Warning: Permanently added '[localhost]:29721' (ECDSA) to the list of known hosts. 2025/06/25 03:57:20 fuzzer started 2025/06/25 03:57:21 dialing manager at localhost:42423 syzkaller login: [ 100.766453] cgroup: Unknown subsys name 'net' [ 100.917878] cgroup: Unknown subsys name 'cpuset' [ 100.962622] cgroup: Unknown subsys name 'rlimit' 2025/06/25 03:57:35 syscalls: 2214 2025/06/25 03:57:35 code coverage: enabled 2025/06/25 03:57:35 comparison tracing: enabled 2025/06/25 03:57:35 extra coverage: enabled 2025/06/25 03:57:35 setuid sandbox: enabled 2025/06/25 03:57:35 namespace sandbox: enabled 2025/06/25 03:57:35 Android sandbox: enabled 2025/06/25 03:57:35 fault injection: enabled 2025/06/25 03:57:35 leak checking: enabled 2025/06/25 03:57:35 net packet injection: enabled 2025/06/25 03:57:35 net device setup: enabled 2025/06/25 03:57:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/25 03:57:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/25 03:57:35 USB emulation: enabled 2025/06/25 03:57:35 hci packet injection: enabled 2025/06/25 03:57:35 wifi device emulation: enabled 2025/06/25 03:57:35 802.15.4 emulation: enabled 2025/06/25 03:57:35 fetching corpus: 0, signal 0/0 (executing program) 2025/06/25 03:57:36 starting 8 fuzzer processes 03:57:36 executing program 0: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0x9) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4892}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x7]}, 0x8) r1 = syz_io_uring_complete(0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000200)) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, 0x2, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xb}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) fcntl$getflags(r0, 0x40a) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000400)={0x1, 0x4, 0x4}) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000440)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x80, 0x80, 0x8, 0x800, {{0x10, 0x4, 0x2, 0x29, 0x40, 0x64, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @loopback, {[@generic={0x94, 0xb, "8cbfb1da5d508afb0d"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x2, [{@multicast2}, {@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x55b5}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x2f, 0x9, 0x20, 0x3, 0x26, @private0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x20, 0x1, 0x8}}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000600)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000006c0)=0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 03:57:36 executing program 1: ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$KDDELIO(r0, 0x4b35, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x58480) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f00000000c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x513800, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0xa3, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x34}, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000280)={0x1, 0x9, 0x0, 0x489, 0x1, [0xb2c, 0xffffffff, 0x3, 0x5]}) accept4(r1, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x80, 0x80800) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x3, 0x0, 0xf, 0x5393, 0xa8, "ec2bc958845eef2de6e9309d6658033638361ca9c37ad15ea6ba68125d21565ba4dd3040f5d9c1c9d36e576ef32472663a2a5209ad1ff3a04c91bdf6ae146cd36e15d2c8df526eb5e75f5a1d222272e9bc0de732b8457e778e30a38539843d7917f8f1ec74be9828a80816f5361b3a5c7ac24f1b0441bfe7ce2905b13039ac1a93971497d509a75813ce1b3c9c0b2f1c657f7b07dddaf80fae5bd80d663c6e3d7e44441fb02fa01f"}, 0xb1, 0x1) r4 = accept(r1, &(0x7f00000004c0)=@isdn, &(0x7f0000000540)=0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000090) epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={0x304, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcf2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3af}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x183}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4233}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf9}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0x128, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xa4, @empty, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f21}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x10}, 0x20044080) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000b00)) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff689}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x4000045) 03:57:36 executing program 2: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/172, 0xac, 0x0, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000001100)=0x40) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001140), 0x2042, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000001180)={0x0, @adiantum, 0x0, @desc3}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000011c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000001200)) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000001240), 0x42040, 0x0) r3 = io_uring_setup(0x3455, &(0x7f0000001280)={0x0, 0xdbc4, 0x0, 0x2, 0x2c1, 0x0, r0}) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000001300)={r3}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) write$P9_RREAD(r0, &(0x7f0000001340)={0x7d, 0x75, 0x2, {0x72, "7cf7e939f9e9511eb037c88ca92a05e1c83a1bb7490b5745f5fc99e5f353d640dd2ed1dc586c48a293e9b662ccb3662d4fe4d41820cfe0eb62a59935be9eaa44f82ab8b531c6df36bbc330c9afd9de169ef1c47956594ba86a8609fd5375268c521b44b4c6344daa3781dfb9c85cc82e30e1"}}, 0x7d) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001400)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r4) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000001440)) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x48, 0x6, 0x6, 0x3, 0x0, 0x0, {0xc2d07b7de4acc0af, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x4088031) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001980), 0x733080, 0x0) ioctl$CDROMPLAYMSF(r5, 0x5303, &(0x7f00000019c0)={0xab, 0x9, 0x6, 0x8, 0x8, 0x9a}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001b00)={'syztnl0\x00', &(0x7f0000001a80)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x80, 0x3f, 0x10, @mcast1, @private2, 0x10, 0x10, 0x4, 0x800}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000001c40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0xbc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6c90b1f8723fcadc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0xc1) 03:57:36 executing program 3: r0 = socket(0x2b, 0x80000, 0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x2, 0x1, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x40855) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x101340, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe357}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x94, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:fonts_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000014}, 0x20004054) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x94, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffffffe}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x14, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}]}}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x41}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, '/dev/bsg\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '*\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xe, 0x1, '/dev/full\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x7912cf73ddfc4053) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000980)=0x1ff, 0x4) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000009c0)=0x0) sched_setattr(r7, &(0x7f0000000a00)={0x38, 0x2, 0x10000004, 0x7, 0x6, 0x1000, 0x80000000, 0x3, 0x1e4, 0x800}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000b00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) ioctl$sock_inet_SIOCRTMSG(r8, 0x890d, &(0x7f0000000b80)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, {0x2, 0x4e20, @multicast2}, 0x228, 0x0, 0x0, 0x0, 0xe69c, &(0x7f0000000b40)='vlan0\x00', 0x8, 0x6, 0x80}) kexec_load(0xffff, 0x1, &(0x7f0000000c80)=[{&(0x7f0000000c00)="672ab7c2f4b58002462efe641873760f7d4b876fa364f7b8e114a64d2de92da199ad8a1de9620950b0c18b8d08547c4cffd486fb8030e15fd76ef97837c720bc35b8047aec", 0x45, 0x8, 0xfc00000}], 0x160000) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000cc0)={@multicast1, @empty, @multicast2}, 0xc) 03:57:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4c6, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x24000) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000001200)={0x1, 0x9, 0x1000, &(0x7f0000000200)=""/4096}) fstat(r0, &(0x7f0000001240)) r2 = epoll_create1(0x80000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000001540)={0x5, 0xbc0}) r3 = openat$cgroup_ro(r1, &(0x7f0000001580)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x34, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4001) recvmmsg$unix(r3, &(0x7f0000008a40)=[{{&(0x7f0000001700), 0x6e, &(0x7f00000028c0)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/245, 0xf5}, {&(0x7f0000002880)=""/50, 0x32}], 0x3}}, {{&(0x7f0000002900)=@abs, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002980)=""/248, 0xf8}, {&(0x7f0000002a80)=""/111, 0x6f}, {&(0x7f0000002b00)=""/17, 0x11}, {&(0x7f0000002b40)=""/102, 0x66}], 0x4, &(0x7f0000002c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002c80)=""/222, 0xde}, {&(0x7f0000002d80)=""/135, 0x87}, {&(0x7f0000002e40)=""/109, 0x6d}, {&(0x7f0000002ec0)=""/3, 0x3}, {&(0x7f0000002f00)=""/10, 0xa}], 0x5, &(0x7f0000002fc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003000)=""/236, 0xec}, {&(0x7f0000003100)=""/66, 0x42}, {&(0x7f0000003180)=""/239, 0xef}, {&(0x7f0000003280)=""/107, 0x6b}, {&(0x7f0000003300)=""/152, 0x98}], 0x5}}, {{&(0x7f0000003440), 0x6e, &(0x7f0000004a80)=[{&(0x7f00000034c0)=""/27, 0x1b}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/203, 0xcb}, {&(0x7f0000004600)=""/207, 0xcf}, {&(0x7f0000004700)=""/107, 0x6b}, {&(0x7f0000004780)=""/117, 0x75}, {&(0x7f0000004800)=""/249, 0xf9}, {&(0x7f0000004900)=""/222, 0xde}, {&(0x7f0000004a00)=""/29, 0x1d}, {&(0x7f0000004a40)=""/7, 0x7}], 0xa}}, {{0x0, 0x0, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000004c00), 0x0, &(0x7f0000004c40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000006300)=[{&(0x7f0000004d80)=""/15, 0xf}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/252, 0xfc}, {&(0x7f0000005ec0)=""/109, 0x6d}, {&(0x7f0000005f40)=""/251, 0xfb}, {&(0x7f0000006040)=""/190, 0xbe}, {&(0x7f0000006100)=""/43, 0x2b}, {&(0x7f0000006140)=""/254, 0xfe}, {&(0x7f0000006240)=""/117, 0x75}, {&(0x7f00000062c0)=""/16, 0x10}], 0xa, &(0x7f00000063c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000006500), 0x6e, &(0x7f00000086c0)=[{&(0x7f0000006580)=""/57, 0x39}, {&(0x7f00000065c0)=""/190, 0xbe}, {&(0x7f0000006680)=""/4096, 0x1000}, {&(0x7f0000007680)=""/4096, 0x1000}, {&(0x7f0000008680)=""/21, 0x15}], 0x5, &(0x7f0000008740)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000008780)=@abs, 0x6e, &(0x7f00000089c0)=[{&(0x7f0000008800)=""/42, 0x2a}, {&(0x7f0000008840)=""/150, 0x96}, {&(0x7f0000008900)=""/183, 0xb7}], 0x3, &(0x7f0000008a00)}}], 0xa, 0x0, &(0x7f0000008cc0)={0x77359400}) syz_genetlink_get_family_id$gtp(&(0x7f00000016c0), r5) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000008d00)) ioctl$VT_RELDISP(r3, 0x5605) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000008d40)) r7 = syz_open_dev$vcsn(&(0x7f0000008d80), 0x10000, 0x8002) write$nbd(r7, &(0x7f0000008dc0)={0x67446698, 0x1, 0x0, 0x2, 0x4, "6676ff735a408a4714ee9c453128326fbfefaa1058698ef5d95cbfb11552fcdb4ef857b24d591a27e29fde6b71b3124e13b12b6b71e39f4af3ac53bc42dff188a03659fc57975ddf6ae87c21780a44864a98592c7498a390b4b30d3761aa0c45354e1c0b92e7435bf7972fb42012f920b71ef8b400c51cf6e03489ea912b405bbba4196c23448ea8b0bd585c4dcc8bf9e4577a3fd4290b7737bb021d099ff79c"}, 0xb0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000008e80)=0x4) ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x0) [ 116.392860] audit: type=1400 audit(1750823856.971:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:57:37 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)={0xc9f1, {{0xa, 0x4e21, 0x1, @mcast1, 0x400}}, 0x2, 0x3, [{{0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}}, {{0xa, 0x4e24, 0x4, @loopback, 0xc8d7}}, {{0xa, 0x4e22, 0x7f, @empty}}]}, 0x210) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fchmod(r2, 0xe0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x60000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = getpid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={r4}, 0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000300)) r5 = fsmount(r0, 0x1, 0x2) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)=0x0) kcmp$KCMP_EPOLL_TFD(r6, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000480)={r1, r5, 0x8}) pipe2$9p(&(0x7f00000004c0), 0x4000) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000500)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000a00), 0x100000001, 0x20a000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x16802060}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x124, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x80, 0x4, 0xffff, 0x2, 0x109c, 0x3]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3}, {0x5, 0x8}, {0x3, 0x2}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x3f, 0x5, 0x7, 0xbbe7, 0x1, 0xfff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x5, 0xe23f, 0x4, 0x1f, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x5, 0xe0, 0x7, 0x0, 0x8001, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x400, 0x6, 0x401, 0x9, 0x6, 0x7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x9, 0x36, 0x6c, 0x3, 0x16, 0x24, 0x30, 0x5, 0x61, 0x4, 0x48, 0x48, 0x6c, 0x30, 0x3, 0x5, 0x18, 0x7f, 0x30, 0x9, 0x30]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x1b, 0x12, 0x5, 0x24, 0x16, 0xc, 0x16, 0x12, 0x1, 0xc, 0x18, 0x24, 0x2, 0x60]}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x6, 0x1, 0x12, 0x1, 0xc, 0xc]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x8}, {0x7, 0x3}, {0x4, 0x6}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x4, 0x1b, 0x1b, 0x30, 0x2, 0xb, 0x3, 0x6c, 0x4, 0xb, 0x12, 0x1b, 0x16, 0x0, 0x60, 0x36, 0x3, 0x36, 0x9, 0x12, 0x30, 0x1, 0xb, 0x6c, 0x1, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0xb, 0x24, 0x0, 0x18, 0x36, 0x48, 0xc, 0x24, 0x5, 0x1b, 0xc, 0x6, 0x6, 0x36, 0x5, 0x60, 0x6]}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x20004012) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), r1) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xdc, r8, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe78}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8800}, 0x4) 03:57:37 executing program 6: r0 = getuid() fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r0, r1) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x100, 0x545440) fadvise64(r2, 0x880b, 0x5, 0x6) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x10, 0x2, 0x8}}, 0x14) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x6000, 0x400, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='\x00', r3, 0xffffffffffffffff) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000280)={0xb, 0x77, 0x2, 0x3}, 0xb) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000002c0)={0xc3, "12412af9fc78ba335558eb5a94d377a4ae449cb3785901f3014a0077eb58602b6d8be77a72baae9c5dea587bf771378198aa21a1ac855d0c2dd939079317758718967d30230bde5c376fc819a76e34473c0967bfa8c4aca8cc3611260fa6ba221eb9ba84037b4cf0a91b586ed3e1c4936575e95b58fa8e46d81c7322579daee1c9ae68903c0c764c01992d42c9ee875aabe4f7bc299c4f8a1c61a19998e9ccf47849b7e0cac571222d1e2a0ac1ed2d852e18dc2c6b7b4381dea9389e9f536e9635f416"}) r4 = memfd_secret(0x80000) renameat(r4, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000480)={0x0, 0x5}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, r6, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x81) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000001780)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001740)={&(0x7f0000001600)={0x114, 0x0, 0x102, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0xf4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb6, 0xb, "ef07afefeef8eea894a871560468af0a130e42ba7d3d6adbef670a999333e4207889f9b02b9124a1c3e089dfb566f6548ea81afa99c8255aee334e5e40b7c0fcf87658d96b7dda31fb641d6bb3d6600bba5407e61f0bb853577538ea2044e17eb57f89047b9743c05c4b10352f33b5fac8fbceeed601ecd6d528191f7b750877d8ebe14323f3fed5ef9a000d4a9ebd93a2225c4af67e8ae2bec7b6b9bec35d20b2f3ac7438fedd083f90d2976a49757e16b3"}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1f}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x20}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8d}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x2400c040}, 0x10) recvmsg$unix(r4, &(0x7f0000002880)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r8, @out_args}, './file0/file0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x61}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x748c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x6}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe0}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) 03:57:37 executing program 7: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x8) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)={0x17}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x357, 0x1f}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000000}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstatfs(r1, &(0x7f0000000640)=""/98) r2 = signalfd4(r1, &(0x7f00000006c0), 0x8, 0x1800) preadv(r2, &(0x7f0000001700)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0xffffffc0, 0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='net/dev_snmp6\x00') sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x28, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}}, 0x20008814) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000001940)=[@mss={0x2, 0x2}, @sack_perm, @sack_perm, @sack_perm, @timestamp, @window={0x3, 0x8, 0x49}, @sack_perm, @timestamp], 0x8) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000001980)={0xffffffff, 0xd}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, 0x0, 0xd30, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200c0090}, 0x8090) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x30, 0x8, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0xc0) ioctl$KDMKTONE(r2, 0x4b30, 0x3) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000001e40)={&(0x7f0000001d80), 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001e80)={0x417, 0x2, 0x4, 0x0, 0x0, [{{}, 0x9}, {{r4}, 0x1000}, {{r2}, 0x7}, {{r2}, 0x6102}]}) ftruncate(r2, 0x1) [ 117.867966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.869456] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.871369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.873400] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.876767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.878968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.880173] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.883056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.896546] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.912461] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.946114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.948089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.949289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.953191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.954484] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.957703] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.958482] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.959066] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.964698] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.968106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.969706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.974271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.976944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.978245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.982908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.038161] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.045815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.067800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.087814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.105545] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.106414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 118.125635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.142422] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.145747] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.147070] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.148917] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.170768] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.177030] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.185858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.189200] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.950229] Bluetooth: hci0: command tx timeout [ 120.011483] Bluetooth: hci1: command tx timeout [ 120.012069] Bluetooth: hci4: command tx timeout [ 120.075459] Bluetooth: hci2: command tx timeout [ 120.076053] Bluetooth: hci3: command tx timeout [ 120.204023] Bluetooth: hci5: command tx timeout [ 120.267593] Bluetooth: hci6: command tx timeout [ 120.331410] Bluetooth: hci7: command tx timeout [ 121.995400] Bluetooth: hci0: command tx timeout [ 122.061354] Bluetooth: hci4: command tx timeout [ 122.061863] Bluetooth: hci1: command tx timeout [ 122.123485] Bluetooth: hci3: command tx timeout [ 122.123984] Bluetooth: hci2: command tx timeout [ 122.251442] Bluetooth: hci5: command tx timeout [ 122.315687] Bluetooth: hci6: command tx timeout [ 122.380045] Bluetooth: hci7: command tx timeout [ 124.045360] Bluetooth: hci0: command tx timeout [ 124.107439] Bluetooth: hci1: command tx timeout [ 124.107888] Bluetooth: hci4: command tx timeout [ 124.171970] Bluetooth: hci2: command tx timeout [ 124.172643] Bluetooth: hci3: command tx timeout [ 124.299455] Bluetooth: hci5: command tx timeout [ 124.363428] Bluetooth: hci6: command tx timeout [ 124.427583] Bluetooth: hci7: command tx timeout [ 126.092234] Bluetooth: hci0: command tx timeout [ 126.155772] Bluetooth: hci4: command tx timeout [ 126.156212] Bluetooth: hci1: command tx timeout [ 126.219474] Bluetooth: hci2: command tx timeout [ 126.219920] Bluetooth: hci3: command tx timeout [ 126.347427] Bluetooth: hci5: command tx timeout [ 126.412503] Bluetooth: hci6: command tx timeout [ 126.475391] Bluetooth: hci7: command tx timeout [ 180.119025] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.123178] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.125927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.134049] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.139166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.228799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.232968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.237456] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.242938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.246811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.248850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.252196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.255731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.287203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.291203] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.311256] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.316203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.327740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.329219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.341259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.342455] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.343994] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.345782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.346515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.348982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.388631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.388688] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.422529] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.426233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.457550] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.467641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.479631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 180.500116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.508154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.540805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.551856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.557890] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.564684] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.575276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 180.592704] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.219577] Bluetooth: hci0: command tx timeout [ 182.283396] Bluetooth: hci1: command tx timeout [ 182.348397] Bluetooth: hci2: command tx timeout [ 182.411593] Bluetooth: hci3: command tx timeout [ 182.540718] Bluetooth: hci4: command tx timeout [ 182.540782] Bluetooth: hci5: command tx timeout [ 182.667799] Bluetooth: hci6: command tx timeout [ 182.732407] Bluetooth: hci7: command tx timeout [ 184.268419] Bluetooth: hci0: command tx timeout [ 184.331447] Bluetooth: hci1: command tx timeout [ 184.396085] Bluetooth: hci2: command tx timeout [ 184.459426] Bluetooth: hci3: command tx timeout [ 184.588546] Bluetooth: hci4: command tx timeout [ 184.588979] Bluetooth: hci5: command tx timeout [ 184.716486] Bluetooth: hci6: command tx timeout [ 184.779403] Bluetooth: hci7: command tx timeout [ 186.315376] Bluetooth: hci0: command tx timeout [ 186.380370] Bluetooth: hci1: command tx timeout [ 186.443393] Bluetooth: hci2: command tx timeout [ 186.507686] Bluetooth: hci3: command tx timeout [ 186.635412] Bluetooth: hci5: command tx timeout [ 186.636662] Bluetooth: hci4: command tx timeout [ 186.764397] Bluetooth: hci6: command tx timeout [ 186.827578] Bluetooth: hci7: command tx timeout [ 188.363422] Bluetooth: hci0: command tx timeout [ 188.427381] Bluetooth: hci1: command tx timeout [ 188.492292] Bluetooth: hci2: command tx timeout [ 188.555394] Bluetooth: hci3: command tx timeout [ 188.683402] Bluetooth: hci4: command tx timeout [ 188.683623] Bluetooth: hci5: command tx timeout [ 188.812455] Bluetooth: hci6: command tx timeout [ 188.875407] Bluetooth: hci7: command tx timeout [ 240.300593] syz-executor.2 (2938) used greatest stack depth: 23840 bytes left [ 242.592042] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.597844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.601513] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.602581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.606044] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.617014] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.623925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.634787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.643115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.646970] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.745992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.750117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.754798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.767905] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.772792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.879072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.881016] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.883192] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.887940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.891962] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.022788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.049254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.062544] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.064673] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.079515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.088603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.101839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.126079] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.132488] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.137174] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.149618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.152979] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.161209] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.165185] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.188054] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.188474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.210223] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.256992] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 243.261703] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.309889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.685214] Bluetooth: hci1: command tx timeout [ 244.685387] Bluetooth: hci0: command tx timeout [ 244.811652] Bluetooth: hci2: command tx timeout [ 245.069360] Bluetooth: hci3: command tx timeout [ 245.195444] Bluetooth: hci4: command tx timeout [ 245.387396] Bluetooth: hci5: command tx timeout [ 245.451668] Bluetooth: hci7: command tx timeout [ 245.515430] Bluetooth: hci6: command tx timeout [ 246.732382] Bluetooth: hci0: command tx timeout [ 246.732872] Bluetooth: hci1: command tx timeout [ 246.859393] Bluetooth: hci2: command tx timeout [ 247.115410] Bluetooth: hci3: command tx timeout [ 247.243402] Bluetooth: hci4: command tx timeout [ 247.435416] Bluetooth: hci5: command tx timeout [ 247.499430] Bluetooth: hci7: command tx timeout [ 247.563704] Bluetooth: hci6: command tx timeout [ 248.779430] Bluetooth: hci0: command tx timeout [ 248.782348] Bluetooth: hci1: command tx timeout [ 248.907411] Bluetooth: hci2: command tx timeout [ 249.163627] Bluetooth: hci3: command tx timeout [ 249.292487] Bluetooth: hci4: command tx timeout [ 249.483407] Bluetooth: hci5: command tx timeout [ 249.547420] Bluetooth: hci7: command tx timeout [ 249.612737] Bluetooth: hci6: command tx timeout [ 250.828441] Bluetooth: hci1: command tx timeout [ 250.828811] Bluetooth: hci0: command tx timeout [ 250.955442] Bluetooth: hci2: command tx timeout [ 251.211779] Bluetooth: hci3: command tx timeout [ 251.341347] Bluetooth: hci4: command tx timeout [ 251.531394] Bluetooth: hci5: command tx timeout [ 251.595747] Bluetooth: hci7: command tx timeout [ 251.659418] Bluetooth: hci6: command tx timeout [ 304.933237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.937935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.944281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.951788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.956415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.021633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.032906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.047941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.074765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.080027] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.082223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.086468] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.090027] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.098651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.111080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.133265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.139921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.150881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.212963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.219696] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.223617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.225984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.242250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.244352] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.260477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.268626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.278141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.296651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.317420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.325887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.361779] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.384693] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 305.389898] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 305.395926] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 305.399961] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.403588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.419870] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.427647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 305.430983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.441802] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.021360] Bluetooth: hci0: command tx timeout [ 307.148596] Bluetooth: hci1: command tx timeout [ 307.211419] Bluetooth: hci2: command tx timeout [ 307.339410] Bluetooth: hci3: command tx timeout [ 307.339468] Bluetooth: hci4: command tx timeout [ 307.403615] Bluetooth: hci5: command tx timeout [ 307.468420] Bluetooth: hci6: command tx timeout [ 307.531616] Bluetooth: hci7: command tx timeout [ 309.069353] Bluetooth: hci0: command tx timeout [ 309.198356] Bluetooth: hci1: command tx timeout [ 309.260393] Bluetooth: hci2: command tx timeout [ 309.387728] Bluetooth: hci4: command tx timeout [ 309.388427] Bluetooth: hci3: command tx timeout [ 309.451374] Bluetooth: hci5: command tx timeout [ 309.515611] Bluetooth: hci6: command tx timeout [ 309.579548] Bluetooth: hci7: command tx timeout [ 311.116967] Bluetooth: hci0: command tx timeout [ 311.243382] Bluetooth: hci1: command tx timeout [ 311.307660] Bluetooth: hci2: command tx timeout [ 311.435956] Bluetooth: hci3: command tx timeout [ 311.436493] Bluetooth: hci4: command tx timeout [ 311.499656] Bluetooth: hci5: command tx timeout [ 311.563386] Bluetooth: hci6: command tx timeout [ 311.627541] Bluetooth: hci7: command tx timeout [ 313.163392] Bluetooth: hci0: command tx timeout [ 313.291691] Bluetooth: hci1: command tx timeout [ 313.356346] Bluetooth: hci2: command tx timeout [ 313.483395] Bluetooth: hci4: command tx timeout [ 313.486451] Bluetooth: hci3: command tx timeout [ 313.548002] Bluetooth: hci5: command tx timeout [ 313.611389] Bluetooth: hci6: command tx timeout [ 313.675388] Bluetooth: hci7: command tx timeout [ 367.334222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.338040] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.340683] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.352100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.362409] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.516974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.524730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.527001] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.537805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.543933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.603705] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.615764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.619791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.630746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.635755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.729563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.733948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.736435] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.745835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.758054] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.812612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.831628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.862360] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.873047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.901959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.908100] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.911671] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.914024] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 367.916573] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 367.927403] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.931449] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.933995] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.935985] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.960988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 367.971786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.019050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.061965] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.098656] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.123550] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.129830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.419623] Bluetooth: hci0: command tx timeout [ 369.611410] Bluetooth: hci1: command tx timeout [ 369.739395] Bluetooth: hci2: command tx timeout [ 369.803394] Bluetooth: hci3: command tx timeout [ 369.995390] Bluetooth: hci4: command tx timeout [ 370.251965] Bluetooth: hci7: command tx timeout [ 370.315415] Bluetooth: hci6: command tx timeout [ 370.315433] Bluetooth: hci5: command tx timeout [ 371.467379] Bluetooth: hci0: command tx timeout [ 371.659561] Bluetooth: hci1: command tx timeout [ 371.788346] Bluetooth: hci2: command tx timeout [ 371.851359] Bluetooth: hci3: command tx timeout [ 372.043498] Bluetooth: hci4: command tx timeout [ 372.299377] Bluetooth: hci7: command tx timeout [ 372.363489] Bluetooth: hci6: command tx timeout [ 372.364601] Bluetooth: hci5: command tx timeout [ 373.516371] Bluetooth: hci0: command tx timeout [ 373.707618] Bluetooth: hci1: command tx timeout [ 373.835364] Bluetooth: hci2: command tx timeout [ 373.899525] Bluetooth: hci3: command tx timeout [ 374.092370] Bluetooth: hci4: command tx timeout [ 374.347497] Bluetooth: hci7: command tx timeout [ 374.411402] Bluetooth: hci5: command tx timeout [ 374.411427] Bluetooth: hci6: command tx timeout [ 375.564370] Bluetooth: hci0: command tx timeout [ 375.755508] Bluetooth: hci1: command tx timeout [ 375.883379] Bluetooth: hci2: command tx timeout [ 375.949341] Bluetooth: hci3: command tx timeout [ 376.140535] Bluetooth: hci4: command tx timeout [ 376.396379] Bluetooth: hci7: command tx timeout [ 376.459598] Bluetooth: hci5: command tx timeout [ 376.459767] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:02:39 Registers: info registers vcpu 0 RAX=1ffffffff0cf4bdc RBX=0000000000000001 RCX=ffffffff867a5ee0 RDX=dffffc0000000000 RSI=0000000000000000 RDI=ffff88802712f738 RBP=ffff88802712f740 RSP=ffff88802712f628 R8 =ffffffff867a5ee4 R9 =0000000000000000 R10=000000000003b53d R11=00000000000043f8 R12=ffff88802712f748 R13=ffff88802712f730 R14=ffff88802712f780 R15=ffff88802712f6e8 RIP=ffffffff813550a0 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3296e6a269 CR3=00000000290c0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff000000000000000000000000000000 XMM01=0000000000000000657268747062696c XMM02=00000000000000362e6f732e6362696c XMM03=00000000000000000000000000000000 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88801a955280 RCX=ffff888016aa7314 RDX=0000000000000000 RSI=ffffffff8120489a RDI=ffff88801a95567c RBP=ffff88801a955280 RSP=ffff888016aa7338 R8 =0000000000000001 R9 =ffff888016aa7400 R10=000000000003b53d R11=0000000000003db4 R12=0000000000000000 R13=ffff888016aa7408 R14=ffff88801a955280 R15=ffff888016aa73c0 RIP=ffffffff815abe87 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3778d6ce08 CR3=0000000035d68000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000