19:23 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffff88800961781c RDX=1ffff110012c03f0 RSI=ffffffff85c1cbc0 RDI=ffff888009601f80 RBP=ffff888009601b80 RSP=ffff888009617828 R8 =0000000000000001 R9 =ffff888009617908 R10=000000000003b6cd R11=000000000000b2ad R12=ffff888009601b80 R13=ffff888009617910 R14=ffff888009617e60 R15=ffff8880096178c8 RIP=ffffffff815baf80 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4d8e524f00 CR3=0000000026e95000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000004 RBX=1ffff11006bbff09 RCX=ffffffff81bf6b80 RDX=ffff888016c90000 RSI=ffffffff81c8d458 RDI=ffff888035dff868 RBP=0000000000000000 RSP=ffff888035dff840 R8 =0000000000000000 R9 =ffffed1002a85957 R10=0000000000000000 R11=0000000000000001 R12=ffffffff85d32c80 R13=ffffffff85afa120 R14=ffff8880097f08e0 R15=ffffffff85d32c80 RIP=ffffffff81738af0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9d629dd540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d27a70bfa8 CR3=0000000027525000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000