Warning: Permanently added '[localhost]:24068' (ECDSA) to the list of known hosts. 2024/12/04 03:16:00 fuzzer started 2024/12/04 03:16:01 dialing manager at localhost:37935 syzkaller login: [ 86.807039] cgroup: Unknown subsys name 'net' [ 86.908338] cgroup: Unknown subsys name 'cpuset' [ 86.970347] cgroup: Unknown subsys name 'rlimit' 2024/12/04 03:16:22 syscalls: 201 2024/12/04 03:16:22 code coverage: enabled 2024/12/04 03:16:22 comparison tracing: enabled 2024/12/04 03:16:22 extra coverage: enabled 2024/12/04 03:16:22 setuid sandbox: enabled 2024/12/04 03:16:22 namespace sandbox: enabled 2024/12/04 03:16:22 Android sandbox: enabled 2024/12/04 03:16:22 fault injection: enabled 2024/12/04 03:16:22 leak checking: enabled 2024/12/04 03:16:22 net packet injection: enabled 2024/12/04 03:16:22 net device setup: enabled 2024/12/04 03:16:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/04 03:16:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/04 03:16:22 USB emulation: enabled 2024/12/04 03:16:22 hci packet injection: enabled 2024/12/04 03:16:22 wifi device emulation: enabled 2024/12/04 03:16:22 802.15.4 emulation: enabled 2024/12/04 03:16:22 fetching corpus: 0, signal 0/0 (executing program) 2024/12/04 03:16:23 starting 8 fuzzer processes 03:16:23 executing program 0: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x81) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000b, 0x4000010, r0, 0x10000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x6, @empty}, {0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x40, [0x8000, 0x3000000, 0x1, 0x800, 0x3b969416, 0x1, 0xa, 0x3]}, 0x5c) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={r2, "9d4b65348bede2480ec5a8569cd8f141"}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r3, &(0x7f0000001940)={&(0x7f00000014c0)=@nfc, 0x80, &(0x7f0000001800)=[{&(0x7f0000001540)=""/190, 0xbe}, {&(0x7f0000001600)=""/93, 0x5d}, {&(0x7f0000001680)=""/36, 0x24}, {&(0x7f00000016c0)=""/169, 0xa9}, {&(0x7f0000001780)=""/106, 0x6a}], 0x5, &(0x7f0000001880)=""/160, 0xa0}, 0x40002062) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001ac0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001980)=""/183, 0xb7, 0x1, &(0x7f0000001a40)=""/114, 0x72}, &(0x7f0000001b00)=0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001b40)) socketpair(0xf, 0x5, 0x2, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001c00)={{{@in6=@dev, @in6=@empty}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000001d00)=0xe8) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000001dc0)={{r5}, 0x0, 0xc, @inherit={0x58, &(0x7f0000001d40)={0x1, 0x2, 0x4, 0xd0, {0x9, 0xfffffffffffffff7, 0x8, 0x7c, 0x4}, [0x9, 0x20]}}, @subvolid=0x80000001}) syz_emit_vhci(&(0x7f0000002dc0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_move_chan_req={{0xe, 0xb, 0x3}, {0xfc, 0x9}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0xce7}}, @l2cap_info_rsp={{0xb, 0x7f, 0x31}, {0x100, 0x5, "ddadaf3db295c1c54e82a94752e563f76c04f083640f6f7704600b811f41d3beca7887601bd886948bcee3587a"}}]}}, 0x4b) socketpair(0x22, 0x2, 0x93a, &(0x7f0000002e40)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000002e80)={r2, "cf102703d397756d0e01c235ad9670ad"}) r7 = socket$inet6(0xa, 0x80006, 0x5) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000003e80)={0x0, 0x2, 0x4, 0x1}) 03:16:23 executing program 1: prctl$PR_SVE_GET_VL(0x33, 0x19a62) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) prctl$PR_SVE_GET_VL(0x33, 0x8cd3) prctl$PR_SVE_GET_VL(0x33, 0x19e67) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x9}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) prctl$PR_SVE_GET_VL(0x33, 0x1b92d) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0xce6ea8ed7f87cbce, 0x0) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0) prctl$PR_SVE_GET_VL(0x33, 0x1688c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000005c0)={{r3}, 0x0, 0xa, @inherit={0x50, &(0x7f0000000540)={0x0, 0x1, 0x8, 0xe, {0x14, 0x81, 0x4, 0x7ff, 0x8}, [0x0]}}, @name="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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000016c0)) [ 108.939437] audit: type=1400 audit(1733282184.040:7): avc: denied { execmem } for pid=280 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:16:24 executing program 2: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x2000000, 0x0, 0xffffffe1, 0x401, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x4000000, 0x6675d658, 0x90c8, 0x7f, 0x6]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x2, 0x0, 0x1, 0xc, 0x0, 0x80}, 0x20) r0 = socket$inet6(0xa, 0x3, 0x3f) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9c}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000015}, 0x4044040) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000016c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f00000017c0)=0xe8) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1800c000}, 0x20040850) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000003b80)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000003bc0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000041c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004180)={&(0x7f0000003c00)={0x56c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x3d0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5d62, @empty, 0x1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "19f630eb8117b163473498808a4c4d30b0f667bf847674f35fe57fadc37eadc4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x328, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xd0, 0x8, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x56c}, 0x1, 0x0, 0x0, 0x801}, 0x4840) socketpair(0x2a, 0x0, 0x1000, &(0x7f0000004200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000004240)={0x0, @l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, @can={0x1d, r2}, @ethernet={0x1, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x101, 0x400}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000004380)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x40}}, 0x4000) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000004400)={0x0, @phonet={0x23, 0x62, 0x4, 0x1}, @sco={0x1f, @none}, @ax25={0x3, @null, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x1, &(0x7f00000043c0)='vxcan1\x00', 0x400, 0x4, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000044c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000004580)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x6a}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000004600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000004780)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004740)={&(0x7f0000004640)={0xe0, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3cf645dfbd675deff9bc3f09ef"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "615088043ce4a2bb8adf9d7a"}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "1749d51619b4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x111}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0xe0}}, 0x20001000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000004840)={{0xa, 0x4e20, 0x3, @mcast2, 0x1}, {0xa, 0x4e24, 0x8, @loopback}, 0x5, [0x20, 0x9, 0x0, 0x8001, 0x6, 0x8, 0x9, 0x4]}, 0x5c) 03:16:24 executing program 3: socketpair(0x29, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @sco, @nl=@unspec, @l2={0x1f, 0x1f, @none, 0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000040)='team_slave_0\x00', 0x8, 0xae, 0xe639}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0xa04, @remote, 0xf8f5}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = accept$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x2, 0x1, 0x1, 0x3ff, 0x1f}, &(0x7f0000000240)=0x20) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x863, 0x29}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008054}, 0x20000010) socketpair(0x1d, 0xa, 0x9, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000001980)=@gcm_128={{0x303}, "08d69b7ff7a3e06b", "693894e2e0572c84fabb369871fd6420", "2a78f8a3", "1b6fb46281a4e5b2"}, 0x28) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x37}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004800) r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000001ac0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001b00)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000001b40)={@remote, 0x0, 0x1, 0x3, 0x5, 0x800, 0x6}, 0x20) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000001b80), &(0x7f0000001bc0)=0x14) r9 = syz_io_uring_complete(0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000001d00), 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)={0x88, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x11}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa2af}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22a}], @NL80211_ATTR_MAC={0xa, 0x6, @random="e0ffd52ef5e4"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0xcf0878ea16814843}, @NL80211_ATTR_SSID={0x8, 0x34, @random="54b61ef0"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000011}, 0x1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x2004050) 03:16:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000000}, @in={0x2, 0x4e21, @empty}, @rc={0x1f, @none, 0x4c}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='ipvlan1\x00', 0x5, 0x1, 0x7}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @can, @phonet={0x23, 0xff, 0x2, 0x8e}, @nfc={0x27, 0x1, 0x2, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='veth0\x00', 0x5, 0x10001, 0x9}) r1 = io_uring_setup(0x17f9, &(0x7f0000000200)={0x0, 0xc775, 0x1, 0x0, 0x237}) syz_io_uring_setup(0x683f, &(0x7f0000000280)={0x0, 0x5dcb, 0x4, 0x3, 0x149, 0x0, r1}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000380)) r3 = syz_io_uring_complete(r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x40) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r3}, 0x0, 0x0, @unused=[0x7, 0x3, 0x8, 0x400], @subvolid=0x2a}) ioctl$sock_ifreq(r3, 0x891c, &(0x7f00000014c0)={'erspan0\x00', @ifru_addrs=@nfc}) syz_genetlink_get_family_id$wireguard(&(0x7f0000001500), r3) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000001540)=0x2) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000001580)=@gcm_256={{0x304}, "ee228abc6f401329", "ede2f9539e43a257b9211fa4ca7b14eec36c5b405b17e746e8ec98d80c21a276", "5a355284", "26a2ada432496841"}, 0x38) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000015c0)={0x1, 0x2, {0xfffffffffffff800, @usage=0x6, 0x0, 0x63, 0xffffffffffffffff, 0x4, 0x4548, 0x6, 0x10, @struct={0x7, 0xfffffffe}, 0x10000, 0xfffffff7, [0x6, 0x97, 0x7, 0x8, 0x1, 0xffffffffffffffff]}, {0x2e, @struct={0x100, 0x8}, 0x0, 0xf7, 0x0, 0x9, 0x101, 0x71, 0x80, @struct={0x0, 0x5}, 0xc0a, 0xfffff2a2, [0x9, 0x0, 0x0, 0x100, 0x1, 0x7fff]}, {0xfd8, @usage=0x2, 0x0, 0x8, 0x84bd, 0x4, 0x7, 0x80, 0x20, @usage=0x5, 0x3, 0x5, [0x9, 0x7, 0x2, 0x0, 0xffffffffffff7fff, 0x7fff]}, {0x7, 0x5, 0x80000000}}) r7 = syz_io_uring_setup(0x7c5, &(0x7f00000019c0)={0x0, 0x405, 0x4, 0x2, 0x318, 0x0, r1}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000001a40), &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000001ac0)={0x13, 0x1, {0x8, @struct={0x400, 0x6}, r6, 0x6, 0x36e8000000000, 0x4f, 0x6095, 0x32, 0xc, @struct={0x3, 0x1}, 0x9, 0x1000, [0x3, 0x2, 0x6, 0x7, 0x2, 0x1ff]}, {0x1000, @struct={0x93, 0x5}, r6, 0x1ff, 0x401, 0xfffffffffffffe00, 0x66, 0x6, 0x0, @usage=0x3a, 0x9, 0x9, [0x4, 0x3903, 0x1f, 0x2, 0xdc, 0x3]}, {0x8, @usage=0x1e1b, r5, 0x7, 0x6, 0x800, 0x8, 0x5, 0x460, @struct={0x1, 0x6}, 0x6, 0x0, [0xffffffff, 0x80, 0x4, 0x81, 0x81, 0x7ff]}, {0x4, 0x4, 0x10000}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001ec0)={'wlan0\x00'}) 03:16:24 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/tmpfs', 0x50100, 0x8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4000010) write$rfkill(r0, &(0x7f0000000180)={0x85, 0x9, 0x1, 0x0, 0x1}, 0x8) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) read$rfkill(r0, &(0x7f0000000200), 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/virtio_scsi', 0xc0040, 0xc476e7b62b40c15) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x80000001) r2 = syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/sg', 0x40800, 0x102) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x144, 0x13, 0x10, 0x70bd27, 0x25dfdbfe, {0x21, 0xff, 0x9, 0x5, {0x4e24, 0x4e22, [0x80, 0xa85, 0x98a, 0xffffe000], [0x3, 0x200, 0x1, 0xf38], 0x0, [0x1, 0x20a]}, 0x9, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "5eeadf34fa49dcdeac5ee483c0bf731f906bb0aa6c17609a14ac4c6a12da1c2ff433154433e6eedb54800ebf2ba9877fbd8f4b49d43d3e1e2c953f9f2b3aedca2bd51243e14886a20262870b9fafe6256843846681bb2c443585bf07e5adee7bad1c5c2a8f4d891f7d3ed573921481f05f6616b637e80893d1b76edcd9d38b54005f7adf4bc8ee4caddeb3552894420bbceef5b94a5e532caf95c481bd053017a8c25cf1ed6d1dfc30e740137fb6b95fc11311156c6c162d70a556965c5bc3b38b2aa224351316f4ec0ab552d87a82c0ad1de83ba29723ad5d691d9d1801205f97d7409bb7d324ff83c3ba2e7de8c84f73"}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r3) prctl$PR_SET_UNALIGN(0x6, 0x1) prctl$PR_SET_UNALIGN(0x6, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}}, 0x240400c4) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000680)={0x0, @l2={0x1f, 0x6, @none, 0x5, 0x1}, @l2tp={0x2, 0x0, @broadcast, 0x4}, @generic={0x28, "e9236f0e21050677796cf1627355"}, 0x1ff, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000640)='bridge0\x00', 0x200, 0x8001, 0x948}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000700)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x800) 03:16:24 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c001}, 0x4c004) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}]}, 0x1c}}, 0x20000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/LNXSYSTM:00', 0x103002, 0x21) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0xe3939ff9fb0a6e51, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) getpriority(0x1, r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x30, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x2}, @release, @enter_looper, @enter_looper, @decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x2}], 0xc2, 0x0, &(0x7f0000000500)="9bdbaa68489a2ad594ecc450af6a6554691869b37206895d4e7048a7b49367259eed7dbab0d1db912498eafa0168f4e1117936f0b6421da967aff7e198730a3cd420d9e73027bff3aae647c86f147cd18c0983710e09427c89ec40587d5a4b802d9952e39b4be3b1c20066b704da968505da8a1a95663395ae1abe74245d827e972f3c8c30c617a1ede7843137a6415544b15160e8f1977d65d02c48d4025ef9034929832fe72d54bae0b9a5d5f86ffb27f0e5fb9acecbce3e6c7e2eefee94cab1d4"}) r4 = socket$inet6(0xa, 0x4, 0xffffffff) accept$inet6(r4, &(0x7f0000000640)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000680)=0x1c) r5 = accept4$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000700)=0x1c, 0x800) accept$inet6(r5, 0x0, &(0x7f0000000740)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000780), 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b00)={0x54, 0x0, &(0x7f0000000980)=[@decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x3, 0x1, 0x2d}, @ptr={0x70742a85, 0x0, &(0x7f00000007c0)=""/207, 0xcf, 0x0, 0x10}, @fda={0x66646185, 0x6, 0x1, 0x2}}, &(0x7f0000000940)={0x0, 0x20, 0x48}}}], 0xf9, 0x0, &(0x7f0000000a00)="c067f8e2392695e369b7865e7078738ada5d52d56a8ff657a15f2e021e7d6f84381015f9713cfff3fdb7c0b9c5765f701ff6d6738f3c048d4a56df52c9a470c44401da81b9085e47d32a6087e033f35ea268b5f9f70317024284d657ff55910831b6e79a0650e49bea108e2c5cf55932be05e9e6a08f27e8d9ee9d3ed1a1b780d51ccc91e82ef2a3a6bee1b8e7417bce1edf72319d2f73c994eb705f5196196aed946c79bcaaaf74a8f2b73ef349d732fd2629e475d8c925aa275b0773b72706c7dff804d2e55285908e9ea68dd3000842686b3021723f131f62ae4a5393129e38dcbad5d15b62366bab0543dd5a1a0b9558120caa32a8a95b"}) r7 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000b40)=0x7) socketpair(0x22, 0x6, 0x1, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c800}, 0x20004000) 03:16:24 executing program 7: ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x100000001, &(0x7f0000000000)=""/220) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x8, 0xdf, 0x8, 0x0, 0x2, 0xa0080, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x101}, 0x68, 0x7ff, 0x1, 0x7, 0x8, 0x0, 0x9, 0x0, 0xffff, 0x0, 0xbe}, 0x0, 0x9, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x81) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000200)={'ip6tnl0\x00', @ifru_flags}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={0x0, @generic={0x1d, "1da865112f316e168fbfabb8101d"}, @xdp={0x2c, 0x7, 0x0, 0x6}, @in={0x2, 0x4e24, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000280)='veth1_to_hsr\x00', 0x8, 0x7fffffff, 0xa3e0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000003c0)={r1, 0x1, 0x1}) r2 = getpgrp(r1) wait4(r2, &(0x7f0000000400), 0x2, &(0x7f0000000440)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500), 0x8800, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4007, @fd=r3, 0x0, 0x8, 0xb85, 0x4, 0x0, {0x2}}, 0x8) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ifreq(r4, 0x8914, &(0x7f00000005c0)={'wlan1\x00', @ifru_data=&(0x7f0000000580)="c9d14aa156613ca160a58e1950b9622e3b0b9134ccb1fe8446aa8fb7377fd3d0"}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000600)="936bf73a3f8c6d79257efb6844c2436728c1414562926a1355818567e5b47b771552e897630fa42f6c836c49ac896677f5a6d4d4374b98bb279febda89ab0cd8c220f2b4c5fd9396bb00f9a8743aec987aaa8257bda280bea19c0aa1d83bac63422d247d6f2c5b6d3c521787af9ab02f46a60fcca091572112e2bec0f219eed2d2d71a36de665f657eda41134568dc9ba0276b6256163962553a11f770cedd0e894ac3667b481535f1a968d2cc348205145b01da2e3f91523e1fa560d643f0a8", 0xc0) write$rfkill(0xffffffffffffffff, &(0x7f00000006c0)={0x80, 0x8}, 0x8) r5 = syz_io_uring_complete(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000700)={@dev={0xfe, 0x80, '\x00', 0x1e}, 0xff, 0x0, 0x1, 0x2, 0xfffd, 0x101}, 0x20) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000740)) write$rfkill(r5, &(0x7f0000000780)={0x2, 0x9, 0x0, 0x0, 0x1}, 0x8) [ 110.335025] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.337657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.340032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.344522] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.347800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.350337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.512202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.519706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.523421] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.526013] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.528609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.533281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.539572] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.542955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.545542] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 110.548188] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 110.550244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.554181] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.556206] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.558647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 110.560645] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 110.563329] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.565196] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.567595] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.568412] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 110.572464] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.574728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.575246] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 110.578251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.579057] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 110.581657] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.581844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 110.584685] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 110.598163] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 110.601453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.603682] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 110.606356] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.608034] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.609624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.610087] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 110.611973] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.614266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.619424] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 110.620353] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 110.622081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.623412] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.626262] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 110.629751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.418533] Bluetooth: hci0: command tx timeout [ 112.674965] Bluetooth: hci2: command tx timeout [ 112.675666] Bluetooth: hci6: command tx timeout [ 112.676320] Bluetooth: hci5: command tx timeout [ 112.676327] Bluetooth: hci4: command tx timeout [ 112.738324] Bluetooth: hci1: command tx timeout [ 112.739013] Bluetooth: hci7: command tx timeout [ 112.739591] Bluetooth: hci3: command tx timeout [ 114.465987] Bluetooth: hci0: command tx timeout [ 114.722223] Bluetooth: hci4: command tx timeout [ 114.723730] Bluetooth: hci5: command tx timeout [ 114.723999] Bluetooth: hci6: command tx timeout [ 114.724339] Bluetooth: hci2: command tx timeout [ 114.785977] Bluetooth: hci1: command tx timeout [ 114.786003] Bluetooth: hci3: command tx timeout [ 114.787368] Bluetooth: hci7: command tx timeout [ 116.514978] Bluetooth: hci0: command tx timeout [ 116.770145] Bluetooth: hci2: command tx timeout [ 116.770710] Bluetooth: hci6: command tx timeout [ 116.771842] Bluetooth: hci5: command tx timeout [ 116.771927] Bluetooth: hci4: command tx timeout [ 116.833976] Bluetooth: hci3: command tx timeout [ 116.834221] Bluetooth: hci7: command tx timeout [ 116.834444] Bluetooth: hci1: command tx timeout [ 118.562960] Bluetooth: hci0: command tx timeout [ 118.818139] Bluetooth: hci6: command tx timeout [ 118.818746] Bluetooth: hci4: command tx timeout [ 118.819548] Bluetooth: hci5: command tx timeout [ 118.820062] Bluetooth: hci2: command tx timeout [ 118.882058] Bluetooth: hci7: command tx timeout [ 118.882193] Bluetooth: hci1: command tx timeout [ 118.882530] Bluetooth: hci3: command tx timeout [ 170.480233] syz-executor.2 (294) used greatest stack depth: 24272 bytes left [ 172.754814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.757790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.761381] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.771689] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.777371] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.778825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.955118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.958965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.963131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.979353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.980550] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.983035] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.984551] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.993102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.994343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.994354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.995335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.003428] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.004592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.010666] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.014901] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 173.018522] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.018772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.035979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.041500] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 173.042597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.042750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.047107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.054360] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.054809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.063467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.081150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.082031] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.082737] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.088526] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.091646] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 173.092823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.095386] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.095524] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 173.098264] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.107506] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.110772] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.111164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.116058] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 173.118276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.120043] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 173.122168] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.142702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.817957] Bluetooth: hci0: command tx timeout [ 175.074976] Bluetooth: hci2: command tx timeout [ 175.075979] Bluetooth: hci3: command tx timeout [ 175.076558] Bluetooth: hci1: command tx timeout [ 175.139074] Bluetooth: hci6: command tx timeout [ 175.202015] Bluetooth: hci7: command tx timeout [ 175.202703] Bluetooth: hci4: command tx timeout [ 175.203391] Bluetooth: hci5: command tx timeout [ 176.865950] Bluetooth: hci0: command tx timeout [ 177.122161] Bluetooth: hci1: command tx timeout [ 177.122701] Bluetooth: hci3: command tx timeout [ 177.123509] Bluetooth: hci2: command tx timeout [ 177.186019] Bluetooth: hci6: command tx timeout [ 177.250991] Bluetooth: hci4: command tx timeout [ 177.251492] Bluetooth: hci5: command tx timeout [ 177.252023] Bluetooth: hci7: command tx timeout [ 178.914231] Bluetooth: hci0: command tx timeout [ 179.170150] Bluetooth: hci2: command tx timeout [ 179.170700] Bluetooth: hci3: command tx timeout [ 179.171682] Bluetooth: hci1: command tx timeout [ 179.233921] Bluetooth: hci6: command tx timeout [ 179.298015] Bluetooth: hci4: command tx timeout [ 179.298511] Bluetooth: hci7: command tx timeout [ 179.299030] Bluetooth: hci5: command tx timeout [ 180.961933] Bluetooth: hci0: command tx timeout [ 181.217987] Bluetooth: hci2: command tx timeout [ 181.218515] Bluetooth: hci1: command tx timeout [ 181.219119] Bluetooth: hci3: command tx timeout [ 181.281924] Bluetooth: hci6: command tx timeout [ 181.345988] Bluetooth: hci5: command tx timeout [ 181.346483] Bluetooth: hci7: command tx timeout [ 181.347382] Bluetooth: hci4: command tx timeout [ 235.002161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.005066] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.008362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.009691] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.011178] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.014523] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.018629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.023902] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.026534] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.029608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 235.038772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.040640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.122386] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.131202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.133967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.140378] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.144151] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.152196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.179328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.184627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.187075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.189639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.192117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.197122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.203062] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.207615] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.211599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.228065] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.238574] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 235.244472] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.246684] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.248912] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.251301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.260121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.263360] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.273581] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.304201] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.307381] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.317310] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 235.319432] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 235.329466] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.333171] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.351153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.358121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.364064] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.387538] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.390851] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 235.394136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.090087] Bluetooth: hci1: command tx timeout [ 237.092167] Bluetooth: hci0: command tx timeout [ 237.219891] Bluetooth: hci2: command tx timeout [ 237.283055] Bluetooth: hci3: command tx timeout [ 237.345985] Bluetooth: hci6: command tx timeout [ 237.347750] Bluetooth: hci4: command tx timeout [ 237.409920] Bluetooth: hci5: command tx timeout [ 237.473923] Bluetooth: hci7: command tx timeout [ 239.138258] Bluetooth: hci0: command tx timeout [ 239.139869] Bluetooth: hci1: command tx timeout [ 239.267041] Bluetooth: hci2: command tx timeout [ 239.331021] Bluetooth: hci3: command tx timeout [ 239.395593] Bluetooth: hci6: command tx timeout [ 239.395612] Bluetooth: hci4: command tx timeout [ 239.457923] Bluetooth: hci5: command tx timeout [ 239.522902] Bluetooth: hci7: command tx timeout [ 241.185971] Bluetooth: hci0: command tx timeout [ 241.186212] Bluetooth: hci1: command tx timeout [ 241.314068] Bluetooth: hci2: command tx timeout [ 241.378008] Bluetooth: hci3: command tx timeout [ 241.442052] Bluetooth: hci4: command tx timeout [ 241.443610] Bluetooth: hci6: command tx timeout [ 241.507143] Bluetooth: hci5: command tx timeout [ 241.570897] Bluetooth: hci7: command tx timeout [ 243.234897] Bluetooth: hci1: command tx timeout [ 243.234927] Bluetooth: hci0: command tx timeout [ 243.361926] Bluetooth: hci2: command tx timeout [ 243.426950] Bluetooth: hci3: command tx timeout [ 243.489959] Bluetooth: hci4: command tx timeout [ 243.491163] Bluetooth: hci6: command tx timeout [ 243.555057] Bluetooth: hci5: command tx timeout [ 243.618936] Bluetooth: hci7: command tx timeout [ 297.141624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.145123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.150429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.154787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.156467] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 297.161986] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.265852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.270400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.271481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.276913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.279398] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 297.289497] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.387381] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.391552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.392944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.398398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.401246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 297.403340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.450466] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.455049] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.459159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.466138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.472251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.480471] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 297.482628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.493048] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.514796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.526442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.532431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.543342] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.545408] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.555732] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.563045] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 297.563370] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.566348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.591460] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 297.603316] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.607893] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 297.608630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.615920] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.617638] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 297.618687] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.625029] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 297.629037] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 297.646577] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 297.651189] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.653119] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 297.655276] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.235379] Bluetooth: hci0: command tx timeout [ 299.363865] Bluetooth: hci1: command tx timeout [ 299.426946] Bluetooth: hci2: command tx timeout [ 299.553973] Bluetooth: hci3: command tx timeout [ 299.683905] Bluetooth: hci4: command tx timeout [ 299.684719] Bluetooth: hci6: command tx timeout [ 299.747108] Bluetooth: hci5: command tx timeout [ 299.748881] Bluetooth: hci7: command tx timeout [ 301.283045] Bluetooth: hci0: command tx timeout [ 301.409885] Bluetooth: hci1: command tx timeout [ 301.474932] Bluetooth: hci2: command tx timeout [ 301.604532] Bluetooth: hci3: command tx timeout [ 301.730069] Bluetooth: hci6: command tx timeout [ 301.730581] Bluetooth: hci4: command tx timeout [ 301.793892] Bluetooth: hci7: command tx timeout [ 301.795373] Bluetooth: hci5: command tx timeout [ 303.330978] Bluetooth: hci0: command tx timeout [ 303.457909] Bluetooth: hci1: command tx timeout [ 303.523042] Bluetooth: hci2: command tx timeout [ 303.651944] Bluetooth: hci3: command tx timeout [ 303.779047] Bluetooth: hci6: command tx timeout [ 303.779572] Bluetooth: hci4: command tx timeout [ 303.844849] Bluetooth: hci5: command tx timeout [ 303.846585] Bluetooth: hci7: command tx timeout [ 305.377916] Bluetooth: hci0: command tx timeout [ 305.505880] Bluetooth: hci1: command tx timeout [ 305.571059] Bluetooth: hci2: command tx timeout [ 305.698918] Bluetooth: hci3: command tx timeout [ 305.827050] Bluetooth: hci6: command tx timeout [ 305.827562] Bluetooth: hci4: command tx timeout [ 305.889905] Bluetooth: hci7: command tx timeout [ 305.891501] Bluetooth: hci5: command tx timeout [ 359.479067] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.483025] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.484425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.488840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.490938] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 359.492320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.597247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.599686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.603065] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.612634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.614602] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 359.615933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.730435] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.732209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.737130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.743026] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.744728] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 359.756355] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.800379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.803426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.809157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.809998] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.810751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.816524] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.835093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.836597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.838690] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.839458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.841012] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.846849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 359.851635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.854314] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.855124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 359.869077] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.901024] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.902434] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.903977] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.907684] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.909438] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 359.919709] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 359.921185] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 359.930184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.931274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.938063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.948942] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.022912] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.032055] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 360.039096] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.569933] Bluetooth: hci0: command tx timeout [ 361.633909] Bluetooth: hci1: command tx timeout [ 361.825975] Bluetooth: hci2: command tx timeout [ 361.892862] Bluetooth: hci3: command tx timeout [ 361.955000] Bluetooth: hci4: command tx timeout [ 362.020203] Bluetooth: hci6: command tx timeout [ 362.020992] Bluetooth: hci5: command tx timeout [ 362.145908] Bluetooth: hci7: command tx timeout [ 363.618018] Bluetooth: hci0: command tx timeout [ 363.681878] Bluetooth: hci1: command tx timeout [ 363.873968] Bluetooth: hci2: command tx timeout [ 363.937954] Bluetooth: hci3: command tx timeout [ 364.001910] Bluetooth: hci4: command tx timeout [ 364.065914] Bluetooth: hci6: command tx timeout [ 364.066976] Bluetooth: hci5: command tx timeout [ 364.194033] Bluetooth: hci7: command tx timeout [ 365.666882] Bluetooth: hci0: command tx timeout [ 365.730958] Bluetooth: hci1: command tx timeout [ 365.921918] Bluetooth: hci2: command tx timeout [ 365.985964] Bluetooth: hci3: command tx timeout [ 366.049923] Bluetooth: hci4: command tx timeout [ 366.114355] Bluetooth: hci5: command tx timeout [ 366.114380] Bluetooth: hci6: command tx timeout [ 366.251847] Bluetooth: hci7: command tx timeout [ 367.714139] Bluetooth: hci0: command tx timeout [ 367.777979] Bluetooth: hci1: command tx timeout [ 367.970076] Bluetooth: hci2: command tx timeout [ 368.034642] Bluetooth: hci3: command tx timeout [ 368.097900] Bluetooth: hci4: command tx timeout [ 368.161983] Bluetooth: hci5: command tx timeout [ 368.162982] Bluetooth: hci6: command tx timeout [ 368.289915] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:21:30 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff82017816 RDX=ffff88800e495280 RSI=ffffffff82017823 RDI=0000000000000005 RBP=ffff8880091f5130 RSP=ffff88802816faa0 R8 =0000000000000000 R9 =ffff88800e495cb8 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000002 R14=1ffff1100502df56 R15=0000000000000000 RIP=ffffffff8201782d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a48e29c4c8 CR3=000000000d962000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080010001 RBX=0000000000000001 RCX=ffffffff81443d83 RDX=ffff88801a678000 RSI=0000000000000000 RDI=0000000000000005 RBP=00000000000bb39b RSP=ffff88806cf09cb8 R8 =0000000000000001 R9 =ffff88801a678a38 R10=0000000000000001 R11=ffff88806cf09ff8 R12=fffffbfff0b42050 R13=1ffffffff0b42040 R14=ffff88806cf09d38 R15=dffffc0000000000 RIP=ffffffff84873900 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8fd2067540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8fd2138710 CR3=00000000286ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000