Warning: Permanently added '[localhost]:24552' (ECDSA) to the list of known hosts. 2025/06/09 20:04:04 fuzzer started 2025/06/09 20:04:05 dialing manager at localhost:40003 syzkaller login: [ 93.225282] cgroup: Unknown subsys name 'net' [ 93.363955] cgroup: Unknown subsys name 'cpuset' [ 93.413235] cgroup: Unknown subsys name 'rlimit' 2025/06/09 20:04:19 syscalls: 2214 2025/06/09 20:04:19 code coverage: enabled 2025/06/09 20:04:19 comparison tracing: enabled 2025/06/09 20:04:19 extra coverage: enabled 2025/06/09 20:04:19 setuid sandbox: enabled 2025/06/09 20:04:19 namespace sandbox: enabled 2025/06/09 20:04:19 Android sandbox: enabled 2025/06/09 20:04:19 fault injection: enabled 2025/06/09 20:04:19 leak checking: enabled 2025/06/09 20:04:19 net packet injection: enabled 2025/06/09 20:04:19 net device setup: enabled 2025/06/09 20:04:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/09 20:04:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/09 20:04:19 USB emulation: enabled 2025/06/09 20:04:19 hci packet injection: enabled 2025/06/09 20:04:19 wifi device emulation: enabled 2025/06/09 20:04:19 802.15.4 emulation: enabled 2025/06/09 20:04:19 fetching corpus: 0, signal 0/0 (executing program) 2025/06/09 20:04:21 starting 8 fuzzer processes 20:04:21 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400201, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x2) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x5, 0x48, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000140)) ioctl$sock_ifreq(r0, 0x8938, &(0x7f0000000180)={'caif0\x00', @ifru_addrs=@nl=@proc}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x84a1, 0x22}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48090) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000300)={0x0, "665725ba98cd632049f5b676af507daf"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000094) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000001440)={0x7, 'veth0_to_batadv\x00', {0x4}}) ioctl$FIOCLEX(r0, 0x5451) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000001480)={0x8, 0xfffffffe}) getsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000014c0), &(0x7f0000001500)=0x4) accept$unix(r0, &(0x7f0000001540), &(0x7f00000015c0)=0x6e) ioctl$RTC_VL_CLR(r0, 0x7014) r4 = open_tree(r0, &(0x7f0000001600)='./file0\x00', 0x81000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x12c878cdbb1f36d3}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x79}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4020) [ 108.814471] audit: type=1400 audit(1749499461.299:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:04:21 executing program 1: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) r3 = syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0x101100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x200, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xeed032f215575507}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x123307d89abfd5a0, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008091}, 0xc855) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4fd097ab6d30d945984a5f8e7c8ac50b"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "1ab619c5722d5378d6a833fea6f34636"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x58}]}, 0x54}, 0x1, 0x0, 0x0, 0x80080}, 0x8884) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$9p(r8, &(0x7f0000000840)="dc45cf09abe695146c4103ab356ed3d7e5436640b3bb9e543965088e6e6e29", 0x1f) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000008c0)={0x0, @broadcast, @loopback}, &(0x7f0000000900)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x3ff, 0xff, {{0x20, 0x4, 0x0, 0x3a, 0x80, 0x68, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@cipso={0x86, 0x41, 0x3, [{0x5, 0x12, "e0beed2c0de7480329775d4c89855439"}, {0x7, 0xc, "816889c15b2d4cd772f2"}, {0x1, 0xf, "10fed9c40b5e92de3f4fffddba"}, {0x0, 0xe, "14116edf80f3472517c24468"}]}, @generic={0x94, 0x7, "f310053bf7"}, @cipso={0x86, 0x24, 0x3, [{0x6, 0x2}, {0x1, 0xa, "5669968abb766b2f"}, {0x1, 0xa, "5e31f28652b617d4"}, {0x2, 0x6, "f2be19e3"}, {0x0, 0x2}]}]}}}}}) getsockname$packet(r2, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f00000010c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e40)={0x22c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc590dceb2c55e46c}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008000) 20:04:21 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='timers\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x4000010, r2, 0x4dfe1000) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/78) fcntl$setflags(r0, 0x2, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000100)=0x1) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x5d, 0x1, 0x4, 0x31, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8040, 0x40, 0x8000, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x8, 0x8, 0x200, 0x10001, {{0x1a, 0x4, 0x0, 0x5, 0x68, 0x64, 0x0, 0xaa, 0x29, 0x0, @empty, @private=0xa010102, {[@rr={0x7, 0x7, 0x9, [@multicast1]}, @end, @timestamp_addr={0x44, 0x2c, 0xab, 0x1, 0x5, [{@empty}, {@broadcast, 0xe01a}, {@private=0xa010100, 0xc82}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x100}]}, @ssrr={0x89, 0xf, 0x5c, [@multicast1, @rand_addr=0x64010102, @multicast2]}, @lsrr={0x83, 0xf, 0x7, [@remote, @rand_addr=0x64010101, @remote]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000003c0)={0x4fc, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc9fc}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x51}}}]}}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x88c0}, 0x800) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r2) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x160, r6, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x2e}}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x30}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc65933b1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r7 = signalfd4(r0, &(0x7f0000000bc0)={[0x4]}, 0x8, 0x80800) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000c00)=0x400) r8 = epoll_create(0x2) finit_module(r8, &(0x7f0000000c40)='gre0\x00', 0x1) 20:04:21 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc0000) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x2, 0x70bd2d, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0xd7cfa59c7a28f095, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44005}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000280)={0x5, 0x7, 0x8, 0xffffff7f, 0x16, "e3da87f5b20c879960f91dbe3a71064c9a1952"}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x4000841) ioctl$BLKRAGET(r0, 0x1263, &(0x7f00000003c0)) r5 = epoll_create1(0x0) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000400)={0x1, 0x53, "37c3e8c72371e9e0a6aa091484d5eeffbb979e9103e5ce75778ea15bcc75afae081f7312b86ce16cb52544af56dbbe920dd10bf3019e6ef380b049d85d58745e6db731bdc7a6f014184b295d9a99864a9c6ab3"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000480)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000004c0)={0x0, 0x2, 0xe155}) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000009c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) r7 = getgid() fsetxattr$system_posix_acl(r6, &(0x7f0000000a40)='system.posix_acl_access\x00', &(0x7f0000000a80)={{}, {}, [], {}, [{0x8, 0x1, 0xee00}, {0x8, 0x2, r7}], {0x10, 0x2}, {0x20, 0x4}}, 0x34, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) pread64(r8, &(0x7f0000000ac0)=""/102, 0x66, 0xffffffffffffffff) 20:04:21 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x2, 0x0, 0x0, 'queue0\x00', 0xaf7c}) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'btrfs.', '\\{/\x00'}, &(0x7f0000000100)=""/127, 0x7f) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0x3, 0x95}, 0x1, 0x1, 0x9, {0x2, 0xfc}, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000280)) r2 = syz_open_dev$evdev(&(0x7f0000000340), 0x80, 0x400) fdatasync(r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = syz_open_dev$mouse(&(0x7f0000000400), 0x100000001, 0xa0200) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000440)='\x00', &(0x7f0000000480)="53823710496671d92e56463b6d55c1f2ad84494349eb81d2e54247921e53cf611904eb1c6ab2f98a482b51d2557968", 0x2f) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0/file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000500)={0x80000000, 0x1, {0xffffffffffffffff, 0x0, 0x4, 0x3, 0x50f0}, 0x80000000}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0xee00}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) syz_emit_vhci(&(0x7f00000006c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x100, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc9}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb610}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x874}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fe0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_LINK={0x4}]}, 0x100}}, 0x20000011) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x28c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_REG_RULES={0x1b8, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6db}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x408}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa6a}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1071}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfdf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xea2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4b1a71fc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x41f2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}]}]}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff81}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 20:04:21 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x0, 0xfffffffffffffffd, 0x200001, &(0x7f00000000c0)={[{@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x5b, 0x70, 0x33, 0x38, 0x32, 0x65, 0x38]}}, {@size={'size', 0x3d, [0x74, 0x37, 0x65, 0x33, 0x25]}}], [{@smackfsroot={'smackfsroot', 0x3d, '-&'}}]}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'syzkaller0\x00'}, 0x18) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000240)={0x70, 0x7d, 0x1, {{0x0, 0x50, 0x7fff, 0xdf, {0x2, 0x2, 0x6}, 0x8800000, 0x4b, 0x1, 0x2, 0xb, 'smackfsroot', 0xb, 'smackfsroot', 0x1, '[', 0x6, 'tmpfs\x00'}, 0xb, 'smackfsroot', 0xee00, r3}}, 0x70) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) readlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/45, 0x2d) setxattr$incfs_metadata(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)="b6ad262a436aab06841f7e8344ac1409afa1b6228f5ed4fcf68f4d2f3572b5507e9cd06bbd83dcc78d364162b3054687ecb1cfde80038bb811ea0e919d5f966b5e8c66cf111247f32fb70c19dba74d33b49f6715c554541f5d1e5f484ff692afa450f5ca3e5c42def21e306096a7346d7bc95e", 0x73, 0x3) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) r4 = accept4(r0, 0x0, &(0x7f0000000540), 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000580)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x4, 0x0, 0x2d, 0x80000001]}, &(0x7f0000000600)=0x78) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000640)={'wg2\x00', {0x2, 0x0, @remote}}) recvmsg$unix(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/48, 0x30}, {&(0x7f0000000780)=""/181, 0xb5}, {&(0x7f0000000840)=""/147, 0x93}, {&(0x7f0000000900)=""/223, 0xdf}], 0x4, &(0x7f0000000a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x40002000) mount$9p_tcp(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x840, &(0x7f0000000b80)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@fscache}, {@aname={'aname', 0x3d, '%#]'}}, {@msize={'msize', 0x3d, 0x1}}, {@uname={'uname', 0x3d, ')'}}], [{@measure}, {@uid_lt={'uid<', r2}}, {@uid_gt={'uid>', r5}}]}}) setsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000c40)={0x0, @loopback, @local}, 0xc) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000c80)={{r8}, 0x7, 0x3, 0x164}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r7, {0x20, 0x6}}, './file0\x00'}) setsockopt$inet6_udp_encap(r12, 0x11, 0x64, &(0x7f0000000d00), 0x4) ioctl$SG_GET_SG_TABLESIZE(r9, 0x227f, &(0x7f0000000d40)) 20:04:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x5}}, './file0\x00'}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x57, 0x1, 0x7f, {0x6, 0x1}, {0x9, 0x1}, @period={0x59, 0x40, 0x4fae, 0x3, 0x81, {0x6, 0x8, 0x3, 0x400}, 0x5, &(0x7f0000000080)=[0x8000, 0x4, 0x0, 0x4, 0x100]}}) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000100)=""/72) pwrite64(r0, &(0x7f0000000180)="dcde48d9f88cd347ba8b1d69292d7957b124a713225dbd3b26cb3bdaea9d8ff6c618ce247c67c919916b33a2ea112d2ba5faa3ea5fb83a625a852cd0fa0252aaa470f9db50da421f0fbf3a95097146733250598012c73b00fd0d2440d02f5bf5e578ee8c699ab10ecff6c516b385185a0d51d557ba0d33437df4072b272d8bc18df23ca7682c95b5683eba368433e41ebb47149739179d472b3c915b8c388dde75fc3d19b971ddd532e969e5cbb651e8ff5e56795193292faea431c56065", 0xbe, 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x400, 0x4, "016d5d", 0x7f, 0x3f}) open_by_handle_at(r0, &(0x7f0000000280)=@nfs={0x90, 0x24, {0xe8ec, 0x3be, 0xfff, 0x80, "c1d5b4db114fc28b4c4861a94b618850d1f3cad60cd0657f9bd5b1e59554e83b5a5d9ab87f5e641ccaf7039a0c6ff8eb82f04b5ed665c10dd6cecc5b36e807a1d8b90b419a578d5344079c2be3451d3b562ee91eb2da705bbe6c0c1482c6265ef2950afbb87fb338129735631dd7f04dc04165e61a9d20867549027bc0595c04"}}, 0x400100) r3 = open_tree(r2, &(0x7f0000000340)='./file0\x00', 0x800) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x6) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, 0x4, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xbe87}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4005}, 0x11) r4 = pidfd_getfd(r0, r3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r3) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r5, 0x100, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x20040004) r6 = syz_open_dev$loop(&(0x7f0000000680), 0x916c, 0x200200) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f00000006c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000700)) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000007c0), 0x4) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xbc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004081) 20:04:21 executing program 7: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/221) fallocate(0xffffffffffffffff, 0x2e, 0x2, 0x2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000180)=""/223, 0xdf) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000280)={0x10, 0x9, {0x8, @struct={0x4, 0x6}, 0x0, 0x10000, 0x9, 0x9, 0x401, 0x5b, 0x412, @struct={0x8001, 0x8}, 0x1f, 0x3, [0xffffffffffff3cc4, 0x4, 0x3, 0x1ff, 0x7, 0x800]}, {0x9, @usage=0x3, 0x0, 0x100000001, 0x7, 0x81, 0x20, 0xf3, 0x21, @struct={0x40, 0x3}, 0x8000, 0x4, [0x6, 0x1ff, 0xd6b0, 0x6, 0x3]}, {0x8000, @struct={0x6, 0x3}, 0x0, 0x2, 0x10000, 0x80, 0x2, 0x8000, 0xc0, @usage=0xffff, 0x9, 0x2, [0x4, 0x6, 0x4, 0x6, 0x1, 0x3a2]}, {0x81, 0x15, 0x2}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000680)={{}, {@val={r0}, @max}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mount_setattr(r1, &(0x7f0000000700)='./file0\x00', 0x9900, &(0x7f0000000740)={0x80, 0x100000, 0x0, {r2}}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/bus/auxiliary', 0x101880, 0x103) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000800)) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000840)={r3, 0x48e8, 0x4, 0x4}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000880)={{r5}, 0x5, 0x0, 0x2b}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000008c0)={{0x2, 0x8a}, 0x1, 0x8, 0xfff, {0x40, 0x40}, 0x7f, 0x9}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='net/ip6_tables_targets\x00') epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000980)) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000b00)) [ 110.228477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.231433] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.235436] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.247344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.251366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.285990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.289387] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.292128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.303857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.307842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.357827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.371817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.374348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.379259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.387240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.395218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.399431] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.421482] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.425048] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.428211] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.428609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.434202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.442341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.443146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.448942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.450941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.482267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.494915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.507234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.514780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 110.532148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.539248] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 110.549214] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 110.576762] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 110.579135] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 110.582164] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 110.587134] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 110.600141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 110.611811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 110.620539] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 112.311553] Bluetooth: hci0: command tx timeout [ 112.374966] Bluetooth: hci1: command tx timeout [ 112.502877] Bluetooth: hci2: command tx timeout [ 112.503095] Bluetooth: hci3: command tx timeout [ 112.566851] Bluetooth: hci5: command tx timeout [ 112.566873] Bluetooth: hci4: command tx timeout [ 112.630717] Bluetooth: hci6: command tx timeout [ 112.695036] Bluetooth: hci7: command tx timeout [ 114.359775] Bluetooth: hci0: command tx timeout [ 114.423093] Bluetooth: hci1: command tx timeout [ 114.551002] Bluetooth: hci3: command tx timeout [ 114.551948] Bluetooth: hci2: command tx timeout [ 114.615658] Bluetooth: hci4: command tx timeout [ 114.615698] Bluetooth: hci5: command tx timeout [ 114.679005] Bluetooth: hci6: command tx timeout [ 114.742806] Bluetooth: hci7: command tx timeout [ 116.407715] Bluetooth: hci0: command tx timeout [ 116.471762] Bluetooth: hci1: command tx timeout [ 116.600434] Bluetooth: hci2: command tx timeout [ 116.601452] Bluetooth: hci3: command tx timeout [ 116.662722] Bluetooth: hci5: command tx timeout [ 116.662763] Bluetooth: hci4: command tx timeout [ 116.726729] Bluetooth: hci6: command tx timeout [ 116.790851] Bluetooth: hci7: command tx timeout [ 118.454852] Bluetooth: hci0: command tx timeout [ 118.518753] Bluetooth: hci1: command tx timeout [ 118.646772] Bluetooth: hci3: command tx timeout [ 118.648093] Bluetooth: hci2: command tx timeout [ 118.712661] Bluetooth: hci5: command tx timeout [ 118.713135] Bluetooth: hci4: command tx timeout [ 118.775933] Bluetooth: hci6: command tx timeout [ 118.839948] Bluetooth: hci7: command tx timeout [ 170.153926] syz-executor.0 (284) used greatest stack depth: 24544 bytes left [ 172.749078] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.751795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.755434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.762404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.767668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.879712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.883923] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.890057] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.891062] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.906943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.908788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.912977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.913989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.923829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.931076] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.975564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.996578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.998112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.051402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.058599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.336132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.347068] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.354495] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.362332] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.363975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.366484] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.372762] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.374320] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.382168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.384007] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.385830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.391008] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.403059] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.406866] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.413505] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.424583] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.431195] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.432303] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.462303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.464287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.839820] Bluetooth: hci0: command tx timeout [ 174.966738] Bluetooth: hci1: command tx timeout [ 175.030913] Bluetooth: hci2: command tx timeout [ 175.158725] Bluetooth: hci3: command tx timeout [ 175.479695] Bluetooth: hci5: command tx timeout [ 175.480472] Bluetooth: hci4: command tx timeout [ 175.481280] Bluetooth: hci6: command tx timeout [ 175.542813] Bluetooth: hci7: command tx timeout [ 176.886726] Bluetooth: hci0: command tx timeout [ 177.014838] Bluetooth: hci1: command tx timeout [ 177.080659] Bluetooth: hci2: command tx timeout [ 177.206886] Bluetooth: hci3: command tx timeout [ 177.528704] Bluetooth: hci4: command tx timeout [ 177.529187] Bluetooth: hci5: command tx timeout [ 177.529612] Bluetooth: hci6: command tx timeout [ 177.590909] Bluetooth: hci7: command tx timeout [ 178.934941] Bluetooth: hci0: command tx timeout [ 179.062742] Bluetooth: hci1: command tx timeout [ 179.126720] Bluetooth: hci2: command tx timeout [ 179.254716] Bluetooth: hci3: command tx timeout [ 179.576136] Bluetooth: hci6: command tx timeout [ 179.576609] Bluetooth: hci5: command tx timeout [ 179.577070] Bluetooth: hci4: command tx timeout [ 179.638997] Bluetooth: hci7: command tx timeout [ 180.982831] Bluetooth: hci0: command tx timeout [ 181.110968] Bluetooth: hci1: command tx timeout [ 181.174721] Bluetooth: hci2: command tx timeout [ 181.303952] Bluetooth: hci3: command tx timeout [ 181.622970] Bluetooth: hci4: command tx timeout [ 181.623480] Bluetooth: hci5: command tx timeout [ 181.624725] Bluetooth: hci6: command tx timeout [ 181.687673] Bluetooth: hci7: command tx timeout [ 234.973275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.979060] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.983140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.995103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.007580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.107321] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.110092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.115931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.122735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.133226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.149216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.160579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.165817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.175227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.183873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.287600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.291228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.298410] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.307890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.316291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.380550] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.391175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.400235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.415415] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.430154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.431775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.455222] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.458366] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.459725] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.463733] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.464179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.467786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.469341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.518026] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.540836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.552823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.572569] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.584005] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.639938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.648982] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.046846] Bluetooth: hci0: command tx timeout [ 237.175145] Bluetooth: hci1: command tx timeout [ 237.238766] Bluetooth: hci2: command tx timeout [ 237.366885] Bluetooth: hci3: command tx timeout [ 237.495857] Bluetooth: hci6: command tx timeout [ 237.558879] Bluetooth: hci4: command tx timeout [ 237.622796] Bluetooth: hci5: command tx timeout [ 237.750774] Bluetooth: hci7: command tx timeout [ 239.094894] Bluetooth: hci0: command tx timeout [ 239.223705] Bluetooth: hci1: command tx timeout [ 239.286687] Bluetooth: hci2: command tx timeout [ 239.417822] Bluetooth: hci3: command tx timeout [ 239.543711] Bluetooth: hci6: command tx timeout [ 239.606747] Bluetooth: hci4: command tx timeout [ 239.673827] Bluetooth: hci5: command tx timeout [ 239.799026] Bluetooth: hci7: command tx timeout [ 241.145725] Bluetooth: hci0: command tx timeout [ 241.271688] Bluetooth: hci1: command tx timeout [ 241.336471] Bluetooth: hci2: command tx timeout [ 241.463703] Bluetooth: hci3: command tx timeout [ 241.590746] Bluetooth: hci6: command tx timeout [ 241.655769] Bluetooth: hci4: command tx timeout [ 241.720799] Bluetooth: hci5: command tx timeout [ 241.846789] Bluetooth: hci7: command tx timeout [ 243.192856] Bluetooth: hci0: command tx timeout [ 243.319841] Bluetooth: hci1: command tx timeout [ 243.383717] Bluetooth: hci2: command tx timeout [ 243.511875] Bluetooth: hci3: command tx timeout [ 243.639724] Bluetooth: hci6: command tx timeout [ 243.704016] Bluetooth: hci4: command tx timeout [ 243.768531] Bluetooth: hci5: command tx timeout [ 243.895679] Bluetooth: hci7: command tx timeout [ 297.488197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.495279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.498215] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.507085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.515258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.620764] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.628396] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.632231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.638229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.644796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.763519] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.771169] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.773688] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.780343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.786420] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.814344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.821142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.823765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.837384] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.845248] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.855324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.878265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.885439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.917797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.921344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.924068] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.927743] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.934833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.938610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.968995] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.987373] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.039724] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.056203] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.077343] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.085546] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.111284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.123237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.138275] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.173157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.197289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.575178] Bluetooth: hci0: command tx timeout [ 299.702773] Bluetooth: hci1: command tx timeout [ 299.895776] Bluetooth: hci4: command tx timeout [ 299.895819] Bluetooth: hci2: command tx timeout [ 299.959862] Bluetooth: hci5: command tx timeout [ 300.022885] Bluetooth: hci3: command tx timeout [ 300.215066] Bluetooth: hci6: command tx timeout [ 300.278751] Bluetooth: hci7: command tx timeout [ 301.623917] Bluetooth: hci0: command tx timeout [ 301.750764] Bluetooth: hci1: command tx timeout [ 301.942714] Bluetooth: hci2: command tx timeout [ 301.943715] Bluetooth: hci4: command tx timeout [ 302.007864] Bluetooth: hci5: command tx timeout [ 302.072883] Bluetooth: hci3: command tx timeout [ 302.262995] Bluetooth: hci6: command tx timeout [ 302.326882] Bluetooth: hci7: command tx timeout [ 303.670718] Bluetooth: hci0: command tx timeout [ 303.799891] Bluetooth: hci1: command tx timeout [ 303.991670] Bluetooth: hci4: command tx timeout [ 303.991743] Bluetooth: hci2: command tx timeout [ 304.056030] Bluetooth: hci5: command tx timeout [ 304.118867] Bluetooth: hci3: command tx timeout [ 304.310719] Bluetooth: hci6: command tx timeout [ 304.374726] Bluetooth: hci7: command tx timeout [ 305.718840] Bluetooth: hci0: command tx timeout [ 305.846695] Bluetooth: hci1: command tx timeout [ 306.038805] Bluetooth: hci4: command tx timeout [ 306.039781] Bluetooth: hci2: command tx timeout [ 306.102725] Bluetooth: hci5: command tx timeout [ 306.166725] Bluetooth: hci3: command tx timeout [ 306.358813] Bluetooth: hci6: command tx timeout [ 306.423751] Bluetooth: hci7: command tx timeout [ 359.823095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.826080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.832596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.842250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.851544] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.006916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.012477] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.015004] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.022326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.027270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.090915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.095675] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.104288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.109160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.129361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.135772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.136414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.143088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.149457] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.155830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.167578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.170052] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.172454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.200089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.225207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.309188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.313879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.316141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.367452] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.373197] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.384785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.389229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.413977] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.420958] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.435383] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.443142] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.459131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.468125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.492431] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.507891] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.910788] Bluetooth: hci0: command tx timeout [ 362.103006] Bluetooth: hci1: command tx timeout [ 362.230924] Bluetooth: hci2: command tx timeout [ 362.296656] Bluetooth: hci4: command tx timeout [ 362.358944] Bluetooth: hci3: command tx timeout [ 362.487766] Bluetooth: hci5: command tx timeout [ 362.550739] Bluetooth: hci6: command tx timeout [ 362.615738] Bluetooth: hci7: command tx timeout [ 363.959728] Bluetooth: hci0: command tx timeout [ 364.151686] Bluetooth: hci1: command tx timeout [ 364.279747] Bluetooth: hci2: command tx timeout [ 364.344208] Bluetooth: hci4: command tx timeout [ 364.408741] Bluetooth: hci3: command tx timeout [ 364.536835] Bluetooth: hci5: command tx timeout [ 364.599768] Bluetooth: hci6: command tx timeout [ 364.662898] Bluetooth: hci7: command tx timeout [ 366.008054] Bluetooth: hci0: command tx timeout [ 366.199109] Bluetooth: hci1: command tx timeout [ 366.326700] Bluetooth: hci2: command tx timeout [ 366.390924] Bluetooth: hci4: command tx timeout [ 366.454716] Bluetooth: hci3: command tx timeout [ 366.585890] Bluetooth: hci5: command tx timeout [ 366.646682] Bluetooth: hci6: command tx timeout [ 366.711691] Bluetooth: hci7: command tx timeout [ 368.055762] Bluetooth: hci0: command tx timeout [ 368.247688] Bluetooth: hci1: command tx timeout [ 368.374710] Bluetooth: hci2: command tx timeout [ 368.440845] Bluetooth: hci4: command tx timeout [ 368.502720] Bluetooth: hci3: command tx timeout [ 368.630676] Bluetooth: hci5: command tx timeout [ 368.696302] Bluetooth: hci6: command tx timeout [ 368.758827] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:09:23 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff8880e561b000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81354102 RDI=ffff88806ce31850 RBP=ffffffff85c1cbc0 RSP=ffff88806ce08938 R8 =0000000000000001 R9 =ffff88806ce08a40 R10=000000000003b6cd R11=00000000000043fe R12=ffffffff81354102 R13=ffff88806ce08a48 R14=ffff888036bd70f0 R15=ffff88806ce08a00 RIP=ffffffff815ab910 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe2a018c368 CR3=000000002c90f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87a55508 RBX=ffff88800a58d280 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff88800a58dd50 RDI=ffff88800a58dd50 RBP=ffff88800a58dcd8 RSP=ffff88806cf088f0 R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88800a58dd50 R13=873d0e13b074236a R14=0000000000000000 R15=0000000000000003 RIP=ffffffff81519448 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a0e3687080 CR3=0000000032bfc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff0000000000ff00000000000000ff00 XMM02=000000000000000000ff000000000000 XMM03=000000000000000000ff0000000000ff XMM04=000000ff0000000000ff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000