syzkaller login: [ 54.244645] hrtimer: interrupt took 6500582 ns Warning: Permanently added '[localhost]:44263' (ECDSA) to the list of known hosts. 2024/11/28 14:10:35 fuzzer started 2024/11/28 14:10:36 dialing manager at localhost:37125 [ 68.633954] cgroup: Unknown subsys name 'net' [ 68.707328] cgroup: Unknown subsys name 'cpuset' [ 68.738544] cgroup: Unknown subsys name 'rlimit' 2024/11/28 14:10:52 syscalls: 204 2024/11/28 14:10:52 code coverage: enabled 2024/11/28 14:10:52 comparison tracing: enabled 2024/11/28 14:10:52 extra coverage: enabled 2024/11/28 14:10:52 setuid sandbox: enabled 2024/11/28 14:10:52 namespace sandbox: enabled 2024/11/28 14:10:52 Android sandbox: enabled 2024/11/28 14:10:52 fault injection: enabled 2024/11/28 14:10:52 leak checking: enabled 2024/11/28 14:10:52 net packet injection: enabled 2024/11/28 14:10:52 net device setup: enabled 2024/11/28 14:10:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/28 14:10:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/28 14:10:52 USB emulation: enabled 2024/11/28 14:10:52 hci packet injection: enabled 2024/11/28 14:10:52 wifi device emulation: enabled 2024/11/28 14:10:52 802.15.4 emulation: enabled 2024/11/28 14:10:52 fetching corpus: 0, signal 0/0 (executing program) 2024/11/28 14:10:54 starting 8 fuzzer processes 14:10:54 executing program 0: process_madvise(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)="d3b8df2786278e9b16e2973080aa4d28084d94c690cceea53227691246767efe061bedf7c8d03df57b09083c22e69950b797a5b58144f41151d879ad4b1fd9e3afe23f009fc3cdc515277c50c5327297ae131c9d7cebb734e5e70e1bbc64443d1a7f42d525ba10b42c4cbca4b713f1a9951604e596437d16d912131276c7a240812394b45ae8a95d96eb9b3313104409bef0273c3ae4877b", 0x98}, {&(0x7f00000000c0)="934542ddb8add78844d6b8ddf53f82e4775e89a910dc151873be68536d167e70e349d0f0a50f9b665ac9fe9c73aa851f1a8802ef8d500f03e6f1e6716b81b970eaa1404faf634ea922c7d3b50b893001f74f3bc1f0b131276d06af7c7bfad0b4664c4d0414918d7d6383669bdb368687ab59b40801fd47d6f5f09021ef7bbbdf852762c171bcfb40fba37191dae7f5bbcf6dd6cce4fb33f7e741261bb0266eb25a036757e14440fa2e926eec4716a114eeadf77eb454d45d07bca72fce36ba1b733430a65a0b79afba04f67c2646deaecca15513a00fc5f9b710a3328ecd51ff546774ef3e7647c495f35196d5b18af3ab8f3a8e5477c3b0d91d23", 0xfb}, {&(0x7f00000001c0)="d144a52bf9a4369c571ebafe21befddb3566062efc5f8621c53d4777050e703adfae983ec3112b66fac7a2c5699854b62971e38efa61d52d1fe0e1186ae3b3746131564961ea2bc4f213b99aa68afd78634c04ecd2642c7e9d209cdbc68e1a687eb6f288d5c421e66ee5f917017233ddc3de3122ab61a1a7be0b05aaca3a6411d11544fdb94b5b5b631021dc892047daa90648be1cae526aec3601562d9a25fa7e9d", 0xa2}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="84ddc127429418b99d7249b0f4506caeb0a1651bde549175ad1ccdee6a4164e1efff3dcf8ed115053da727bb0d7f7eab117a8bd4886e002ca75729bb0e32f6a4667f8b61ddfcd4aea5a13fb69cbd2041af09551e7052585372979b38779ecc02de6b900e9044f4525132f902ecf20e471ff683b553bb13b58f9ba5790a829a8bd3202fe9d930a81599a4070bd91a48c0690588537583c796842926867c151b6bfd5bcaafea167648deec48835af3026c51c3c4553febd7401de838cb24608ebea02a950fc85659056176c12a47f30f81e74deb00f03e2c854040ba7b678a837269e923bac98b5f798e2f86b0fdb743da15", 0xf1}], 0x5, 0xd, 0x0) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000001400)=""/81) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000001480)=""/105) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001500)) r0 = syz_open_dev$vcsu(&(0x7f00000015c0), 0xffffffffffffffe2, 0x2) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = syz_open_dev$vcsu(&(0x7f0000001600), 0xffffffff, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000001640)) write$tcp_congestion(r0, &(0x7f0000001680)='highspeed\x00', 0xa) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000016c0)) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000001700)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001740), 0x1, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r2) bind$802154_dgram(r1, &(0x7f00000017c0)={0x24, @none={0x0, 0x1}}, 0x14) r3 = syz_open_dev$rtc(&(0x7f0000001800), 0x5, 0x28800) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000001840)={0x401, 0x8, 0x3f, 0x6, 0x2, 0xc2dc, 0x6}) r4 = perf_event_open(&(0x7f0000001880)={0x1, 0x80, 0x6, 0x1, 0x0, 0x80, 0x0, 0x0, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x6}, 0x101, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x40, 0x0, 0x5603, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000001900)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 14:10:54 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x69}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r1, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEYS={0x5c, 0x51, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xb, 0x4, "201dcc8ab789f5"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "595e59b236"}, @NL80211_KEY_SEQ={0x13, 0x4, "5d6f4960a90f6f3e7c80b4f939153e"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x40080) r2 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x85, 0x408800) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f0000000400), 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) socketpair(0x5, 0x5, 0xffff, &(0x7f0000000480)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r3) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "688d6266510c5b"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40420c0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000780), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xc0300}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xff2aa297f3ce7d01}, 0x801) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r6, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) getresuid(&(0x7f0000000ac0), &(0x7f0000000b00)=0x0, &(0x7f0000000b40)) r8 = getgid() fchownat(r2, &(0x7f0000000a80)='./file0\x00', r7, r8, 0x800) 14:10:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1dc, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x77}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x24, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x5}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TX_RATES={0x128, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x60, 0x18, 0x5, 0x6, 0xc, 0x9, 0x9, 0x48, 0x3a, 0xb, 0x8, 0x24, 0x16, 0x16, 0x16, 0x4d, 0x9, 0x36, 0x3, 0x6c, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x1000, 0xe00, 0x1, 0x81, 0x3, 0x1]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x10, 0x1b, 0x16, 0x2, 0x48, 0x5, 0x1b, 0x2, 0x30, 0xc, 0x2, 0x36, 0x0]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x1}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x7}, {0x7, 0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x5, 0x9}, {0x1, 0x7}, {0x5, 0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x0, 0x6}, {0x7, 0x1}, {0x6}, {0x2, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0xa}, {0x5, 0x3}, {0x1, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0x2}, {0x5, 0x4}, {0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x7, 0x3}, {0x7, 0x4}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x6}, {0x1, 0x8}, {0x5, 0x4}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x2}, {0x5, 0x4}, {0x6, 0x9}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x7}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x2}, {0x1}, {0x1, 0x4}, {0x3, 0x6}, {0x0, 0x1}, {0x3, 0x4}, {0x7, 0x7}, {0x7, 0xa}, {0x6, 0x1}, {0x2, 0x9}, {0x4, 0x8}, {0x6, 0x5}, {0x4, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x8}, {0x0, 0x3}, {0x2}, {0x3, 0x2}, {0x7, 0x8}, {0x7, 0x8}, {0x6, 0x2}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0x7}, {0x3, 0x5}, {0x3, 0x5}, {0x7, 0x9}, {0x0, 0x6}, {0x5, 0x2}, {0x6, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x1, 0x3}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x2}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0xa}, {0x4, 0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x2, 0x1}, {0x6, 0x4}, {0x0, 0x8}, {0x4, 0x7}, {0x0, 0x4}, {0x2, 0x8}, {0x6, 0x1}, {0x0, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x4, 0x1}, {0x5, 0x9}, {0x4, 0x4}, {0x5, 0x2}, {0x2}, {0x6, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x2, 0x0, 0x0, 0x9, 0x7f, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x48, 0x1, 0x1e, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}], @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x10}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x3}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x4040800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, r1, 0x406, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "add228d642d9e1338af828a47653086e77339edcd4e1f9a4"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fd133df75fa543a063e6c1aebf6c06b9063bb0e07cf9676b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x240008c5}, 0x24000005) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000480)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4008800) statx(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x100, 0x20, &(0x7f0000000600)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r3, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200440c0}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x800, 0x64}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x6c}}, 0x24000000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x11c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xe4, 0x8, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x80000000, @mcast2, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f8a2769b8ef7a0201703c1e59c0dc43a08afc1548fe0bfb5016bfead590ec0e8"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x10001, @mcast1, 0x200}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000d40)=0x1, 0x4) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000d80)={0x18}) r6 = io_uring_setup(0x15eb, &(0x7f00000010c0)={0x0, 0x5c1f, 0x10, 0x1, 0x10a}) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r2) 14:10:54 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) io_uring_enter(0xffffffffffffffff, 0x5c71, 0x261d, 0x3, &(0x7f0000000040)={[0x6f]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40001) r2 = io_uring_setup(0x594f, &(0x7f00000001c0)={0x0, 0x5643, 0x1, 0x2, 0x146}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x100, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x52}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x1, 0x4, 0x0, {0x5, 0xfb, 0x0, 0x249, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x0, 0x9, 0x92}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x5, 0x0, {0x8, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0xd8c, 0x7f}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x800, {0x3, 0x8, 0x101, 0x8}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socketpair(0x11, 0xa, 0x1, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r10, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20, {0x2, 0x5, 0x0, 0x1}}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x8001, 0x1ff, 0x1, 0x973c, 0x6b7f, 0xdc, 0x1, 0x1000, 0x82c, 0x1c8, 0x1, 0x20, 0x3, 0x2]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000780)) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xb8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40408c0}, 0xc000) 14:10:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048841}, 0x4001) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1f4, 0x0, 0x410, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x70}}}}, [@NL80211_ATTR_BEACON_TAIL={0x1b2, 0xf, [@mic={0x8c, 0x18, {0x2a3, "c043d271a0aa", @long="24de88b73da4f685ff0a133ffa8a068e"}}, @tim={0x5, 0x8e, {0x1f, 0xa3, 0x1, "36d7356c6f1b382437bb824f3031de9c1ab38b3d60b9386697666f01f9836b6bd0444d375d229d591d90817a004a6c26d0480964405e9fb447a988bde57ff4c489c46a51b2734749aa253e5fd9e2de7daf77b5dc3c4dc731b1263a12c98678e7bc2b24d2e94bfa11543799c49e1ce2663116ce09c87cedcd6372955e6090ca096894bfcd95da213d279357"}}, @perr={0x84, 0x102, {0xf3, 0x10, [@ext={{}, @device_a, 0x9, @device_b, 0x42}, @not_ext={{}, @device_b, 0x9d, "", 0x29}, @ext={{}, @device_a, 0x3, @broadcast, 0xd}, @ext={{}, @broadcast, 0x7, @device_b, 0x42}, @ext={{}, @device_b, 0x6, @broadcast, 0x19}, @ext={{}, @device_a, 0x2, @device_b, 0x3c}, @not_ext={{}, @broadcast, 0x2, "", 0x3f}, @ext={{}, @broadcast, 0x2, @device_b, 0x35}, @ext={{}, @broadcast, 0x4, @device_b, 0x3e}, @not_ext={{}, @broadcast, 0xfff, "", 0x9}, @not_ext={{}, @device_a, 0x4a0, "", 0x14}, @not_ext={{}, @device_a, 0x2, "", 0x11}, @not_ext={{}, @broadcast, 0x5, "", 0xa}, @not_ext={{}, @broadcast, 0xa167824f, "", 0x3b}, @not_ext={{}, @device_a, 0x8, "", 0x2c}, @ext={{}, @device_b, 0x40, @device_b, 0x3b}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x17, 0xf, [@dsss={0x3, 0x1, 0xb}, @challenge={0x10, 0x1, 0xa9}, @channel_switch={0x25, 0x3, {0x0, 0xd, 0x6}}, @mesh_id={0x72, 0x6}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20008010}, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000400)) process_madvise(r1, &(0x7f0000001640)=[{&(0x7f0000000440)="3cb62c60c23b51374872fcc5c262ee68682911c44a1986b875088bbf8e6e8805be2f44eb126c69cf742d8e1f801a38a379377a483f5c02747aca8a1d71", 0x3d}, {&(0x7f0000000480)="0d2ba5313f791b1c8348a7745e80", 0xe}, {&(0x7f00000004c0)="6b10058f56b154e8ea5ce38626baa329088e1f9441e5dad4027d354dca0ac6b30f8a4993209877f1eab840d53ad31ff0df7bfbfc0a50be787821f8dca989aeb8e29a956766b42c3aaf1712f9fa4145770d9b65df9679747d40533b30cdeed6c164b2992452895760b42d3dfc81617ffabd03cf0a7e0285e5b7fa6ae106dd458945270695fac18ce1a195306fa09ccf6446d026015677bdeab2c293b6e494aa5594d5ad2049b27951311a09ff5877cb2db29f7c387565", 0xb6}, {&(0x7f0000000580)="14a231e28dcfb602818274730b129e92e0ebb0ff4be3d2c20391de78d25538f9ba55", 0x22}, {&(0x7f00000005c0)="e283aa4a10d60dd53287bf7b401942f0937cafe587a747070a7ff03bab56aa95093a3cf64456b7644e3f0fec7236a977e3deed9800608563398811b3eafe2d4f78207a18497f69428181e078d7291ed2a195dc930f6ee3bcd949d1b76d82e43eeb852794ee8944d72b31e462a1c10e6abaf992eb78fa2822a2ceee493f", 0x7d}, {&(0x7f0000000640)="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", 0x1000}], 0x6, 0x65, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}]]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x40044) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004004) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000001940)=0x1, 0x4) r3 = pidfd_getfd(r1, r1, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000001980), &(0x7f00000019c0)=0x4) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x2d}}}}, [@NL80211_ATTR_SSID={0xf, 0x34, @random="e6786d3ad93b16fb128096"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x81, 0x60}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c814}, 0x800) connect$802154_dgram(r1, &(0x7f0000001c00)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c80), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0xc4, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x20004084) add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) 14:10:54 executing program 5: sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x3d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4044800) r3 = syz_open_dev$rtc(&(0x7f00000004c0), 0x6, 0x40044) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000500)) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r0) ioctl$RTC_UIE_OFF(r3, 0x7004) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0b, 0xfac0d, 0xfac0c]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac09]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x777}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) socketpair(0x0, 0xa, 0x6, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2150, 0x2d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x884) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4004000) [ 86.570743] audit: type=1400 audit(1732803054.847:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:10:54 executing program 6: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) r3 = syz_io_uring_setup(0x51ba, &(0x7f0000000000)={0x0, 0xc373, 0x0, 0x1, 0x28f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r1, r3}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x110, r3, 0x0) r6 = syz_io_uring_setup(0x7574, &(0x7f0000000140)={0x0, 0xc205, 0x8, 0x1, 0xb7, 0x0, r3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r8}}, 0x6) socketpair(0x5, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r9, &(0x7f00000002c0), 0x8) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000300)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x26) mknodat$null(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x400, 0x103) io_uring_setup(0x69fa, &(0x7f0000000480)={0x0, 0xae88, 0x1, 0x1, 0x2d2}) r10 = syz_open_dev$vcsu(&(0x7f0000000500), 0x400, 0x119002) r11 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000540), 0x10000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[r3, r3, r6, r10, r6, r11]}, 0x6) r12 = syz_mount_image$nfs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1ac, 0x1, &(0x7f0000000780)=[{&(0x7f0000000680)="d5a617b0ddff5db9bbfe37c1bd895a189b0517abd2f85b9b25d54f0b114795cd3b8ef76f46b8676a4f847aea76b25bf91bf89147b5ae6f77959503918ce42be4d024df0bca6f727f2ea601f4463b37b054c8919a71567eed6207340c2506876d0ed4ac956cdcad8ff132376287e052e7fcec3a417df25c4baae80a8d6d4c1e431333fb5d37b14096a9d6f196691f8100e526bd6ba091e7a1fdb8c96b628cfee0ba959cdbcff45ee61bdb384abbd793776c602ba16366f5d357e00545ba03603e1ec17449ff12b9212a49adccdc19d1a50883992c2a960314510e9dd01a11979ced38721f09d1", 0xe6, 0x8}], 0x4124040, &(0x7f00000007c0)={[{'{{\\-+%'}, {'/proc/thread-self\x00'}, {'\'()-'}, {'/dev/vcsu#\x00'}, {'\''}, {'\x00'}, {}], [{@pcr={'pcr', 0x3d, 0x9}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vcsu#\x00'}}, {@audit}]}) mkdirat(r12, &(0x7f0000000840)='./file0\x00', 0x182) 14:10:54 executing program 7: modify_ldt$read(0x0, &(0x7f0000000000)=""/185, 0xb9) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:public_content_t:s0\x00', 0x26) modify_ldt$read(0x0, &(0x7f0000000140)=""/4096, 0x1000) modify_ldt$read(0x0, &(0x7f0000001140)=""/223, 0xdf) modify_ldt$read(0x0, &(0x7f0000001240)=""/229, 0xe5) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) modify_ldt$read(0x0, &(0x7f0000001340)=""/4096, 0x1000) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = syz_open_dev$vcsu(&(0x7f0000002340), 0x1, 0x80) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000002580)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002540)={&(0x7f00000023c0)={0x160, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7a}}}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, [{0x3, 0x1}, {0xc, 0x1}, {0x7e}, {0x1b, 0x1}, {0x3}, {0x12, 0x1}, {0x3}, {0x18}, {0x6c, 0x1}, {0x5}, {0x12}, {0x1b}]}, @NL80211_ATTR_KEYS={0x124, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "176aafae"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xd, 0x4, "5916dad1ba4c9e19d4"}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xe, 0x4, "862ec069e1e38d324404"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "008982ad30"}, @NL80211_KEY_SEQ={0xb, 0x4, "41e382994a1243"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4f7b15d37681ec1020a22065d1"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "11c518ba6587dfc0818f75f57a"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7a308b932b"}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000025c0)={0xfffffffe, 0x27, 0xb, 0x10, 0x6, 0x80, 0x0, 0x134, 0xffffffffffffffff}) r3 = pidfd_getfd(r1, r0, 0x0) r4 = epoll_create(0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000002640)={0x10001, 0x0, &(0x7f0000002600)=[r1, r1, r1, r4]}, 0x4) r5 = syz_open_dev$vcsu(&(0x7f0000002680), 0x9, 0x53ec0a89af03ca52) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x890) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20010, r2, 0x10000000) [ 88.019483] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.024378] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.026425] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.028674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.030207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.031594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.032939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.035440] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.037491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.038366] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.039181] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.046721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.047675] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.048523] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.050560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.055520] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.059464] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.061759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.067026] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.071327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.072990] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.074748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.076202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.078017] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.081100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.082019] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.083437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.086893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.099295] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.101960] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.117281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.120306] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.120409] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.123502] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.124507] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.125804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.126304] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.128900] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.133926] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.134009] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.136749] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.138747] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.140954] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.143130] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.152688] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.169858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.178342] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.180439] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.107684] Bluetooth: hci2: command tx timeout [ 90.171306] Bluetooth: hci7: command tx timeout [ 90.171352] Bluetooth: hci5: command tx timeout [ 90.173727] Bluetooth: hci0: command tx timeout [ 90.174427] Bluetooth: hci1: command tx timeout [ 90.174830] Bluetooth: hci3: command tx timeout [ 90.175007] Bluetooth: hci4: command tx timeout [ 90.235488] Bluetooth: hci6: command tx timeout [ 92.155165] Bluetooth: hci2: command tx timeout [ 92.219408] Bluetooth: hci3: command tx timeout [ 92.220872] Bluetooth: hci1: command tx timeout [ 92.222230] Bluetooth: hci7: command tx timeout [ 92.223566] Bluetooth: hci0: command tx timeout [ 92.224882] Bluetooth: hci4: command tx timeout [ 92.242341] Bluetooth: hci5: command tx timeout [ 92.284152] Bluetooth: hci6: command tx timeout [ 94.203864] Bluetooth: hci2: command tx timeout [ 94.269124] Bluetooth: hci4: command tx timeout [ 94.269636] Bluetooth: hci7: command tx timeout [ 94.270126] Bluetooth: hci5: command tx timeout [ 94.270165] Bluetooth: hci0: command tx timeout [ 94.270632] Bluetooth: hci1: command tx timeout [ 94.271005] Bluetooth: hci3: command tx timeout [ 94.331148] Bluetooth: hci6: command tx timeout [ 96.251430] Bluetooth: hci2: command tx timeout [ 96.315360] Bluetooth: hci3: command tx timeout [ 96.317125] Bluetooth: hci5: command tx timeout [ 96.317155] Bluetooth: hci1: command tx timeout [ 96.317566] Bluetooth: hci0: command tx timeout [ 96.317988] Bluetooth: hci7: command tx timeout [ 96.318421] Bluetooth: hci4: command tx timeout [ 96.379143] Bluetooth: hci6: command tx timeout [ 148.148524] syz-executor.4 (282) used greatest stack depth: 23504 bytes left [ 150.795932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.802602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.803973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.805552] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.810435] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.816587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.817622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.820403] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.822351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.823392] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.823854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.828305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.828749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.831932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.831992] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.834542] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.835644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.838546] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.866392] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.872683] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.877879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.892411] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.899681] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.901455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.942969] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.947305] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.947818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.953507] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.966677] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.971454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.988644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.994854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.995829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.999665] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.003524] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.005119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.005839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.007984] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.019680] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.032465] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.041314] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.042203] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.057038] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.058430] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.060655] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.064480] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.065511] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.074898] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.893159] Bluetooth: hci1: command tx timeout [ 152.894649] Bluetooth: hci2: command tx timeout [ 152.895308] Bluetooth: hci0: command tx timeout [ 152.955290] Bluetooth: hci3: command tx timeout [ 153.085244] Bluetooth: hci5: command tx timeout [ 153.086001] Bluetooth: hci4: command tx timeout [ 153.148196] Bluetooth: hci7: command tx timeout [ 153.148845] Bluetooth: hci6: command tx timeout [ 154.939415] Bluetooth: hci2: command tx timeout [ 154.940949] Bluetooth: hci1: command tx timeout [ 154.940999] Bluetooth: hci0: command tx timeout [ 155.003306] Bluetooth: hci3: command tx timeout [ 155.131246] Bluetooth: hci5: command tx timeout [ 155.131274] Bluetooth: hci4: command tx timeout [ 155.197186] Bluetooth: hci7: command tx timeout [ 155.197215] Bluetooth: hci6: command tx timeout [ 156.987253] Bluetooth: hci0: command tx timeout [ 156.987302] Bluetooth: hci2: command tx timeout [ 156.987789] Bluetooth: hci1: command tx timeout [ 157.051156] Bluetooth: hci3: command tx timeout [ 157.179241] Bluetooth: hci5: command tx timeout [ 157.180315] Bluetooth: hci4: command tx timeout [ 157.243137] Bluetooth: hci6: command tx timeout [ 157.244238] Bluetooth: hci7: command tx timeout [ 159.035287] Bluetooth: hci2: command tx timeout [ 159.035811] Bluetooth: hci1: command tx timeout [ 159.036791] Bluetooth: hci0: command tx timeout [ 159.099371] Bluetooth: hci3: command tx timeout [ 159.227185] Bluetooth: hci4: command tx timeout [ 159.227270] Bluetooth: hci5: command tx timeout [ 159.292132] Bluetooth: hci7: command tx timeout [ 159.292614] Bluetooth: hci6: command tx timeout [ 213.067549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.070615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.072690] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.075306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.081844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.084710] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.087505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.089384] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.107705] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.112915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.116514] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.118590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.189527] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.194445] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.205340] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.226796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.233982] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.236559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.279286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.284330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.297299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.318625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.324974] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.327112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.332454] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.340384] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.358306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.366573] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.371230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.386525] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.391654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.394264] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.396377] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.402659] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.404584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.415260] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.418504] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.425425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.439244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.451429] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.484306] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.497566] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.499474] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.516487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.521566] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.531458] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.544786] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.547874] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.163179] Bluetooth: hci1: command tx timeout [ 215.165123] Bluetooth: hci0: command tx timeout [ 215.292187] Bluetooth: hci2: command tx timeout [ 215.419280] Bluetooth: hci5: command tx timeout [ 215.484702] Bluetooth: hci4: command tx timeout [ 215.547410] Bluetooth: hci3: command tx timeout [ 215.611425] Bluetooth: hci7: command tx timeout [ 215.613347] Bluetooth: hci6: command tx timeout [ 217.211148] Bluetooth: hci1: command tx timeout [ 217.211699] Bluetooth: hci0: command tx timeout [ 217.339144] Bluetooth: hci2: command tx timeout [ 217.467275] Bluetooth: hci5: command tx timeout [ 217.531173] Bluetooth: hci4: command tx timeout [ 217.596097] Bluetooth: hci3: command tx timeout [ 217.659220] Bluetooth: hci7: command tx timeout [ 217.659757] Bluetooth: hci6: command tx timeout [ 219.260374] Bluetooth: hci1: command tx timeout [ 219.260939] Bluetooth: hci0: command tx timeout [ 219.387378] Bluetooth: hci2: command tx timeout [ 219.515242] Bluetooth: hci5: command tx timeout [ 219.579281] Bluetooth: hci4: command tx timeout [ 219.643393] Bluetooth: hci3: command tx timeout [ 219.708196] Bluetooth: hci6: command tx timeout [ 219.708713] Bluetooth: hci7: command tx timeout [ 221.307289] Bluetooth: hci0: command tx timeout [ 221.307833] Bluetooth: hci1: command tx timeout [ 221.435678] Bluetooth: hci2: command tx timeout [ 221.563531] Bluetooth: hci5: command tx timeout [ 221.627170] Bluetooth: hci4: command tx timeout [ 221.691694] Bluetooth: hci3: command tx timeout [ 221.755172] Bluetooth: hci7: command tx timeout [ 221.755708] Bluetooth: hci6: command tx timeout [ 275.489293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.501550] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.513440] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.537178] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.553078] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.562043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.598796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.607073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.609399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.613126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.614686] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.615792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.680746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.683403] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.684511] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.685876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.687218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.692899] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.697223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.705053] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.711710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.713290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.714287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.719782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.737000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.763439] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.772322] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.790562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.808380] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.809172] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.813531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.816653] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.817443] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.818996] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.820296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.831578] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.832920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.837118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.843407] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.847720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.866656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.880296] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.912252] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.915974] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.916818] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.941173] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.950170] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.975226] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.627371] Bluetooth: hci1: command tx timeout [ 277.628478] Bluetooth: hci0: command tx timeout [ 277.755203] Bluetooth: hci2: command tx timeout [ 277.819144] Bluetooth: hci3: command tx timeout [ 277.885095] Bluetooth: hci5: command tx timeout [ 278.011956] Bluetooth: hci6: command tx timeout [ 278.012909] Bluetooth: hci4: command tx timeout [ 278.075135] Bluetooth: hci7: command tx timeout [ 279.675173] Bluetooth: hci0: command tx timeout [ 279.675724] Bluetooth: hci1: command tx timeout [ 279.805532] Bluetooth: hci2: command tx timeout [ 279.867199] Bluetooth: hci3: command tx timeout [ 279.934126] Bluetooth: hci5: command tx timeout [ 280.060146] Bluetooth: hci4: command tx timeout [ 280.061609] Bluetooth: hci6: command tx timeout [ 280.124303] Bluetooth: hci7: command tx timeout [ 281.723218] Bluetooth: hci0: command tx timeout [ 281.724718] Bluetooth: hci1: command tx timeout [ 281.865547] Bluetooth: hci2: command tx timeout [ 281.917391] Bluetooth: hci3: command tx timeout [ 281.980127] Bluetooth: hci5: command tx timeout [ 282.107175] Bluetooth: hci4: command tx timeout [ 282.108878] Bluetooth: hci6: command tx timeout [ 282.180561] Bluetooth: hci7: command tx timeout [ 283.773121] Bluetooth: hci0: command tx timeout [ 283.774671] Bluetooth: hci1: command tx timeout [ 283.900227] Bluetooth: hci2: command tx timeout [ 283.964106] Bluetooth: hci3: command tx timeout [ 284.027224] Bluetooth: hci5: command tx timeout [ 284.155193] Bluetooth: hci6: command tx timeout [ 284.155724] Bluetooth: hci4: command tx timeout [ 284.220502] Bluetooth: hci7: command tx timeout [ 337.930533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.933581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.934908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.938838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.941865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.943728] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.945885] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.951776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.961437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.967232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.971778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.975731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.015423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.026237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.033419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.041287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.045346] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.046953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.127312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.128437] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.131272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.132916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.136451] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.146485] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.152155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.155675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.162917] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.164631] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.165754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.175218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.239765] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.249523] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.255466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.277293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.284989] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.306225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.316796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.353339] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.396285] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.400441] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.403683] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.418946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.445631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.450340] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.471333] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.512392] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.525351] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.527271] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.963182] Bluetooth: hci0: command tx timeout [ 340.027137] Bluetooth: hci1: command tx timeout [ 340.091142] Bluetooth: hci2: command tx timeout [ 340.220139] Bluetooth: hci3: command tx timeout [ 340.411223] Bluetooth: hci4: command tx timeout [ 340.477350] Bluetooth: hci6: command tx timeout [ 340.667180] Bluetooth: hci5: command tx timeout [ 340.668833] Bluetooth: hci7: command tx timeout [ 342.012146] Bluetooth: hci0: command tx timeout [ 342.076254] Bluetooth: hci1: command tx timeout [ 342.139232] Bluetooth: hci2: command tx timeout [ 342.268047] Bluetooth: hci3: command tx timeout [ 342.461050] Bluetooth: hci4: command tx timeout [ 342.523075] Bluetooth: hci6: command tx timeout [ 342.715105] Bluetooth: hci5: command tx timeout [ 342.716574] Bluetooth: hci7: command tx timeout [ 344.060068] Bluetooth: hci0: command tx timeout [ 344.124075] Bluetooth: hci1: command tx timeout [ 344.188082] Bluetooth: hci2: command tx timeout [ 344.315180] Bluetooth: hci3: command tx timeout [ 344.508154] Bluetooth: hci4: command tx timeout [ 344.572099] Bluetooth: hci6: command tx timeout [ 344.763490] Bluetooth: hci7: command tx timeout [ 344.764981] Bluetooth: hci5: command tx timeout [ 346.139037] Bluetooth: hci0: command tx timeout [ 346.172168] Bluetooth: hci1: command tx timeout [ 346.236127] Bluetooth: hci2: command tx timeout [ 346.365205] Bluetooth: hci3: command tx timeout [ 346.556415] Bluetooth: hci4: command tx timeout [ 346.620088] Bluetooth: hci6: command tx timeout [ 346.813137] Bluetooth: hci7: command tx timeout [ 346.814595] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 14:16:05 Registers: info registers vcpu 0 RAX=ffffffff810d1d03 RBX=0000000000000002 RCX=0000000000000002 RDX=ffff88806ce09a01 RSI=ffff88806ce09a70 RDI=ffff88806ce09a70 RBP=ffff88806ce09ad0 RSP=ffff88806ce099a8 R8 =ffffffff8678cc88 R9 =ffff88806ce09ab8 R10=000000000003c001 R11=00000000000065fe R12=ffff88806ce09ad8 R13=ffff88806ce09ac0 R14=ffff88806ce09a78 R15=ffff88806ce09a78 RIP=ffffffff84873900 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f77d44b1260 CR3=0000000033904000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000040000000 RBX=0000000000000000 RCX=ffffffff8108b447 RDX=ffff888016539b80 RSI=ffffffff8108b55e RDI=ffff8880095e52a0 RBP=ffff8880095e5280 RSP=ffff88800960fac8 R8 =0000000000000000 R9 =fffffbfff0c7f3d2 R10=0000000000000000 R11=ffff88801653a028 R12=ffff888016539b80 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8108b562 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd844ed2269 CR3=00000000365fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000