Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:29118' (ECDSA) to the list of known hosts. 2025/01/06 07:28:34 fuzzer started 2025/01/06 07:28:34 dialing manager at localhost:34561 syzkaller login: [ 72.003085] cgroup: Unknown subsys name 'net' [ 72.116132] cgroup: Unknown subsys name 'cpuset' [ 72.156424] cgroup: Unknown subsys name 'rlimit' 2025/01/06 07:28:53 syscalls: 200 2025/01/06 07:28:53 code coverage: enabled 2025/01/06 07:28:53 comparison tracing: enabled 2025/01/06 07:28:53 extra coverage: enabled 2025/01/06 07:28:53 setuid sandbox: enabled 2025/01/06 07:28:53 namespace sandbox: enabled 2025/01/06 07:28:53 Android sandbox: enabled 2025/01/06 07:28:53 fault injection: enabled 2025/01/06 07:28:53 leak checking: enabled 2025/01/06 07:28:53 net packet injection: enabled 2025/01/06 07:28:53 net device setup: enabled 2025/01/06 07:28:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/06 07:28:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/06 07:28:53 USB emulation: enabled 2025/01/06 07:28:53 hci packet injection: enabled 2025/01/06 07:28:53 wifi device emulation: enabled 2025/01/06 07:28:53 802.15.4 emulation: enabled 2025/01/06 07:28:53 fetching corpus: 0, signal 0/0 (executing program) 2025/01/06 07:28:55 starting 8 fuzzer processes 07:28:55 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x185200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x1, 0x7}, {0xd5, 0x1}, 0x1000, 0x2, 0x3f}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x7, 0x1, 'queue1\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x1, 0x21}, {0x9, 0x5}, 0x3, 0x2, 0x1c}) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x420, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x40040d0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xfffffffffffe0606}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000600)={{0xe5}, {0x20, 0x1}, 0xffffff01, 0x3, 0x3f}) r3 = syz_open_dev$vcsa(&(0x7f0000000680), 0x8, 0x80000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f00000006c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xb86c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x4) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r7, 0xc08c5336, &(0x7f00000008c0)={0x2, 0x6, 0x1, 'queue1\x00', 0xe0d3}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f0000000980)={0x8, 0x1, 0x60f, 0x3, 0x1, 0x6}) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) 07:28:55 executing program 1: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xffffffffffffffc0, 0x10100) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x1) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000200)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000240)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000800) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xeb}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4044040) openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x28000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0xc000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "0aab6414b48d9fb585287fd73e9fb1962e659fdc297e38e0a44f53c3a5f09bb9"}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000009c0)) 07:28:55 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x44}}, 0x4080) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xfffffffffffe0506}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xec}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc084}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xeb}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x8810) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x64, 0x10000) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000045) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x731}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x800) syz_usb_ep_write(0xffffffffffffffff, 0x71, 0x1c, &(0x7f0000000700)="4c369a3e2dd933fb234c5973a382e38f83ead0c45db9da62ff536134") syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000940)={0x2c, &(0x7f0000000740)={0x20, 0x31, 0xb, {0xb, 0x21, "2bbf3d3c4132f2df66"}}, &(0x7f0000000780)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "254c9f64e6424fec29836916427d8ff4d7816eed1ed6e053628afb2381a1aca89f195083e3b3deee42eb517cdc5db363e07980f9ea96bdd86f24327f4077f77c98d1d3a817c38526d4712a4b37da48b6310821941ddd0a213975c3c6981fa3a711a007ba627276b641e5ce997d4d5a593b1680a5ca2abecba8dadde3ac7e72c1b7ec09acd0cc6d46e957a27e964dc88ae99beda275794318d4f24a2b579839a2ed50aff461872f898e9cc161d38f87f0883369ed40e9adb4a3b40fa6ef13a69844"}}, &(0x7f0000000880)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa3, 0x3, 0x0, 0xfff, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x84, 0x8}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x80, 0x6, "224ea038", "f49b4b87"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0x1, 0x9, 0x80, 0x4, 0x1}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000980)={0x20, 0x8, 0x43, "5f8506eeb7c3ddc0c17b78b5cf75fea2361803126ce2dc3e13826972165177a66e3c5c2e94826e778199d4eb616d5be5317dafbaa92d8cf48dc127c95ca3ec944981e6"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x140, 0x4}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x57}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "c90e"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0xd8}, &(0x7f0000000c00)={0x40, 0x13, 0x6}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @random="3f14b864736a"}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "e78c"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000d40)={0x40, 0x1e, 0x1}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x1}}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000e80)={0x2, 0x1000}, 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000080) arch_prctl$ARCH_GET_CPUID(0x1011) arch_prctl$ARCH_GET_CPUID(0x1011) syz_usb_ep_write(0xffffffffffffffff, 0x4, 0x6c, &(0x7f0000001000)="98a61c0bc565ecb24f21116acc4903d266b22d69248d3b17053035e5a429d0f7bc9cb0d67f88b1f9f5272a1bc42bfa9217dcba8b65f3a960674dc770632cec672d3e42d620ccda4e720146d340c7de225b3d3475d382b65f77524e1406cdffd0ea311a861ba967727ea6a45c") r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x5e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x1f, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x9f2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x63, 0xed}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x96, 0x7}}]}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x300, 0x5, 0x2, 0x7, 0x20, 0x40}, 0x27, &(0x7f0000001100)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xff, 0x3, 0x180, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x9a0, 0xf00f, 0x3f, [0xff8130, 0x0]}]}, 0x4, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x415}}, {0x1a, &(0x7f0000001200)=@string={0x1a, 0x3, "4afcfe1eead26eac04add0d8636b5082afa141fc60e28ec6"}}]}) syz_usb_ep_write(r5, 0xee, 0x36, &(0x7f00000012c0)="9bd523d87a700e5422f0304177ac8abdaf9469148e083cdead56f7cdfad4fd6bafaf2415a00383dc2c09cad6b024e4b8396e7a2868e2") [ 91.426211] audit: type=1400 audit(1736148535.429:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:28:55 executing program 3: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x200, 0x0, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x101, 0x8a400) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bind$packet(r0, &(0x7f0000000240)={0x11, 0xd, 0x0, 0x1, 0x1, 0x6, @remote}, 0x14) r1 = syz_io_uring_complete(0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000280)=0x8, 0x4) io_uring_setup(0x1887, &(0x7f00000002c0)={0x0, 0x15ab, 0x4, 0x2, 0xbc}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000440)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb4, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000080) bind$packet(r0, &(0x7f0000000780)={0x11, 0x19, r2, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000007c0)=0x1, 0x4) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x20008801) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40890) 07:28:55 executing program 5: r0 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="b2b1c2232aa81bc303387ebd9b125ada459c74ed8d7d36fa6732299336121e11f438e5a1236f81c33aced9a8a2ac7044495a363cc34fc2c50c1f36cfcac132fbcc9b5378ad28e5432fb2b5637295b60f2bd8945c2dc0f0b6567482e5dd7434e05a0ac3e4a7bc1e5e63afaeb0cd2152053e", 0x71, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000180)='keyring\x00') keyctl$clear(0x7, r0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x0}, r1) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r3, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000000) keyctl$unlink(0x9, r2, r2) keyctl$get_persistent(0x16, 0xee00, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) keyctl$unlink(0x9, r1, r3) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x20}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x80}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r5) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x8c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) 07:28:55 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x80) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x1800) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2008000}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0x50, r4, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r6, &(0x7f0000000340), &(0x7f0000000380)=0xc) sendmsg$AUDIT_GET(r5, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x300, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4044}, 0x20048001) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x480, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendto$packet(r5, &(0x7f00000005c0)="efe100ba52eea632b9dd8d4e846339865b51af07cb127e9be11772bab5396dabbec9e44b2a7d23afdf31df15b3210d0525fe4577652f375138deae507817aa5cc030f0b701ebbd2903a139d9", 0x4c, 0xc000, &(0x7f0000000640)={0x11, 0x5, r1, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000680), &(0x7f00000006c0)=0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000700)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r4) sendmsg$AUDIT_LIST_RULES(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) 07:28:55 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x3, 0xffffffffffffffff, 0x800, 0x80000}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x86a82) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r1, 0x401}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000100)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000180)) syz_open_dev$vcsa(&(0x7f00000001c0), 0xd6ff, 0x252e80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x200400d0}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x10000, 0x410100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f00000004c0)=r4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r3) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000780)) 07:28:55 executing program 7: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x80100) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={r1, 0x3, r2, 0x69, 0x80000}) r3 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x8, 0x4c000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x2, r3, 0x81}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0x9, 0x3, 0xff, 0x7fffffff}, {0x1, 0xfe, 0x8, 0x5}, {0xfffb, 0x2, 0x8, 0x100}, {0x3f, 0x80, 0x1, 0x5}, {0x800, 0x8, 0x1, 0x8fd}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000340)={r5, 0x1, r3, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0xa00040, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000580)=r1) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x0) accept$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 93.005944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.011723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.015722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.020223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.023241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.025729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.034514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.037691] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.041640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.063540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.068750] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.069863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.072808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.074055] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.075423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.092858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.099585] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.104565] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.215518] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.218583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.220799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.224909] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.229647] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.233980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.273054] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.276137] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.277128] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.279046] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.282009] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.284130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.284224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.284913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.287540] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.288791] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.289925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.290802] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.303465] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.312241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.319714] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.327186] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.332836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.332855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.335453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.352802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.358100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.366254] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.374864] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.379870] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.096052] Bluetooth: hci1: command tx timeout [ 95.097019] Bluetooth: hci0: command tx timeout [ 95.159716] Bluetooth: hci2: command tx timeout [ 95.351403] Bluetooth: hci3: command tx timeout [ 95.415551] Bluetooth: hci5: command tx timeout [ 95.416200] Bluetooth: hci4: command tx timeout [ 95.416922] Bluetooth: hci7: command tx timeout [ 95.479854] Bluetooth: hci6: command tx timeout [ 97.143471] Bluetooth: hci1: command tx timeout [ 97.143977] Bluetooth: hci0: command tx timeout [ 97.209360] Bluetooth: hci2: command tx timeout [ 97.399880] Bluetooth: hci3: command tx timeout [ 97.463431] Bluetooth: hci5: command tx timeout [ 97.463895] Bluetooth: hci7: command tx timeout [ 97.464401] Bluetooth: hci4: command tx timeout [ 97.528348] Bluetooth: hci6: command tx timeout [ 99.191460] Bluetooth: hci1: command tx timeout [ 99.192449] Bluetooth: hci0: command tx timeout [ 99.255546] Bluetooth: hci2: command tx timeout [ 99.447550] Bluetooth: hci3: command tx timeout [ 99.511475] Bluetooth: hci4: command tx timeout [ 99.512454] Bluetooth: hci7: command tx timeout [ 99.513520] Bluetooth: hci5: command tx timeout [ 99.575654] Bluetooth: hci6: command tx timeout [ 101.239442] Bluetooth: hci0: command tx timeout [ 101.240042] Bluetooth: hci1: command tx timeout [ 101.303422] Bluetooth: hci2: command tx timeout [ 101.496315] Bluetooth: hci3: command tx timeout [ 101.559545] Bluetooth: hci7: command tx timeout [ 101.560141] Bluetooth: hci4: command tx timeout [ 101.561407] Bluetooth: hci5: command tx timeout [ 101.623424] Bluetooth: hci6: command tx timeout [ 155.656642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.660967] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.664774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.681792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.686722] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.690889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.730369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.737108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.739504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.745696] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.754543] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.756974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.788374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.800982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.811708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.822885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.831073] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.835453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.865042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.868637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.871610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.885556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.898429] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.899595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.922640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.932183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.934761] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.936629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.941600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.947841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.953875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.960711] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.979747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.980923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.988862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.994669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.691669] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.834040] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.836233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.875575] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.876984] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.880448] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.953006] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.984646] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.015544] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.022974] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.083080] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.112662] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.753336] Bluetooth: hci0: command tx timeout [ 157.815416] Bluetooth: hci1: command tx timeout [ 157.943447] Bluetooth: hci2: command tx timeout [ 158.071430] Bluetooth: hci4: command tx timeout [ 158.072554] Bluetooth: hci5: command tx timeout [ 158.136437] Bluetooth: hci3: command tx timeout [ 159.095533] Bluetooth: hci6: command tx timeout [ 159.159472] Bluetooth: hci7: command tx timeout [ 159.799545] Bluetooth: hci0: command tx timeout [ 159.863396] Bluetooth: hci1: command tx timeout [ 159.991387] Bluetooth: hci2: command tx timeout [ 160.120404] Bluetooth: hci5: command tx timeout [ 160.120915] Bluetooth: hci4: command tx timeout [ 160.183507] Bluetooth: hci3: command tx timeout [ 161.144563] Bluetooth: hci6: command tx timeout [ 161.207598] Bluetooth: hci7: command tx timeout [ 161.847422] Bluetooth: hci0: command tx timeout [ 161.911385] Bluetooth: hci1: command tx timeout [ 162.039461] Bluetooth: hci2: command tx timeout [ 162.167670] Bluetooth: hci5: command tx timeout [ 162.169022] Bluetooth: hci4: command tx timeout [ 162.232389] Bluetooth: hci3: command tx timeout [ 163.191364] Bluetooth: hci6: command tx timeout [ 163.255486] Bluetooth: hci7: command tx timeout [ 163.895463] Bluetooth: hci0: command tx timeout [ 163.959538] Bluetooth: hci1: command tx timeout [ 164.087386] Bluetooth: hci2: command tx timeout [ 164.215494] Bluetooth: hci4: command tx timeout [ 164.215949] Bluetooth: hci5: command tx timeout [ 164.279330] Bluetooth: hci3: command tx timeout [ 165.239365] Bluetooth: hci6: command tx timeout [ 165.303352] Bluetooth: hci7: command tx timeout [ 217.664328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.666539] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.667941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.678416] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.680184] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.682559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.860630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.863650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.874654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.876800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.879003] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.880040] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.883421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.900522] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.905575] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.908574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.921453] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.935752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.951930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.959074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.962624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.965091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.967334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.974464] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.980439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.986039] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.000692] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.002104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.006378] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.008751] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.015357] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.015556] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.024391] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.028849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.034914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.036965] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.042780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.044066] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.048825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.052092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.074485] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.075442] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.086729] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.087680] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.136465] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.164981] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.177523] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.190099] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.707349] Bluetooth: hci0: command tx timeout [ 219.961298] Bluetooth: hci2: command tx timeout [ 220.024401] Bluetooth: hci1: command tx timeout [ 220.087560] Bluetooth: hci5: command tx timeout [ 220.088524] Bluetooth: hci3: command tx timeout [ 220.152297] Bluetooth: hci4: command tx timeout [ 220.152942] Bluetooth: hci6: command tx timeout [ 220.303936] Bluetooth: hci7: command tx timeout [ 221.752407] Bluetooth: hci0: command tx timeout [ 222.007400] Bluetooth: hci2: command tx timeout [ 222.072360] Bluetooth: hci1: command tx timeout [ 222.136477] Bluetooth: hci5: command tx timeout [ 222.137728] Bluetooth: hci3: command tx timeout [ 222.200767] Bluetooth: hci4: command tx timeout [ 222.200915] Bluetooth: hci6: command tx timeout [ 222.329362] Bluetooth: hci7: command tx timeout [ 223.799413] Bluetooth: hci0: command tx timeout [ 224.055357] Bluetooth: hci2: command tx timeout [ 224.121936] Bluetooth: hci1: command tx timeout [ 224.183344] Bluetooth: hci3: command tx timeout [ 224.184335] Bluetooth: hci5: command tx timeout [ 224.247327] Bluetooth: hci6: command tx timeout [ 224.247788] Bluetooth: hci4: command tx timeout [ 224.376429] Bluetooth: hci7: command tx timeout [ 225.848408] Bluetooth: hci0: command tx timeout [ 226.104382] Bluetooth: hci2: command tx timeout [ 226.168543] Bluetooth: hci1: command tx timeout [ 226.232341] Bluetooth: hci5: command tx timeout [ 226.232392] Bluetooth: hci3: command tx timeout [ 226.296491] Bluetooth: hci4: command tx timeout [ 226.297771] Bluetooth: hci6: command tx timeout [ 226.424729] Bluetooth: hci7: command tx timeout [ 280.525130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.529740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.532587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.545551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.551732] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.556553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.597465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.605002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.607037] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.619488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.625653] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.627957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.676451] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.688512] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.701479] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.711690] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.713492] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.725154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.730856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.734016] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.736215] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.737456] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.740635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.742818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.747921] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.751195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.752776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.754200] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.758224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.759900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.765617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.770728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.778861] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.783777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.785594] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.796320] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.802463] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.821637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.865049] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.865418] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.872817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.875662] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.878788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.905786] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.915614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.922593] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.940541] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.944949] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.616393] Bluetooth: hci0: command tx timeout [ 282.679454] Bluetooth: hci1: command tx timeout [ 282.807450] Bluetooth: hci3: command tx timeout [ 282.872758] Bluetooth: hci2: command tx timeout [ 282.938393] Bluetooth: hci5: command tx timeout [ 282.940047] Bluetooth: hci6: command tx timeout [ 282.941166] Bluetooth: hci4: command tx timeout [ 283.063374] Bluetooth: hci7: command tx timeout [ 284.664322] Bluetooth: hci0: command tx timeout [ 284.728369] Bluetooth: hci1: command tx timeout [ 284.856435] Bluetooth: hci3: command tx timeout [ 284.920409] Bluetooth: hci2: command tx timeout [ 284.983494] Bluetooth: hci5: command tx timeout [ 284.984478] Bluetooth: hci6: command tx timeout [ 284.984924] Bluetooth: hci4: command tx timeout [ 285.112309] Bluetooth: hci7: command tx timeout [ 286.713164] Bluetooth: hci0: command tx timeout [ 286.775358] Bluetooth: hci1: command tx timeout [ 286.903413] Bluetooth: hci3: command tx timeout [ 286.967666] Bluetooth: hci2: command tx timeout [ 287.031388] Bluetooth: hci4: command tx timeout [ 287.032353] Bluetooth: hci6: command tx timeout [ 287.033184] Bluetooth: hci5: command tx timeout [ 287.159413] Bluetooth: hci7: command tx timeout [ 288.760313] Bluetooth: hci0: command tx timeout [ 288.823318] Bluetooth: hci1: command tx timeout [ 288.952339] Bluetooth: hci3: command tx timeout [ 289.016330] Bluetooth: hci2: command tx timeout [ 289.079400] Bluetooth: hci6: command tx timeout [ 289.080762] Bluetooth: hci5: command tx timeout [ 289.081208] Bluetooth: hci4: command tx timeout [ 289.208323] Bluetooth: hci7: command tx timeout [ 342.341748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.346445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.349798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.356831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.362413] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.365908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.531040] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.534836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.541682] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.547652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.552137] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.555832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.600939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.603908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.604676] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.608517] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.611910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.618032] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.621572] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.623713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.625420] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.667671] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.669688] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.674007] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.677481] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.678747] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.680965] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.691198] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.693659] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.695406] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.743836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.747489] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.747989] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.752292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.754851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.756820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.760851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.763417] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.764835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.765162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.767523] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.770428] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.793274] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.807781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.809069] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.812113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.815542] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.846029] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.440309] Bluetooth: hci0: command tx timeout [ 344.631303] Bluetooth: hci1: command tx timeout [ 344.695319] Bluetooth: hci3: command tx timeout [ 344.759288] Bluetooth: hci4: command tx timeout [ 344.759864] Bluetooth: hci2: command tx timeout [ 344.826246] Bluetooth: hci5: command tx timeout [ 344.887356] Bluetooth: hci6: command tx timeout [ 344.953352] Bluetooth: hci7: command tx timeout [ 346.487727] Bluetooth: hci0: command tx timeout [ 346.680402] Bluetooth: hci1: command tx timeout [ 346.743536] Bluetooth: hci3: command tx timeout [ 346.808327] Bluetooth: hci4: command tx timeout [ 346.809181] Bluetooth: hci2: command tx timeout [ 346.871516] Bluetooth: hci5: command tx timeout [ 346.935493] Bluetooth: hci6: command tx timeout [ 346.999431] Bluetooth: hci7: command tx timeout [ 348.536367] Bluetooth: hci0: command tx timeout [ 348.728258] Bluetooth: hci1: command tx timeout [ 348.791265] Bluetooth: hci3: command tx timeout [ 348.856422] Bluetooth: hci2: command tx timeout [ 348.856935] Bluetooth: hci4: command tx timeout [ 348.919372] Bluetooth: hci5: command tx timeout [ 348.983321] Bluetooth: hci6: command tx timeout [ 349.047431] Bluetooth: hci7: command tx timeout [ 350.583470] Bluetooth: hci0: command tx timeout [ 350.776403] Bluetooth: hci1: command tx timeout [ 350.840753] Bluetooth: hci3: command tx timeout [ 350.905257] Bluetooth: hci2: command tx timeout [ 350.905705] Bluetooth: hci4: command tx timeout [ 350.968467] Bluetooth: hci5: command tx timeout [ 351.032351] Bluetooth: hci6: command tx timeout [ 351.096294] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 07:34:03 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff867a3c84 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffff88800a3feee8 RSP=ffff88800a3fee20 R8 =ffffffff867a3c88 R9 =ffff88800a3feed0 R10=000000000003aab6 R11=0000000000009a62 R12=ffff88800a3feef0 R13=ffff88800a3feed8 R14=ffff88800a3fff00 R15=ffff88800a3fee90 RIP=ffffffff8134a186 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056096dff9080 CR3=00000000355e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=00007f0ed3dc8000 RCX=ffffffff819d0e23 RDX=ffff888009f6d340 RSI=00007f0ed3dc8000 RDI=0000000000000006 RBP=0400000000000042 RSP=ffff88803490f9e8 R8 =0000000000000001 R9 =ffffed10044607c5 R10=00007f0ed3dc6000 R11=0000000000000000 R12=800000001adee067 R13=dffffc0000000000 R14=00007f0ed3dc6000 R15=0000000000000040 RIP=ffffffff8171c282 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0ed3be1540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0ed3cb2710 CR3=000000002ca8e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000