Warning: Permanently added '[localhost]:24857' (ECDSA) to the list of known hosts. 2025/06/08 12:56:36 fuzzer started 2025/06/08 12:56:36 dialing manager at localhost:40003 syzkaller login: [ 98.585097] cgroup: Unknown subsys name 'net' [ 98.724750] cgroup: Unknown subsys name 'cpuset' [ 98.772644] cgroup: Unknown subsys name 'rlimit' 2025/06/08 12:56:53 syscalls: 205 2025/06/08 12:56:53 code coverage: enabled 2025/06/08 12:56:53 comparison tracing: enabled 2025/06/08 12:56:53 extra coverage: enabled 2025/06/08 12:56:53 setuid sandbox: enabled 2025/06/08 12:56:53 namespace sandbox: enabled 2025/06/08 12:56:53 Android sandbox: enabled 2025/06/08 12:56:53 fault injection: enabled 2025/06/08 12:56:53 leak checking: enabled 2025/06/08 12:56:53 net packet injection: enabled 2025/06/08 12:56:53 net device setup: enabled 2025/06/08 12:56:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 12:56:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 12:56:53 USB emulation: enabled 2025/06/08 12:56:53 hci packet injection: enabled 2025/06/08 12:56:53 wifi device emulation: enabled 2025/06/08 12:56:53 802.15.4 emulation: enabled 2025/06/08 12:56:53 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 12:56:54 starting 8 fuzzer processes 12:56:54 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0xbf5c5d28) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)=0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20bc40, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2400, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) syz_open_pts(r1, 0x52142) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000480)={0x9, 0x400, 0xffff}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r5, 0x5441, 0x77cac272) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000004c0)={0x1, 0x8001, 0x1}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000500)) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x3) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000000940)={0x3, 0x1, 0x10, 0x7, 0x135, &(0x7f0000000540)}) 12:56:54 executing program 1: r0 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="e2a7eaea06ac8c24500cabac3b877060bdbed088a4589fd9bc55dc318b58c56f425d7312430df3ab78290b21cf", 0x2d, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="9a50103a562c331092eb656fc0676cccbd994f3227ba5b248b4a4317506139bf63a95ac5045333641cbf379e75a90798787dc534310b14e1d11552bee44bf257228ef5b9bf51300759be8460332f701b3c4cc330f07b818a08a98b8a185c137b23d24c73857e2cb7545735a5bbcaf447d997883538f6b32ad68203baf0d4695e335b57f2417e829e8f6f58b9278974398bf836775fa53555559d5350678ca0027d33a256cdbdcc953b1a9c0cb976bacef05b1a5f85624e641c87975e6628c332c487e63e6bb8", 0xc6, r0) r2 = add_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2) membarrier(0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$clear(0x7, r4) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000500)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$search(0xa, r3, &(0x7f0000000600)='asymmetric\x00', &(0x7f0000000640)={'syz', 0x2}, 0xfffffffffffffffc) mq_open(&(0x7f0000000680)='\xcb\x00', 0x1, 0x40, &(0x7f00000006c0)={0x8, 0x7, 0x7, 0x1f}) keyctl$negate(0xd, r1, 0x800, r1) keyctl$negate(0xd, 0x0, 0x5, r4) r7 = add_key(&(0x7f0000000700)='dns_resolver\x00', &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)="b1ba94", 0x3, r2) keyctl$clear(0x7, r7) r8 = add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$search(0xa, r8, &(0x7f0000000840)='id_legacy\x00', &(0x7f0000000880)={'syz', 0x1}, r3) 12:56:54 executing program 2: keyctl$reject(0x13, 0x0, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffe) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x8}, {0x2, 0x1, 0x800}, {0x4, 0x9}, {0x3, 0x28cd, 0x800}], 0x4, &(0x7f0000000040)) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x36, 0x7, 0x8, 0xfa96, 0x1, 0x7, 0x4, 0x3]) mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0)="7f961355f705a81c28c1f4ab2f62ccdfe0efd5fa21aa9e57fb6cbb268e847e25dc0f0cb6dd5600786cbf7ba014b0b06a3266da1fc8a8085d9781f86088553aee64ed2cd21a26f34b8c1d82ea5b4a89b22e3476be5277b0ca915cecc57005d4f66dcaebe7663ba6f8828c6fe40299db5dc2c2eb99064d62e194027d5b70800691cf1331a7f961ac1e09f0e8df1ea696060eeecc0c5a464f5e8c45d2538baa43874820ceb373649ff7e1d4172cc0e0a568a4edc10fa64790056a575daae3ba3fc499365fc8071bf825c2ef35dbf376af47", 0xd0, 0x9e, 0x0) semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000001c0)=""/135) clock_getres(0x6, &(0x7f0000000280)) semtimedop(0xffffffffffffffff, &(0x7f00000002c0)=[{0x3, 0xff, 0x400}, {0x3, 0x7}], 0x2, &(0x7f0000000300)={0x77359400}) r0 = mq_open(&(0x7f0000000340)='\'!{\xee\x00', 0x80, 0x106, &(0x7f0000000380)={0x7, 0x3ff, 0x5, 0x7}) mq_timedsend(r0, &(0x7f00000003c0)="651b296a25d7d0e7ae23d753ff30c72f74a0dd2b232d2d4b78f501fb5c2bd3b652b5242e83646cf80137a64fc46d64c6c30c02eaa46dc20ed6a17fda41a58c40088f1100b6ce598814c186ea4ec50e82401e66bf85edcc7322f47afdb42d50ce547553d116ba4c3140571daa642a8367d55e659abb670830492dab9a301a63e57810530f8d611dd0d0f6b21cde0dc7a9", 0x90, 0x100000000, &(0x7f0000000480)={0x77359400}) clock_gettime(0x2, &(0x7f00000004c0)) semop(0xffffffffffffffff, &(0x7f0000000500)=[{0x4}, {0x1, 0x1c0, 0x1000}], 0x2) pselect6(0x40, &(0x7f0000000540)={0x1, 0x0, 0x20, 0xfffffffffffffff7, 0xd19, 0x8, 0xffffffff, 0x40}, &(0x7f0000000580)={0x3, 0x6, 0x90, 0x9, 0x3e0f, 0x8, 0x1, 0x81}, &(0x7f00000005c0)={0x1, 0x0, 0x0, 0x3a5, 0x63, 0xceb6, 0x7, 0x6}, &(0x7f0000000600), &(0x7f0000000680)={&(0x7f0000000640)={[0x100000000]}, 0x8}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x8000000) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000006c0)=""/4096) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r1 = semget(0x1, 0x1, 0x80) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f00000016c0)=""/4096) mq_open(&(0x7f00000026c0)=',$&-@^\x00', 0x2, 0x60, &(0x7f0000002700)={0x8000, 0x3f3f, 0x80000001, 0x1}) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000002740)=""/113) semget$private(0x0, 0x4d7afd05f01aeb9c, 0x700) [ 116.305846] audit: type=1400 audit(1749387414.828:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:56:54 executing program 3: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "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", "cf73e3b7a0245aa406756c873363ff5eb99315b68b17f93323e60fd22566e9eca17af99d102f99cd1ebc74c98efde0e62ac04c209ded4fbd7b8ca81a8c8f27df85810ee49aa57b568726b1485278a5c653bee89add17ee0e40278ff539c93f37cd791b8d60a54673cba09f1171010ae2baa2f7289d1e5793ce3d7b1c64e7c926c1b2aa850672d548e84f79d2eaf094eb55e4d46c9ee6a291269b59764b99d302d940adca35111de57e9ab3aac445f8b0d49ba217c6c05664dded32935f93b685c8d36efdfeca818c3841e8a680304790eb87d186458b71bad418fd9893d458c9030c10eb1e15d06d3158fdaea14aba261e1b71daf5ede108b1df56de69c6bb11343e0b0232d77464395287e39c05ab432db6982b6a44af9c11d7a72bc738efd4dec91c36a543f699e612ddf7616a838bd7d95b0e4e7d34127ae5370a24193bf7494b8e1893570da09add6b3fdc7b5bbc1943e88e1454c80fd039f11ad1eb23b99c0b94568e6528a0ffcf419340d494fdfa1c09b695bbed1c9d7fc06eed7d1d9138e9fd0b9c860230043f8866de9646720d158db8c62cd9960a3c7d4f1b755e09ec2864e6f2840d7d10e78e2ace6577b98ef7d7ea87cf168759066884ececf8efeda66ca6308098bed36902793819df7dc75e7d8a42e73f45e2f212e37bfb25705673d76804c6db00c3a9171443e97f4395444f04907d4bdc47b155c32366f305d6b95d1843b02074f75715f30566e9773c6d157414732ac602a004992891aa4b2ff7e8867da28cb3a52db19e84e39e9c701ada472f84b5efcdc715dd4637113615631fb47b69cd51ae56c53bf58dfedaf000530544f160e4eee9b2b7567b092b30fdfa88b26ff9ce853dc0257ed149dd4db2c1206d88994b860fa267fa29c03578f3b91ae62f890cd911484e6bce644851850a9bf9ec447ebdac5915f60676cbf41bf9275e428261bcbc84cfc8c13cb2c7d5c242fde0924ea59fddc8f30d9c4432a985388fce43e127f818d986f7ceb391e4cf0ac4881467fc4f8567610240a13072e483fd173028955cc5fdd40fe77b542ae0764ea757029b1d2063ad16ec5884430e8516ae62ca77fb5c19081c16c8a179d123d99a14fe6129eb7487bcebb24aab6a133f95ff6308ea4685ca6f2296d2017e2d11ee5c61cca2c54472dcada2a88105f95dfff2e747ca76b627015e3052863d14a15c727e3004352e02b19e3219fc0385ddb856993776cd4ebd02be36e1c82965cd620c0ba62d68885d6da528a66ae8676464217f5e630703d17eb5980ed40108971b4203f1101c6c67a6c6ae93df9d9df3078ddf5b28eb359052c2900fdda90e7c2652539aaed756bbec7bd8bd5c2b50a72680921de6331d9c870b96603b601bf47debe060e7660657a388079c8ff06b91c6b818a684b663fea7754eb6be2aabafd7ad3a6412ace1733218d3a3b811d2fa5c2568e92a47eec825cf7a505b2d96542c35bbd1df7f4805010c036e0d1f01a47159e86764a3238e663ab310c835acfb7edbe1551bcec180efdf7809aa6982f3edef200ae4b6092df21f42e6f8869676a9dc39989d8e9a1c1b0734e9af9f81c5c2d069d645f73b94ec28db9f2e7017f8087f583a3b10f5df674eee2ec94fa6075a16b13857cbed6cfc0a164281b218eb1953ee4773414d3be3b4cafc2d887d71646cf05ab64c12fa6581b7afe6e5e18f53eb7cc80de042b1997df28d09665c7e76f5d7905bd3552705cac88a7e7c98d8417207a1bf4e2d475dbd83891a55464a7d89c4f2a935d1d4bbecd98ca72ae958d54576c5ff99ac6974726969b0e588ed32396af7e8e175a2afe4dfa865fb0fb38dabca07c7f23bfb646a0224d594bd64970e5db4e9b80640d4b49de83e18e489b8d85537eccb0426ce086a26f54b33c42ba7703e1b18a2d0676a34a3ea20b8294bef8a3d2b47641f194aa485f57d9c45d8735334f4b697b633e3a8aebad3781bd9c03193c1b97ef7809e73860a42afadf76b874380c1da6502fd20efacf7619564bbe253fe9c3ec9199eb398487a0f17de009bb9bd29694f99130751394229d9e3e39cf48fe54ec398989ab3b26cc299e5ed22f2955b9d4570d05fbbb66f33bf8a819b04f9e430c3cd2d703273e6e0fcfac0d06ba8c320acfcf6cb578b22ed618d817ad40f169d789b6a80b92a451df0e5b4a09eb13529ff2c05814713be62af3f85d418ce3f9c611d88a13bd3b6a335331fc9b13be48fc306facb3e84f0893a4f786f451bef10aac8dc512dd9a9a9aa42d07edaee50c9ab9b1cbe2850a0fa0a72660b82eafc8cd4e93b0eecb4bc1a154eb3d9b585190f8aef949affb38bd1c97b934433b43dbc98c23752b6cebc78ea75c2279637e547e53134ae3bbcb73e2e88d9c0a2124241ca457a07ca592fea4e8585c6c70a07ca30e95c84ab1edff0b8f31798384757468556cefdb7f0ba07ebaa4dbae2ecca7a3aec7338c924c964ca183e275e038a3b05935efe280b5d768dd53cb9f3d0e6502dcee470f2e48bd2fa50e90843adf6fe0360c6f2f9e0099451ce7ddb3120211003fa5219679e0cd571dc617dae7ef3e7c37c1f928bad703dd8a417162feb2467a22be51320b86b8fe4a73bc189ff692ced808a84e594cb3a06c3146b197bedc4cb96a269f957c2027fefb8967e749aba3e1e05866e0ed98e2d43dc5df4645f9e3bb8c9e374e8c370a7c019bba0a8c01473f4f2b86f9470f069d8d8482eecbb7d914d601f90ceb24530c2cafa13613b0b16ed9b5aa487ef7b69d5f817dcbbb413a935791df2ea1258363e10c2f10e6f27e47a8de17928bb25c82c474c8defde0e7968fe7cb88a68d6e1acdce17b9c6bc1fad960fa420bd4775c35a082a71fddf03d02b34eaa1f6cf3db49b890b88f0eb069cb817cb96cf3a3b0faeba2c66d1645971768172c3c0ae278356a726a166fe4a99b9406cbd361a6bb5eff5412091c385793dbdb49fae02fc859401c0f141ce834cf9c178706996889a578a66a4c1f1528e44ce21007812dc8883ee87a2f18655f36175b933f75b3e833905647b49e9ae643a04c9a2d7088cdb317f52b3301c1bcc45a05b62a8bf8a4c78acaf68538831b6dbf313c601dab40e1471e631efc65466d9f8df93a775d870141a5e8632be7a733acc4ab4482f9eecfe07b02d84788fce44366d2af0528a7e917c5480a1df91778158d9505fa85a05c717b01caab77d0b0bbb44a7402534ba4d3721861e350f22f889bb6f94902ff35f64295ea61a835b80a7ea7d90aba78600f7f9ac05a3e9ac5502c9a985dac97c89323ea1eb39b9c66141f08e643f68cc5ef4d5e3590aad11dd45e2a95382cbffa855d579d4521ccb59104e6a7716d04041333ecf66449b6193f8efc12d893b873adbb54604b2376efd745c2199bd3fb45636f099b3f1b5fb14f7efaa014e69049b13ed53b9b611606d62cf90a6b492ce5c947e14f9ba3eda2d77abd22ba70a0df8913ca5fb12504a6f2a5c5089b246f544c609950e2c8fce8d698e5bb3df64d4097bf19831d6906acba1bd384d2af3dcb2dd5df62778241c5c8b74e951fade9c0a4b76d081f91ee0a30842205f5645d79a5a067bc473dc431d04c83fcba3315169fe6d3536cfa3e8e892c23a575b3d8f84dd3fd49fd0bddaed6fc69ba3240f88823018d0ae73eb928a7ca5556bd25d8de152012c82c2d049ae2cda971bd25a268a66be9caf68b8331171669fe0c94625f7c2d7d358d83247f033c24529b4db7bd94ccc3faa6ce153895f8fbefb6888da31574296aa6e33ade070381ccfb130965b8ce857980e9b6f4b71b515b46cf458f9ec348f274f2f4f2e12027da3933a36d01d95bfd38cf7289ba5f81568b44151886f360ea74da0a508802ac473563acad3dc790b1b641fe13436ad75b6f252add97df73b71d04aca6f95449440da06254c05809e12334479bca7fe2da8ec374738b9b3da68c3bffad3b6de53fb13546a59708be64228daa63bfc987fa5a413457bb874afe3b142eea533470a59f6383b8734fab44d2faf02015a8ab6ee2d92a104e6b0bab03ffb6ceb53ccf50db5e824a5a16ebbe3ffddec04f2d41acc408c975dabfcccc1ae9bb0bcdcd10b3010cca58a21117dfddc33b2ffeab162f0d14adc63c2f8c1d39409465653091589c4d5121c7ff92dd0642494ffd0feac5c288d9f9b21603162351068b53e1b08a8805c9caecf6618d1340a786f7c8c798483e37b7a0edcfbf47eee8b218b67159e943b7c3d4da54ab0deac9e1964a1b481b30a8101c4762d0cc16f34e913e0aec42ff6fdb1b6c1a0f18340a83d3f25eb48d3a852b9ca2a8a48411d61f1688a19c4a2fa3fe8655faeecb90e1f15301768064208993053059a02d1e7681fca485c4f1a782cc16d40b686842c0e80626b94355dc2eb08e53b223c713bfb8d8633ecb1ccb9acec8bc742b3df109e753d842c4b439d827eac2d333fb042eae0cd22afbdfd91e685bae1339c759784437f0738667d904172ca05b15eaba72122b68664870069dd0c7ca39735bf2683b2fba864f7e742c6642dac8be0a0bdd2c1da780a7ea64f180649ce1faa2a7821da2bde0bd1eea6546f86a2cef1137c0abc21c1a63e5fffbcc8364e8758e5c267eab13a628e277e7cd37fd45fa8e48c8d0e51817165c259660dfa1c0e2b9830baa69e39a51bb878e0d9f645e8e010d27eba3facd97e730a78705f79fe074f79a907e97de2ce05f4729f1e73f6fc8d6e16af30048abe311cdc65a96e20fe22c31baebd4fff4e91c8419ab8a8b296c15e8ba3c4f6ac6e3b731ef099734d6570faf8a37ba3dcd8e913e2569056201673c9f44553818f3fafade6f30a826f5c1a668ed7893cd843d1430daf0a6ad4e4df544cc78a89513eaea927867d8e52d0fdbdb87bad7d748229a17eb3cd3763d7312c11e78ff0b62ae00bf867c2d9908bce9cb2c595f5344b0b4d9cc3f3068fbe45db24febb370e2c9e84308580f490ab24c66be57d84b287793c537fc0f8122b622c18bae3d6b42753498afccc9db4b3dd898c6dfcfddda9f361e4977e2b8e433bf0e5e8c1a6d225784517b0400f172cea8931eb36b9315d51fe74874d4b7e7cf5ca9b346f0f1c87098231c0445924d5992b777b50e4864db8c21e90dbc66af25d57ac3f8f6c041f458f7a085c699a45e7698bcad9a03f80069e3cd91b23bb9e72e2ec512d95788fc318fc57b64f42e92482df245cbb87c13838de4a08949531437276592fd58be2bbfe147aefc0e15900edd4af232ebeaef199b20cc19fbad40cf94b3ebf8a2f313bc69dfa8b0ffb32f7cfa15f7bac4bf9b8628a9485061950ceb97d8ff835b331ecf1d357a536a30555ca1ea3f5f39d7bbce006fa8b32534c4255e9227bd21bb2f14648d023683dd151f5ef146358ceab7a19ada899588e6571b04b66d5f"}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000010c0)=0x567, &(0x7f0000001100)=0x2) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40015) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x5c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x6}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xc8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd0}, 0x24000894) write$tun(0xffffffffffffffff, &(0x7f0000001380)={@void, @val={0x2, 0x0, 0x1ff, 0x1, 0x4, 0x82e7}, @mpls={[{0x7f, 0x0, 0x1}, {0x6}, {0x5}, {0x7fff}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x100}, {0x1ff}, {0xaf, 0x0, 0x1}], @generic="5a35059c4fb976d00b605fc6"}}, 0x3a) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000013c0)=""/4096) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000023c0)={'macsec0\x00'}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x800) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000002540)=0x6, &(0x7f0000002580)=0x4) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000025c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002640)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002680)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x50, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x44, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004084}, 0x811) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7b}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6c}]}, 0x2c}}, 0x4080) 12:56:54 executing program 4: ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000000)={0x50000000, 0x1}) syz_io_uring_setup(0x7a97, &(0x7f0000000040)={0x0, 0x4241, 0x1, 0x0, 0x356}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x48b7, &(0x7f0000000140)={0x0, 0x3cc0, 0x10, 0x3, 0x69}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r2 = socket(0x28, 0x800, 0xff) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2004, @fd=r2, 0x81, 0x8, 0x401, 0x7, 0x1, {0x1}}, 0x229) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000840}, 0x40810) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000440)={'tunl0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r3, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000640)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x480440, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f00000006c0)=0x400) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000700)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl2\x00', r5, 0x4, 0x1, 0x7, 0x101, 0x20, @remote, @local, 0x7800, 0x8000, 0x8, 0x27cf}}) ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f0000000800)) 12:56:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xd8}, 0x1, 0x0, 0x0, 0x44000050}, 0x400c004) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$CDROM_TIMED_MEDIA_CHANGE(r2, 0x5396, &(0x7f0000000400)={0xff}) ioctl$CDROMVOLREAD(r2, 0x5313, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000500)={0x0, @in={0x2, 0x4e23, @empty}, @isdn={0x22, 0x9c, 0x0, 0x81, 0x3f}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1}}, 0x3, 0x0, 0x0, 0x0, 0x3a7, &(0x7f00000004c0)='veth1\x00', 0x4, 0x40, 0x3f}) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000580)) process_madvise(r2, &(0x7f0000000680)=[{&(0x7f00000005c0)="e2424a4ba5bbabf8f8e6ff4e83004d01d33fe39a773030be5e6b0526672dc2df972b04a31f32a3b81433998cb0c0238cf9c9a50f6c238ca567f90440a950dbe08af410a1ea64f2d6e2d8a7c7985ee1be6990bf6a2f4da8281247bab1d73c9e66c23c9bf55e59cb4bb3c6422c33580230263b611ce5049eb870af58a455ab5b6aed916a61837bb21ffd52b4a7a624ecc18de83b00880f02b66d2bb4dc4ba2fd39568097", 0xa3}], 0x1, 0x1, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x30, r2, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r2, &(0x7f00000006c0)={0x30000001}}, 0x5) ioctl$CDROMREADAUDIO(r2, 0x530e, &(0x7f0000000780)={@msf={0x20, 0xdd, 0x58}, 0x2, 0x27, &(0x7f0000000740)=""/39}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24088840}, 0x4) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000900), &(0x7f0000000940)=0x10) r5 = pidfd_getfd(r2, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b40)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r5, &(0x7f0000000a80)=0x80, &(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, 0x800, 0x1}, 0xfffffffa) 12:56:54 executing program 6: ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000000)={'bridge0\x00', @ifru_mtu}) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x4000080) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x2}, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x406100, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'rose0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x120, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r2}}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0xc02, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x100) r4 = pidfd_getfd(r3, r3, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000540)={0x0, 0x2, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) r5 = accept4(r4, &(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000600)=0x80, 0x800) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000680), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x540d}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4004884) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xf0458c28a3922e2a}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) add_key(&(0x7f0000000ac0)='cifs.idmap\x00', &(0x7f0000000b00)={'syz', 0x0}, &(0x7f0000000b40)="b51733d4a0d9bca44d9512e6f8a467b47bd2956d3dcda333bf2c1c8cacd025216f625e66f3b63a835fd923cb85d96150aad8d4032045228012d558835fdb11609fe925da0925ca7a856c551e81260cd789ba32e13e291909bfa812a5b9a268e4fa651e8833da73ea61f1eef3a083eef68eac58894a654ab0cb8a8604b9241452573040b5a6bbf4b7909fcc318d144b", 0x8f, 0x0) 12:56:54 executing program 7: r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000040)={0x7b, 0x20, 0xdf, 0x20, 0x8}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_pts(0xffffffffffffffff, 0x540) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000002c0)=0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000300)={0xe3a, 0x8, 0x3}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x2) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000004c0)={0x197f, 0x100, 0x3, 0x8, 0x40, "8f876d8e53205e540db933783f694627f5d898", 0x3, 0x4}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x501802, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x100, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000580)={'ip6tnl0\x00'}) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000005c0), 0x103040, 0x0) pidfd_send_signal(r4, 0x41, &(0x7f0000000600)={0x23, 0x0, 0x200}, 0x0) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00'}) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000b40)={0x3, 0x0, 0x8, 0x12, 0x159, &(0x7f0000000740)}) [ 117.768134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.771763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.776718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.782087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.791278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.793688] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.803861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.807323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.811586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.814310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.822022] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.822841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.828435] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.839755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.846779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.858878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.862971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.866011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.866039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.882002] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.888305] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 117.893805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.893839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.899748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.907717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.908752] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 117.911382] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.917577] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 117.924622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.928792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 117.931339] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 117.933339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.933353] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 117.935817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.940715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.940881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 117.954485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.957700] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.978757] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 117.984910] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 119.898588] Bluetooth: hci0: command tx timeout [ 119.898598] Bluetooth: hci1: command tx timeout [ 120.028198] Bluetooth: hci7: command tx timeout [ 120.028257] Bluetooth: hci6: command tx timeout [ 120.028886] Bluetooth: hci4: command tx timeout [ 120.029568] Bluetooth: hci2: command tx timeout [ 120.030210] Bluetooth: hci5: command tx timeout [ 120.030695] Bluetooth: hci3: command tx timeout [ 121.946520] Bluetooth: hci0: command tx timeout [ 121.947034] Bluetooth: hci1: command tx timeout [ 122.074309] Bluetooth: hci3: command tx timeout [ 122.074829] Bluetooth: hci4: command tx timeout [ 122.075318] Bluetooth: hci6: command tx timeout [ 122.075754] Bluetooth: hci5: command tx timeout [ 122.076231] Bluetooth: hci2: command tx timeout [ 122.076657] Bluetooth: hci7: command tx timeout [ 123.995437] Bluetooth: hci1: command tx timeout [ 123.995931] Bluetooth: hci0: command tx timeout [ 124.122294] Bluetooth: hci6: command tx timeout [ 124.122743] Bluetooth: hci3: command tx timeout [ 124.123626] Bluetooth: hci4: command tx timeout [ 124.123668] Bluetooth: hci7: command tx timeout [ 124.124048] Bluetooth: hci5: command tx timeout [ 124.124666] Bluetooth: hci2: command tx timeout [ 126.042567] Bluetooth: hci0: command tx timeout [ 126.043057] Bluetooth: hci1: command tx timeout [ 126.170511] Bluetooth: hci3: command tx timeout [ 126.170985] Bluetooth: hci4: command tx timeout [ 126.171024] Bluetooth: hci5: command tx timeout [ 126.172563] Bluetooth: hci7: command tx timeout [ 126.173001] Bluetooth: hci2: command tx timeout [ 126.173456] Bluetooth: hci6: command tx timeout [ 180.719584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.723094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.725390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.731192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.735516] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.872066] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.875673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.878339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.883767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.887844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.060257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.066624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.072004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.080673] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.085960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.191189] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.194919] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.199561] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.209570] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.217028] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.245294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.247716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.265484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.267403] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.272378] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.277186] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 181.283070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.284819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.289559] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.294038] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 181.309493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.332194] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.342669] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.353656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.367364] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.373577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.381063] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.409086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.417006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.445945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.810392] Bluetooth: hci0: command tx timeout [ 182.938716] Bluetooth: hci1: command tx timeout [ 183.194587] Bluetooth: hci3: command tx timeout [ 183.450364] Bluetooth: hci6: command tx timeout [ 183.450398] Bluetooth: hci7: command tx timeout [ 183.514219] Bluetooth: hci5: command tx timeout [ 183.578256] Bluetooth: hci2: command tx timeout [ 183.579021] Bluetooth: hci4: command tx timeout [ 184.859230] Bluetooth: hci0: command tx timeout [ 184.987171] Bluetooth: hci1: command tx timeout [ 185.243169] Bluetooth: hci3: command tx timeout [ 185.498948] Bluetooth: hci7: command tx timeout [ 185.499248] Bluetooth: hci6: command tx timeout [ 185.563167] Bluetooth: hci5: command tx timeout [ 185.626437] Bluetooth: hci4: command tx timeout [ 185.626489] Bluetooth: hci2: command tx timeout [ 186.906236] Bluetooth: hci0: command tx timeout [ 187.036148] Bluetooth: hci1: command tx timeout [ 187.290264] Bluetooth: hci3: command tx timeout [ 187.546963] Bluetooth: hci7: command tx timeout [ 187.547352] Bluetooth: hci6: command tx timeout [ 187.610278] Bluetooth: hci5: command tx timeout [ 187.675195] Bluetooth: hci2: command tx timeout [ 187.675216] Bluetooth: hci4: command tx timeout [ 188.954256] Bluetooth: hci0: command tx timeout [ 189.082470] Bluetooth: hci1: command tx timeout [ 189.338197] Bluetooth: hci3: command tx timeout [ 189.595603] Bluetooth: hci6: command tx timeout [ 189.595885] Bluetooth: hci7: command tx timeout [ 189.658676] Bluetooth: hci5: command tx timeout [ 189.722565] Bluetooth: hci4: command tx timeout [ 189.723004] Bluetooth: hci2: command tx timeout [ 243.051373] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.055384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.060692] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.069038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.076651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.132405] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.137996] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.147912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.165434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.171715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.183646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.186875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.189966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.210870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.257754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.315281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.323736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.328721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.334324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.341628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.376881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.383165] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.391237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.398896] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.418630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.420037] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.423788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.428615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.451612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.462839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.523630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.539669] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.542720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.559468] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.564645] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.567175] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.572704] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.580782] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.590889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.604047] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 245.147467] Bluetooth: hci0: command tx timeout [ 245.275554] Bluetooth: hci1: command tx timeout [ 245.338862] Bluetooth: hci2: command tx timeout [ 245.466206] Bluetooth: hci3: command tx timeout [ 245.531119] Bluetooth: hci4: command tx timeout [ 245.594371] Bluetooth: hci5: command tx timeout [ 245.723205] Bluetooth: hci6: command tx timeout [ 245.787439] Bluetooth: hci7: command tx timeout [ 247.196266] Bluetooth: hci0: command tx timeout [ 247.323421] Bluetooth: hci1: command tx timeout [ 247.387372] Bluetooth: hci2: command tx timeout [ 247.515463] Bluetooth: hci3: command tx timeout [ 247.579297] Bluetooth: hci4: command tx timeout [ 247.645407] Bluetooth: hci5: command tx timeout [ 247.771162] Bluetooth: hci6: command tx timeout [ 247.836523] Bluetooth: hci7: command tx timeout [ 249.243492] Bluetooth: hci0: command tx timeout [ 249.372356] Bluetooth: hci1: command tx timeout [ 249.435475] Bluetooth: hci2: command tx timeout [ 249.563451] Bluetooth: hci3: command tx timeout [ 249.627224] Bluetooth: hci4: command tx timeout [ 249.691200] Bluetooth: hci5: command tx timeout [ 249.818268] Bluetooth: hci6: command tx timeout [ 249.884142] Bluetooth: hci7: command tx timeout [ 251.291878] Bluetooth: hci0: command tx timeout [ 251.418357] Bluetooth: hci1: command tx timeout [ 251.482366] Bluetooth: hci2: command tx timeout [ 251.611213] Bluetooth: hci3: command tx timeout [ 251.674492] Bluetooth: hci4: command tx timeout [ 251.738174] Bluetooth: hci5: command tx timeout [ 251.869293] Bluetooth: hci6: command tx timeout [ 251.930339] Bluetooth: hci7: command tx timeout [ 305.712808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.718733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.722619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.731770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.738785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.898051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.901784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.904670] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.913643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.918553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.972423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.983779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.998481] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.013449] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.023613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.131393] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.146893] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.169372] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.179346] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.183628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.191649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.198718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.204688] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.215916] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.223696] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.227443] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.232300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.239949] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.245580] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.253562] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.260630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.263917] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.266977] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.324490] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.352668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.353234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 306.367358] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.373780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.406313] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.422655] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.802298] Bluetooth: hci0: command tx timeout [ 307.994388] Bluetooth: hci1: command tx timeout [ 308.059852] Bluetooth: hci2: command tx timeout [ 308.250217] Bluetooth: hci5: command tx timeout [ 308.314288] Bluetooth: hci6: command tx timeout [ 308.379550] Bluetooth: hci3: command tx timeout [ 308.508147] Bluetooth: hci4: command tx timeout [ 308.571180] Bluetooth: hci7: command tx timeout [ 309.851200] Bluetooth: hci0: command tx timeout [ 310.042325] Bluetooth: hci1: command tx timeout [ 310.106179] Bluetooth: hci2: command tx timeout [ 310.300305] Bluetooth: hci5: command tx timeout [ 310.364519] Bluetooth: hci6: command tx timeout [ 310.426485] Bluetooth: hci3: command tx timeout [ 310.554227] Bluetooth: hci4: command tx timeout [ 310.619315] Bluetooth: hci7: command tx timeout [ 311.898187] Bluetooth: hci0: command tx timeout [ 312.091176] Bluetooth: hci1: command tx timeout [ 312.155350] Bluetooth: hci2: command tx timeout [ 312.347536] Bluetooth: hci5: command tx timeout [ 312.411357] Bluetooth: hci6: command tx timeout [ 312.474563] Bluetooth: hci3: command tx timeout [ 312.603222] Bluetooth: hci4: command tx timeout [ 312.667416] Bluetooth: hci7: command tx timeout [ 313.948134] Bluetooth: hci0: command tx timeout [ 314.140349] Bluetooth: hci1: command tx timeout [ 314.203164] Bluetooth: hci2: command tx timeout [ 314.394342] Bluetooth: hci5: command tx timeout [ 314.459555] Bluetooth: hci6: command tx timeout [ 314.522240] Bluetooth: hci3: command tx timeout [ 314.650252] Bluetooth: hci4: command tx timeout [ 314.714174] Bluetooth: hci7: command tx timeout [ 368.623829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.627385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.632064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.642964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.648748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.712718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.721576] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.727244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.770217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.773590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.810385] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.818468] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.824281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.829744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.836370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.001215] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.012699] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.032604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.074710] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.095292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.106769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.133480] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.168980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.171237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.215753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.220621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.227651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.232357] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.234430] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.238879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.243492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 369.256382] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.258245] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 369.262730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.301384] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 369.313432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.364516] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 369.415955] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.422450] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 369.436832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.714388] Bluetooth: hci0: command tx timeout [ 370.843436] Bluetooth: hci1: command tx timeout [ 370.908292] Bluetooth: hci2: command tx timeout [ 371.226182] Bluetooth: hci3: command tx timeout [ 371.355208] Bluetooth: hci4: command tx timeout [ 371.419154] Bluetooth: hci5: command tx timeout [ 371.547013] Bluetooth: hci7: command tx timeout [ 371.674534] Bluetooth: hci6: command tx timeout [ 372.762753] Bluetooth: hci0: command tx timeout [ 372.890203] Bluetooth: hci1: command tx timeout [ 372.954159] Bluetooth: hci2: command tx timeout [ 373.274486] Bluetooth: hci3: command tx timeout [ 373.402397] Bluetooth: hci4: command tx timeout [ 373.466202] Bluetooth: hci5: command tx timeout [ 373.594220] Bluetooth: hci7: command tx timeout [ 373.722391] Bluetooth: hci6: command tx timeout [ 374.811144] Bluetooth: hci0: command tx timeout [ 374.938182] Bluetooth: hci1: command tx timeout [ 375.002334] Bluetooth: hci2: command tx timeout [ 375.322391] Bluetooth: hci3: command tx timeout [ 375.450308] Bluetooth: hci4: command tx timeout [ 375.514362] Bluetooth: hci5: command tx timeout [ 375.644131] Bluetooth: hci7: command tx timeout [ 375.771462] Bluetooth: hci6: command tx timeout [ 376.858952] Bluetooth: hci0: command tx timeout [ 376.988449] Bluetooth: hci1: command tx timeout [ 377.050344] Bluetooth: hci2: command tx timeout [ 377.370463] Bluetooth: hci3: command tx timeout [ 377.498283] Bluetooth: hci4: command tx timeout [ 377.562215] Bluetooth: hci5: command tx timeout [ 377.690268] Bluetooth: hci7: command tx timeout [ 377.818253] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:02:04 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff81604870 RCX=ffff88803454f594 RDX=0000000000000000 RSI=ffffffff85c1cbc0 RDI=ffff888030f3bafc RBP=ffff88803454f6d8 RSP=ffff88803454f640 R8 =0000000000000001 R9 =ffff88803454f680 R10=000000000003b6cd R11=0000000000007c98 R12=ffff88803454f708 R13=0000000000000000 R14=ffff888030f3b700 R15=ffff88802cd2e770 RIP=ffffffff812d97ac RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb58e6574a1 CR3=0000000026f3f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=104d659a8b14c900 RBX=ffff88806cf36f00 RCX=1ffff1100d9e6f37 RDX=1ffff1100d9e6f55 RSI=ffff88806cf36f18 RDI=0000000000000001 RBP=1ffff1100d9e11bc RSP=ffff88806cf08db8 R8 =0000000000000001 R9 =ffffed100d9e11cb R10=0000000000000000 R11=0000000000000001 R12=ffff88806cf37aa8 R13=ffffffff8641fc44 R14=ffff88806cf379b8 R15=ffff88806cf379c0 RIP=ffffffff814eeb43 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f60eedd7288 CR3=000000002c2fd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000