Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:20381' (ECDSA) to the list of known hosts. 2025/06/08 15:47:11 fuzzer started 2025/06/08 15:47:12 dialing manager at localhost:40003 syzkaller login: [ 94.170353] cgroup: Unknown subsys name 'net' [ 94.322313] cgroup: Unknown subsys name 'cpuset' [ 94.380551] cgroup: Unknown subsys name 'rlimit' 2025/06/08 15:47:28 syscalls: 2214 2025/06/08 15:47:28 code coverage: enabled 2025/06/08 15:47:28 comparison tracing: enabled 2025/06/08 15:47:28 extra coverage: enabled 2025/06/08 15:47:28 setuid sandbox: enabled 2025/06/08 15:47:28 namespace sandbox: enabled 2025/06/08 15:47:28 Android sandbox: enabled 2025/06/08 15:47:28 fault injection: enabled 2025/06/08 15:47:28 leak checking: enabled 2025/06/08 15:47:28 net packet injection: enabled 2025/06/08 15:47:28 net device setup: enabled 2025/06/08 15:47:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 15:47:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 15:47:28 USB emulation: enabled 2025/06/08 15:47:28 hci packet injection: enabled 2025/06/08 15:47:28 wifi device emulation: enabled 2025/06/08 15:47:28 802.15.4 emulation: enabled 2025/06/08 15:47:28 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 15:47:31 starting 8 fuzzer processes 15:47:31 executing program 0: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x4, [0x4, 0x1ff], 0x4}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x1a22, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffc0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000240)={{}, {@void, @actul_num={@val=0x2d, 0x52, 0x54}}}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x220, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x47800000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x34b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044044) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) write$eventfd(r1, &(0x7f0000000600)=0x9, 0x8) ioctl$KDDELIO(r1, 0x4b35, 0x195836ab) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000680)) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x400, 0x70bd2c, 0x9, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x24}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}]}, 0x54}}, 0x50) mknodat(r2, &(0x7f0000000800)='./file0\x00', 0x1000, 0xffffff5e) ioctl$int_out(r1, 0x5460, &(0x7f0000000840)) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) 15:47:31 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x1, 0x4, 0x1, 0x2a2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000000c0)) ioctl$KDENABIO(r1, 0x4b36) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1}}, './file1\x00'}) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2b}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c885}, 0x40000) r4 = socket$inet6(0xa, 0x5, 0xdb) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xda, 0x1, 0x0, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x2, 0x3}}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000340)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000380)={{0xa, 0x4e23, 0x7a9e, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000000}, {0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0x7}, 0xfffd, [0xae, 0x307b, 0x5, 0x6, 0xffff, 0x80, 0x4, 0x7f]}, 0x5c) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000400)) dup3(r4, r2, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000480), 0x10001, 0x101000) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f00000004c0)={0x80000000, 0x4, 0xfffffffb}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/fib_trie\x00') setsockopt$inet6_tcp_buf(r7, 0x6, 0xd, &(0x7f0000000540), 0x0) 15:47:31 executing program 2: ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x2]}, 0x8) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x604000, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c895}, 0x841) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ed}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0xb0}}, 0x4) flistxattr(r1, &(0x7f0000000400)=""/108, 0x6c) close(r1) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x360}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf8, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd022}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000840)) clone3(&(0x7f0000001a80)={0x1000, &(0x7f0000000880)=0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900), {0x31}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f0000001940)=""/251, &(0x7f0000001a40)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5, {r1}}, 0x58) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000001b00)=0x3) r4 = syz_genetlink_get_family_id$team(&(0x7f0000001b80), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001bc0)={{{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000001cc0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001d00)={{{@in6=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000001e00)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000001ec0)={'syztnl2\x00', &(0x7f0000001e40)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x7, 0x5, 0xc, @mcast2, @local, 0x10, 0x1, 0x3, 0xfffffffc}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002240)={&(0x7f0000001b40), 0xc, &(0x7f0000002200)={&(0x7f0000001f00)={0x2d8, r4, 0xb08, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2c}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x668a}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdf}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x800}, 0x40) r8 = syz_open_dev$vcsn(&(0x7f0000002340), 0x2e1, 0x200000) perf_event_open$cgroup(&(0x7f00000022c0)={0x3, 0x80, 0x5c, 0xd2, 0x1, 0x40, 0x0, 0xfff, 0x10000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000002280), 0xe}, 0x2304, 0xf7, 0x8000, 0x1, 0x1, 0x5837, 0x4, 0x0, 0x0, 0x0, 0x3ff}, r8, 0x4, r1, 0x9) 15:47:31 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7801}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x25}}}}, [@NL80211_ATTR_FILS_KEK={0x23, 0xf2, "b784b4545bdd2e7ca59ebbfaf7d186745cb228e9e35f5c49b17768d14ff0fb"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x1, 0x2, 0x0, {0x2, 0x3b, 0x0, 0x1f, 0x0, 0x1, 0x1, 0x2}, 0x8, 0x4}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x0, 0x5, 0x0, {0x56, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x1000, 0x1}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random='0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xa4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x54}}, 0x810) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r2, 0xb08, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x8800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x83, 0x3ff, 0x15, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x80, 0x1, 0x7f}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe75}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x616}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x40800) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000880)) r5 = socket(0x2b, 0x800, 0xb092) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x40) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1d}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xb8, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x38935768}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44000800}, 0x8000000) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000c80)) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x11c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008801) r7 = dup2(r6, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000f80)={0x8, {{0xa, 0x4e20, 0xc9, @loopback, 0x135b}}, 0x0, 0x8, [{{0xa, 0x4e23, 0x400, @remote, 0xaf}}, {{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {{0xa, 0x4e24, 0x4, @empty, 0x20}}, {{0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x509e}}, {{0xa, 0x4e23, 0x31, @local, 0xffffffff}}, {{0xa, 0x4e23, 0x4, @local, 0x4}}, {{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}, {{0xa, 0x4e21, 0xfffffff8, @mcast2, 0x2}}]}, 0x490) [ 112.626325] audit: type=1400 audit(1749397651.199:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:47:31 executing program 4: sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xb, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2008880}, 0x4010) r0 = socket$inet(0x2, 0x6, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x3) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000200)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x88000) fsetxattr$security_capability(r2, &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x2) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000340)=0x6) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000380)=0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='wchan\x00') sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40045}, 0x805) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000500)=""/250) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, 0x5, 0x6, 0x201, 0x0, 0x0, {0x5d54576574ba6298, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40090) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x3fb, 0x300, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x40) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000940)) recvmmsg(r0, &(0x7f0000005880)=[{{&(0x7f0000000980)=@nfc_llcp, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/185, 0xb9}, {&(0x7f0000000ac0)=""/85, 0x55}, {&(0x7f0000000b40)=""/197, 0xc5}, {&(0x7f0000000c40)=""/19, 0x13}], 0x4, &(0x7f0000000cc0)=""/125, 0x7d}, 0x7}, {{&(0x7f0000000d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000dc0)=""/45, 0x2d}, {&(0x7f0000000e00)=""/186, 0xba}, {&(0x7f0000000ec0)=""/17, 0x11}, {&(0x7f0000000f00)=""/181, 0xb5}, {&(0x7f0000000fc0)=""/71, 0x47}, {&(0x7f0000001040)=""/148, 0x94}, {&(0x7f0000001100)=""/106, 0x6a}], 0x7, &(0x7f0000001200)=""/22, 0x16}, 0x9}, {{&(0x7f0000001240)=@nfc_llcp, 0x80, &(0x7f0000001700)=[{&(0x7f00000012c0)=""/33, 0x21}, {&(0x7f0000001300)=""/212, 0xd4}, {&(0x7f0000001400)=""/189, 0xbd}, {&(0x7f00000014c0)=""/193, 0xc1}, {&(0x7f00000015c0)=""/160, 0xa0}, {&(0x7f0000001680)=""/65, 0x41}], 0x6, &(0x7f0000001780)=""/219, 0xdb}, 0x1}, {{&(0x7f0000001880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001900)=""/122, 0x7a}, {&(0x7f0000001980)=""/43, 0x2b}, {&(0x7f00000019c0)=""/10, 0xa}, {&(0x7f0000001a00)=""/242, 0xf2}], 0x4, &(0x7f0000001b40)=""/33, 0x21}, 0x3}, {{&(0x7f0000001b80)=@xdp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001c00)=""/114, 0x72}, {&(0x7f0000001c80)=""/4, 0x4}], 0x2, &(0x7f0000001d00)=""/221, 0xdd}}, {{&(0x7f0000001e00)=@nfc, 0x80, &(0x7f0000003240)=[{&(0x7f0000001e80)=""/134, 0x86}, {&(0x7f0000001f40)=""/88, 0x58}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/191, 0xbf}, {&(0x7f0000003080)=""/255, 0xff}, {&(0x7f0000003180)=""/172, 0xac}], 0x6, &(0x7f00000032c0)=""/4096, 0x1000}}, {{&(0x7f00000042c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005780)=[{&(0x7f0000004340)=""/232, 0xe8}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/254, 0xfe}, {&(0x7f0000005540)=""/167, 0xa7}, {&(0x7f0000005600)=""/179, 0xb3}, {&(0x7f00000056c0)=""/180, 0xb4}], 0x6, &(0x7f0000005800)=""/88, 0x58}, 0x7d}], 0x7, 0x10000, 0x0) getsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000005a40), &(0x7f0000005a80)=0x4) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000005ec0)={0xe, 0x3, &(0x7f0000005ac0)="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"}) 15:47:31 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$inet6(0xa, 0xa, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000300)) getsockname$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c) r4 = openat$cgroup_ro(r0, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000400)={0x0, 0x2e2, 0x7fff, 0x546, 0x15, "1d365759babf8b7fccfc376afbadef8f79b9f8"}) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000440)) getpeername$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000004c0)=0x1c) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000500)={r3}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000580)=0x1, 0x4) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x6, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1e495d1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x68040}, 0x40000) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) recvmmsg(r6, &(0x7f00000018c0)=[{{&(0x7f0000000700)=@alg, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/240, 0xf0}], 0x1, &(0x7f00000008c0)=""/4096, 0x1000}, 0x8}], 0x1, 0x40000001, &(0x7f0000001900)) dup2(0xffffffffffffffff, 0xffffffffffffffff) 15:47:31 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000011}, 0x4000004) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140)={0x2, 0x9}, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x6}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40008001}, 0x40000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7fff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000440)={0x9, 0x4}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/wireless\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048850}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x8, 0x10, 0x0, 0x4, {{0x17, 0x4, 0x2, 0x1, 0x5c, 0x65, 0x0, 0x81, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@end, @timestamp={0x44, 0x1c, 0xdb, 0x0, 0x5, [0x1, 0x0, 0x2, 0xffff, 0x8, 0x7fff]}, @generic={0x83, 0x9, "c4f3175e6909bf"}, @noop, @lsrr={0x83, 0x1f, 0x8f, [@multicast2, @broadcast, @multicast2, @rand_addr=0x64010102, @local, @loopback, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, 0x0, 0x20, 0x5, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000840)=0x3f, &(0x7f0000000880)=0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r2, {0x8, 0x9}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x4e}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x4) 15:47:31 executing program 7: getdents(0xffffffffffffffff, &(0x7f0000000000)=""/47, 0x2f) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x800, 0x28) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x300, 0x70bd26, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x890) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7e}, @NL80211_ATTR_OPER_CLASS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe6099f17e11f0251}, 0x20004870) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000280)=0xa5b, 0x2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000002c0)=r0, 0x1) r1 = openat$incfs(r0, &(0x7f0000000300)='.log\x00', 0x20003, 0x128) mount_setattr(r1, &(0x7f0000000340)='./file0\x00', 0x8000, &(0x7f0000000380)={0x80, 0x0, 0x20000, {r0}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xdd}}, './file1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000600)={r3, 0xee6}) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001600), 0xc0c1, 0x0) r5 = pidfd_getfd(r4, r2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000001640)) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000016c0)={@remote, @empty, 0x0}, &(0x7f0000001700)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001800)={'gre0\x00', &(0x7f0000001740)={'syztnl2\x00', 0x0, 0x1783c8d17378ed1, 0x20, 0x9, 0x2f9b, {{0x21, 0x4, 0x2, 0x4, 0x84, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x36, 0x3, 0x1, [{@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}]}, @end, @rr={0x7, 0xf, 0x6c, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @ssrr={0x89, 0x2b, 0x25, [@multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @empty, @local, @loopback, @multicast2]}, @timestamp={0x44, 0xc, 0x9d, 0x0, 0x7, [0x7, 0x7ff]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0xfd, [@remote, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000001940)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000001cc0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001980)={0x2f0, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x2f0}}, 0x2004) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) [ 114.360498] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.365488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.368555] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.376450] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.383524] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.394488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.398493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.409106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.410731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.426063] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.430224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.450120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.456830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.459372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.463008] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.469553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.473161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.473452] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.478402] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.480141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.481258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.486435] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.487558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.492495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.494065] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.494655] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.502230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.506103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.509823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.510915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.512891] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.530981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.531894] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.537306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.571474] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.576577] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.581943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.606409] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.611083] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.621297] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.498613] Bluetooth: hci1: command tx timeout [ 116.626320] Bluetooth: hci3: command tx timeout [ 116.626880] Bluetooth: hci2: command tx timeout [ 116.627117] Bluetooth: hci0: command tx timeout [ 116.627372] Bluetooth: hci4: command tx timeout [ 116.628565] Bluetooth: hci6: command tx timeout [ 116.691256] Bluetooth: hci7: command tx timeout [ 116.692060] Bluetooth: hci5: command tx timeout [ 118.545864] Bluetooth: hci1: command tx timeout [ 118.674041] Bluetooth: hci6: command tx timeout [ 118.674498] Bluetooth: hci4: command tx timeout [ 118.675879] Bluetooth: hci0: command tx timeout [ 118.676299] Bluetooth: hci2: command tx timeout [ 118.676739] Bluetooth: hci3: command tx timeout [ 118.738901] Bluetooth: hci5: command tx timeout [ 118.739334] Bluetooth: hci7: command tx timeout [ 120.593868] Bluetooth: hci1: command tx timeout [ 120.722191] Bluetooth: hci3: command tx timeout [ 120.722654] Bluetooth: hci4: command tx timeout [ 120.723122] Bluetooth: hci2: command tx timeout [ 120.723541] Bluetooth: hci0: command tx timeout [ 120.724116] Bluetooth: hci6: command tx timeout [ 120.786916] Bluetooth: hci7: command tx timeout [ 120.787355] Bluetooth: hci5: command tx timeout [ 122.643964] Bluetooth: hci1: command tx timeout [ 122.769958] Bluetooth: hci0: command tx timeout [ 122.770430] Bluetooth: hci6: command tx timeout [ 122.770889] Bluetooth: hci2: command tx timeout [ 122.771304] Bluetooth: hci4: command tx timeout [ 122.771722] Bluetooth: hci3: command tx timeout [ 122.834203] Bluetooth: hci5: command tx timeout [ 122.834646] Bluetooth: hci7: command tx timeout [ 174.001024] syz-executor.2 (284) used greatest stack depth: 24912 bytes left [ 174.096272] syz-executor.1 (282) used greatest stack depth: 24720 bytes left [ 176.416457] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.418092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.420256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.427565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.433387] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.497710] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.504512] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.511960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.519867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.521267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.524339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.526337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.527356] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.538585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.540600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.596047] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.601257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.609689] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.620407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.628173] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.686756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.721405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.725512] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.769337] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.780295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.910135] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.911412] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.913015] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.933884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.936348] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.942331] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.952633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.954482] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.960727] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.973760] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.982374] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.988262] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.017387] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.019357] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.028081] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.513890] Bluetooth: hci0: command tx timeout [ 178.578039] Bluetooth: hci2: command tx timeout [ 178.578951] Bluetooth: hci1: command tx timeout [ 178.706221] Bluetooth: hci3: command tx timeout [ 178.900856] Bluetooth: hci4: command tx timeout [ 179.089949] Bluetooth: hci5: command tx timeout [ 179.090846] Bluetooth: hci6: command tx timeout [ 179.091073] Bluetooth: hci7: command tx timeout [ 180.562913] Bluetooth: hci0: command tx timeout [ 180.627829] Bluetooth: hci1: command tx timeout [ 180.627941] Bluetooth: hci2: command tx timeout [ 180.753923] Bluetooth: hci3: command tx timeout [ 180.946079] Bluetooth: hci4: command tx timeout [ 181.137888] Bluetooth: hci6: command tx timeout [ 181.138965] Bluetooth: hci7: command tx timeout [ 181.139165] Bluetooth: hci5: command tx timeout [ 182.609932] Bluetooth: hci0: command tx timeout [ 182.675813] Bluetooth: hci2: command tx timeout [ 182.675868] Bluetooth: hci1: command tx timeout [ 182.803339] Bluetooth: hci3: command tx timeout [ 182.993988] Bluetooth: hci4: command tx timeout [ 183.186218] Bluetooth: hci7: command tx timeout [ 183.186343] Bluetooth: hci6: command tx timeout [ 183.187160] Bluetooth: hci5: command tx timeout [ 184.659849] Bluetooth: hci0: command tx timeout [ 184.723836] Bluetooth: hci1: command tx timeout [ 184.723873] Bluetooth: hci2: command tx timeout [ 184.851234] Bluetooth: hci3: command tx timeout [ 185.042550] Bluetooth: hci4: command tx timeout [ 185.234032] Bluetooth: hci5: command tx timeout [ 185.234074] Bluetooth: hci7: command tx timeout [ 185.234673] Bluetooth: hci6: command tx timeout [ 238.623685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.627175] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.628760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.636504] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.643625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.684463] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.693188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.696104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.701208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.705159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.751722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.755307] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.760946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.779084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.785221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.886203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.892349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.898453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.938222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.953273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.083947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.113369] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.115607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.128829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.140175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.140374] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.141972] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.142719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.151143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.153007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.185913] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.188359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.192302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.194237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.196540] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.234994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.242313] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.244331] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.250952] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.272735] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.723212] Bluetooth: hci0: command tx timeout [ 240.788045] Bluetooth: hci1: command tx timeout [ 240.850881] Bluetooth: hci2: command tx timeout [ 241.041924] Bluetooth: hci3: command tx timeout [ 241.297911] Bluetooth: hci7: command tx timeout [ 241.298618] Bluetooth: hci5: command tx timeout [ 241.362430] Bluetooth: hci6: command tx timeout [ 241.363112] Bluetooth: hci4: command tx timeout [ 242.769878] Bluetooth: hci0: command tx timeout [ 242.833860] Bluetooth: hci1: command tx timeout [ 242.897990] Bluetooth: hci2: command tx timeout [ 243.090925] Bluetooth: hci3: command tx timeout [ 243.345993] Bluetooth: hci5: command tx timeout [ 243.346503] Bluetooth: hci7: command tx timeout [ 243.409915] Bluetooth: hci4: command tx timeout [ 243.410430] Bluetooth: hci6: command tx timeout [ 244.818350] Bluetooth: hci0: command tx timeout [ 244.882835] Bluetooth: hci1: command tx timeout [ 244.945866] Bluetooth: hci2: command tx timeout [ 245.138009] Bluetooth: hci3: command tx timeout [ 245.394213] Bluetooth: hci7: command tx timeout [ 245.394712] Bluetooth: hci5: command tx timeout [ 245.458072] Bluetooth: hci4: command tx timeout [ 245.458543] Bluetooth: hci6: command tx timeout [ 246.866047] Bluetooth: hci0: command tx timeout [ 246.930198] Bluetooth: hci1: command tx timeout [ 246.993866] Bluetooth: hci2: command tx timeout [ 247.186054] Bluetooth: hci3: command tx timeout [ 247.443285] Bluetooth: hci5: command tx timeout [ 247.444657] Bluetooth: hci7: command tx timeout [ 247.506000] Bluetooth: hci6: command tx timeout [ 247.506468] Bluetooth: hci4: command tx timeout [ 301.223681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.231222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.235161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.244398] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.255585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.351022] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.359669] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.363649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.370599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.379581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.415694] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.418617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.421262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.432227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.442268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.620635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.625399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.628032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.634186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.639379] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.694182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.726615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.766267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.771284] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.785300] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.808707] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.811740] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.825052] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.828166] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.830726] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.840396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.889656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.890441] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.899328] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.923466] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.943732] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.950755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.962950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.998168] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.017257] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.316259] Bluetooth: hci0: command tx timeout [ 303.442341] Bluetooth: hci1: command tx timeout [ 303.507096] Bluetooth: hci2: command tx timeout [ 303.697934] Bluetooth: hci3: command tx timeout [ 303.953976] Bluetooth: hci5: command tx timeout [ 304.082890] Bluetooth: hci7: command tx timeout [ 304.082996] Bluetooth: hci6: command tx timeout [ 304.083702] Bluetooth: hci4: command tx timeout [ 305.362048] Bluetooth: hci0: command tx timeout [ 305.489961] Bluetooth: hci1: command tx timeout [ 305.553844] Bluetooth: hci2: command tx timeout [ 305.747809] Bluetooth: hci3: command tx timeout [ 306.001996] Bluetooth: hci5: command tx timeout [ 306.129977] Bluetooth: hci6: command tx timeout [ 306.130396] Bluetooth: hci7: command tx timeout [ 306.131641] Bluetooth: hci4: command tx timeout [ 307.410026] Bluetooth: hci0: command tx timeout [ 307.538337] Bluetooth: hci1: command tx timeout [ 307.602798] Bluetooth: hci2: command tx timeout [ 307.793829] Bluetooth: hci3: command tx timeout [ 308.049980] Bluetooth: hci5: command tx timeout [ 308.177863] Bluetooth: hci4: command tx timeout [ 308.178294] Bluetooth: hci7: command tx timeout [ 308.178335] Bluetooth: hci6: command tx timeout [ 309.458192] Bluetooth: hci0: command tx timeout [ 309.585983] Bluetooth: hci1: command tx timeout [ 309.651954] Bluetooth: hci2: command tx timeout [ 309.842061] Bluetooth: hci3: command tx timeout [ 310.097903] Bluetooth: hci5: command tx timeout [ 310.226041] Bluetooth: hci4: command tx timeout [ 310.226497] Bluetooth: hci6: command tx timeout [ 310.226804] Bluetooth: hci7: command tx timeout [ 364.203874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.206085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.216557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.217684] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.221646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.221672] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.231692] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.243408] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.246286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.264270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.410636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.416044] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.432522] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.439455] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.468980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.476597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.485397] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.495051] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.498660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.510882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.513475] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.523678] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.527726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.532262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.537507] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.541356] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.594123] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.595863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.596283] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.601851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.618059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.633391] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.639429] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.639606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.664898] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.692431] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.712027] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.718679] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.725467] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.776941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.353952] Bluetooth: hci1: command tx timeout [ 366.353979] Bluetooth: hci0: command tx timeout [ 366.609925] Bluetooth: hci2: command tx timeout [ 366.737952] Bluetooth: hci4: command tx timeout [ 366.738955] Bluetooth: hci5: command tx timeout [ 366.738999] Bluetooth: hci3: command tx timeout [ 366.802025] Bluetooth: hci6: command tx timeout [ 366.866172] Bluetooth: hci7: command tx timeout [ 368.402029] Bluetooth: hci0: command tx timeout [ 368.402998] Bluetooth: hci1: command tx timeout [ 368.658246] Bluetooth: hci2: command tx timeout [ 368.786099] Bluetooth: hci5: command tx timeout [ 368.786596] Bluetooth: hci3: command tx timeout [ 368.786628] Bluetooth: hci4: command tx timeout [ 368.849863] Bluetooth: hci6: command tx timeout [ 368.914029] Bluetooth: hci7: command tx timeout [ 370.450167] Bluetooth: hci0: command tx timeout [ 370.450424] Bluetooth: hci1: command tx timeout [ 370.706859] Bluetooth: hci2: command tx timeout [ 370.834100] Bluetooth: hci5: command tx timeout [ 370.834290] Bluetooth: hci3: command tx timeout [ 370.836264] Bluetooth: hci4: command tx timeout [ 370.897868] Bluetooth: hci6: command tx timeout [ 370.962840] Bluetooth: hci7: command tx timeout [ 372.497881] Bluetooth: hci1: command tx timeout [ 372.499032] Bluetooth: hci0: command tx timeout [ 372.753853] Bluetooth: hci2: command tx timeout [ 372.882546] Bluetooth: hci4: command tx timeout [ 372.883088] Bluetooth: hci5: command tx timeout [ 372.883513] Bluetooth: hci3: command tx timeout [ 372.947143] Bluetooth: hci6: command tx timeout [ 373.010855] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:52:40 Registers: info registers vcpu 0 RAX=0000000000000137 RBX=0000000000000003 RCX=0000000000000040 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88802f2e24b0 RBP=ffff88802babbd80 RSP=ffff88803396fba8 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff8641f057 R11=0000000000000001 R12=ffff88802f2e1b80 R13=ffff88802f2e1b80 R14=ffff8880071f1c00 R15=ffff88802babc708 RIP=ffffffff81b91cc0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9b728b0570 CR3=0000000017119000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ff0000000000000000000000 XMM01=ffffffff00ffffffffffffffffffffff XMM02=42494c4700342e332e325f4342494c47 XMM03=00000000000000000000000000006f72 XMM04=6f6c77725f646165726874705f5f0079 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffed1006f11f1d RCX=ffffffff84acbb2c RDX=0000000000000000 RSI=ffffffff84acbb44 RDI=0000000000000005 RBP=ffff88802f34aa00 RSP=ffff88803788f6f0 R8 =0000000000000001 R9 =ffffed100174fefb R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88803788f8d0 RIP=ffffffff81738af8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7598dbe940 CR3=0000000035aa9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000