Warning: Permanently added '[localhost]:48654' (ECDSA) to the list of known hosts. 2025/06/08 14:41:27 fuzzer started 2025/06/08 14:41:28 dialing manager at localhost:40003 syzkaller login: [ 100.764040] cgroup: Unknown subsys name 'net' [ 100.896383] cgroup: Unknown subsys name 'cpuset' [ 100.941612] cgroup: Unknown subsys name 'rlimit' 2025/06/08 14:41:46 syscalls: 2214 2025/06/08 14:41:46 code coverage: enabled 2025/06/08 14:41:46 comparison tracing: enabled 2025/06/08 14:41:46 extra coverage: enabled 2025/06/08 14:41:46 setuid sandbox: enabled 2025/06/08 14:41:46 namespace sandbox: enabled 2025/06/08 14:41:46 Android sandbox: enabled 2025/06/08 14:41:46 fault injection: enabled 2025/06/08 14:41:46 leak checking: enabled 2025/06/08 14:41:46 net packet injection: enabled 2025/06/08 14:41:46 net device setup: enabled 2025/06/08 14:41:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 14:41:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 14:41:46 USB emulation: enabled 2025/06/08 14:41:46 hci packet injection: enabled 2025/06/08 14:41:46 wifi device emulation: enabled 2025/06/08 14:41:46 802.15.4 emulation: enabled 2025/06/08 14:41:46 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 14:41:48 starting 8 fuzzer processes 14:41:48 executing program 0: ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000000)=""/156) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000100)={0x5, 0x8, 0x4}) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8020}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x8010) r1 = dup(r0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) mount$cgroup2(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400040, &(0x7f0000000340)={[{}, {@subsystem='cpuacct'}], [{@audit}, {@smackfsroot={'smackfsroot', 0x3d, '%\'\'::*(!&\'$\x82'}}, {@fsname}, {@dont_measure}, {@fowner_lt}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x94, r3, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @handle=@pci={{0x8}, {0x11}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000004}, 0x8001) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000005c0)={0x7, 'macvtap0\x00', {0xe9}, 0x4}) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000600)='vegas\x00', 0x6) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x40) r4 = signalfd4(r0, &(0x7f0000000780), 0x8, 0x800) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000007c0), 0x4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r5, r0, 0x1, 0x1) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000840)) 14:41:48 executing program 1: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x880}, 0x4094) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) r4 = fsmount(r0, 0x1, 0xf0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1e0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xb7, @empty, 0x613}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2301}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x903}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffe0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50000000}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x20) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/module/mac80211_hwsim', 0x14000, 0x10b) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x104, r2, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9db2, 0x2c}}}}, [@NL80211_ATTR_IE={0xda, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @random={0x0, 0x8c, "b4fcd9deec4ba5ae013a078e5e4c74616ba9a12e6d1b86b89248c83689ed86c8dd8556f77f5ac2a0cfe552875dba0f91ca45ce9c6fef5525aaecd3c9942cb405a770e3e7e54811141061b18c0cdf1d6f67cc0316ed7cd669d9a4a9fca9fe3d9f8599faa9a75fd83840118ac118dcc23e90c347f0ef5016c7d8dd4ff21851ac8db7d4a174f30f74319523699b"}, @ssid={0x0, 0x6, @default_ibss_ssid}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x0, @broadcast, 0x3, "", 0xffff, 0x80000001, @device_a, 0xffff}}, @supported_rates={0x1, 0x2, [{0xc}, {0x5}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x6, 0x2f, 0x40}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @cf={0x4, 0x6, {0x7f, 0x40, 0xd107, 0x81}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8084}, 0x10) r6 = syz_open_dev$mouse(&(0x7f0000000b40), 0xff, 0x42800) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000b80)=0x0) r8 = openat(r5, &(0x7f0000000bc0)='./file0\x00', 0x10000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0) r9 = syz_open_procfs$namespace(r7, &(0x7f0000000c00)='ns/pid\x00') fcntl$setflags(r9, 0x2, 0x1) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000c40), 0x8080, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xf3d1a4c4d7600111}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xb52766f182bb8db9}, 0x2000c840) 14:41:48 executing program 2: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r0, r1/1000+10000}, {0x0, 0x2710}}, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = dup(0xffffffffffffffff) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000140)={0x200, 0x7, 0x1}) io_uring_enter(r2, 0x1789, 0xd5e4, 0x1, &(0x7f0000000180)={[0x6]}, 0x8) acct(&(0x7f00000001c0)='./file0\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x70}, 0x1, 0x0, 0x0, 0x851}, 0x801) r3 = epoll_create(0x8001) r4 = socket$netlink(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000340)={0x80002008}) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) recvmmsg(r5, &(0x7f0000003480)=[{{&(0x7f00000004c0)=@ieee802154, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/208, 0xd0}, {&(0x7f0000000640)=""/15, 0xf}, {&(0x7f0000000680)=""/107, 0x6b}], 0x3, &(0x7f0000000740)}, 0x7}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000780)=""/94, 0x5e}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000900)=""/203, 0xcb}, {&(0x7f0000000a00)=""/205, 0xcd}, {&(0x7f0000000b00)=""/21, 0x15}, {&(0x7f0000000b40)=""/105, 0x69}, {&(0x7f0000000bc0)=""/38, 0x26}, {&(0x7f0000000c00)=""/108, 0x6c}], 0x8, &(0x7f0000000d00)=""/51, 0x33}, 0x7}, {{&(0x7f0000000d40)=@caif=@util, 0x80, &(0x7f0000002140)=[{&(0x7f0000000dc0)=""/236, 0xec}, {&(0x7f0000000ec0)=""/190, 0xbe}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/44, 0x2c}, {&(0x7f0000001fc0)=""/28, 0x1c}, {&(0x7f0000002000)=""/253, 0xfd}, {&(0x7f0000002100)}], 0x7}, 0x80}, {{&(0x7f00000021c0)=@generic, 0x80, &(0x7f0000002300)=[{&(0x7f0000002240)=""/62, 0x3e}, {&(0x7f0000002280)=""/108, 0x6c}], 0x2, &(0x7f0000002340)=""/117, 0x75}, 0xffffffea}, {{&(0x7f00000023c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000003440)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1}, 0x1f}], 0x5, 0x12140, &(0x7f00000035c0)={0x0, 0x3938700}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000003600)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) recvmsg$unix(r7, &(0x7f0000003c00)={&(0x7f0000003640)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000036c0)=""/70, 0x46}, {&(0x7f0000003740)=""/177, 0xb1}, {&(0x7f0000003800)=""/146, 0x92}, {&(0x7f00000038c0)}, {&(0x7f0000003900)=""/130, 0x82}, {&(0x7f00000039c0)=""/56, 0x38}, {&(0x7f0000003a00)=""/159, 0x9f}], 0x7, &(0x7f0000003b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x1) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000003c80)=0x7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000004040)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004000)={&(0x7f0000003f00)={0xe4, 0x0, 0x228, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 14:41:48 executing program 3: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x11498}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4804) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xdf}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff8, 0x6c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008810}, 0x40010) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={0xffffffffffffffff, 0x5cc0, 0x3f, 0x36}) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x453, 0x300, 0x70bd26, 0x25dfdbfb, "2cd2fb8b73ba9236d90c34d4caaed6d266a6de458fde0b36d1506836e49fc9e27824701af7827055a24a2d94b673bace0442754d50e0a25a885a067d754302315cbd3237c0e09f6da35710c23aad89ba6b36a1858e25981b7bed524c523ea386694267f9ff15a1ffd5cca6601ec751f9486d67e90dd9311bbb0b55931b1ed0c602990a4895d1d54ccd6a4f905716d110c7c395d44bf59aaac858c09ddc42e89d831d515fe34771d8ce14da2377115202ef7b52bca847744bb6b307e2d8cc017848bdb31009b8620f64d97704816f7870b8f54f839d0356553645738a7d5a585e94889bfcd72a1d71ba33f79eafdbed5aa00315", ["", "", "", "", "", ""]}, 0x104}, 0x1, 0x0, 0x0, 0x8004}, 0x1) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000600)=""/8, 0x3d0}) r4 = syz_open_dev$vcsa(&(0x7f0000000680), 0x10001, 0x29000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x800}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040080) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000007c0)) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000008c0)={'veth0_to_team\x00', {0x2, 0x0, @broadcast}}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x501040, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000940)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) sendmsg$802154_raw(r7, &(0x7f0000000b00)={&(0x7f0000000980)={0x24, @short={0x2, 0xffff}}, 0x14, &(0x7f0000000ac0)={&(0x7f00000009c0)="6db58a5f160a59c9a146b946cc5dcad8bb268571ae2865a17fbce5eaa204e5f59130d4fbc70d6bf67230145839893fe36feda35abc0db95a23f053a7e1e2fddc17df2c203ed2b3154370ebd3fa6f1bae080c076222e4fabd2bd85c63b70c6e93ebf143c5bd470976366f484907d833485dbba7c1c9f79f2296e86df63c3302273245783b180e3da0de2a381f7ee414efdda6e547e68e35b556334455055d21e2b73168d14de97b36618ca0b22eeafa3092a97dfaf9dab72a5c7f37db28d0bb2c88a4d8d194877dde04814e3e1b6d4b249ac8cd", 0xd3}, 0x1, 0x0, 0x0, 0x40000}, 0x4004004) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000b40)={0x8, 'macsec0\x00', {'sit0\x00'}, 0x3}) getsockname(r1, &(0x7f0000000b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000c00)=0x80) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000c40)={0x2, 'vlan1\x00', {0x75}, 0x8}) [ 120.900472] audit: type=1400 audit(1749393708.655:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:41:48 executing program 5: ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000000)={0x9, 0x1, 0xb609}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif, &(0x7f0000000100)=0x80, 0x180800) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x8000, 0x4) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x0, 0x0, 0x7, 0x19, 0x1f8, &(0x7f0000000180)="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"}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) kcmp(0x0, 0xffffffffffffffff, 0x2, r1, r2) socket(0x18, 0x2, 0xad70) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000600)={{0x2, 0x4e21, @empty}, {0x306, @local}, 0x48, {0x2, 0x4e20, @multicast1}, 'macsec0\x00'}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x10000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700), 0x30d02, 0x0) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) ioctl$TIOCGISO7816(r6, 0x80285442, &(0x7f0000000740)) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000780)={0x9, 0x0, 0xffff, 0x9, 0x5, 0x7ff}) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 14:41:48 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x1f, 0xfc}, 'port0\x00', 0x22, 0x100820, 0x1, 0x1, 0x10001, 0x3, 0x4, 0x0, 0x4, 0x2}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0xba, 0x6}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x128, r0, 0x428, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x54}}}}, [@NL80211_ATTR_IE={0xcc, 0x2a, [@peer_mgmt={0x75, 0x18, {0x0, 0x7, @val=0x20, @val=0x1c, @val="e2b585511dc8c1ef1d51e722efee412e"}}, @random_vendor={0xdd, 0xa9, "5fe5c2ab04f2c8cb06b899b48c02321c0f02405b5a31bba4de9630c5b88f08e7a984f5d045f4f9471c4c9feadf1d49391abf45e88eb8cc2cdfbf0da597cfbebd3f8ebccdc39efb8901c04867faa0d1d4c2424969f9df48748830748b3de0ff58db8edee5b778a7e80114642f37a42279b7ea9f6fcaa5f9176f07b2ca319f9f0f81365c6a32aa01b159f548c9951ef02b06cab7219bd26d3039e880a20eada0ca9232838223abd8797d"}, @dsss={0x3, 0x1, 0xb0}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x9}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xfffffc01}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xd5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x90}, 0x40) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'macvtap0\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040801}, 0x4) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8c) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x1, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800) keyctl$invalidate(0x15, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000800)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000880)={0x3, 0x2, {0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x8000}, 0x9cc4}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x230, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x37d7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x74ef921d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x923}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe2b}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7daa9355}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xab7}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe11a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x68d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff67}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000d40), &(0x7f0000000d80)=0x8) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000dc0)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3, {0x40}}, './file0\x00'}) 14:41:48 executing program 6: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x0, 0x8, 0x39, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x21}, 0x10, 0x700, 0x5, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'sit0\x00', r0, 0x2f, 0x9, 0xbf, 0xb1, 0x0, @mcast1, @remote, 0x8000, 0x7800, 0x401, 0x7f}}) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000200)=0x80) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x29, 0x5, 0xff, 0x4, 0x1, @empty, @empty, 0x8, 0x40, 0x1f, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r0, 0x2f, 0x4, 0xa2, 0x8, 0x14, @loopback, @mcast2, 0x10, 0x7800, 0x7, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/154, 0x9a}, {&(0x7f0000001700)=""/123, 0x7b}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/114, 0x72}, {&(0x7f0000002800)=""/128, 0x80}], 0x6}, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000029c0)={'syztnl0\x00', &(0x7f0000002940)={'syztnl0\x00', r1, 0x4, 0x5, 0x9, 0x8, 0x2a, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x700, 0x700, 0xd5d, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002a00)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000002c80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c40)={&(0x7f0000002a40)={0x1ec, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0xc045}, 0x20004004) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000002e40)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d40)={0x90, r12, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0xcaf6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffff881}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socketpair(0x5, 0xa, 0xfe000000, &(0x7f0000002ec0)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000002e80), r13) recvmmsg(r7, &(0x7f00000044c0)=[{{&(0x7f0000002f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000043c0)=[{0xfffffffffffffffc}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/241, 0xf1}, {&(0x7f0000004080)=""/210, 0xd2}, {&(0x7f0000004180)=""/161, 0xa1}, {&(0x7f0000004240)=""/109, 0x6d}, {&(0x7f00000042c0)=""/242, 0xf2}], 0x7, &(0x7f0000004440)=""/87, 0x57}, 0x401}], 0x1, 0x40020323, 0x0) r14 = open$dir(&(0x7f0000004500)='./file0\x00', 0x8300, 0x14c) ioctl$EXT4_IOC_CHECKPOINT(r14, 0x4004662b, &(0x7f0000004540)) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000004700)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004600)={0x8c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x3a}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x42}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x0, 0xff, 0x6d, 0x3}}]}, @NL80211_ATTR_IE={0x3c, 0x2a, [@preq={0x82, 0x36, @ext={{0x1}, 0x5, 0x20, 0x3, @broadcast, 0x1ff, @broadcast, 0x7, 0xfff, 0x2, [{{0x1}, @broadcast, 0xfff}, {{}, @device_a, 0x81}]}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x28040001}, 0x40800) 14:41:48 executing program 7: clock_gettime(0x1, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x2, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4085) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x14) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x190}, 0x12aaf645f6a7695) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x103e00, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) fremovexattr(r1, &(0x7f00000002c0)=@known='com.apple.system.Security\x00') r4 = syz_open_dev$rtc(&(0x7f0000000300), 0x8001, 0x480002) finit_module(r4, &(0x7f0000000340)='(-$@\x00', 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000600)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x61c}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7f}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r7, 0x80, &(0x7f00000008c0)=@generic={0x1e, "2424a76484294e2386bdf3bafa83fa82e48ec45c9a20278927bed05e653ed8c29c090d3ba69f8672568910147e32d055772ea24ee6b216668892a38076f22fbfdd67b05ecfb3ec77b9542448eedf198b7b5a65eee00aaa7cf3337dd8c0998aa158ef4222c49f323591d9bf007b593c85f73cb467122312e052add928fc56"}, 0x0, 0x0, 0x1}, 0x5) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x41044) [ 122.351340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.354008] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.355319] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.358087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.359725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.361970] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.371746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.375492] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.394660] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.397641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.400006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.404533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.405458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.413941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.414646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.431885] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.434749] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.435923] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.438708] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.439793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.442462] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.443974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.445607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.447602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.456209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.459761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.463083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.464650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.466537] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.472360] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.476578] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.479584] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.480971] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.487486] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.492691] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.497900] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.498946] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.509704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.523927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.527024] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.430820] Bluetooth: hci1: command tx timeout [ 124.494356] Bluetooth: hci0: command tx timeout [ 124.558413] Bluetooth: hci6: command tx timeout [ 124.558956] Bluetooth: hci2: command tx timeout [ 124.559009] Bluetooth: hci5: command tx timeout [ 124.559579] Bluetooth: hci7: command tx timeout [ 124.560158] Bluetooth: hci4: command tx timeout [ 124.560699] Bluetooth: hci3: command tx timeout [ 126.479825] Bluetooth: hci1: command tx timeout [ 126.543417] Bluetooth: hci0: command tx timeout [ 126.606486] Bluetooth: hci5: command tx timeout [ 126.606944] Bluetooth: hci4: command tx timeout [ 126.607546] Bluetooth: hci7: command tx timeout [ 126.607964] Bluetooth: hci6: command tx timeout [ 126.608691] Bluetooth: hci2: command tx timeout [ 126.609111] Bluetooth: hci3: command tx timeout [ 128.526532] Bluetooth: hci1: command tx timeout [ 128.591734] Bluetooth: hci0: command tx timeout [ 128.654444] Bluetooth: hci3: command tx timeout [ 128.654917] Bluetooth: hci7: command tx timeout [ 128.654976] Bluetooth: hci4: command tx timeout [ 128.655550] Bluetooth: hci6: command tx timeout [ 128.655594] Bluetooth: hci2: command tx timeout [ 128.655628] Bluetooth: hci5: command tx timeout [ 130.575153] Bluetooth: hci1: command tx timeout [ 130.638513] Bluetooth: hci0: command tx timeout [ 130.702570] Bluetooth: hci4: command tx timeout [ 130.702655] Bluetooth: hci3: command tx timeout [ 130.703612] Bluetooth: hci5: command tx timeout [ 130.704009] Bluetooth: hci2: command tx timeout [ 130.704822] Bluetooth: hci6: command tx timeout [ 130.704883] Bluetooth: hci7: command tx timeout [ 182.962691] syz-executor.2 (283) used greatest stack depth: 24640 bytes left [ 185.642579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.646020] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.648686] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.657388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.662209] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.894830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.906201] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.907414] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.908584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.910071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.915770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.918159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.921140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.929668] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.934078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.936087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.947812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.947861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.951046] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.954763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.956526] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.964982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.966613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.991034] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.995111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.106574] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.109511] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.112059] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.115827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.126180] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.132093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.134497] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.151677] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.153984] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.157641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.161140] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 186.237837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 186.250919] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 186.281242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 186.294929] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.726365] Bluetooth: hci0: command tx timeout [ 187.982530] Bluetooth: hci1: command tx timeout [ 188.046395] Bluetooth: hci2: command tx timeout [ 188.046433] Bluetooth: hci3: command tx timeout [ 188.110640] Bluetooth: hci4: command tx timeout [ 188.239586] Bluetooth: hci5: command tx timeout [ 188.302465] Bluetooth: hci6: command tx timeout [ 188.366872] Bluetooth: hci7: command tx timeout [ 189.776307] Bluetooth: hci0: command tx timeout [ 190.030701] Bluetooth: hci1: command tx timeout [ 190.094344] Bluetooth: hci3: command tx timeout [ 190.097298] Bluetooth: hci2: command tx timeout [ 190.160092] Bluetooth: hci4: command tx timeout [ 190.288324] Bluetooth: hci5: command tx timeout [ 190.350430] Bluetooth: hci6: command tx timeout [ 190.414981] Bluetooth: hci7: command tx timeout [ 191.823312] Bluetooth: hci0: command tx timeout [ 192.078478] Bluetooth: hci1: command tx timeout [ 192.144571] Bluetooth: hci2: command tx timeout [ 192.145344] Bluetooth: hci3: command tx timeout [ 192.206987] Bluetooth: hci4: command tx timeout [ 192.334439] Bluetooth: hci5: command tx timeout [ 192.398373] Bluetooth: hci6: command tx timeout [ 192.463323] Bluetooth: hci7: command tx timeout [ 193.870660] Bluetooth: hci0: command tx timeout [ 194.126611] Bluetooth: hci1: command tx timeout [ 194.190523] Bluetooth: hci2: command tx timeout [ 194.192094] Bluetooth: hci3: command tx timeout [ 194.254319] Bluetooth: hci4: command tx timeout [ 194.382763] Bluetooth: hci5: command tx timeout [ 194.446714] Bluetooth: hci6: command tx timeout [ 194.510676] Bluetooth: hci7: command tx timeout [ 247.969227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.972748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.990011] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.996222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.006832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.105759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.122809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.125200] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.162141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.167966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.187773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.191570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.195791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.199929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.236178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.242328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.251869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.255157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.264213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.292806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.314844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.317677] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.329735] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.342547] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.342863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.347618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.351096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.378576] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.391037] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.394727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.398855] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.401471] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.408482] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.413554] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 248.454803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.474112] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.479821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.516993] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.541464] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.578008] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.062594] Bluetooth: hci0: command tx timeout [ 250.255497] Bluetooth: hci2: command tx timeout [ 250.318359] Bluetooth: hci1: command tx timeout [ 250.446412] Bluetooth: hci4: command tx timeout [ 250.510613] Bluetooth: hci3: command tx timeout [ 250.511437] Bluetooth: hci7: command tx timeout [ 250.574412] Bluetooth: hci5: command tx timeout [ 250.639354] Bluetooth: hci6: command tx timeout [ 252.111480] Bluetooth: hci0: command tx timeout [ 252.303379] Bluetooth: hci2: command tx timeout [ 252.367287] Bluetooth: hci1: command tx timeout [ 252.495351] Bluetooth: hci4: command tx timeout [ 252.559737] Bluetooth: hci7: command tx timeout [ 252.560240] Bluetooth: hci3: command tx timeout [ 252.623299] Bluetooth: hci5: command tx timeout [ 252.689476] Bluetooth: hci6: command tx timeout [ 254.159618] Bluetooth: hci0: command tx timeout [ 254.351710] Bluetooth: hci2: command tx timeout [ 254.416450] Bluetooth: hci1: command tx timeout [ 254.542522] Bluetooth: hci4: command tx timeout [ 254.608736] Bluetooth: hci3: command tx timeout [ 254.609189] Bluetooth: hci7: command tx timeout [ 254.671667] Bluetooth: hci5: command tx timeout [ 254.736540] Bluetooth: hci6: command tx timeout [ 256.207548] Bluetooth: hci0: command tx timeout [ 256.399290] Bluetooth: hci2: command tx timeout [ 256.462689] Bluetooth: hci1: command tx timeout [ 256.591323] Bluetooth: hci4: command tx timeout [ 256.655579] Bluetooth: hci7: command tx timeout [ 256.656052] Bluetooth: hci3: command tx timeout [ 256.720370] Bluetooth: hci5: command tx timeout [ 256.782564] Bluetooth: hci6: command tx timeout [ 310.381755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.388461] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.396146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.411575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.416651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.560966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.564963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.567756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.575592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.591172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.639842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.643819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.653802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.666082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.674793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.788833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.798884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.823109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.824970] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.829992] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.876132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.885516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.919892] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.924160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.926576] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.929809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.931916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.937575] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.940985] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.943929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.970073] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.974350] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.977115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.983238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.987220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.020455] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.027791] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.037779] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.044465] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.171535] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.462362] Bluetooth: hci0: command tx timeout [ 312.654715] Bluetooth: hci1: command tx timeout [ 312.783318] Bluetooth: hci2: command tx timeout [ 312.974590] Bluetooth: hci5: command tx timeout [ 313.039868] Bluetooth: hci4: command tx timeout [ 313.040505] Bluetooth: hci6: command tx timeout [ 313.102351] Bluetooth: hci3: command tx timeout [ 313.294395] Bluetooth: hci7: command tx timeout [ 314.511426] Bluetooth: hci0: command tx timeout [ 314.702345] Bluetooth: hci1: command tx timeout [ 314.831480] Bluetooth: hci2: command tx timeout [ 315.022350] Bluetooth: hci5: command tx timeout [ 315.086392] Bluetooth: hci4: command tx timeout [ 315.089509] Bluetooth: hci6: command tx timeout [ 315.150532] Bluetooth: hci3: command tx timeout [ 315.342477] Bluetooth: hci7: command tx timeout [ 316.558352] Bluetooth: hci0: command tx timeout [ 316.751339] Bluetooth: hci1: command tx timeout [ 316.878488] Bluetooth: hci2: command tx timeout [ 317.071347] Bluetooth: hci5: command tx timeout [ 317.134355] Bluetooth: hci6: command tx timeout [ 317.134852] Bluetooth: hci4: command tx timeout [ 317.198492] Bluetooth: hci3: command tx timeout [ 317.390390] Bluetooth: hci7: command tx timeout [ 318.606450] Bluetooth: hci0: command tx timeout [ 318.799301] Bluetooth: hci1: command tx timeout [ 318.926326] Bluetooth: hci2: command tx timeout [ 319.120615] Bluetooth: hci5: command tx timeout [ 319.182555] Bluetooth: hci4: command tx timeout [ 319.182826] Bluetooth: hci6: command tx timeout [ 319.246351] Bluetooth: hci3: command tx timeout [ 319.440326] Bluetooth: hci7: command tx timeout [ 370.942897] syz-executor.6 (7771) used greatest stack depth: 24544 bytes left [ 372.962042] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.969622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.973066] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.991651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.997207] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.030670] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.035345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.038581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.050896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.055831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.108828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.124958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.128876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.139895] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.154598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.178314] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.190782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.201521] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.238748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.243027] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.304984] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.327426] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.329396] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 373.331695] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 373.355725] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 373.359059] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 373.365172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.366868] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 373.369959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 373.370791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.372901] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 373.373156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.376978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.385885] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.391019] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.395157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 373.400845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.410998] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 373.430596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.447147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.054584] Bluetooth: hci0: command tx timeout [ 375.119477] Bluetooth: hci1: command tx timeout [ 375.247333] Bluetooth: hci2: command tx timeout [ 375.374351] Bluetooth: hci3: command tx timeout [ 375.502440] Bluetooth: hci5: command tx timeout [ 375.566354] Bluetooth: hci4: command tx timeout [ 375.632548] Bluetooth: hci7: command tx timeout [ 375.633515] Bluetooth: hci6: command tx timeout [ 377.102681] Bluetooth: hci0: command tx timeout [ 377.166356] Bluetooth: hci1: command tx timeout [ 377.296297] Bluetooth: hci2: command tx timeout [ 377.422633] Bluetooth: hci3: command tx timeout [ 377.550795] Bluetooth: hci5: command tx timeout [ 377.614489] Bluetooth: hci4: command tx timeout [ 377.678354] Bluetooth: hci6: command tx timeout [ 377.678889] Bluetooth: hci7: command tx timeout [ 379.150487] Bluetooth: hci0: command tx timeout [ 379.214526] Bluetooth: hci1: command tx timeout [ 379.344320] Bluetooth: hci2: command tx timeout [ 379.471202] Bluetooth: hci3: command tx timeout [ 379.598345] Bluetooth: hci5: command tx timeout [ 379.662533] Bluetooth: hci4: command tx timeout [ 379.726478] Bluetooth: hci7: command tx timeout [ 379.726941] Bluetooth: hci6: command tx timeout [ 381.199503] Bluetooth: hci0: command tx timeout [ 381.262596] Bluetooth: hci1: command tx timeout [ 381.390328] Bluetooth: hci2: command tx timeout [ 381.519622] Bluetooth: hci3: command tx timeout [ 381.646550] Bluetooth: hci5: command tx timeout [ 381.710422] Bluetooth: hci4: command tx timeout [ 381.775166] Bluetooth: hci6: command tx timeout [ 381.775640] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 14:46:56 Registers: info registers vcpu 0 RAX=0000000000022000 RBX=ffff8880324d9b80 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c1cbc0 RBP=ffff8880324da5d8 RSP=ffff88806ce08890 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff8880324da650 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81518f89 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556784d400 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f638c7114a1 CR3=0000000029d91000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ffffffffffffffffffffffffffff00 XMM02=ffffffffffffffff00ffff000000ff00 XMM03=ffffffffffffffff00ffff000000ff00 XMM04=ffffffffffff00000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff867cace0 RDX=1ffff11002d7eeda RSI=1ffff11002d7eedc RDI=1ffff11002d7eedc RBP=ffff888016bf76e0 RSP=ffff888016bf7618 R8 =ffffffff867cace4 R9 =ffff888016bf76c8 R10=000000000003b6cd R11=00000000000083e9 R12=ffff888016bf76e8 R13=ffff888016bf76d0 R14=ffff888016bf7f28 R15=ffff888016bf7688 RIP=ffffffff81354981 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9964fec8e0 CR3=000000002a6b2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000