syzkaller login: [ 55.993508] hrtimer: interrupt took 3299494 ns Warning: Permanently added '[localhost]:10464' (ECDSA) to the list of known hosts. 2024/10/22 01:11:57 fuzzer started 2024/10/22 01:11:58 dialing manager at localhost:45639 [ 74.609092] cgroup: Unknown subsys name 'net' [ 74.700522] cgroup: Unknown subsys name 'cpuset' [ 74.714113] cgroup: Unknown subsys name 'rlimit' 2024/10/22 01:12:15 syscalls: 203 2024/10/22 01:12:15 code coverage: enabled 2024/10/22 01:12:15 comparison tracing: enabled 2024/10/22 01:12:15 extra coverage: enabled 2024/10/22 01:12:15 setuid sandbox: enabled 2024/10/22 01:12:15 namespace sandbox: enabled 2024/10/22 01:12:15 Android sandbox: enabled 2024/10/22 01:12:15 fault injection: enabled 2024/10/22 01:12:15 leak checking: enabled 2024/10/22 01:12:15 net packet injection: enabled 2024/10/22 01:12:15 net device setup: enabled 2024/10/22 01:12:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/22 01:12:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/22 01:12:15 USB emulation: enabled 2024/10/22 01:12:15 hci packet injection: enabled 2024/10/22 01:12:15 wifi device emulation: enabled 2024/10/22 01:12:15 802.15.4 emulation: enabled 2024/10/22 01:12:15 fetching corpus: 0, signal 0/0 (executing program) 2024/10/22 01:12:17 starting 8 fuzzer processes 01:12:17 executing program 0: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x7fff, 0x7fff, {{0x2e, 0x4, 0x2, 0x5, 0xb8, 0x66, 0x0, 0x7, 0x6, 0x0, @multicast2, @local, {[@generic={0x86, 0x8, "3a3b9e86a125"}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xd1, [@private=0xa010102, @remote]}, @lsrr={0x83, 0x1b, 0x46, [@multicast1, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp_prespec={0x44, 0x54, 0xd3, 0x3, 0x7, [{@rand_addr=0x64010100, 0xa1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@empty, 0x100}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@loopback, 0x6}, {@multicast1, 0x100}]}, @lsrr={0x83, 0xf, 0xaf, [@local, @dev={0xac, 0x14, 0x14, 0x3e}, @empty]}, @lsrr={0x83, 0xf, 0xd1, [@local, @local, @local]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, @l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x76be, 0x1}, @llc={0x1a, 0x201, 0x1f, 0x0, 0x2, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, @can={0x1d, 0x0}, 0x3, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)='veth0_vlan\x00', 0xffffffff, 0x1, 0x6}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x1c, 0x80000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000004c0)={0x9, 0x1000, 0x4, 0x7fffffff}, 0x14) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0xa35c547b2a0588a1}, 0x80) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x78}}, 0x20004000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000a00)={0xfffffffffffffffc, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r4, 0xa28, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c1}, 0x40840) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000a40)={r7, 0x1, 0x6, @remote}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 01:12:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x40) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x2}, 0x4) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) bind$packet(r1, &(0x7f0000000400)={0x11, 0x11, r2, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000440)=""/4096, &(0x7f0000001440)=0x1000) r3 = fork() waitid(0x2, r3, &(0x7f0000001480), 0x1, 0x0) waitid(0x2, 0xffffffffffffffff, &(0x7f0000001500), 0x20000000, &(0x7f0000001580)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x8800, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x50) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20008004) openat$vcs(0xffffffffffffff9c, &(0x7f0000001780), 0x8444af8942ae6df8, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000017c0)=0x2, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000018c0)={&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/73, 0x49, 0x1, &(0x7f0000001880)}, &(0x7f0000001900)=0x40) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000001940)=0x81, 0x4) 01:12:17 executing program 2: ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x400) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', r1, 0x4, 0x7, 0x6, 0x7, 0x5c, @empty, @mcast2, 0x80, 0x40, 0x4, 0x80000000}}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000140)={0x0, 0x8, 0x40, 0x5, 0x0, 0x7}) ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f0000000bc0)) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000c00)={{0x0, 0x4, 0x7, 0x4, 0x76a0000000000000, 0xfffffffffffffff7, 0x100, 0xfff, 0x3, 0x80, 0x7f, 0x1, 0x7ff, 0x7, 0x5b}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x282000, 0x0) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x3) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000d00)={r1, 0x1, 0x6, @broadcast}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000d40)) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0xc085c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xa1}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x4880) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x88, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x88}, 0x1, 0x0, 0x0, 0x4804}, 0x1) write$P9_ROPEN(r2, &(0x7f0000001100)={0x18, 0x71, 0x1, {{0x5537efc7f0a12072, 0x1}, 0x7fff}}, 0x18) ioctl$CDROM_NEXT_WRITABLE(r2, 0x5394, &(0x7f0000001140)) 01:12:17 executing program 3: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20024010}, 0x4044003) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x0) rt_sigaction(0x5, &(0x7f0000000300)={&(0x7f0000000280)="66470f6bbe00800000c4819959a98900000042e500660f6244c7732ae766450f01dcc4e1792b14f8c4a1f9108f04440000c463f15cd60026410f0d0cab", 0x80000000, &(0x7f00000002c0)="c421795139c461e56b1266410f38de0429d9f5f0003d06000000f0290d01000000ded9263e66460f38dc1726dbc5c4c155fa9af6070000", {[0xfff]}}, &(0x7f00000003c0)={&(0x7f0000000340)="0fc5f7723ef2440f2c5b8ff30fa6d08fe98002f5c482791d9c4f82520000400fa7c00fc7f1c4e17928edc4a13d71f2adf3450f1ecd", 0x0, &(0x7f0000000380)="8fa978d6190f295bf1eff36edfc8660f38f80dfb000000c442ad3f07de410b6536652e66650a1f664e0f3a165b006e"}, 0x8, &(0x7f0000000400)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000440)={0xa5cf, 0xaa, 0x5973186c, 0xffffffffffff8000, 0xbb, 0x0, 0x8, 0x1}, &(0x7f0000000480)={0x40, 0x3, 0x9, 0x5, 0x6, 0x1768, 0xffffffffffffff76, 0x6}, &(0x7f00000004c0)={0x1, 0x4, 0xfffffffffffffe3f, 0x1, 0xfff, 0x3, 0x6, 0x3}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x10001]}, 0x8}) rt_sigaction(0x40, &(0x7f0000000680)={&(0x7f00000005c0)="f2f0430fc70ac462452db30c000000c42154149004000000c4a37d08ec0046dceac4c198c61d0700000027f2da01f3f0804f0ca6c4a3215e078d66400f3acf752900", 0x40000006, &(0x7f0000000640)="63cdc4a3a97a4ef80c66460f38f66c780a66410f5d1ec441fc289cbd04000000c4e191f614d346d8a48500100002c4a17a2d31c4a289a7446c3dc401f1e3e0", {[0xe2e]}}, &(0x7f00000007c0)={&(0x7f00000006c0)="67f3f040ff80f400000046debb05000000c4618de9960d0000008f29889162288fa900016cf6fac4c26d3f7197430f3802a1ffefffffc441b9ee9800000080c4a238f391000060ff3e266436d9b4935bdfa7de", 0x0, &(0x7f0000000740)="2e3666450fe79700000000c4e1f9282f03720566430f2cdf6566420f0f7b0ea0c4c2eddf0d09000000c4c209a63d4500000043c7c337960000450f1256b066460f382a93bfbb90a7"}, 0x8, &(0x7f0000000800)) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4010) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044001}, 0x8080) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8002) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x80}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x42}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000dc0)={'wpan1\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r1) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x20}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x3f}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4411}, 0xbfe4951a0d03cf11) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 01:12:17 executing program 4: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/93) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x8001, 0x111080) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000}}, {@cachetag={'cachetag', 0x3d, '!'}}, {@noextend}, {@mmap}, {@noextend}, {@loose}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@obj_role}, {@uid_gt={'uid>', r2}}, {@pcr={'pcr', 0x3d, 0x8}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x224, 0x0, 0xee2b3d6728dfe585, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4010}, 0x4000011) unshare(0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000008c0)={"93a6326a36158acf9769f358004e8027", 0x0, 0x0, {0x100, 0x8}, {0x2, 0x5}, 0x20, [0x3f, 0x5, 0x40, 0x6, 0xbf7, 0x0, 0x40, 0x0, 0x8, 0x258, 0x63b6, 0x0, 0x20, 0x4, 0x8, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000009c0)={"72414c2abd1fcb1fc9c8a96c54638dac", 0x0, r4, {0x2, 0x8}, {0x4, 0xeef0dfe}, 0x7953, [0x80, 0x80, 0x6, 0x37c, 0x0, 0x7fffffff, 0x63b, 0x80000001, 0xf304, 0xda, 0x3f, 0x5, 0x9, 0x1, 0x3, 0x9]}) connect$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x4, r1, 0x1, 0x80, 0x6, @random="6d41e1e52cd9"}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b80)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x98, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x40) keyctl$describe(0x6, 0x0, &(0x7f0000000d00)=""/120, 0x78) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x101040, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000dc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000fc0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001000)={"9008c16921193926b86078404f24be20", r7, r8, {0x7fff, 0x20}, {0x100000000, 0x5}, 0x8, [0x80000000, 0x8, 0x81, 0x3, 0xdcc, 0x20, 0xe431, 0x800, 0x3, 0x0, 0xffff, 0x94a2, 0x8001, 0x2, 0x81, 0xe00]}) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100), 0x2080, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000001840)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0xa8, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) [ 93.339617] audit: type=1400 audit(1729559537.485:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:12:17 executing program 5: socketpair(0x18, 0x2, 0x1f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1000}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x700, 0x20, 0x2, 0x6, {{0x10, 0x4, 0x3, 0x14, 0x40, 0xfffa, 0x0, 0x1, 0x2f, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x12, 0xfffffffffffffffd, [{0x2, 0xc, "0e54b452b5d9ff8f937b"}]}, @generic={0x86, 0xc, "352b202a727ef2ad096d"}, @lsrr={0x83, 0xb, 0x3c, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r6, 0x2, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x85) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x75d72b07361b2495, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r8, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x41001) recvfrom$packet(r7, &(0x7f00000007c0)=""/135, 0x87, 0x2021, &(0x7f0000000880)={0x11, 0x17, r3, 0x1, 0x1, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000008c0)={0x2, 0x4}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000900)={'wg2\x00', 0x0}) r10 = accept$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000980)=0x14) bind$packet(r10, &(0x7f00000009c0)={0x11, 0x16, 0x0, 0x1, 0xff, 0x6, @link_local}, 0x14) getsockname$packet(r7, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a80)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa8, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) 01:12:17 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/193) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000200)=[{{0x0, 0x2710}, 0x16, 0x7, 0x87f2}, {{0x77359400}, 0x11, 0x8, 0x1f}, {{r1, r2/1000+10000}, 0x1f, 0x2, 0xf0000000}, {{r3, r4/1000+10000}, 0x1, 0x8001, 0x7}, {{r5, r6/1000+60000}, 0x3, 0x101, 0x8001}], 0x78) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000280)) r8 = syz_open_dev$evdev(&(0x7f00000002c0), 0xdd45, 0x800) clock_gettime(0x7, &(0x7f0000000300)) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x8, 0x4, 0x2, 0x2e39}]}, 0x10) clock_getres(0x0, &(0x7f00000003c0)) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000400)=""/205) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000500)={0x8, 0x17cc, 0x9, 0x3f, 0x4, 0x9, 0x6d4, 0x5}, &(0x7f0000000540)={0x10001, 0x6, 0x10000, 0x80, 0xfffffffffffffff7, 0x7fff, 0x2, 0x7}, &(0x7f0000000580)={0x100000000, 0x9, 0x60, 0x6, 0x8f6e, 0x5, 0x401, 0x22681b0b}, &(0x7f0000000600)={r9, r10+10000000}, &(0x7f0000000680)={&(0x7f0000000640)={[0x1f]}, 0x8}) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000006c0)) pselect6(0x40, &(0x7f0000000700)={0x2, 0x324e, 0xd22, 0x400, 0x8a82, 0x0, 0x0, 0x6}, &(0x7f0000000740)={0x1, 0x7, 0x3, 0x9, 0x0, 0x0, 0x1, 0x10000}, &(0x7f0000000780)={0x101, 0x4, 0x9, 0x400, 0xff, 0x7, 0x3f, 0x6}, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x6]}, 0x8}) pselect6(0x40, &(0x7f0000000880)={0x7, 0xfffffffffffffffb, 0x0, 0x7f1e, 0x1, 0x1, 0x6a, 0x6}, &(0x7f00000008c0)={0x81, 0xfffffffffffffffc, 0x8741, 0x0, 0x4, 0x1000, 0x5, 0x3b5eb295}, &(0x7f0000000900)={0x100000000, 0x1ff, 0x5, 0x7fff000, 0x3f, 0x7, 0x100000001, 0x1}, &(0x7f0000000940)={0x77359400}, &(0x7f00000009c0)={&(0x7f0000000980)={[0x3f]}, 0x8}) clock_gettime(0x2, &(0x7f0000000a00)) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000a40)=0x10000) 01:12:17 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x93420080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x8, 0x3, {{0x40, 0x4, 0x0, 0x11, 0x100, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x44, 0xf8, 0x3, 0xd, [{@multicast1, 0x9}, {@local, 0x1}, {@remote}, {@multicast2, 0x9}, {@multicast1, 0x20}, {@multicast1, 0x4}, {@remote}, {@local, 0x3}]}, @timestamp={0x44, 0x20, 0xbd, 0x0, 0x9, [0x9, 0x0, 0x20, 0x3, 0xff, 0x2, 0x9]}, @rr={0x7, 0xf, 0xc7, [@remote, @loopback, @private=0xa010101]}, @generic={0x7, 0x7, "ce3b34d011"}, @timestamp_prespec={0x44, 0x34, 0xd6, 0x3, 0x6, [{@loopback, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x29}, {@empty, 0x4d36}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0x80000001}, {@empty, 0x7fffffff}]}, @timestamp={0x44, 0x20, 0x39, 0x0, 0x6, [0x4, 0x10000, 0x3, 0x8001, 0x2, 0x1000, 0x5]}, @lsrr={0x83, 0x1b, 0x61, [@remote, @loopback, @loopback, @loopback, @multicast1, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1e4, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1a4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa60712d8ba0ce77e}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x80}, 0x24048001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000a80)=0x1c, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r0, 0x1, 0x70bd26, 0x200, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) socketpair(0x27, 0x4, 0x6, &(0x7f0000000c00)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', r3, 0x2f, 0x7, 0x6, 0xcbd, 0x68, @loopback, @empty, 0x8000, 0x80, 0xff, 0x7ff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000d80)={'gretap0\x00', &(0x7f0000000d00)={'syztnl2\x00', r8, 0x7800, 0x7, 0x2262, 0x7fff, {{0x16, 0x4, 0x3, 0x9, 0x58, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp_prespec={0x44, 0x1c, 0xfc, 0x3, 0x3, [{@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @noop, @noop, @rr={0x7, 0x13, 0xbd, [@loopback, @multicast2, @local, @broadcast]}, @lsrr={0x83, 0xf, 0x9b, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}]}]}}}}}) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x200, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) [ 94.851636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.859132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.860854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.862188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.863475] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.868641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.869878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.870892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.872249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.873502] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.876169] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.877268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.881569] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.882789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.887098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.892431] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.895424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.895500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.952721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.960883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.962047] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.966080] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.972600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.980582] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.981524] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.983850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.984774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.020518] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.050772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.067155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.100891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.104117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.107189] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.109070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.111954] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.113710] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.114935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.124438] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.132508] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.144125] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.146906] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.148646] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.149813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.192844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.197056] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.223025] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.229928] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.250271] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.955750] Bluetooth: hci1: command tx timeout [ 96.956752] Bluetooth: hci2: command tx timeout [ 96.957586] Bluetooth: hci0: command tx timeout [ 97.100404] Bluetooth: hci3: command tx timeout [ 97.224568] Bluetooth: hci6: command tx timeout [ 97.225942] Bluetooth: hci5: command tx timeout [ 97.226611] Bluetooth: hci4: command tx timeout [ 97.336432] Bluetooth: hci7: command tx timeout [ 99.000493] Bluetooth: hci0: command tx timeout [ 99.000570] Bluetooth: hci2: command tx timeout [ 99.001931] Bluetooth: hci1: command tx timeout [ 99.129442] Bluetooth: hci3: command tx timeout [ 99.257506] Bluetooth: hci4: command tx timeout [ 99.258063] Bluetooth: hci5: command tx timeout [ 99.258121] Bluetooth: hci6: command tx timeout [ 99.386382] Bluetooth: hci7: command tx timeout [ 101.048550] Bluetooth: hci2: command tx timeout [ 101.049083] Bluetooth: hci1: command tx timeout [ 101.049547] Bluetooth: hci0: command tx timeout [ 101.176444] Bluetooth: hci3: command tx timeout [ 101.304391] Bluetooth: hci6: command tx timeout [ 101.304554] Bluetooth: hci4: command tx timeout [ 101.304910] Bluetooth: hci5: command tx timeout [ 101.432403] Bluetooth: hci7: command tx timeout [ 103.096635] Bluetooth: hci0: command tx timeout [ 103.097172] Bluetooth: hci1: command tx timeout [ 103.097449] Bluetooth: hci2: command tx timeout [ 103.224449] Bluetooth: hci3: command tx timeout [ 103.352417] Bluetooth: hci4: command tx timeout [ 103.352935] Bluetooth: hci6: command tx timeout [ 103.362344] Bluetooth: hci5: command tx timeout [ 103.481584] Bluetooth: hci7: command tx timeout [ 157.656043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.660591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.662785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.675037] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.677172] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.678685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.714066] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.715604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.716774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.718541] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.725928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.727762] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.728633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.731807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.736357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.738406] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.739642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.742476] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.813690] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.842651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.844256] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.846851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.848910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.850353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.850797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.852053] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.852973] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.854210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.855600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.857267] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.861426] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.862374] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.864464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.866334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.875590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.890613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.894478] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.895862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.908478] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.914562] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.915755] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.916990] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.919000] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.926516] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.927264] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.931813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.932644] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.941488] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.739850] Bluetooth: hci0: command tx timeout [ 159.800454] Bluetooth: hci2: command tx timeout [ 159.865385] Bluetooth: hci1: command tx timeout [ 159.992518] Bluetooth: hci3: command tx timeout [ 159.994683] Bluetooth: hci5: command tx timeout [ 159.994722] Bluetooth: hci6: command tx timeout [ 159.996020] Bluetooth: hci7: command tx timeout [ 159.997102] Bluetooth: hci4: command tx timeout [ 161.785440] Bluetooth: hci0: command tx timeout [ 161.848670] Bluetooth: hci2: command tx timeout [ 161.921328] Bluetooth: hci1: command tx timeout [ 162.040495] Bluetooth: hci4: command tx timeout [ 162.041047] Bluetooth: hci6: command tx timeout [ 162.041814] Bluetooth: hci3: command tx timeout [ 162.042446] Bluetooth: hci5: command tx timeout [ 162.042931] Bluetooth: hci7: command tx timeout [ 163.832479] Bluetooth: hci0: command tx timeout [ 163.896645] Bluetooth: hci2: command tx timeout [ 163.960395] Bluetooth: hci1: command tx timeout [ 164.089406] Bluetooth: hci5: command tx timeout [ 164.090613] Bluetooth: hci3: command tx timeout [ 164.091967] Bluetooth: hci6: command tx timeout [ 164.092010] Bluetooth: hci4: command tx timeout [ 164.093165] Bluetooth: hci7: command tx timeout [ 165.882345] Bluetooth: hci0: command tx timeout [ 165.944457] Bluetooth: hci2: command tx timeout [ 166.008367] Bluetooth: hci1: command tx timeout [ 166.137517] Bluetooth: hci3: command tx timeout [ 166.137552] Bluetooth: hci6: command tx timeout [ 166.137601] Bluetooth: hci4: command tx timeout [ 166.138045] Bluetooth: hci7: command tx timeout [ 166.138838] Bluetooth: hci5: command tx timeout [ 219.795310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.797606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.799289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.802876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.810044] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.814470] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.837999] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.841294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.844050] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.847798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.850867] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.853211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.905494] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.912847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.918187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.924976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.929207] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.932054] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.986996] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.991143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.005681] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.015525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.022380] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.024727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.099819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.108486] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.112544] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.116054] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.128424] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.131137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.197795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.202372] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.206830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.213525] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.224894] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.228238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.231741] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.234093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.243480] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.258660] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.263845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.270621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.295208] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.349531] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.362905] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.388353] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.416094] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.432462] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.888075] Bluetooth: hci1: command tx timeout [ 221.889080] Bluetooth: hci0: command tx timeout [ 222.009460] Bluetooth: hci2: command tx timeout [ 222.137567] Bluetooth: hci3: command tx timeout [ 222.200354] Bluetooth: hci4: command tx timeout [ 222.393421] Bluetooth: hci5: command tx timeout [ 222.457415] Bluetooth: hci6: command tx timeout [ 222.521886] Bluetooth: hci7: command tx timeout [ 223.928427] Bluetooth: hci0: command tx timeout [ 223.928520] Bluetooth: hci1: command tx timeout [ 224.061416] Bluetooth: hci2: command tx timeout [ 224.185352] Bluetooth: hci3: command tx timeout [ 224.248391] Bluetooth: hci4: command tx timeout [ 224.443348] Bluetooth: hci5: command tx timeout [ 224.504347] Bluetooth: hci6: command tx timeout [ 224.568453] Bluetooth: hci7: command tx timeout [ 225.976441] Bluetooth: hci1: command tx timeout [ 225.977450] Bluetooth: hci0: command tx timeout [ 226.104358] Bluetooth: hci2: command tx timeout [ 226.232492] Bluetooth: hci3: command tx timeout [ 226.296337] Bluetooth: hci4: command tx timeout [ 226.493324] Bluetooth: hci5: command tx timeout [ 226.552326] Bluetooth: hci6: command tx timeout [ 226.616621] Bluetooth: hci7: command tx timeout [ 228.025313] Bluetooth: hci1: command tx timeout [ 228.025416] Bluetooth: hci0: command tx timeout [ 228.152413] Bluetooth: hci2: command tx timeout [ 228.282211] Bluetooth: hci3: command tx timeout [ 228.346313] Bluetooth: hci4: command tx timeout [ 228.538625] Bluetooth: hci5: command tx timeout [ 228.604333] Bluetooth: hci6: command tx timeout [ 228.664547] Bluetooth: hci7: command tx timeout [ 280.336085] syz-executor.7 (6266) used greatest stack depth: 24064 bytes left [ 282.255447] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.256844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.258772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.266792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.269502] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.270817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.381690] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.383360] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.385482] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.392083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.393937] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.395312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.440993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.448752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.449590] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.453495] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.460640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.464615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.467930] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.477310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.484504] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.488441] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.492602] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.493995] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.569881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.583830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.596815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.629402] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.647463] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.649590] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.669899] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.675546] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.691699] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.695501] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.696651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.700972] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.702923] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.703995] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.705596] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.710714] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.712200] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.713201] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.713596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.717496] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.718727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.723766] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.778141] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.779679] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 284.346330] Bluetooth: hci0: command tx timeout [ 284.472360] Bluetooth: hci1: command tx timeout [ 284.536359] Bluetooth: hci3: command tx timeout [ 284.537364] Bluetooth: hci2: command tx timeout [ 284.730336] Bluetooth: hci7: command tx timeout [ 284.731364] Bluetooth: hci4: command tx timeout [ 284.857516] Bluetooth: hci6: command tx timeout [ 284.858760] Bluetooth: hci5: command tx timeout [ 286.392329] Bluetooth: hci0: command tx timeout [ 286.520457] Bluetooth: hci1: command tx timeout [ 286.585518] Bluetooth: hci3: command tx timeout [ 286.587036] Bluetooth: hci2: command tx timeout [ 286.777353] Bluetooth: hci4: command tx timeout [ 286.779032] Bluetooth: hci7: command tx timeout [ 286.905536] Bluetooth: hci5: command tx timeout [ 286.907044] Bluetooth: hci6: command tx timeout [ 288.441335] Bluetooth: hci0: command tx timeout [ 288.569447] Bluetooth: hci1: command tx timeout [ 288.633363] Bluetooth: hci3: command tx timeout [ 288.634810] Bluetooth: hci2: command tx timeout [ 288.825403] Bluetooth: hci7: command tx timeout [ 288.826936] Bluetooth: hci4: command tx timeout [ 288.952340] Bluetooth: hci6: command tx timeout [ 288.952877] Bluetooth: hci5: command tx timeout [ 290.490432] Bluetooth: hci0: command tx timeout [ 290.617318] Bluetooth: hci1: command tx timeout [ 290.681514] Bluetooth: hci3: command tx timeout [ 290.683366] Bluetooth: hci2: command tx timeout [ 290.872346] Bluetooth: hci7: command tx timeout [ 290.873749] Bluetooth: hci4: command tx timeout [ 291.001391] Bluetooth: hci6: command tx timeout [ 291.002789] Bluetooth: hci5: command tx timeout [ 344.718532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.722177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.724411] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.729637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.731512] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.734165] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.744524] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.749870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.752952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.754953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.757775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.759861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.835869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.840401] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.844487] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.853061] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.858064] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.860694] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.899648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.957404] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.964007] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.966151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.969488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.973450] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.975824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.983660] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.987045] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.989726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.992007] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.995819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.998846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.001691] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.011597] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.018938] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.024520] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.029441] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.032283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.035047] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.038123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.048661] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.051058] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.053760] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.058355] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.075381] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.103516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.107518] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.110565] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.126359] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.808420] Bluetooth: hci1: command tx timeout [ 346.809007] Bluetooth: hci0: command tx timeout [ 346.936372] Bluetooth: hci2: command tx timeout [ 347.064559] Bluetooth: hci3: command tx timeout [ 347.192453] Bluetooth: hci5: command tx timeout [ 347.192645] Bluetooth: hci4: command tx timeout [ 347.194144] Bluetooth: hci6: command tx timeout [ 347.257737] Bluetooth: hci7: command tx timeout [ 348.856464] Bluetooth: hci0: command tx timeout [ 348.858124] Bluetooth: hci1: command tx timeout [ 348.986351] Bluetooth: hci2: command tx timeout [ 349.112350] Bluetooth: hci3: command tx timeout [ 349.242290] Bluetooth: hci6: command tx timeout [ 349.243834] Bluetooth: hci5: command tx timeout [ 349.245198] Bluetooth: hci4: command tx timeout [ 349.307405] Bluetooth: hci7: command tx timeout [ 350.904365] Bluetooth: hci0: command tx timeout [ 350.906439] Bluetooth: hci1: command tx timeout [ 351.033419] Bluetooth: hci2: command tx timeout [ 351.162279] Bluetooth: hci3: command tx timeout [ 351.289630] Bluetooth: hci4: command tx timeout [ 351.291161] Bluetooth: hci6: command tx timeout [ 351.292518] Bluetooth: hci5: command tx timeout [ 351.353297] Bluetooth: hci7: command tx timeout [ 352.954336] Bluetooth: hci0: command tx timeout [ 352.955945] Bluetooth: hci1: command tx timeout [ 353.080677] Bluetooth: hci2: command tx timeout [ 353.208337] Bluetooth: hci3: command tx timeout [ 353.337348] Bluetooth: hci4: command tx timeout [ 353.338657] Bluetooth: hci6: command tx timeout [ 353.338686] Bluetooth: hci5: command tx timeout [ 353.401421] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:17:26 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000d000c RCX=00000000000d000d RDX=ffff88800d595000 RSI=ffffea0000356540 RDI=0000000000089800 RBP=ffff88803293f8b0 RSP=ffff88803293f810 R8 =0000000000000001 R9 =00000000000d000c R10=ffffea0000356501 R11=00000000000007e0 R12=ffffea0000356540 R13=0000000000000000 R14=0000000000000000 R15=ffff888008c4f780 RIP=ffffffff818405df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f67981e2260 CR3=00000000342ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000000 RBX=0000000000000000 RCX=ffffffff8194f495 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88800d3ffc38 RSP=ffff88800d3ffae0 R8 =0000000000000001 R9 =ffff88800bb10a38 R10=0000000000000000 R11=0000000000000001 R12=0000000000018800 R13=0000000000000000 R14=0000000000000000 R15=ffff88800d3ffde0 RIP=ffffffff81517d8a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fba8b301540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055bb00d2b4c8 CR3=0000000034c84000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000