Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:52506' (ECDSA) to the list of known hosts. 2025/06/08 05:07:26 fuzzer started 2025/06/08 05:07:27 dialing manager at localhost:40003 syzkaller login: [ 102.967657] cgroup: Unknown subsys name 'net' [ 103.110620] cgroup: Unknown subsys name 'cpuset' [ 103.172708] cgroup: Unknown subsys name 'rlimit' 2025/06/08 05:07:50 syscalls: 2214 2025/06/08 05:07:50 code coverage: enabled 2025/06/08 05:07:50 comparison tracing: enabled 2025/06/08 05:07:50 extra coverage: enabled 2025/06/08 05:07:50 setuid sandbox: enabled 2025/06/08 05:07:50 namespace sandbox: enabled 2025/06/08 05:07:50 Android sandbox: enabled 2025/06/08 05:07:50 fault injection: enabled 2025/06/08 05:07:50 leak checking: enabled 2025/06/08 05:07:50 net packet injection: enabled 2025/06/08 05:07:50 net device setup: enabled 2025/06/08 05:07:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 05:07:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 05:07:50 USB emulation: enabled 2025/06/08 05:07:50 hci packet injection: enabled 2025/06/08 05:07:50 wifi device emulation: enabled 2025/06/08 05:07:50 802.15.4 emulation: enabled 2025/06/08 05:07:50 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 05:07:53 starting 8 fuzzer processes 05:07:53 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xffffffc0, 0x75}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040101}, 0x81) r1 = dup(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000140)=0x1, 0x0, 0x4) sync_file_range(r1, 0x5, 0x8, 0x6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f00000001c0)=0x9) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x26}, @NL80211_ATTR_PMKID={0x14, 0x55, "0c38ac509580a5329f705b09d716f568"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_PMKID={0x14, 0x55, "e0b412f3919753d45fe3a15b2f010ef1"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x20}]}, 0x78}}, 0x20044084) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000340)={0x3, 0x2, 0x1, 0x7, 0xfffffff7, 0x9}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={0x0, @loopback, @multicast1}, &(0x7f0000000400)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x17827, 0x8000, 0xfffffffe, 0xe0, {{0xf, 0x4, 0x1, 0x2b, 0x3c, 0x65, 0x0, 0x9, 0x2f, 0x0, @local, @loopback, {[@cipso={0x86, 0x1b, 0x3, [{0x0, 0xe, "a4db74f8b2fc737a9814be49"}, {0x7, 0x7, "0dbac95977"}]}, @ssrr={0x89, 0xb, 0xee, [@loopback, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0xc1, 0x9, 0x5, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x700, 0x40, 0xdf0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x700, 0x2e, 0x4, 0x80000001, {{0x3b, 0x4, 0x2, 0x6, 0xec, 0x66, 0x0, 0xc1, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, {[@generic={0x83, 0xd, "ce86eb109da787e470ac96"}, @ssrr={0x89, 0x27, 0x57, [@broadcast, @private=0xa010102, @rand_addr=0x64010101, @multicast2, @remote, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x32}]}, @noop, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x6, 0xf, "f8c7db77b290074802e97345bb"}, {0x1, 0x6, "0a56c18d"}, {0x2, 0x9, "de79e5d4d7f378"}, {0x7, 0xd, "7a6cd3eb2aaced57f85d83"}, {0x1, 0x10, "1c694e519c858773fa662ad8a06e"}]}, @cipso={0x86, 0x5f, 0xffffffffffffffff, [{0x0, 0x11, "e54e4302718ae699c8479fbda84639"}, {0x6, 0xd, "63232773be5d119bdce57f"}, {0x7, 0x9, "bdb32868e8e1f9"}, {0x7, 0x10, "960ce38f8f784cf78c3bde743900"}, {0x5, 0x6, "a55c6710"}, {0x0, 0xf, "6bad1d9ab89e94f6f5d2618365"}, {0x1, 0x9, "8e74701742852d"}, {0x6, 0x4, "67b3"}]}]}}}}}) accept$packet(r2, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000e80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000880)={0x5b8, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r3}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x88}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbbf0}}}]}}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000ec0), 0x8100, 0x0) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), r1) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, r10, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0xed55}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001040)={0x3, 'bridge_slave_1\x00', {0x1}, 0x9}) 05:07:53 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) kcmp(0xffffffffffffffff, r0, 0x90fec007b2e963cf, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x47}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x296}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x280}]}, 0x60}}, 0x2400c041) readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)=""/255, 0xff}, {&(0x7f0000000380)=""/25, 0x19}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x5) r4 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000001540)=0x3, 0x4) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80400440}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x30, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000810) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$netlink(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000016c0)={0x1c, 0x32, 0x400, 0x70bd27, 0x25dfdbfb, "", [@typed={0xc, 0x6d, 0x0, 0x0, @u64=0x62}]}, 0x1c}], 0x1, &(0x7f0000001740)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r2, r7]}}], 0x20}, 0x4008000) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000017c0), 0x800, 0x0) write$P9_RGETLOCK(r8, &(0x7f0000001800)={0x29, 0x37, 0x2, {0x1, 0x5, 0x80000000, r0, 0xb, 'veth1_vlan\x00'}}, 0x29) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000001840), &(0x7f0000001880)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000018c0)={0x1c8e, 0x1, 0x9c, 0x100, 0x9}, 0xc) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20031c88}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x6c, 0x0, 0x308, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3a}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 05:07:53 executing program 2: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}}, 0x4000040) r0 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x18, 0x8}, 0x18) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff048a, 0x1c}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3f}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48c5) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd6c9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8084}, 0x4000080) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1008140}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfb}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000080}, 0x48000) r3 = dup(r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000108) r4 = epoll_create1(0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x8, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) clone3(&(0x7f00000019c0)={0x80000, &(0x7f0000000880)=0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900), {0x13}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f0000001940)=""/48, &(0x7f0000001980)=[0x0], 0x1, {r3}}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001a40)={0x8, [{}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf9, "457fb709aa0d8d"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000002a40)={r6, 0x0, "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", "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"}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000003b00)={'ip6gre0\x00', &(0x7f0000003a80)={'sit0\x00', 0x0, 0x4, 0x2, 0x1f, 0x9eee, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8, 0x8036, 0x80000001, 0x8001}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000003c80)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003b40)={0xd0, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000050}, 0x80) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003cc0), 0x2) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) 05:07:53 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_LABELS_MASK={0x14, 0x17, [0x80000000, 0x1, 0x8, 0x156]}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008840) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x6, 0x40800) read$hidraw(r1, &(0x7f0000000200)=""/4096, 0x1000) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001380)={0x1, 0x1, 0x1000, 0x86, &(0x7f0000001200)="62058b893634205449e4a58f484da6e9d88499b2f23a922ce519ecebf08a0522092c185ac5e6fcd7a32335ac93e6fe0142c673b482119a6d62e4dafa64ee2b0d0a2b3cf412f11c94f25a34a3ebd22bd077c02c64bfe293f69a4bd0bcee288cdf18d3cc9417b703fe93c2a4b666a3316afd19e20bd74b733deba94cedf3b03788ef156817b247", 0xa8, 0x0, &(0x7f00000012c0)="886bf07e74a6b46d811bfe94d11bf8767262fddc4c7970d7bbcd05534222e599f845ffcd7943af607361b92583c9bcff97b7bd9c0b2bbb004f1377f30fafcf751a972689d8b8e93f8e65422321def4eec912472dfe15fc7d2b4104fe0d6b465f8ad653f5e614a849d6a9b66390edc9034db0a243c27149bfb84c367ffb5c58b5975e9280238783be83769896c136d1dfaf5cb5b5650547de81f6c3a382873b1a0e0d4dc4abe8b084"}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000001400)={'filter\x00', 0x4}, 0x68) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000001480)={@msf={0x0, 0x1e, 0x9}, 0x9, 0x1}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001580)={'filter\x00', 0x0, 0x4, 0x11, [0xffffffffffff7fff, 0x2, 0x1, 0x5, 0xfffffffffffffe00, 0x9438], 0x5, &(0x7f00000014c0)=[{}, {}, {}, {}, {}], &(0x7f0000001540)=""/17}, &(0x7f0000001600)=0x78) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x28, 0xb, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000001740)={0x6, 0x1a, 0x1, 'queue0\x00'}) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x3c, 0x1, 0x6, 0x202, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r3 = fsmount(r0, 0x1, 0xfa) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x5) r4 = creat(&(0x7f0000001a00)='./file0\x00', 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80), r1) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x98, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa69}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffff001, 0x42}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000009}, 0x400c800) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000003a40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003a00)={&(0x7f0000003880)={0x144, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000000) [ 128.603790] audit: type=1400 audit(1749359273.155:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:07:53 executing program 5: shmctl$IPC_RMID(0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x43}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = shmget(0x2, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x10c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8d}, {0xc, 0x90, 0x1000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xa8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x80000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x3}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24040081}, 0x20000040) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$FIOCLEX(r2, 0x5451) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000540)='async\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000580), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x42110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x59}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "d89c96271e2d7b7f9e02470d999279f7"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000040) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000840)={'gretap0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0x1, 0x4, {{0xd, 0x4, 0x1, 0x2, 0x34, 0x68, 0x0, 0xfe, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x6, 0x4, "f335"}, {0x5, 0x2}, {0x0, 0x11, "1f35125c164aa5d936d48f1a8320d7"}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000980)={&(0x7f0000000740), 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xc0, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x40) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x209000, 0x0) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000a00)) getsockname$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x0, @initdev}, &(0x7f0000000ac0)=0x10) 05:07:53 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xe8) fstat(r0, &(0x7f0000000180)) openat$incfs(r0, &(0x7f0000000200)='.pending_reads\x00', 0x200000, 0x86) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2b}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48054}, 0x20000000) r2 = socket(0x11, 0xa, 0x400) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f00000003c0)) recvmsg$unix(r2, &(0x7f0000000880)={&(0x7f0000000400), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/108, 0x6c}], 0x3, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}, 0x2062) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000008c0)={'security\x00', 0x0, [0x9, 0x1, 0xff, 0x8, 0x8]}, &(0x7f0000000940)=0x54) pipe2(&(0x7f0000000980)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000009c0)={0x8, 0x7, 0x1}) r7 = syz_open_dev$sg(&(0x7f0000000a00), 0xe1a4, 0x2000) ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f0000000a40)) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000e80)={0x0, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0x8204, &(0x7f0000000e40)='veth0_to_hsr\x00', 0xfff, 0x76, 0x3}) r8 = socket$inet(0x2, 0x1, 0x3f) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000f00)=0x1, 0x4) tee(r8, 0xffffffffffffffff, 0x2, 0x4) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000f40)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001140)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r2, &(0x7f0000001080)=0x80, &(0x7f00000010c0)=@generic, 0x0, 0x80000, 0x1}, 0x9) 05:07:53 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @remote, r1}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000240)=0xe8) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x138, 0x13, 0x300, 0x70bd2c, 0x25dfdbfc, {0x1, 0xf8, 0x35, 0x4a, {0x4e20, 0x4e22, [0x1, 0x4, 0x9, 0x43], [0x6, 0x8, 0x5, 0x8], r2, [0x3, 0x4]}, 0x7fffffff, 0xffff}, [@INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "3b6724745256e7ce03a3bced15204e553afd63ead44e7bcb63a4a4"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "0be3b81e2e72c9d1096fb5ea3b5664cfd99a848b014f56beeef9566ee9ae6009f342fd522fa731ce581dfaf4710a0de95df77e2e139c2a565542f66ac811a1ff701636ef4bd73d70854513edf46e8f65c33aaf1322c5a4219335fc57d131b03f19716ced45ca799610d594feb6231f5bc0c9ce4bc3eba062b40b8694e63568f316a8238805eb5babb06dde6f82010ba73a09feeec9d4197ca734a26d2ac37e08b5d29a2880ff0cad9ce7b5a6e3b6bf21f300c879ba3095f653508cb573a964b296501da3bf83"}]}, 0x138}, 0x1, 0x0, 0x0, 0x4041}, 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000440)={0x0, 0x400, 0x0, 0xb7, 0x3, [0xd29, 0x5, 0x2, 0x401]}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000480), &(0x7f00000004c0)=0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000500), 0x4) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x4e00, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000580)={0x4, 0x8, 0x9}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/vlan/vlan1\x00') r5 = signalfd(r4, &(0x7f0000000600)={[0x4]}, 0x8) r6 = syz_open_dev$vcsn(&(0x7f0000000640), 0xb1a1, 0x200100) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000680)=@gcm_256={{0x303}, "4c2fda263c71acfe", "980ac89016aa4df20c0e838b3b254df6a8e049fd95c052c4dfc0ae06172e8cff", "20b8e8a7", "2354e822d480b871"}, 0x38) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x58}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40006) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f00000007c0)={0x6, 'geneve1\x00', {0x8}, 0x400}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000800), &(0x7f0000000840)=0xc) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000880)={'icmp\x00'}, &(0x7f00000008c0)=0x1e) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000900)) 05:07:53 executing program 6: ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x401, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x3f, 0xb55}, {0x8, 0xff}]}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) fsync(r1) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x0, 0x2, 0x0, 0x1, "7474e96a6f31a79266306ac748d18c3b2bea6c23bb498238ee66360686bd12bf0f1998ca50ada3705dc4cfb921853c9e01cbb6d01f969771702dccc17509c35b462a0eef75b198f4311963572187b82fa41ced40c35c7f71d19ff34d92794f4b7afbc2a2314f08cc6f90735a73a4f1e6e98da643b5e85c0e563e0f9af66eca3a5203fbdd7eb5"}, 0x96) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000280)={0x0, 0x100000001}) openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000300), 0x200, 0x20802) fcntl$getownex(r2, 0x10, &(0x7f0000000340)) close(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000cf7000/0x6000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000e85000/0x2000)=nil, &(0x7f0000f11000/0x2000)=nil, &(0x7f0000ed4000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)="75a7407d8b52b19d6ebae6eb83b24bb06d95334f91b51ec13c72043083b193122a1f8edf64193b5c0a7cb2c403dfdaaa6ec6091916047ca05ff998b1fc74998ef9d65949fe279e11ccf3690783bc436c94d25543279b29d9b7516d6f00f398498ba16c6d7ba416a9b6abcc3911aaa868fb02487b13f82f211b0a1be6fec531555f9246d4bb1829", 0x87, r2}, 0x68) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000540)={0x380, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x328, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^:,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/hidraw#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x82}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(&:/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/mouse#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'devices.deny\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'devices.deny\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/hidraw#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}]}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/dev/snapshot\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'x\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd889}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'devices.deny\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-(&\\\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/mouse#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+$,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x9c(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/hidraw#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/mouse#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&(\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[a.(\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/mouse#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}]}]}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "acd2e8c9511dd0f16e556a7e058352378d22136c14f6d2bf0c427460792cf93e3d297bbaeb41230d69bee0175ce8eaa4afbdfaccff6397c6c125f6b73ae284c66570e3f15371177a420f81cdc89a48653d649a10a65db90aa870c3571b9294f2a1720fc965cc6c2c262a8273dff83871fb5b03263eb57d11bfb681a1d2dcc321f1715cc7b14f3768a2a90dc1f8c2236677920b468f317ac48764e42f1699f123b98bcf2c1af4786f0ab92ad81a1fa9f7a0da65020fe4ae94293086724bf1069375106248cd2d6b725bf5a0f1853c1565"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x380}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x0) [ 130.124751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.128160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.131668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.139696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.145747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.192497] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.196021] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.203052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.209823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.217919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.257210] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.259929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.261998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.267932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.271465] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.416805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.428162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.457221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.461798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.464400] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.470268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.474068] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.480660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.483082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.487198] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.499675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.501686] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.505912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.546196] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 130.549058] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 130.552206] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.571783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 130.575678] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.577106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.623934] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 130.626141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.643583] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 130.681229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 130.697637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.736873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 132.206957] Bluetooth: hci0: command tx timeout [ 132.271646] Bluetooth: hci1: command tx timeout [ 132.335586] Bluetooth: hci2: command tx timeout [ 132.527014] Bluetooth: hci5: command tx timeout [ 132.654569] Bluetooth: hci3: command tx timeout [ 132.718538] Bluetooth: hci4: command tx timeout [ 132.718737] Bluetooth: hci6: command tx timeout [ 132.846459] Bluetooth: hci7: command tx timeout [ 134.255745] Bluetooth: hci0: command tx timeout [ 134.319406] Bluetooth: hci1: command tx timeout [ 134.383774] Bluetooth: hci2: command tx timeout [ 134.575269] Bluetooth: hci5: command tx timeout [ 134.702852] Bluetooth: hci3: command tx timeout [ 134.766758] Bluetooth: hci6: command tx timeout [ 134.766862] Bluetooth: hci4: command tx timeout [ 134.895004] Bluetooth: hci7: command tx timeout [ 136.302470] Bluetooth: hci0: command tx timeout [ 136.366381] Bluetooth: hci1: command tx timeout [ 136.430786] Bluetooth: hci2: command tx timeout [ 136.622426] Bluetooth: hci5: command tx timeout [ 136.751428] Bluetooth: hci3: command tx timeout [ 136.814525] Bluetooth: hci6: command tx timeout [ 136.815352] Bluetooth: hci4: command tx timeout [ 136.942359] Bluetooth: hci7: command tx timeout [ 138.350366] Bluetooth: hci0: command tx timeout [ 138.414376] Bluetooth: hci1: command tx timeout [ 138.478399] Bluetooth: hci2: command tx timeout [ 138.670660] Bluetooth: hci5: command tx timeout [ 138.798386] Bluetooth: hci3: command tx timeout [ 138.862671] Bluetooth: hci4: command tx timeout [ 138.862917] Bluetooth: hci6: command tx timeout [ 138.990381] Bluetooth: hci7: command tx timeout [ 189.900311] syz-executor.1 (281) used greatest stack depth: 25072 bytes left [ 190.192115] syz-executor.0 (282) used greatest stack depth: 24984 bytes left [ 192.581777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.588850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.592225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.601520] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.607059] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.668596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.672213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.682107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.691792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.704916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.718172] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.726848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.733728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.745641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.755568] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.907705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.917460] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.920061] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.927599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.936545] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.945588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.948036] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.950940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.952656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.956011] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.964988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.974875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.977378] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.979906] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.984567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.988438] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.991255] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.995627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.000084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.010921] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.019382] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.029537] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.032366] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.038237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.070669] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.670715] Bluetooth: hci0: command tx timeout [ 194.798403] Bluetooth: hci2: command tx timeout [ 194.798486] Bluetooth: hci1: command tx timeout [ 195.118460] Bluetooth: hci4: command tx timeout [ 195.119763] Bluetooth: hci5: command tx timeout [ 195.183400] Bluetooth: hci3: command tx timeout [ 195.246467] Bluetooth: hci7: command tx timeout [ 195.247857] Bluetooth: hci6: command tx timeout [ 196.719564] Bluetooth: hci0: command tx timeout [ 196.846366] Bluetooth: hci2: command tx timeout [ 196.846430] Bluetooth: hci1: command tx timeout [ 197.166556] Bluetooth: hci4: command tx timeout [ 197.167375] Bluetooth: hci5: command tx timeout [ 197.232020] Bluetooth: hci3: command tx timeout [ 197.296374] Bluetooth: hci6: command tx timeout [ 197.296536] Bluetooth: hci7: command tx timeout [ 198.766358] Bluetooth: hci0: command tx timeout [ 198.894524] Bluetooth: hci1: command tx timeout [ 198.896034] Bluetooth: hci2: command tx timeout [ 199.214667] Bluetooth: hci5: command tx timeout [ 199.215166] Bluetooth: hci4: command tx timeout [ 199.278530] Bluetooth: hci3: command tx timeout [ 199.342578] Bluetooth: hci7: command tx timeout [ 199.343054] Bluetooth: hci6: command tx timeout [ 200.815313] Bluetooth: hci0: command tx timeout [ 200.943375] Bluetooth: hci2: command tx timeout [ 200.943404] Bluetooth: hci1: command tx timeout [ 201.263400] Bluetooth: hci5: command tx timeout [ 201.263423] Bluetooth: hci4: command tx timeout [ 201.327374] Bluetooth: hci3: command tx timeout [ 201.390480] Bluetooth: hci7: command tx timeout [ 201.391354] Bluetooth: hci6: command tx timeout [ 254.987266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.992854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.996927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.009215] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.017108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.046527] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.050824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.053434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.065625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.069642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.280421] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.325742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.366855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.369802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.374801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.379848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.383265] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 255.387937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.393161] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.398040] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.401983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.409059] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.413707] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.416445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.420699] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.424120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.449233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.452887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.456145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 255.456334] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.461779] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.464259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.479236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.479703] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.484828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 255.490249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.518804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.520888] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 255.522857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.546531] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.071528] Bluetooth: hci0: command tx timeout [ 257.135455] Bluetooth: hci1: command tx timeout [ 257.518542] Bluetooth: hci3: command tx timeout [ 257.582848] Bluetooth: hci4: command tx timeout [ 257.646380] Bluetooth: hci2: command tx timeout [ 257.647528] Bluetooth: hci6: command tx timeout [ 257.710553] Bluetooth: hci5: command tx timeout [ 257.711421] Bluetooth: hci7: command tx timeout [ 259.118429] Bluetooth: hci0: command tx timeout [ 259.182367] Bluetooth: hci1: command tx timeout [ 259.566560] Bluetooth: hci3: command tx timeout [ 259.632498] Bluetooth: hci4: command tx timeout [ 259.694520] Bluetooth: hci6: command tx timeout [ 259.694944] Bluetooth: hci2: command tx timeout [ 259.758385] Bluetooth: hci7: command tx timeout [ 259.758432] Bluetooth: hci5: command tx timeout [ 261.167063] Bluetooth: hci0: command tx timeout [ 261.230657] Bluetooth: hci1: command tx timeout [ 261.615487] Bluetooth: hci3: command tx timeout [ 261.678466] Bluetooth: hci4: command tx timeout [ 261.743728] Bluetooth: hci2: command tx timeout [ 261.743822] Bluetooth: hci6: command tx timeout [ 261.806586] Bluetooth: hci5: command tx timeout [ 261.808499] Bluetooth: hci7: command tx timeout [ 263.214377] Bluetooth: hci0: command tx timeout [ 263.278385] Bluetooth: hci1: command tx timeout [ 263.662720] Bluetooth: hci3: command tx timeout [ 263.726356] Bluetooth: hci4: command tx timeout [ 263.790339] Bluetooth: hci6: command tx timeout [ 263.791445] Bluetooth: hci2: command tx timeout [ 263.854515] Bluetooth: hci7: command tx timeout [ 263.855024] Bluetooth: hci5: command tx timeout [ 317.829476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.835748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.839696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.848008] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.858396] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.083719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.091842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.094096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.112862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.121218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.161165] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.168779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.181754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.217531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.224878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.229626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.248030] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.255230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.282430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.289058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.412613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.433824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.440943] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.444058] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.448340] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.452252] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.460046] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.463608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.488860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.512078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.520214] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.522776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.533956] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.537899] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.540028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.553520] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.562761] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.575081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.576627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.601615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.918713] Bluetooth: hci0: command tx timeout [ 320.174634] Bluetooth: hci1: command tx timeout [ 320.302413] Bluetooth: hci2: command tx timeout [ 320.366477] Bluetooth: hci3: command tx timeout [ 320.494412] Bluetooth: hci7: command tx timeout [ 320.686410] Bluetooth: hci4: command tx timeout [ 320.687359] Bluetooth: hci5: command tx timeout [ 320.750475] Bluetooth: hci6: command tx timeout [ 321.967382] Bluetooth: hci0: command tx timeout [ 322.223035] Bluetooth: hci1: command tx timeout [ 322.351677] Bluetooth: hci2: command tx timeout [ 322.415742] Bluetooth: hci3: command tx timeout [ 322.542395] Bluetooth: hci7: command tx timeout [ 322.734713] Bluetooth: hci5: command tx timeout [ 322.736010] Bluetooth: hci4: command tx timeout [ 322.798430] Bluetooth: hci6: command tx timeout [ 324.015421] Bluetooth: hci0: command tx timeout [ 324.270341] Bluetooth: hci1: command tx timeout [ 324.401312] Bluetooth: hci2: command tx timeout [ 324.463610] Bluetooth: hci3: command tx timeout [ 324.590388] Bluetooth: hci7: command tx timeout [ 324.784336] Bluetooth: hci5: command tx timeout [ 324.784460] Bluetooth: hci4: command tx timeout [ 324.848330] Bluetooth: hci6: command tx timeout [ 326.065316] Bluetooth: hci0: command tx timeout [ 326.319529] Bluetooth: hci1: command tx timeout [ 326.446558] Bluetooth: hci2: command tx timeout [ 326.512518] Bluetooth: hci3: command tx timeout [ 326.638353] Bluetooth: hci7: command tx timeout [ 326.830487] Bluetooth: hci4: command tx timeout [ 326.831638] Bluetooth: hci5: command tx timeout [ 326.894357] Bluetooth: hci6: command tx timeout [ 378.102966] syz-executor.0 (7939) used greatest stack depth: 24544 bytes left [ 380.169628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.174739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.183200] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.192169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.195846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.200959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.205857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.222906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.241825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.252202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.359878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.365019] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.367415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.375170] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.380866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.433902] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.441185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.445995] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.478694] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.482109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.521788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.563964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.568844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.570502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.572962] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.575563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.585169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.590385] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.614490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.634907] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.654594] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.655951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.663181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 380.668916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.670852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 380.710842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 380.730481] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 380.739184] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 380.748815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.784700] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.255742] Bluetooth: hci1: command tx timeout [ 382.318381] Bluetooth: hci0: command tx timeout [ 382.447513] Bluetooth: hci2: command tx timeout [ 382.511328] Bluetooth: hci3: command tx timeout [ 382.639346] Bluetooth: hci5: command tx timeout [ 382.766353] Bluetooth: hci4: command tx timeout [ 382.894558] Bluetooth: hci7: command tx timeout [ 382.895862] Bluetooth: hci6: command tx timeout [ 384.303520] Bluetooth: hci1: command tx timeout [ 384.367345] Bluetooth: hci0: command tx timeout [ 384.495300] Bluetooth: hci2: command tx timeout [ 384.560573] Bluetooth: hci3: command tx timeout [ 384.687630] Bluetooth: hci5: command tx timeout [ 384.814384] Bluetooth: hci4: command tx timeout [ 384.944328] Bluetooth: hci6: command tx timeout [ 384.944361] Bluetooth: hci7: command tx timeout [ 386.353384] Bluetooth: hci1: command tx timeout [ 386.414599] Bluetooth: hci0: command tx timeout [ 386.543593] Bluetooth: hci2: command tx timeout [ 386.607439] Bluetooth: hci3: command tx timeout [ 386.734480] Bluetooth: hci5: command tx timeout [ 386.862824] Bluetooth: hci4: command tx timeout [ 386.990660] Bluetooth: hci6: command tx timeout [ 386.990870] Bluetooth: hci7: command tx timeout [ 388.398566] Bluetooth: hci1: command tx timeout [ 388.462599] Bluetooth: hci0: command tx timeout [ 388.590599] Bluetooth: hci2: command tx timeout [ 388.655317] Bluetooth: hci3: command tx timeout [ 388.782716] Bluetooth: hci5: command tx timeout [ 388.910733] Bluetooth: hci4: command tx timeout [ 389.038414] Bluetooth: hci6: command tx timeout [ 389.039553] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 05:12:55 Registers: info registers vcpu 0 RAX=0000000000000008 RBX=ffffffff864f5068 RCX=ffffffff81b2244c RDX=0000000000000000 RSI=ffffffff8687b8f6 RDI=ffffffff864f503c RBP=ffffffff864f505c RSP=ffff88802dc174f0 R8 =ffffffff8687b8f6 R9 =0000000000000000 R10=000000000003b6cd R11=0000000000025b43 R12=ffffffff864f5064 R13=ffffffff864f503c R14=ffffffff864f5058 R15=dffffc0000000000 RIP=ffffffff813533ed RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6ae3388540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd11810e38 CR3=0000000016a3f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff812c7c90 RDX=ffff888036bf8000 RSI=ffffffff84b41d22 RDI=0000000000000004 RBP=ffff888036bf8000 RSP=ffff88803053ff00 R8 =0000000000000000 R9 =ffffed1006d7f000 R10=0000000000000001 R11=0000000000000001 R12=ffff88803053ff58 R13=00007febd03da368 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81738b3b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007febd03da368 CR3=0000000026f60000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000