Warning: Permanently added '[localhost]:21510' (ECDSA) to the list of known hosts. 2025/06/17 21:56:41 fuzzer started 2025/06/17 21:56:42 dialing manager at localhost:34087 syzkaller login: [ 88.688321] cgroup: Unknown subsys name 'net' [ 88.828493] cgroup: Unknown subsys name 'cpuset' [ 88.874894] cgroup: Unknown subsys name 'rlimit' 2025/06/17 21:56:58 syscalls: 2214 2025/06/17 21:56:58 code coverage: enabled 2025/06/17 21:56:58 comparison tracing: enabled 2025/06/17 21:56:58 extra coverage: enabled 2025/06/17 21:56:58 setuid sandbox: enabled 2025/06/17 21:56:58 namespace sandbox: enabled 2025/06/17 21:56:58 Android sandbox: enabled 2025/06/17 21:56:58 fault injection: enabled 2025/06/17 21:56:58 leak checking: enabled 2025/06/17 21:56:58 net packet injection: enabled 2025/06/17 21:56:58 net device setup: enabled 2025/06/17 21:56:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/17 21:56:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/17 21:56:58 USB emulation: enabled 2025/06/17 21:56:58 hci packet injection: enabled 2025/06/17 21:56:58 wifi device emulation: enabled 2025/06/17 21:56:58 802.15.4 emulation: enabled 2025/06/17 21:56:58 fetching corpus: 0, signal 0/0 (executing program) 2025/06/17 21:57:01 starting 8 fuzzer processes 21:57:01 executing program 0: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/113, &(0x7f0000000080)=0x71) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a8000, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{}, 0x3, &(0x7f0000000100)=[0xffc000, 0x0, 0x7ff], 0x81, 0x5, [0x8, 0x5, 0x1f, 0x4]}) r1 = dup3(r0, r0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000001c0)={0xff4c, 0x5, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000280)) r3 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x6397, 0x101000) ioctl$VT_ACTIVATE(r3, 0x5606, 0x7) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x6000, 0x0) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000340)) move_mount(r3, &(0x7f0000000740)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x68) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000c00)={0x125, 0x1f, &(0x7f0000000800)}) r6 = openat$cgroup_ro(r1, &(0x7f0000000c40)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000c80)) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000cc0)=""/38, &(0x7f0000000d00)=0x26) r7 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setsig(r7, 0xa, 0x10) 21:57:01 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x453, 0x300, 0x70bd2b, 0x25dfdbfc, "e72a6a90578d5a4bc0", ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x18040}, 0x20000000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8002, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) geteuid() sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4889) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000380)=0x2) r2 = openat$cgroup_ro(r0, &(0x7f00000003c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) process_mrelease(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) r4 = timerfd_create(0x2, 0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x3bc, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7fff, 0x80, 0x4, 0x96c}, {0x0, 0x7, 0xf7, 0x4}, {0x0, 0x0, 0x5, 0x8}, {0xfc00, 0x0, 0x92, 0x80000001}, {0x2, 0x0, 0x4e, 0xb802}, {0x7, 0x8c, 0x4, 0x39}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x26, 0x7, 0x1000}, {0x4, 0x20, 0x6, 0xa9c6}, {0x8a08, 0x50, 0x0, 0x4}]}}}]}}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x1fc5e294eeb7141) getsockname$packet(r3, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a00)=0x14) ioctl$CDROMVOLCTRL(r2, 0x530a, &(0x7f0000000a40)={0x0, 0x1, 0xc0, 0xb4}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000c00)=@srh={0x2c, 0xc, 0x4, 0x6, 0x9, 0x48, 0x7, [@loopback, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @empty]}, 0x68) 21:57:01 executing program 2: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x3f, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x3, 'bond0\x00', {0x2}, 0x1}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)=0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000140)={0x9ca, 0x6, 0x1, 'queue1\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000200)={0x10000, 0x80000000, 0x5, {0xfffffff8}, 0x3, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000280)={{0x4, 0x5}, 'port0\x00', 0xd, 0xc0000, 0x6, 0x9, 0x8, 0x2, 0x9, 0x0, 0x1, 0x76}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x840, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000380)) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f00000003c0), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 0x3, 0xc, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0xff]}}, 0x0, 0x5, 0x3f, 0xd5, 0xd793, 0x9, 'bridge0\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x18}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@multicast, @broadcast, @loopback, 0x4}}}, {{@arp={@empty, @local, 0xff, 0xffffffff, 0x1, 0x9, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0xffff, 0x7, 0x20, 0x0, 0xf04, 'ipvlan1\x00', 'team0\x00', {0xff}, {}, 0x0, 0x56}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @empty, @local, @broadcast, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000840)=0x9, 0x4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000880)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x100, 0x6, 0x7f5e, 0x7ff, 0xfff]}, &(0x7f0000000900)=0x78) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x20044040) unlinkat(r1, &(0x7f0000000a80)='./file0\x00', 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000ac0)={0x80000000, 0x3f, 0x7, 0x3ff, 0x18, "f67a92e60fa2c4692512ea8e805e8e2b5f4a1f"}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000b40)={0x0, 0x7, 0x9, 0x1}) 21:57:01 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x75d5ad25}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1100080}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r1, 0xa02, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'macvlan0\x00'}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x10000000}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x44, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x2}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x1}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xffff}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xff80}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x101}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x3}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xff}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x10e}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24004801}, 0x20000010) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x501101, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000280)={0x0, 0x5, 0x40}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000680)={{}, {@val={r3}, @actul_num={@void, 0x80000001, 0x50}}}) r4 = clone3(&(0x7f00000008c0)={0x40000400, &(0x7f00000006c0)=0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740), {0xd}, &(0x7f0000000780)=""/145, 0x91, &(0x7f0000000840)=""/25, &(0x7f0000000880)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8, {r0}}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000940)={r4}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000980)={0x6, {{0xa, 0x4e22, 0x2, @mcast1, 0x3}}, {{0xa, 0x4e23, 0x6, @private1, 0x2}}}, 0x108) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$int_out(r5, 0xa8c2, &(0x7f0000000ac0)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000b00)) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000b40)={0x1f, 0x81, 0x5, 0x6, 0x9, 0x7fff}) pipe2(&(0x7f0000000b80)={0xffffffffffffffff}, 0x0) ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000bc0)) ioctl$HIDIOCINITREPORT(r6, 0x4805, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000c00), 0x802, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000c40)) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000e80)={'batadv_slave_1\x00'}) [ 107.556695] audit: type=1400 audit(1750197421.147:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:57:01 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104000) ioctl$TIOCEXCL(r0, 0x540c) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000080)) r2 = dup(r0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001780), 0x18080, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f00000017c0), 0x10) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000001800)={'bond0\x00', {0x2, 0x0, @multicast1}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001840)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000001880)) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x40, 0x13, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x8010) pselect6(0x40, &(0x7f00000019c0)={0x8, 0x3, 0x1, 0xc0000000000000, 0x1, 0x8, 0x4, 0x8}, &(0x7f0000001a00)={0x5, 0x3, 0xffffffff, 0x1288, 0xffffffffffffb524, 0x1ff, 0xff, 0x8}, &(0x7f0000001a40)={0x4, 0x10001, 0x1, 0x6, 0x7, 0x841, 0xcac, 0x6}, &(0x7f0000001a80), &(0x7f0000001b00)={&(0x7f0000001ac0)={[0x5]}, 0x8}) fremovexattr(0xffffffffffffffff, &(0x7f0000001b40)=@random={'user.', '\\\x00'}) statfs(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)=""/17) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000001c80)={'ip6tnl0\x00', &(0x7f0000001c00)={'syztnl0\x00', 0x0, 0x4, 0x5, 0xf5, 0xe00, 0x30, @dev={0xfe, 0x80, '\x00', 0x14}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8004, 0x80, 0x8, 0xbd1}}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001cc0)=0x5, 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000001d00)={0x0, 0x2710}, 0x10) 21:57:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100000001, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x0, 0x6, 0xf, 0x4, &(0x7f0000000040)="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"}) execveat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000640)=[&(0x7f00000004c0)='/dev/vcs#\x00', &(0x7f0000000500)='$\x00', &(0x7f0000000540)='/dev/vcs#\x00', &(0x7f0000000580)=':*]!\x00', &(0x7f00000005c0)='#\x00', &(0x7f0000000600)='^)\x00'], &(0x7f0000000900)=[&(0x7f0000000680)='/dev/vcs#\x00', &(0x7f00000006c0)='\'\x00', &(0x7f0000000700)='/dev/vcs#\x00', &(0x7f0000000740)=',\'\'\x00', &(0x7f0000000780)='/dev/vcs#\x00', &(0x7f00000007c0), &(0x7f0000000800)='%-\x00', &(0x7f0000000840)='/dev/vcs#\x00', &(0x7f0000000880)=')\x00', &(0x7f00000008c0)='$:-(\xb5*[%:%*[\x00'], 0x1800) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) setxattr$trusted_overlay_nlink(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), &(0x7f0000000a00)={'U+', 0x8}, 0x16, 0x2) utimensat(r0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x100) r1 = syz_open_dev$sg(&(0x7f0000000ac0), 0x8, 0x420000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000b00)) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000b40)={{r1}, 0x0, 0x4, @unused=[0x2, 0x9, 0x3, 0x200], @devid}) r2 = open$dir(&(0x7f0000001b40)='./file0\x00', 0x0, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000001b80)={0x8, 'netpci0\x00', {'macvtap0\x00'}, 0x1000}) getxattr(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)=@known='user.incfs.id\x00', &(0x7f0000001c40)=""/143, 0x8f) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x3c, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008020}, 0x8880) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001e40)={'filter\x00', 0x4}, 0x68) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001ec0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file1\x00'}) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000001f00)) listxattr(&(0x7f0000001f40)='./file1\x00', &(0x7f0000001f80)=""/6, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000002000)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000002100)=0xe8) fsetxattr$system_posix_acl(r0, &(0x7f0000001fc0)='system.posix_acl_default\x00', &(0x7f0000002280)={{}, {0x1, 0x4}, [{0x2, 0x6, 0xee00}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x5, r5}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x2}, {}], {0x4, 0x4}, [{0x8, 0x0, 0xee01}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x1, 0xee00}], {0x10, 0x8}, {0x20, 0x2}}, 0x7c, 0x1) 21:57:01 executing program 6: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x158, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8094}, 0x24000005) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000700)={r3, 0x1, 0x6}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34f}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000940)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x10008050) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0xa200800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x8c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000040}, 0x10000000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4008000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000001000)={0x1, 0x3, 0x6}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x27}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 21:57:01 executing program 7: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0xfb1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x400) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x820}, 0x4040010) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000180)={{r1}, 0xfffffffffffffffa, 0xfffffffffffff001, 0x7f}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f00000002c0)={0x6, 'ip6_vti0\x00', {0x18}, 0x16c}) r3 = open(&(0x7f0000000300)='./file0\x00', 0x400200, 0x6) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000340)) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000380)={0x5, 0xc2b, 0xffffff74, 0x3ff, 0x3, "b153813db657171eaa30403c7caed10922662a"}) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f00000003c0)={0x5, 0x5, 0x6, 0xdcda, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x7e}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x9}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xff81}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffbff, 0x72}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x1e}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x3f, 0x2b, 0x38cd1bfdfe546a87, @empty, @private0, 0x7, 0x8000, 0x8, 0x10001}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc054}, 0x40800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0xc854) [ 109.180691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.184577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.187565] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.196641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.202425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.372592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.375527] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.378089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.384038] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.388565] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.412690] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.418531] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.422358] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.439674] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.447186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.449946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.451261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.453195] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.459667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.463623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.468252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.473247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.476611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.482076] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.486094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.489806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.499876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.504174] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.511722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.535279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.555888] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 109.561165] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 109.569645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 109.576099] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.596013] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 109.600308] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 109.630134] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.632625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.637470] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.691272] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.259530] Bluetooth: hci0: command tx timeout [ 111.451493] Bluetooth: hci1: command tx timeout [ 111.578916] Bluetooth: hci2: command tx timeout [ 111.580315] Bluetooth: hci4: command tx timeout [ 111.642917] Bluetooth: hci3: command tx timeout [ 111.644226] Bluetooth: hci5: command tx timeout [ 111.707220] Bluetooth: hci7: command tx timeout [ 111.771869] Bluetooth: hci6: command tx timeout [ 113.307881] Bluetooth: hci0: command tx timeout [ 113.500038] Bluetooth: hci1: command tx timeout [ 113.628121] Bluetooth: hci2: command tx timeout [ 113.628572] Bluetooth: hci4: command tx timeout [ 113.692946] Bluetooth: hci3: command tx timeout [ 113.693382] Bluetooth: hci5: command tx timeout [ 113.755866] Bluetooth: hci7: command tx timeout [ 113.819195] Bluetooth: hci6: command tx timeout [ 115.355764] Bluetooth: hci0: command tx timeout [ 115.546795] Bluetooth: hci1: command tx timeout [ 115.675822] Bluetooth: hci4: command tx timeout [ 115.676267] Bluetooth: hci2: command tx timeout [ 115.739837] Bluetooth: hci5: command tx timeout [ 115.740284] Bluetooth: hci3: command tx timeout [ 115.803798] Bluetooth: hci7: command tx timeout [ 115.867050] Bluetooth: hci6: command tx timeout [ 117.402846] Bluetooth: hci0: command tx timeout [ 117.595097] Bluetooth: hci1: command tx timeout [ 117.722956] Bluetooth: hci2: command tx timeout [ 117.723831] Bluetooth: hci4: command tx timeout [ 117.786887] Bluetooth: hci3: command tx timeout [ 117.787661] Bluetooth: hci5: command tx timeout [ 117.850843] Bluetooth: hci7: command tx timeout [ 117.914875] Bluetooth: hci6: command tx timeout [ 169.209319] syz-executor.3 (283) used greatest stack depth: 24992 bytes left [ 171.239360] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.241838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.246020] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.252901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.259581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.320525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.323377] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.325435] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.331292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.335149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.436602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.440151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.441644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.453038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.476013] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.488885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.494921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.541085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.552568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.552643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.573283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.575618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.577896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.580375] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.588861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.591009] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.597575] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.605569] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.617222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.618800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.620719] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.639344] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.646584] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.650946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.656905] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.674652] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 171.688403] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 171.700372] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 171.758452] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 171.766195] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.339811] Bluetooth: hci0: command tx timeout [ 173.403862] Bluetooth: hci1: command tx timeout [ 173.595151] Bluetooth: hci2: command tx timeout [ 173.658981] Bluetooth: hci5: command tx timeout [ 173.722871] Bluetooth: hci3: command tx timeout [ 173.723433] Bluetooth: hci6: command tx timeout [ 173.786800] Bluetooth: hci4: command tx timeout [ 173.850881] Bluetooth: hci7: command tx timeout [ 175.387926] Bluetooth: hci0: command tx timeout [ 175.450773] Bluetooth: hci1: command tx timeout [ 175.642856] Bluetooth: hci2: command tx timeout [ 175.707981] Bluetooth: hci5: command tx timeout [ 175.770907] Bluetooth: hci3: command tx timeout [ 175.771504] Bluetooth: hci6: command tx timeout [ 175.835878] Bluetooth: hci4: command tx timeout [ 175.899816] Bluetooth: hci7: command tx timeout [ 177.436018] Bluetooth: hci0: command tx timeout [ 177.501889] Bluetooth: hci1: command tx timeout [ 177.690906] Bluetooth: hci2: command tx timeout [ 177.755791] Bluetooth: hci5: command tx timeout [ 177.820918] Bluetooth: hci3: command tx timeout [ 177.821465] Bluetooth: hci6: command tx timeout [ 177.882838] Bluetooth: hci4: command tx timeout [ 177.946842] Bluetooth: hci7: command tx timeout [ 179.484119] Bluetooth: hci0: command tx timeout [ 179.548757] Bluetooth: hci1: command tx timeout [ 179.739791] Bluetooth: hci2: command tx timeout [ 179.803868] Bluetooth: hci5: command tx timeout [ 179.868364] Bluetooth: hci6: command tx timeout [ 179.868866] Bluetooth: hci3: command tx timeout [ 179.931924] Bluetooth: hci4: command tx timeout [ 179.995783] Bluetooth: hci7: command tx timeout [ 231.561188] syz-executor.6 (2900) used greatest stack depth: 24912 bytes left [ 233.708085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.714419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.723211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.727257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.730055] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.733081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.736183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.739992] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.776059] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.776503] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.785236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.788237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.790262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.809206] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.826344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.899059] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.907684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.910882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.925558] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.931658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.935280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.962261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.965204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.977693] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.982354] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.982554] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 233.986456] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 233.989208] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 233.989272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.992658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.995691] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 233.999995] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.003042] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.004994] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 234.008636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.085439] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 234.093004] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 234.098398] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 234.111976] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 234.124405] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.803841] Bluetooth: hci0: command tx timeout [ 235.867016] Bluetooth: hci1: command tx timeout [ 235.931882] Bluetooth: hci2: command tx timeout [ 235.995784] Bluetooth: hci3: command tx timeout [ 236.058821] Bluetooth: hci6: command tx timeout [ 236.122837] Bluetooth: hci4: command tx timeout [ 236.124078] Bluetooth: hci5: command tx timeout [ 236.186850] Bluetooth: hci7: command tx timeout [ 237.851819] Bluetooth: hci0: command tx timeout [ 237.915050] Bluetooth: hci1: command tx timeout [ 237.978872] Bluetooth: hci2: command tx timeout [ 238.042825] Bluetooth: hci3: command tx timeout [ 238.107262] Bluetooth: hci6: command tx timeout [ 238.171324] Bluetooth: hci5: command tx timeout [ 238.172118] Bluetooth: hci4: command tx timeout [ 238.235582] Bluetooth: hci7: command tx timeout [ 239.898850] Bluetooth: hci0: command tx timeout [ 239.962835] Bluetooth: hci1: command tx timeout [ 240.026828] Bluetooth: hci2: command tx timeout [ 240.090795] Bluetooth: hci3: command tx timeout [ 240.155206] Bluetooth: hci6: command tx timeout [ 240.220667] Bluetooth: hci4: command tx timeout [ 240.221132] Bluetooth: hci5: command tx timeout [ 240.282804] Bluetooth: hci7: command tx timeout [ 241.946831] Bluetooth: hci0: command tx timeout [ 242.011114] Bluetooth: hci1: command tx timeout [ 242.075073] Bluetooth: hci2: command tx timeout [ 242.138846] Bluetooth: hci3: command tx timeout [ 242.202935] Bluetooth: hci6: command tx timeout [ 242.266935] Bluetooth: hci5: command tx timeout [ 242.266982] Bluetooth: hci4: command tx timeout [ 242.331866] Bluetooth: hci7: command tx timeout [ 296.178648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.189130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.195246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.202507] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.211619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.259664] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.262458] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.264927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.270495] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.274562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.459285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.472084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.477333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.508432] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.521314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.524244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.525535] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.528362] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.530722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.535653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.538159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.540074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.561052] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.580439] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.584421] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.586679] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.589911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.604230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.606517] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.609294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.626266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.636859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.645987] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.658774] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.662806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.704176] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.718256] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.721250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.756306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.772267] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.267030] Bluetooth: hci0: command tx timeout [ 298.331932] Bluetooth: hci1: command tx timeout [ 298.650846] Bluetooth: hci2: command tx timeout [ 298.714869] Bluetooth: hci7: command tx timeout [ 298.715671] Bluetooth: hci3: command tx timeout [ 298.716196] Bluetooth: hci4: command tx timeout [ 298.780030] Bluetooth: hci5: command tx timeout [ 298.843947] Bluetooth: hci6: command tx timeout [ 300.315771] Bluetooth: hci0: command tx timeout [ 300.378975] Bluetooth: hci1: command tx timeout [ 300.699061] Bluetooth: hci2: command tx timeout [ 300.762936] Bluetooth: hci3: command tx timeout [ 300.763932] Bluetooth: hci4: command tx timeout [ 300.764298] Bluetooth: hci7: command tx timeout [ 300.827063] Bluetooth: hci5: command tx timeout [ 300.891072] Bluetooth: hci6: command tx timeout [ 302.363078] Bluetooth: hci0: command tx timeout [ 302.426870] Bluetooth: hci1: command tx timeout [ 302.746819] Bluetooth: hci2: command tx timeout [ 302.810837] Bluetooth: hci4: command tx timeout [ 302.811040] Bluetooth: hci3: command tx timeout [ 302.811900] Bluetooth: hci7: command tx timeout [ 302.875810] Bluetooth: hci5: command tx timeout [ 302.938785] Bluetooth: hci6: command tx timeout [ 304.410922] Bluetooth: hci0: command tx timeout [ 304.475259] Bluetooth: hci1: command tx timeout [ 304.796213] Bluetooth: hci2: command tx timeout [ 304.858864] Bluetooth: hci3: command tx timeout [ 304.859965] Bluetooth: hci7: command tx timeout [ 304.860090] Bluetooth: hci4: command tx timeout [ 304.924942] Bluetooth: hci5: command tx timeout [ 304.988037] Bluetooth: hci6: command tx timeout [ 358.702354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.709934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.714464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.729673] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.740509] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.891635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.903274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.906287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.913443] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.922302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.976030] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.980984] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.985001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.987571] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.991254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.993526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.995011] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.998266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.015042] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.037881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.169978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.175093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.177250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.183301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.187353] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.677441] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.696940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.708982] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.782693] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.801366] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.833336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.838127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.840591] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.845398] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.848469] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 359.874020] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.904146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.906298] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 359.934972] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 359.939514] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.795215] Bluetooth: hci0: command tx timeout [ 360.986926] Bluetooth: hci1: command tx timeout [ 361.050914] Bluetooth: hci3: command tx timeout [ 361.179153] Bluetooth: hci2: command tx timeout [ 361.242864] Bluetooth: hci4: command tx timeout [ 361.882923] Bluetooth: hci6: command tx timeout [ 362.010857] Bluetooth: hci5: command tx timeout [ 362.140787] Bluetooth: hci7: command tx timeout [ 362.843118] Bluetooth: hci0: command tx timeout [ 363.034816] Bluetooth: hci1: command tx timeout [ 363.098771] Bluetooth: hci3: command tx timeout [ 363.227060] Bluetooth: hci2: command tx timeout [ 363.291806] Bluetooth: hci4: command tx timeout [ 363.932049] Bluetooth: hci6: command tx timeout [ 364.058818] Bluetooth: hci5: command tx timeout [ 364.188305] Bluetooth: hci7: command tx timeout [ 364.892753] Bluetooth: hci0: command tx timeout [ 365.084664] Bluetooth: hci1: command tx timeout [ 365.146794] Bluetooth: hci3: command tx timeout [ 365.276919] Bluetooth: hci2: command tx timeout [ 365.338781] Bluetooth: hci4: command tx timeout [ 365.979051] Bluetooth: hci6: command tx timeout [ 366.106802] Bluetooth: hci5: command tx timeout [ 366.234937] Bluetooth: hci7: command tx timeout [ 366.939799] Bluetooth: hci0: command tx timeout [ 367.131919] Bluetooth: hci1: command tx timeout [ 367.195805] Bluetooth: hci3: command tx timeout [ 367.326511] Bluetooth: hci2: command tx timeout [ 367.387906] Bluetooth: hci4: command tx timeout [ 368.027355] Bluetooth: hci6: command tx timeout [ 368.154962] Bluetooth: hci5: command tx timeout [ 368.282825] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:02:10 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888037294e00 RCX=ffffffff81b4af64 RDX=ffff88802deeb700 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88801902fd88 RSP=ffff88801902fd48 R8 =0000000000000001 R9 =ffffed1006e529ec R10=0000000000000000 R11=0000000000000001 R12=0000000004060003 R13=ffff88801902fdd0 R14=ffffffff851d21c0 R15=0000000000000000 RIP=ffffffff81b4af67 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555584fdb400 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f73c013b620 CR3=0000000027c75000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ff0000000000000000ff0000000000 XMM02=ff00000000000000ff00000000000000 XMM03=0000000000000000ff00000000000000 XMM04=0000000000ff00000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880271ffc58 RBX=ffff8880271ffc40 RCX=ffffffff818c48ab RDX=ffff8880271ffc58 RSI=ffffffff84b0dbed RDI=ffff8880271ffc40 RBP=ffff8880271ffc40 RSP=ffff8880271ffa58 R8 =0000000000000001 R9 =fffff94000036f5e R10=000000000000000f R11=0000000000000001 R12=000000000000000f R13=000000000000000f R14=000000000000000f R15=dffffc0000000000 RIP=ffffffff84b0dbf9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7542bce260 CR3=000000002cad4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000